4=>0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:18 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:18 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 457.460919] binder_alloc: 3716: binder_alloc_buf, no vma [ 457.460959] binder: 3714:3738 transaction failed 29189/-3, size 0-0 line 3134 [ 457.465974] binder: BINDER_SET_CONTEXT_MGR already set [ 457.465981] binder: 3736:3737 ioctl 40046207 0 returned -16 [ 457.493113] binder_alloc: 3716: binder_alloc_buf, no vma [ 457.493225] binder: 3717:3739 transaction failed 29189/-3, size 0-0 line 3134 [ 457.512065] binder: BINDER_SET_CONTEXT_MGR already set [ 457.512074] binder: 3741:3746 ioctl 40046207 0 returned -16 2018/03/29 23:44:18 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:18 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 457.512176] binder: BINDER_SET_CONTEXT_MGR already set [ 457.512182] binder: 3740:3745 ioctl 40046207 0 returned -16 [ 457.514722] binder_alloc: 3716: binder_alloc_buf, no vma [ 457.514762] binder: 3740:3745 transaction failed 29189/-3, size 0-0 line 3134 [ 457.521821] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 457.567576] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:18 executing program 2: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:18 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:18 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x0, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:18 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:18 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:18 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 457.576390] binder: 3717:3729 ioctl 40046207 0 returned -16 [ 457.588116] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:18 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 457.656615] binder: BINDER_SET_CONTEXT_MGR already set [ 457.663521] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 457.692159] binder: 3765:3768 ioctl 40046207 0 returned -16 [ 457.692161] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 457.692181] binder: 3771:3775 ioctl 40046207 0 returned -16 [ 457.692205] binder: BINDER_SET_CONTEXT_MGR already set [ 457.692225] binder: 3774:3777 ioctl 40046207 0 returned -16 [ 457.694038] binder: 3765:3785 transaction failed 29189/-22, size 0-0 line 3011 [ 457.698131] binder: 3771:3786 transaction failed 29189/-22, size 0-0 line 3011 [ 457.699037] binder: 3774:3788 transaction failed 29189/-22, size 0-0 line 3011 [ 457.700856] binder: 3771:3775 ERROR: BC_REGISTER_LOOPER called without request [ 457.700868] binder: 3771:3775 ioctl c0306201 200b8000 returned -11 2018/03/29 23:44:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 2: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x0, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x0, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 457.701488] binder: 3774:3777 ERROR: BC_REGISTER_LOOPER called without request [ 457.701498] binder: 3774:3777 ioctl c0306201 200b8000 returned -11 [ 457.788426] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 457.799915] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 457.831149] binder: 3801:3806 ERROR: BC_REGISTER_LOOPER called without request [ 457.831895] binder: BINDER_SET_CONTEXT_MGR already set [ 457.831901] binder: 3798:3808 ioctl 40046207 0 returned -16 [ 457.861901] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 457.875706] binder: 3798:3818 ERROR: BC_REGISTER_LOOPER called without request [ 457.883246] binder: undelivered TRANSACTION_ERROR: 29189 [ 457.889210] binder: BINDER_SET_CONTEXT_MGR already set [ 457.895371] binder: 3802:3809 ioctl 40046207 0 returned -16 [ 457.895379] binder: BINDER_SET_CONTEXT_MGR already set [ 457.895407] binder: 3805:3812 ioctl 40046207 0 returned -16 [ 457.896412] binder: BINDER_SET_CONTEXT_MGR already set [ 457.896421] binder: 3800:3813 ioctl 40046207 0 returned -16 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x0, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 2: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 457.933158] binder: undelivered TRANSACTION_COMPLETE [ 457.944185] binder: 3802:3814 ERROR: BC_REGISTER_LOOPER called without request [ 457.983412] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 457.991009] binder: BINDER_SET_CONTEXT_MGR already set [ 457.996395] binder: 3859:3861 ioctl 40046207 0 returned -16 [ 457.996397] binder: BINDER_SET_CONTEXT_MGR already set [ 457.996408] binder: 3854:3856 ioctl 40046207 0 returned -16 [ 457.997676] binder_alloc: 3843: binder_alloc_buf, no vma [ 457.997715] binder: 3854:3856 transaction failed 29189/-3, size 0-0 line 3134 [ 458.000020] binder: undelivered transaction 2013, process died. 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x0, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x0, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 458.000034] binder: undelivered transaction 2014, process died. [ 458.000061] binder: undelivered transaction 2012, process died. [ 458.027631] binder: 3862:3863 ERROR: BC_REGISTER_LOOPER called without request [ 458.047914] binder: 3864:3865 ERROR: BC_REGISTER_LOOPER called without request [ 458.064693] binder_alloc: 3864: binder_alloc_buf, no vma [ 458.070590] binder: undelivered transaction 2018, process died. 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x0, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.077077] binder: 3859:3861 transaction failed 29189/-3, size 0-0 line 3134 [ 458.088619] binder: BINDER_SET_CONTEXT_MGR already set [ 458.088642] binder: 3859:3876 ERROR: BC_REGISTER_LOOPER called without request [ 458.101256] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.110417] binder: undelivered transaction 2020, process died. 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x0, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.130701] binder: BINDER_SET_CONTEXT_MGR already set [ 458.132768] binder: 3868:3871 ERROR: BC_REGISTER_LOOPER called without request [ 458.144115] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.152124] binder: 3852:3860 ioctl 40046207 0 returned -16 [ 458.156916] binder: BINDER_SET_CONTEXT_MGR already set [ 458.156933] binder: 3875:3878 ioctl 40046207 0 returned -16 [ 458.159875] binder: BINDER_SET_CONTEXT_MGR already set [ 458.159892] binder: 3881:3883 ioctl 40046207 0 returned -16 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x0, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.164529] binder: BINDER_SET_CONTEXT_MGR already set [ 458.164548] binder: 3884:3885 ioctl 40046207 0 returned -16 [ 458.167120] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.167159] binder: 3884:3885 transaction failed 29189/-3, size 0-0 line 3134 [ 458.177491] binder: 3881:3883 ERROR: BC_REGISTER_LOOPER called without request [ 458.177504] binder: 3881:3883 ioctl c0306201 200b8000 returned -11 [ 458.180561] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.180601] binder: 3881:3887 transaction failed 29189/-3, size 0-0 line 3134 [ 458.180696] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.180731] binder: 3870:3886 transaction failed 29189/-3, size 0-0 line 3134 [ 458.193574] binder: 3870:3872 ioctl 40046207 0 returned -16 [ 458.212701] binder: 3870:3872 ERROR: BC_REGISTER_LOOPER called without request [ 458.212715] binder: 3870:3872 ioctl c0306201 200b8000 returned -11 [ 458.230850] binder: BINDER_SET_CONTEXT_MGR already set [ 458.230857] binder: 3889:3891 ioctl 40046207 0 returned -16 [ 458.232488] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.232528] binder: 3889:3891 transaction failed 29189/-3, size 0-0 line 3134 [ 458.238764] binder: BINDER_SET_CONTEXT_MGR already set [ 458.238770] binder: 3888:3894 ioctl 40046207 0 returned -16 [ 458.240835] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.246736] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.259296] binder: BINDER_SET_CONTEXT_MGR already set [ 458.259303] binder: 3892:3897 ioctl 40046207 0 returned -16 [ 458.261351] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.261390] binder: 3892:3897 transaction failed 29189/-3, size 0-0 line 3134 [ 458.280403] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:19 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x0, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x0, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.395628] binder: BINDER_SET_CONTEXT_MGR already set [ 458.406616] binder: 3901:3905 ioctl 40046207 0 returned -16 [ 458.406635] binder: BINDER_SET_CONTEXT_MGR already set [ 458.406688] binder: 3902:3904 ioctl 40046207 0 returned -16 [ 458.408105] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.408144] binder: 3902:3904 transaction failed 29189/-3, size 0-0 line 3134 [ 458.413952] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x0, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 458.413960] binder: 3903:3909 ioctl 40046207 0 returned -16 [ 458.415346] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.415384] binder: 3903:3909 transaction failed 29189/-3, size 0-0 line 3134 [ 458.421931] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.467402] binder: BINDER_SET_CONTEXT_MGR already set [ 458.471642] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.481149] binder: BINDER_SET_CONTEXT_MGR already set [ 458.489919] binder: 3913:3916 ioctl 40046207 0 returned -16 [ 458.491510] binder: BINDER_SET_CONTEXT_MGR already set [ 458.491529] binder: 3914:3917 ioctl 40046207 0 returned -16 [ 458.492061] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.492101] binder: 3899:3920 transaction failed 29189/-3, size 0-0 line 3134 [ 458.494383] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.494420] binder: 3914:3917 transaction failed 29189/-3, size 0-0 line 3134 [ 458.496809] binder: BINDER_SET_CONTEXT_MGR already set [ 458.496816] binder: 3906:3910 ioctl 40046207 0 returned -16 2018/03/29 23:44:19 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x0, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x0, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.512013] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.512052] binder: 3913:3924 transaction failed 29189/-3, size 0-0 line 3134 [ 458.525409] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.535175] binder: 3913:3926 ERROR: BC_REGISTER_LOOPER called without request [ 458.535352] binder: 3899:3907 ioctl 40046207 0 returned -16 [ 458.610754] binder: BINDER_SET_CONTEXT_MGR already set [ 458.619043] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 458.620808] binder: 3930:3932 ioctl 40046207 0 returned -16 [ 458.621162] binder: BINDER_SET_CONTEXT_MGR already set [ 458.621180] binder: BINDER_SET_CONTEXT_MGR already set [ 458.621197] binder: 3928:3933 ioctl 40046207 0 returned -16 [ 458.628902] binder: 3931:3936 ioctl 40046207 0 returned -16 [ 458.629989] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:19 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:19 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:19 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.629996] binder: 3934:3938 ioctl 40046207 0 returned -16 [ 458.631279] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.631318] binder: 3934:3938 transaction failed 29189/-3, size 0-0 line 3134 [ 458.632222] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.632263] binder: 3931:3936 transaction failed 29189/-3, size 0-0 line 3134 [ 458.659070] binder: BINDER_SET_CONTEXT_MGR already set [ 458.659079] binder: 3929:3941 ioctl 40046207 0 returned -16 [ 458.659385] binder: undelivered TRANSACTION_ERROR: 29189 [ 458.664271] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.664311] binder: 3929:3941 transaction failed 29189/-3, size 0-0 line 3134 [ 458.684781] binder: BINDER_SET_CONTEXT_MGR already set [ 458.684788] binder: 3942:3945 ioctl 40046207 0 returned -16 [ 458.686505] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.686913] binder: 3942:3945 transaction failed 29189/-3, size 0-0 line 3134 [ 458.692409] binder: BINDER_SET_CONTEXT_MGR already set [ 458.692416] binder: 3944:3946 ioctl 40046207 0 returned -16 [ 458.694016] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.694056] binder: 3944:3946 transaction failed 29189/-3, size 0-0 line 3134 [ 458.721042] binder: BINDER_SET_CONTEXT_MGR already set [ 458.721049] binder: 3947:3948 ioctl 40046207 0 returned -16 [ 458.722460] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.722499] binder: 3947:3948 transaction failed 29189/-3, size 0-0 line 3134 [ 458.779118] binder: BINDER_SET_CONTEXT_MGR already set [ 458.779125] binder: 3943:3950 ioctl 40046207 0 returned -16 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x0, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x0, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 458.863314] binder: BINDER_SET_CONTEXT_MGR already set [ 458.875660] binder: 3952:3953 ioctl 40046207 0 returned -16 [ 458.877087] binder: BINDER_SET_CONTEXT_MGR already set [ 458.877095] binder: 3951:3958 ioctl 40046207 0 returned -16 [ 458.879251] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.879289] binder: 3951:3958 transaction failed 29189/-3, size 0-0 line 3134 [ 458.882373] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 458.882380] binder: 3957:3959 ioctl 40046207 0 returned -16 [ 458.905389] binder: BINDER_SET_CONTEXT_MGR already set [ 458.905398] binder: 3963:3964 ioctl 40046207 0 returned -16 [ 458.920877] binder: BINDER_SET_CONTEXT_MGR already set [ 458.920886] binder: 3954:3961 ioctl 40046207 0 returned -16 [ 458.923573] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.923613] binder: 3954:3961 transaction failed 29189/-3, size 0-0 line 3134 [ 458.924393] binder: BINDER_SET_CONTEXT_MGR already set [ 458.924401] binder: 3955:3960 ioctl 40046207 0 returned -16 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x0, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x0, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 458.929826] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.929866] binder: 3952:3965 transaction failed 29189/-3, size 0-0 line 3134 [ 458.958557] binder: BINDER_SET_CONTEXT_MGR already set [ 458.958565] binder: 3969:3970 ioctl 40046207 0 returned -16 [ 458.960757] binder_alloc: 3868: binder_alloc_buf, no vma [ 458.960797] binder: 3969:3970 transaction failed 29189/-3, size 0-0 line 3134 [ 458.967074] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:20 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.011212] binder: BINDER_SET_CONTEXT_MGR already set [ 459.021100] binder: 3975:3978 ioctl 40046207 0 returned -16 [ 459.024802] binder: BINDER_SET_CONTEXT_MGR already set [ 459.024808] binder: 3967:3968 ioctl 40046207 0 returned -16 [ 459.031975] binder: BINDER_SET_CONTEXT_MGR already set [ 459.031984] binder: 3974:3977 ioctl 40046207 0 returned -16 [ 459.035396] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.035436] binder: 3974:3977 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x0, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 459.049441] binder: BINDER_SET_CONTEXT_MGR already set [ 459.049448] binder: 3982:3984 ioctl 40046207 0 returned -16 [ 459.050865] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.050904] binder: 3982:3984 transaction failed 29189/-3, size 0-0 line 3134 [ 459.064677] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.064717] binder: 3975:3983 transaction failed 29189/-3, size 0-0 line 3134 [ 459.064766] binder: 3975:3985 ERROR: BC_REGISTER_LOOPER called without request [ 459.069310] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:20 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x0, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 459.094519] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:20 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 459.143570] binder: BINDER_SET_CONTEXT_MGR already set [ 459.150771] binder: 3991:3993 ioctl 40046207 0 returned -16 [ 459.157984] binder: BINDER_SET_CONTEXT_MGR already set [ 459.165995] binder: BINDER_SET_CONTEXT_MGR already set [ 459.170995] binder: 3990:3997 ioctl 40046207 0 returned -16 [ 459.177410] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.187865] binder: 3989:3996 ioctl 40046207 0 returned -16 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x0, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.187869] binder: BINDER_SET_CONTEXT_MGR already set [ 459.187884] binder: 3994:3999 ioctl 40046207 0 returned -16 [ 459.187929] binder: BINDER_SET_CONTEXT_MGR already set [ 459.187947] binder: 3992:4000 ioctl 40046207 0 returned -16 [ 459.188053] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.188094] binder: 3990:3997 transaction failed 29189/-3, size 0-0 line 3134 [ 459.194479] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.194520] binder: 3992:4000 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x0, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.241988] binder: undelivered TRANSACTION_ERROR: 29189 [ 459.246116] binder: BINDER_SET_CONTEXT_MGR already set [ 459.246124] binder: 4007:4010 ioctl 40046207 0 returned -16 [ 459.247516] binder: BINDER_SET_CONTEXT_MGR already set [ 459.247522] binder: 4006:4011 ioctl 40046207 0 returned -16 [ 459.248907] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.248946] binder: 4007:4010 transaction failed 29189/-3, size 0-0 line 3134 [ 459.250342] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.250377] binder: 4006:4011 transaction failed 29189/-3, size 0-0 line 3134 [ 459.262711] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.302734] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.308295] binder: 3989:4002 transaction failed 29189/-3, size 0-0 line 3134 [ 459.316823] binder: BINDER_SET_CONTEXT_MGR already set [ 459.330747] binder: 4003:4008 ioctl 40046207 0 returned -16 [ 459.330808] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 459.330815] binder: 4021:4022 ioctl 40046207 0 returned -16 [ 459.334515] binder: BINDER_SET_CONTEXT_MGR already set [ 459.334521] binder: 4016:4019 ioctl 40046207 0 returned -16 [ 459.336334] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.336373] binder: 4016:4019 transaction failed 29189/-3, size 0-0 line 3134 [ 459.339449] binder: BINDER_SET_CONTEXT_MGR already set [ 459.339455] binder: 4017:4020 ioctl 40046207 0 returned -16 [ 459.340756] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 459.340793] binder: 4017:4020 transaction failed 29189/-3, size 0-0 line 3134 [ 459.363342] binder: BINDER_SET_CONTEXT_MGR already set [ 459.363349] binder: 4024:4025 ioctl 40046207 0 returned -16 [ 459.378774] binder: BINDER_SET_CONTEXT_MGR already set [ 459.378780] binder: 4026:4027 ioctl 40046207 0 returned -16 [ 459.394203] binder: BINDER_SET_CONTEXT_MGR already set [ 459.394210] binder: 4028:4029 ioctl 40046207 0 returned -16 [ 459.425400] binder: BINDER_SET_CONTEXT_MGR already set [ 459.425407] binder: 4031:4033 ioctl 40046207 0 returned -16 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.427184] binder: BINDER_SET_CONTEXT_MGR already set [ 459.427190] binder: 4030:4032 ioctl 40046207 0 returned -16 [ 459.428542] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.428582] binder: 4030:4032 transaction failed 29189/-3, size 0-0 line 3134 [ 459.461176] binder: BINDER_SET_CONTEXT_MGR already set [ 459.461184] binder: 4034:4036 ioctl 40046207 0 returned -16 [ 459.473232] binder: BINDER_SET_CONTEXT_MGR already set [ 459.473241] binder: 4035:4037 ioctl 40046207 0 returned -16 [ 459.475310] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:20 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:20 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 459.475352] binder: 4035:4037 transaction failed 29189/-3, size 0-0 line 3134 [ 459.486032] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.503845] binder: BINDER_SET_CONTEXT_MGR already set [ 459.503852] binder: 4023:4039 ioctl 40046207 0 returned -16 [ 459.505217] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.505257] binder: 4023:4039 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0x0, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.575394] binder: BINDER_SET_CONTEXT_MGR already set [ 459.588524] binder: BINDER_SET_CONTEXT_MGR already set [ 459.589737] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.600627] binder: 4042:4044 ioctl 40046207 0 returned -16 [ 459.606444] binder: 4041:4045 ioctl 40046207 0 returned -16 [ 459.606446] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:20 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:20 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0x0, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.606487] binder: 4043:4049 ioctl 40046207 0 returned -16 [ 459.607953] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.607992] binder: 4043:4049 transaction failed 29189/-3, size 0-0 line 3134 [ 459.634894] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.645485] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.645529] binder: 4046:4059 transaction failed 29189/-3, size 0-0 line 3134 [ 459.645752] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.645788] binder: 4047:4055 transaction failed 29189/-3, size 0-0 line 3134 [ 459.651516] binder: 4047:4060 ERROR: BC_REGISTER_LOOPER called without request [ 459.654465] binder: BINDER_SET_CONTEXT_MGR already set [ 459.654474] binder: 4056:4058 ioctl 40046207 0 returned -16 [ 459.655845] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.655885] binder: 4056:4058 transaction failed 29189/-3, size 0-0 line 3134 [ 459.685542] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 459.694618] binder: BINDER_SET_CONTEXT_MGR already set [ 459.694627] binder: 4063:4065 ioctl 40046207 0 returned -16 [ 459.695972] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.696011] binder: 4063:4065 transaction failed 29189/-3, size 0-0 line 3134 [ 459.700971] binder: undelivered TRANSACTION_ERROR: 29189 [ 459.712612] binder: BINDER_SET_CONTEXT_MGR already set [ 459.712635] binder: 4046:4051 ioctl 40046207 0 returned -16 [ 459.719894] binder: BINDER_SET_CONTEXT_MGR already set [ 459.719903] binder: 4047:4050 ioctl 40046207 0 returned -16 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0x0, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.779771] binder: undelivered TRANSACTION_ERROR: 29189 [ 459.813882] binder: BINDER_SET_CONTEXT_MGR already set [ 459.819214] binder: 4067:4069 ioctl 40046207 0 returned -16 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.827634] binder: BINDER_SET_CONTEXT_MGR already set [ 459.838013] binder: BINDER_SET_CONTEXT_MGR already set [ 459.843847] binder: BINDER_SET_CONTEXT_MGR already set [ 459.854992] binder: 4072:4078 ioctl 40046207 0 returned -16 [ 459.857619] binder: BINDER_SET_CONTEXT_MGR already set [ 459.857628] binder: 4073:4075 ioctl 40046207 0 returned -16 [ 459.861242] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 459.861281] binder: 4073:4075 transaction failed 29189/-3, size 0-0 line 3134 [ 459.878372] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.878413] binder: 4071:4081 transaction failed 29189/-3, size 0-0 line 3134 [ 459.878559] binder: 4071:4084 ERROR: BC_REGISTER_LOOPER called without request [ 459.901792] binder: BINDER_SET_CONTEXT_MGR already set [ 459.901798] binder: 4085:4089 ioctl 40046207 0 returned -16 [ 459.904203] binder: BINDER_SET_CONTEXT_MGR already set [ 459.904210] binder: 4087:4088 ioctl 40046207 0 returned -16 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x0, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 459.905710] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.905749] binder: 4087:4088 transaction failed 29189/-3, size 0-0 line 3134 [ 459.939723] binder: 4070:4077 ioctl 40046207 0 returned -16 [ 459.946343] binder: 4071:4074 ioctl 40046207 0 returned -16 [ 459.952379] binder_alloc: 3868: binder_alloc_buf, no vma [ 459.960497] binder: BINDER_SET_CONTEXT_MGR already set [ 459.965423] binder: 4070:4083 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:21 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x0, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 459.978629] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 lblcr 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 460.004288] binder: 4092:4095 ioctl 40046207 0 returned -16 [ 460.007510] binder: BINDER_SET_CONTEXT_MGR already set [ 460.007531] binder: 4093:4096 ioctl 40046207 0 returned -16 [ 460.009094] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.009138] binder: 4093:4096 transaction failed 29189/-3, size 0-0 line 3134 [ 460.014743] binder: BINDER_SET_CONTEXT_MGR already set [ 460.014751] binder: 4103:4105 ioctl 40046207 0 returned -16 [ 460.016095] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 460.016139] binder: 4103:4105 transaction failed 29189/-3, size 0-0 line 3134 [ 460.035270] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 lblcr [ 460.048272] binder: BINDER_SET_CONTEXT_MGR already set [ 460.048282] binder: 4102:4104 ioctl 40046207 0 returned -16 [ 460.062368] binder: BINDER_SET_CONTEXT_MGR already set [ 460.062374] binder: 4107:4110 ioctl 40046207 0 returned -16 [ 460.063640] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.063679] binder: 4107:4110 transaction failed 29189/-3, size 0-0 line 3134 [ 460.069397] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.085310] binder: BINDER_SET_CONTEXT_MGR already set [ 460.085317] binder: 4111:4112 ioctl 40046207 0 returned -16 [ 460.086628] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.086668] binder: 4111:4112 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:21 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x0, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.197606] binder: BINDER_SET_CONTEXT_MGR already set [ 460.213264] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 lblcr [ 460.224275] binder: 4118:4122 ioctl 40046207 0 returned -16 [ 460.224278] binder: BINDER_SET_CONTEXT_MGR already set [ 460.224301] binder: 4120:4123 ioctl 40046207 0 returned -16 [ 460.226047] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x0, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 460.226086] binder: 4120:4123 transaction failed 29189/-3, size 0-0 line 3134 [ 460.241729] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.241772] binder: 4125:4134 transaction failed 29189/-3, size 0-0 line 3134 [ 460.266462] binder: BINDER_SET_CONTEXT_MGR already set [ 460.272921] binder: 4114:4116 ioctl 40046207 0 returned -16 [ 460.272931] binder: BINDER_SET_CONTEXT_MGR already set [ 460.272950] binder: 4125:4127 ioctl 40046207 0 returned -16 [ 460.276633] binder: BINDER_SET_CONTEXT_MGR already set [ 460.276652] binder: 4124:4130 ioctl 40046207 0 returned -16 [ 460.279917] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.279956] binder: 4118:4132 transaction failed 29189/-3, size 0-0 line 3134 [ 460.280041] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.303245] binder: 4118:4137 ERROR: BC_REGISTER_LOOPER called without request [ 460.311910] binder: BINDER_SET_CONTEXT_MGR already set [ 460.311917] binder: 4140:4143 ioctl 40046207 0 returned -16 [ 460.313360] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.313400] binder: 4140:4143 transaction failed 29189/-3, size 0-0 line 3134 [ 460.328631] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:0 lblcr [ 460.355852] binder: BINDER_SET_CONTEXT_MGR already set [ 460.355860] binder: 4138:4147 ioctl 40046207 0 returned -16 [ 460.356183] binder: BINDER_SET_CONTEXT_MGR already set [ 460.356188] binder: 4139:4146 ioctl 40046207 0 returned -16 [ 460.357693] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.357732] binder: 4139:4146 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x0, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x0, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) 2018/03/29 23:44:21 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.448412] binder: BINDER_SET_CONTEXT_MGR already set [ 460.459669] binder: 4153:4155 ioctl 40046207 0 returned -16 [ 460.469896] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.472833] binder: BINDER_SET_CONTEXT_MGR already set [ 460.472839] binder: 4151:4165 ioctl 40046207 0 returned -16 [ 460.474423] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x0, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.474462] binder: 4151:4165 transaction failed 29189/-3, size 0-0 line 3134 [ 460.487235] binder: BINDER_SET_CONTEXT_MGR already set [ 460.487242] binder: 4150:4166 ioctl 40046207 0 returned -16 [ 460.488760] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.488799] binder: 4150:4166 transaction failed 29189/-3, size 0-0 line 3134 [ 460.491437] binder: BINDER_SET_CONTEXT_MGR already set [ 460.491444] binder: 4158:4167 ioctl 40046207 0 returned -16 [ 460.492989] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.493027] binder: 4158:4167 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 460.558418] binder: BINDER_SET_CONTEXT_MGR already set [ 460.567328] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:0 lblcr [ 460.578714] binder: BINDER_SET_CONTEXT_MGR already set [ 460.584878] binder: 4159:4163 ioctl 40046207 0 returned -16 [ 460.591432] binder: 4173:4175 ioctl 40046207 0 returned -16 [ 460.591439] binder: BINDER_SET_CONTEXT_MGR already set [ 460.591458] binder: 4172:4176 ioctl 40046207 0 returned -16 [ 460.592884] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.592923] binder: 4172:4176 transaction failed 29189/-3, size 0-0 line 3134 [ 460.592953] binder: BINDER_SET_CONTEXT_MGR already set [ 460.592968] binder: 4174:4177 ioctl 40046207 0 returned -16 [ 460.594396] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.594431] binder: 4174:4177 transaction failed 29189/-3, size 0-0 line 3134 [ 460.602205] binder: BINDER_SET_CONTEXT_MGR already set [ 460.602213] binder: 4181:4183 ioctl 40046207 0 returned -16 2018/03/29 23:44:21 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x0, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x0, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:21 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) 2018/03/29 23:44:21 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:21 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:21 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.617717] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.617757] binder: 4173:4186 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:21 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) 2018/03/29 23:44:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:21 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x0, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 460.707731] binder: BINDER_SET_CONTEXT_MGR already set [ 460.726647] binder: BINDER_SET_CONTEXT_MGR already set [ 460.732089] binder: 4191:4202 ioctl 40046207 0 returned -16 [ 460.739406] binder: 4193:4197 ioctl 40046207 0 returned -16 [ 460.739473] binder: BINDER_SET_CONTEXT_MGR already set [ 460.739496] binder: 4190:4198 ioctl 40046207 0 returned -16 2018/03/29 23:44:21 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r1 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r3 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r3, &(0x7f0000000400)) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r4, r5, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.739974] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:0 lblcr [ 460.762688] binder: BINDER_SET_CONTEXT_MGR already set [ 460.767985] binder: 4189:4201 ioctl 40046207 0 returned -16 [ 460.774301] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.778048] binder: 4193:4211 ERROR: BC_REGISTER_LOOPER called without request [ 460.789987] binder: BINDER_SET_CONTEXT_MGR already set [ 460.791442] binder: 4189:4216 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x0, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 460.792873] binder: 4191:4217 ERROR: BC_REGISTER_LOOPER called without request [ 460.808710] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 460.825678] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.831295] binder: 4191:4210 transaction failed 29189/-3, size 0-0 line 3134 [ 460.839676] binder: 4193:4208 transaction failed 29189/-3, size 0-0 line 3134 [ 460.848508] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r1 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r3 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r3, &(0x7f0000000400)) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r4, r5, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) [ 460.859020] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 460.859192] binder: 4213:4221 ioctl 40046207 0 returned -16 [ 460.863944] binder: 4195:4204 ioctl 40046207 0 returned -16 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x0, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x0, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.899772] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.920930] binder: undelivered TRANSACTION_ERROR: 29189 [ 460.922323] binder: BINDER_SET_CONTEXT_MGR already set [ 460.922330] binder: 4227:4240 ioctl 40046207 0 returned -16 [ 460.924295] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.924334] binder: 4227:4240 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.928922] binder: BINDER_SET_CONTEXT_MGR already set [ 460.928928] binder: 4230:4239 ioctl 40046207 0 returned -16 [ 460.930396] binder_alloc: 3868: binder_alloc_buf, no vma [ 460.930434] binder: 4230:4239 transaction failed 29189/-3, size 0-0 line 3134 [ 460.976770] binder: BINDER_SET_CONTEXT_MGR already set [ 460.990651] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 460.996585] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.003821] binder: 4233:4236 ioctl 40046207 0 returned -16 [ 461.011772] binder: BINDER_SET_CONTEXT_MGR already set [ 461.017169] binder: 4234:4244 ioctl 40046207 0 returned -16 [ 461.017181] binder: BINDER_SET_CONTEXT_MGR already set [ 461.017199] binder: 4247:4248 ioctl 40046207 0 returned -16 [ 461.017237] binder: BINDER_SET_CONTEXT_MGR already set [ 461.017244] binder: 4246:4249 ioctl 40046207 0 returned -16 [ 461.018718] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.018758] binder: 4246:4249 transaction failed 29189/-3, size 0-0 line 3134 [ 461.036781] binder: 4247:4248 ERROR: BC_REGISTER_LOOPER called without request [ 461.036795] binder: 4247:4248 ioctl c0306201 200b8000 returned -11 [ 461.038597] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.038639] binder: 4233:4256 transaction failed 29189/-3, size 0-0 line 3134 [ 461.038737] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.038772] binder: 4247:4257 transaction failed 29189/-3, size 0-0 line 3134 [ 461.073923] binder: BINDER_SET_CONTEXT_MGR already set [ 461.073930] binder: 4260:4262 ioctl 40046207 0 returned -16 [ 461.075394] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.075432] binder: 4260:4262 transaction failed 29189/-3, size 0-0 line 3134 [ 461.102730] binder: 4228:4238 ioctl 40046207 0 returned -16 [ 461.115067] binder: BINDER_SET_CONTEXT_MGR already set [ 461.115074] binder: 4264:4267 ioctl 40046207 0 returned -16 [ 461.116611] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.116650] binder: 4264:4267 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r1 = socket(0x80008, 0x80002, 0x9) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r3 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r3, &(0x7f0000000400)) r4 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r4, r5, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0x0, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580), &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.213772] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r0, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 461.235840] binder: BINDER_SET_CONTEXT_MGR already set [ 461.242317] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.256878] binder: 4269:4279 ioctl 40046207 0 returned -16 [ 461.263855] binder: BINDER_SET_CONTEXT_MGR already set [ 461.264089] binder: 4274:4280 ioctl 40046207 0 returned -16 [ 461.278785] binder: 4270:4299 ERROR: BC_REGISTER_LOOPER called without request [ 461.279318] binder: 4274:4280 ERROR: BC_REGISTER_LOOPER called without request [ 461.279333] binder: 4274:4280 ioctl c0306201 200b8000 returned -11 [ 461.287643] binder: 4271:4298 ERROR: BC_REGISTER_LOOPER called without request [ 461.308873] binder: BINDER_SET_CONTEXT_MGR already set [ 461.311441] binder: 4271:4282 ioctl 40046207 0 returned -16 [ 461.320540] binder: 4270:4283 ioctl 40046207 0 returned -16 [ 461.320547] binder: BINDER_SET_CONTEXT_MGR already set [ 461.320565] binder: 4277:4281 ioctl 40046207 0 returned -16 [ 461.328256] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.328297] binder: 4270:4292 transaction failed 29189/-3, size 0-0 line 3134 [ 461.328477] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.328516] binder: 4271:4291 transaction failed 29189/-3, size 0-0 line 3134 [ 461.334294] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.334334] binder: 4274:4295 transaction failed 29189/-3, size 0-0 line 3134 [ 461.338938] binder: BINDER_SET_CONTEXT_MGR already set [ 461.338948] binder: 4300:4303 ioctl 40046207 0 returned -16 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0x0, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580), &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r0, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.399778] binder: undelivered TRANSACTION_ERROR: 29189 [ 461.438490] binder: BINDER_SET_CONTEXT_MGR already set [ 461.444716] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0x0, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 461.456637] binder: BINDER_SET_CONTEXT_MGR already set [ 461.457103] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.475138] binder: 4307:4314 ioctl 40046207 0 returned -16 [ 461.486509] binder: BINDER_SET_CONTEXT_MGR already set [ 461.486536] binder: 4309:4313 ioctl 40046207 0 returned -16 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x0, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r0, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x80008, 0x80002, 0x9) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 461.501323] binder: 4308:4335 ERROR: BC_REGISTER_LOOPER called without request [ 461.509297] binder: 4312:4337 ERROR: BC_REGISTER_LOOPER called without request [ 461.513437] binder: BINDER_SET_CONTEXT_MGR already set [ 461.513463] binder: 4312:4319 ioctl 40046207 0 returned -16 [ 461.513494] binder: 4308:4317 ioctl 40046207 0 returned -16 [ 461.516187] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.544838] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.553121] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.553253] binder: 4310:4316 ioctl 40046207 0 returned -16 [ 461.561503] binder: BINDER_SET_CONTEXT_MGR already set [ 461.561510] binder: 4336:4344 ioctl 40046207 0 returned -16 [ 461.569970] binder: undelivered TRANSACTION_ERROR: 29189 [ 461.607183] binder: undelivered TRANSACTION_ERROR: 29189 [ 461.610021] binder: BINDER_SET_CONTEXT_MGR already set [ 461.610028] binder: 4349:4352 ioctl 40046207 0 returned -16 [ 461.611835] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.617814] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.617868] binder: 4310:4327 transaction failed 29189/-3, size 0-0 line 3134 [ 461.622623] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.622664] binder: 4312:4325 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:22 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x0) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 7: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:22 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580), &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:22 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:22 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x0, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:22 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.627388] binder: 4308:4324 transaction failed 29189/-3, size 0-0 line 3134 [ 461.683520] binder: undelivered TRANSACTION_ERROR: 29189 [ 461.697587] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:22 executing program 4: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.714720] binder: 4359:4364 ioctl 40046207 0 returned -16 [ 461.714802] binder: BINDER_SET_CONTEXT_MGR already set [ 461.714826] binder: 4361:4366 ioctl 40046207 0 returned -16 [ 461.716193] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.716231] binder: 4361:4366 transaction failed 29189/-3, size 0-0 line 3134 [ 461.718618] binder: BINDER_SET_CONTEXT_MGR already set [ 461.718626] binder: 4363:4368 ioctl 40046207 0 returned -16 [ 461.732777] binder: BINDER_SET_CONTEXT_MGR already set [ 461.732785] binder: 4358:4369 ioctl 40046207 0 returned -16 [ 461.760352] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.766948] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.767035] binder: 4360:4377 transaction failed 29189/-3, size 0-0 line 3134 [ 461.767441] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.767482] binder: 4359:4376 transaction failed 29189/-3, size 0-0 line 3134 [ 461.775649] binder: BINDER_SET_CONTEXT_MGR already set [ 461.775657] binder: 4360:4371 ioctl 40046207 0 returned -16 2018/03/29 23:44:23 executing program 4: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 7: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x0, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x0) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 461.810911] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:23 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 4: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.846537] binder: BINDER_SET_CONTEXT_MGR already set [ 461.856722] binder: 4384:4389 ioctl 40046207 0 returned -16 [ 461.863568] binder: BINDER_SET_CONTEXT_MGR already set [ 461.870213] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 461.879005] binder: BINDER_SET_CONTEXT_MGR already set [ 461.884742] binder: 4379:4387 ioctl 40046207 0 returned -16 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.887940] binder: 4384:4402 ERROR: BC_REGISTER_LOOPER called without request [ 461.888206] binder: BINDER_SET_CONTEXT_MGR already set [ 461.888223] binder: 4381:4393 ioctl 40046207 0 returned -16 [ 461.888244] binder: BINDER_SET_CONTEXT_MGR already set [ 461.888261] binder: 4386:4394 ioctl 40046207 0 returned -16 [ 461.888356] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.888397] binder: 4384:4389 transaction failed 29189/-3, size 0-0 line 3134 [ 461.888512] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.888547] binder: 4386:4401 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 461.901743] binder: 4381:4393 ERROR: BC_REGISTER_LOOPER called without request [ 461.901758] binder: 4381:4393 ioctl c0306201 200b8000 returned -11 [ 461.902437] binder: 4386:4394 ERROR: BC_REGISTER_LOOPER called without request [ 461.902452] binder: 4386:4394 ioctl c0306201 200b8000 returned -11 [ 461.908183] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.908224] binder: 4381:4400 transaction failed 29189/-3, size 0-0 line 3134 [ 461.908273] binder: 4385:4391 ioctl 40046207 0 returned -16 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 461.966384] binder: BINDER_SET_CONTEXT_MGR already set [ 461.966391] binder: 4407:4410 ioctl 40046207 0 returned -16 [ 461.968875] binder_alloc: 3868: binder_alloc_buf, no vma [ 461.968915] binder: 4407:4410 transaction failed 29189/-3, size 0-0 line 3134 [ 462.028658] binder: BINDER_SET_CONTEXT_MGR already set [ 462.034128] binder: 4415:4418 ioctl 40046207 0 returned -16 [ 462.041684] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x0) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 7: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 462.047181] binder: 4415:4418 transaction failed 29189/-3, size 0-0 line 3134 [ 462.085193] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.100576] binder: 4420:4421 ioctl 40046207 0 returned -16 [ 462.106788] binder: BINDER_SET_CONTEXT_MGR already set [ 462.120624] binder: BINDER_SET_CONTEXT_MGR already set [ 462.120987] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.133618] binder: 4427:4434 ioctl 40046207 0 returned -16 [ 462.137581] binder: 4420:4421 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:23 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 462.152984] binder: BINDER_SET_CONTEXT_MGR already set [ 462.155402] binder: 4423:4430 ioctl 40046207 0 returned -16 [ 462.165132] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.168433] binder: BINDER_SET_CONTEXT_MGR already set [ 462.168454] binder: 4426:4431 ioctl 40046207 0 returned -16 [ 462.168549] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.168591] binder: 4420:4438 transaction failed 29189/-3, size 0-0 line 3134 [ 462.176532] binder: 4427:4434 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 462.176547] binder: 4427:4434 ioctl c0306201 200b8000 returned -11 [ 462.176612] binder: 4428:4435 ioctl 40046207 0 returned -16 [ 462.180462] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.180502] binder: 4426:4444 transaction failed 29189/-3, size 0-0 line 3134 [ 462.180657] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.180695] binder: 4427:4446 transaction failed 29189/-3, size 0-0 line 3134 [ 462.200701] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(0xffffffffffffffff, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:23 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 462.203647] binder: 4426:4450 ERROR: BC_REGISTER_LOOPER called without request [ 462.239956] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.247297] binder: BINDER_SET_CONTEXT_MGR already set [ 462.247303] binder: 4459:4460 ioctl 40046207 0 returned -16 [ 462.249032] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.249071] binder: 4459:4460 transaction failed 29189/-3, size 0-0 line 3134 [ 462.280347] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.292696] binder: BINDER_SET_CONTEXT_MGR already set [ 462.318967] binder: BINDER_SET_CONTEXT_MGR already set [ 462.325829] binder: 4453:4469 ioctl 40046207 0 returned -16 [ 462.325840] binder: BINDER_SET_CONTEXT_MGR already set [ 462.325858] binder: 4455:4471 ioctl 40046207 0 returned -16 [ 462.325883] binder: BINDER_SET_CONTEXT_MGR already set [ 462.325898] binder: 4452:4468 ioctl 40046207 0 returned -16 [ 462.329710] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.329750] binder: 4463:4477 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.342699] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.351040] binder: 4455:4471 ERROR: BC_REGISTER_LOOPER called without request [ 462.351054] binder: 4455:4471 ioctl c0306201 200b8000 returned -11 [ 462.363828] binder: 4453:4485 ERROR: BC_REGISTER_LOOPER called without request [ 462.386936] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.401074] binder: 4463:4466 ioctl 40046207 0 returned -16 [ 462.405425] binder: BINDER_SET_CONTEXT_MGR already set [ 462.405432] binder: 4474:4487 ioctl 40046207 0 returned -16 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(0xffffffffffffffff, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.427449] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.455358] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 462.491848] binder: BINDER_SET_CONTEXT_MGR already set [ 462.510557] binder: BINDER_SET_CONTEXT_MGR already set [ 462.514431] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.526343] binder: 4505:4508 ioctl 40046207 0 returned -16 [ 462.531413] binder: BINDER_SET_CONTEXT_MGR already set [ 462.531439] binder: 4503:4513 ioctl 40046207 0 returned -16 [ 462.531479] binder: 4506:4511 ioctl 40046207 0 returned -16 [ 462.539310] binder: BINDER_SET_CONTEXT_MGR already set [ 462.539332] binder: 4501:4512 ioctl 40046207 0 returned -16 [ 462.539357] binder: BINDER_SET_CONTEXT_MGR already set [ 462.539373] binder: 4502:4514 ioctl 40046207 0 returned -16 [ 462.539455] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.539494] binder: 4503:4520 transaction failed 29189/-3, size 0-0 line 3134 [ 462.541591] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.541627] binder: 4502:4514 transaction failed 29189/-3, size 0-0 line 3134 [ 462.542265] binder: 4503:4513 ERROR: BC_REGISTER_LOOPER called without request [ 462.542276] binder: 4503:4513 ioctl c0306201 200b8000 returned -11 [ 462.556781] binder: 4501:4512 ERROR: BC_REGISTER_LOOPER called without request [ 462.556792] binder: 4501:4512 ioctl c0306201 200b8000 returned -11 [ 462.561261] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.561304] binder: 4501:4521 transaction failed 29189/-3, size 0-0 line 3134 [ 462.569898] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x0, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:23 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) gettid() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(0xffffffffffffffff, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r2 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:23 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 462.649725] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.689751] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:23 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x0, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.721968] binder: BINDER_SET_CONTEXT_MGR already set [ 462.729802] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.738025] binder: BINDER_SET_CONTEXT_MGR already set [ 462.743749] binder: 4532:4536 ioctl 40046207 0 returned -16 [ 462.746470] binder: 4533:4537 ioctl 40046207 0 returned -16 [ 462.748080] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.748120] binder: 4533:4537 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000), 0x0) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x0, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.749313] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.775221] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.775702] binder: BINDER_SET_CONTEXT_MGR already set [ 462.775721] binder: 4523:4525 ioctl 40046207 0 returned -16 [ 462.779554] binder: BINDER_SET_CONTEXT_MGR already set [ 462.779580] binder: 4530:4534 ioctl 40046207 0 returned -16 [ 462.781665] binder: BINDER_SET_CONTEXT_MGR already set [ 462.781673] binder: 4522:4535 ioctl 40046207 0 returned -16 [ 462.792052] binder: 4522:4535 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 462.792066] binder: 4522:4535 ioctl c0306201 200b8000 returned -11 [ 462.795638] binder: 4532:4545 ERROR: BC_REGISTER_LOOPER called without request [ 462.812355] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.823909] binder: BINDER_SET_CONTEXT_MGR already set [ 462.823917] binder: 4547:4549 ioctl 40046207 0 returned -16 [ 462.850986] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.859782] binder: 4547:4557 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x0, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c0", 0xc) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 462.875286] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.880808] binder: 4547:4549 transaction failed 29189/-3, size 0-0 line 3134 [ 462.883803] binder: BINDER_SET_CONTEXT_MGR already set [ 462.883809] binder: 4546:4550 ioctl 40046207 0 returned -16 [ 462.889419] binder: 4522:4539 transaction failed 29189/-3, size 0-0 line 3134 [ 462.910449] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 462.936561] binder: BINDER_SET_CONTEXT_MGR already set [ 462.950397] binder: undelivered TRANSACTION_ERROR: 29189 [ 462.956680] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 462.964802] binder: 4563:4568 ioctl 40046207 0 returned -16 [ 462.970995] binder: BINDER_SET_CONTEXT_MGR already set [ 462.977881] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c0", 0xc) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x0, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 462.983615] binder: 4565:4569 ioctl 40046207 0 returned -16 [ 462.983617] binder: BINDER_SET_CONTEXT_MGR already set [ 462.983634] binder: 4573:4575 ioctl 40046207 0 returned -16 [ 462.983654] binder: BINDER_SET_CONTEXT_MGR already set [ 462.983670] binder: 4572:4576 ioctl 40046207 0 returned -16 [ 462.985131] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.985170] binder: 4572:4576 transaction failed 29189/-3, size 0-0 line 3134 [ 462.989793] binder_alloc: 3868: binder_alloc_buf, no vma [ 462.989834] binder: 4563:4579 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c0", 0xc) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 463.021948] binder: BINDER_SET_CONTEXT_MGR already set [ 463.021955] binder: 4583:4585 ioctl 40046207 0 returned -16 [ 463.027128] binder: BINDER_SET_CONTEXT_MGR already set [ 463.027135] binder: 4584:4586 ioctl 40046207 0 returned -16 [ 463.028484] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.028523] binder: 4584:4586 transaction failed 29189/-3, size 0-0 line 3134 [ 463.036931] binder: undelivered TRANSACTION_ERROR: 29189 [ 463.077566] binder: 4564:4574 ioctl 40046207 0 returned -16 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 463.085211] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.087277] binder: 4565:4592 ERROR: BC_REGISTER_LOOPER called without request [ 463.101030] binder: BINDER_SET_CONTEXT_MGR already set [ 463.111653] binder: 4565:4588 transaction failed 29189/-3, size 0-0 line 3134 [ 463.128560] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:24 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 463.129490] binder: BINDER_SET_CONTEXT_MGR already set [ 463.129517] binder: 4595:4598 ioctl 40046207 0 returned -16 [ 463.130796] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.130839] binder: 4595:4598 transaction failed 29189/-3, size 0-0 line 3134 [ 463.135379] binder: 4593:4596 ioctl 40046207 0 returned -16 [ 463.164089] binder: BINDER_SET_CONTEXT_MGR already set [ 463.164098] binder: 4603:4605 ioctl 40046207 0 returned -16 [ 463.165422] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.165462] binder: 4603:4605 transaction failed 29189/-3, size 0-0 line 3134 [ 463.203633] binder: BINDER_SET_CONTEXT_MGR already set [ 463.208935] binder: 4602:4608 ioctl 40046207 0 returned -16 [ 463.214628] binder: BINDER_SET_CONTEXT_MGR already set [ 463.214635] binder: 4613:4614 ioctl 40046207 0 returned -16 [ 463.215986] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305", 0x12) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 463.216025] binder: 4613:4614 transaction failed 29189/-3, size 0-0 line 3134 [ 463.221683] binder: undelivered TRANSACTION_ERROR: 29189 [ 463.243192] binder: BINDER_SET_CONTEXT_MGR already set [ 463.243199] binder: 4611:4617 ioctl 40046207 0 returned -16 [ 463.244526] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.244564] binder: 4611:4617 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x0, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305", 0x12) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x0, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 463.322712] binder: BINDER_SET_CONTEXT_MGR already set [ 463.332493] binder: 4619:4620 ioctl 40046207 0 returned -16 [ 463.345851] binder: BINDER_SET_CONTEXT_MGR already set [ 463.360760] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 463.385736] binder: BINDER_SET_CONTEXT_MGR already set [ 463.393010] binder: 4625:4630 ioctl 40046207 0 returned -16 [ 463.393012] binder: BINDER_SET_CONTEXT_MGR already set [ 463.393033] binder: 4621:4629 ioctl 40046207 0 returned -16 [ 463.400720] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.400760] binder: 4623:4637 transaction failed 29189/-3, size 0-0 line 3134 [ 463.402425] binder: BINDER_SET_CONTEXT_MGR already set [ 463.402447] binder: 4618:4631 ioctl 40046207 0 returned -16 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305", 0x12) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.403817] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.403855] binder: 4618:4631 transaction failed 29189/-3, size 0-0 line 3134 [ 463.408641] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.408680] binder: 4625:4636 transaction failed 29189/-3, size 0-0 line 3134 [ 463.408706] binder: BINDER_SET_CONTEXT_MGR already set [ 463.408714] binder: 4635:4639 ioctl 40046207 0 returned -16 [ 463.411499] binder: 4623:4646 ERROR: BC_REGISTER_LOOPER called without request [ 463.411826] binder: 4625:4645 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x0, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.425486] binder: BINDER_SET_CONTEXT_MGR already set [ 463.425492] binder: 4648:4649 ioctl 40046207 0 returned -16 [ 463.440645] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 463.468486] binder: 4623:4627 ioctl 40046207 0 returned -16 [ 463.503704] binder: undelivered TRANSACTION_ERROR: 29189 [ 463.512098] binder: BINDER_SET_CONTEXT_MGR already set [ 463.512105] binder: 4655:4659 ioctl 40046207 0 returned -16 [ 463.514768] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 463.514809] binder: 4655:4659 transaction failed 29189/-3, size 0-0 line 3134 [ 463.544054] binder: BINDER_SET_CONTEXT_MGR already set [ 463.574663] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:24 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008", 0x15) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x0, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:24 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.580670] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 463.587486] binder: 4656:4658 ioctl 40046207 0 returned -16 [ 463.587488] binder: BINDER_SET_CONTEXT_MGR already set [ 463.587506] binder: 4668:4671 ioctl 40046207 0 returned -16 [ 463.587624] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.587664] binder: 4660:4672 transaction failed 29189/-3, size 0-0 line 3134 [ 463.613548] binder: 4660:4662 ioctl 40046207 0 returned -16 [ 463.629829] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008", 0x15) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.671395] binder: BINDER_SET_CONTEXT_MGR already set [ 463.683539] binder: 4674:4675 ioctl 40046207 0 returned -16 [ 463.694757] binder: BINDER_SET_CONTEXT_MGR already set [ 463.711048] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:24 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 463.712562] binder: BINDER_SET_CONTEXT_MGR already set [ 463.712579] binder: 4680:4686 ioctl 40046207 0 returned -16 [ 463.712613] binder: BINDER_SET_CONTEXT_MGR already set [ 463.712630] binder: 4673:4687 ioctl 40046207 0 returned -16 [ 463.723956] binder: 4677:4682 ioctl 40046207 0 returned -16 [ 463.738771] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.738821] binder: 4679:4694 transaction failed 29189/-3, size 0-0 line 3134 [ 463.744680] binder: 4677:4682 ERROR: BC_REGISTER_LOOPER called without request [ 463.744693] binder: 4677:4682 ioctl c0306201 200b8000 returned -11 [ 463.752206] binder: BINDER_SET_CONTEXT_MGR already set [ 463.752214] binder: 4679:4685 ioctl 40046207 0 returned -16 [ 463.785881] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.791389] binder: 4680:4686 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 463.898803] binder_alloc: 3868: binder_alloc_buf, no vma [ 463.908811] binder: 4677:4691 transaction failed 29189/-3, size 0-0 line 3134 [ 463.917759] binder: BINDER_SET_CONTEXT_MGR already set [ 463.926609] binder: 4698:4700 ioctl 40046207 0 returned -16 [ 463.973502] binder: BINDER_SET_CONTEXT_MGR already set [ 463.984120] binder: 4703:4706 ioctl 40046207 0 returned -16 [ 463.990131] binder: BINDER_SET_CONTEXT_MGR already set [ 463.995526] binder: 4705:4707 ioctl 40046207 0 returned -16 [ 464.007604] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.014574] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:25 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008", 0x15) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 464.025222] binder: 4705:4709 transaction failed 29189/-3, size 0-0 line 3134 [ 464.038346] binder: 4705:4707 ERROR: BC_REGISTER_LOOPER called without request [ 464.047978] binder: 4705:4707 ioctl c0306201 200b8000 returned -11 [ 464.052937] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.096082] binder: BINDER_SET_CONTEXT_MGR already set [ 464.115385] binder: BINDER_SET_CONTEXT_MGR already set [ 464.120938] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.127928] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.135202] binder: 4711:4712 ioctl 40046207 0 returned -16 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f3050100080001", 0x17) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.145711] binder: 4713:4715 ioctl 40046207 0 returned -16 [ 464.147875] binder: BINDER_SET_CONTEXT_MGR already set [ 464.147896] binder: 4718:4723 ioctl 40046207 0 returned -16 [ 464.152808] binder: BINDER_SET_CONTEXT_MGR already set [ 464.152833] binder: 4722:4725 ioctl 40046207 0 returned -16 [ 464.172323] binder: 4722:4725 ERROR: BC_REGISTER_LOOPER called without request [ 464.172337] binder: 4722:4725 ioctl c0306201 200b8000 returned -11 [ 464.187513] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f3050100080001", 0x17) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 464.195064] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.200740] binder: BINDER_SET_CONTEXT_MGR already set [ 464.206027] binder: 4735:4737 ioctl 40046207 0 returned -16 [ 464.212787] binder: 4719:4726 ioctl 40046207 0 returned -16 [ 464.217022] binder: 4713:4741 ERROR: BC_REGISTER_LOOPER called without request [ 464.225815] binder: BINDER_SET_CONTEXT_MGR already set [ 464.225822] binder: 4744:4746 ioctl 40046207 0 returned -16 [ 464.238456] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.238480] binder: 4711:4729 transaction failed 29189/-3, size 0-0 line 3134 [ 464.260241] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.264794] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.273220] binder: 4744:4751 ERROR: BC_REGISTER_LOOPER called without request [ 464.275050] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.275095] binder: 4744:4746 transaction failed 29189/-3, size 0-0 line 3134 [ 464.294552] binder: 4713:4732 transaction failed 29189/-3, size 0-0 line 3134 [ 464.307540] binder: BINDER_SET_CONTEXT_MGR already set [ 464.312936] binder: 4747:4748 ioctl 40046207 0 returned -16 2018/03/29 23:44:25 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f3050100080001", 0x17) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.340662] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.376865] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:25 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.386336] binder: 4753:4762 ioctl 40046207 0 returned -16 [ 464.390342] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.391143] binder: BINDER_SET_CONTEXT_MGR already set [ 464.391159] binder: 4756:4765 ioctl 40046207 0 returned -16 [ 464.392675] binder: BINDER_SET_CONTEXT_MGR already set [ 464.392692] binder: 4760:4766 ioctl 40046207 0 returned -16 [ 464.394015] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.394054] binder: 4760:4766 transaction failed 29189/-3, size 0-0 line 3134 [ 464.434509] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.441910] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.452120] binder: BINDER_SET_CONTEXT_MGR already set [ 464.459140] binder: BINDER_SET_CONTEXT_MGR already set [ 464.465167] binder: 4758:4763 ioctl 40046207 0 returned -16 [ 464.471478] binder: 4759:4768 ioctl 40046207 0 returned -16 [ 464.471564] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.471606] binder: 4753:4762 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.471747] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.471784] binder: 4758:4777 transaction failed 29189/-3, size 0-0 line 3134 [ 464.471808] binder: BINDER_SET_CONTEXT_MGR already set [ 464.471830] binder: 4772:4775 ioctl 40046207 0 returned -16 [ 464.473159] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.473194] binder: 4772:4775 transaction failed 29189/-3, size 0-0 line 3134 [ 464.479569] binder: 4758:4783 ERROR: BC_REGISTER_LOOPER called without request [ 464.525593] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:25 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:25 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:25 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 464.539509] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.546611] binder: 4771:4773 ioctl 40046207 0 returned -16 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.599730] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.607580] binder: BINDER_SET_CONTEXT_MGR already set [ 464.635909] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.647883] binder: 4797:4798 ioctl 40046207 0 returned -16 [ 464.648695] binder: BINDER_SET_CONTEXT_MGR already set [ 464.648721] binder: 4795:4799 ioctl 40046207 0 returned -16 [ 464.660027] binder: 4795:4799 ERROR: BC_REGISTER_LOOPER called without request [ 464.660041] binder: 4795:4799 ioctl c0306201 200b8000 returned -11 [ 464.667003] binder: 4790:4820 ERROR: BC_REGISTER_LOOPER called without request [ 464.677928] binder: 4792:4822 ERROR: BC_REGISTER_LOOPER called without request [ 464.693047] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:25 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.698350] binder: 4792:4801 ioctl 40046207 0 returned -16 [ 464.699731] binder: BINDER_SET_CONTEXT_MGR already set [ 464.699753] binder: 4790:4804 ioctl 40046207 0 returned -16 [ 464.700364] binder: BINDER_SET_CONTEXT_MGR already set [ 464.700385] binder: 4791:4805 ioctl 40046207 0 returned -16 [ 464.700854] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.700895] binder: 4795:4811 transaction failed 29189/-3, size 0-0 line 3134 [ 464.713075] binder_alloc: 3868: binder_alloc_buf, no vma 2018/03/29 23:44:26 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:26 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r1, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) r3 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) [ 464.713115] binder: 4790:4813 transaction failed 29189/-3, size 0-0 line 3134 [ 464.760473] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:26 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 4: r0 = memfd_create(&(0x7f0000000040)="75730700010000ce000078003798", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0xed59) pread64(r0, &(0x7f0000000480)=""/234, 0xea, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCEXCL(r0, 0x540c) r3 = socket(0x11, 0x100000802, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x0) fcntl$setflags(r4, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x2f89, 0x0, 0x5, 0x4, 0xbbf, 0x44, 0x2, r6}, &(0x7f0000000280)=0x20) getsockopt$inet6_opts(r3, 0x29, 0x19ae59cf613635e5, &(0x7f0000000580)=""/38, &(0x7f00000005c0)=0x26) poll(&(0x7f0000000340)=[{r1, 0x4000}, {r2, 0x1f0}, {r2, 0x500a}, {r2}, {r1, 0x10}, {r2, 0x3100}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000380)=""/233) preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) fsync(0xffffffffffffffff) stat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x8, &(0x7f0000000640)={0x9}) [ 464.808241] binder: BINDER_SET_CONTEXT_MGR already set [ 464.816909] binder: BINDER_SET_CONTEXT_MGR already set [ 464.822360] binder: BINDER_SET_CONTEXT_MGR already set [ 464.824519] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.835222] binder: 4835:4842 ioctl 40046207 0 returned -16 [ 464.843778] binder: 4831:4839 ioctl 40046207 0 returned -16 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 464.855144] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.860657] binder: BINDER_SET_CONTEXT_MGR already set [ 464.863330] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.873125] binder: 4830:4843 ioctl 40046207 0 returned -16 [ 464.880777] binder: 4831:4839 ERROR: BC_REGISTER_LOOPER called without request [ 464.884939] binder: 4829:4858 ERROR: BC_REGISTER_LOOPER called without request 2018/03/29 23:44:26 executing program 0: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 464.907504] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 464.907855] binder: 4829:4841 ioctl 40046207 0 returned -16 [ 464.913458] binder: 4831:4839 ioctl c0306201 200b8000 returned -11 [ 464.913699] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.913739] binder: 4831:4848 transaction failed 29189/-3, size 0-0 line 3134 [ 464.917841] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.917879] binder: 4829:4850 transaction failed 29189/-3, size 0-0 line 3134 [ 464.922641] binder: BINDER_SET_CONTEXT_MGR already set [ 464.922662] binder: 4833:4844 ioctl 40046207 0 returned -16 [ 464.922924] binder_alloc: 3868: binder_alloc_buf, no vma [ 464.922960] binder: 4833:4846 transaction failed 29189/-3, size 0-0 line 3134 [ 464.927009] binder: 4833:4844 ERROR: BC_REGISTER_LOOPER called without request [ 464.927020] binder: 4833:4844 ioctl c0306201 200b8000 returned -11 [ 464.942254] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.971624] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.971874] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.000320] binder: undelivered transaction 2023, process died. [ 465.015347] binder: 4865:4869 ERROR: BC_REGISTER_LOOPER called without request [ 465.016539] binder: BINDER_SET_CONTEXT_MGR already set [ 465.016546] binder: 4866:4870 ioctl 40046207 0 returned -16 [ 465.038364] binder: 4866:4870 ERROR: BC_REGISTER_LOOPER called without request [ 465.039839] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.061970] binder: BINDER_SET_CONTEXT_MGR already set [ 465.071368] binder: 4867:4871 ioctl 40046207 0 returned -16 [ 465.109952] binder: undelivered transaction 2146, process died. [ 465.118896] binder: undelivered transaction 2145, process died. 2018/03/29 23:44:26 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d", 0x1f) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x0, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 0: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed77", 0x12) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r4 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r4, &(0x7f0000000400)) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) accept4$inet6(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r5, r6, 0x0) r7 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) 2018/03/29 23:44:26 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000832fff), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'yam0\x00', {0x2, 0x0, @loopback=0x7f000001}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) write$cgroup_pid(r3, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000140)='./file0\x00', 0x0) write(r3, &(0x7f0000000180), 0x0) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00af00000000000000000f0000000000ed00307d47b8b022f1a0116fcd40a84af65d3fd7e5b32e25b9c32d3d0972e8b2f73c595b6ec7dd5445268e5ec502c70457974905d103764d8a11f5dc6c69a8435f48e5eddcedd0d6e8231461874e760ee8a77b09d341c113eab4eb1728260903b4fcfd966b0e3347be55f621535710a4ffe3446956e1c49cef91c72ce976fc7318c854178d874642b749b676b5e456d49fd9794ee20c484374d81df5fe7cbabaebe7d80a9318585903701e657539b40f2734"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) getpgrp(0xffffffffffffffff) geteuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001a40)={{{@in=@local, @in6=@dev}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000001b40)=0xe8) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003240)) getgroups(0x0, &(0x7f0000003300)) sendmsg$netrom(r2, &(0x7f0000001440)={&(0x7f00000000c0)=@ax25={0x3, {"e1a6031284b734"}, 0x6643}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000001400)}, 0x40040) 2018/03/29 23:44:26 executing program 0: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x0, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 465.274339] binder: 4880:4885 ERROR: BC_REGISTER_LOOPER called without request [ 465.274736] binder: BINDER_SET_CONTEXT_MGR already set [ 465.274743] binder: 4876:4889 ioctl 40046207 0 returned -16 [ 465.299268] binder: 4876:4894 ERROR: BC_REGISTER_LOOPER called without request [ 465.308092] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200, 0x0, 0x4}, &(0x7f0000000040)=0x14) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r4 = socket(0x80008, 0x80002, 0x9) write(r4, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r6 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r6, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r7 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) accept4$inet6(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r7, r8, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 465.333310] binder: BINDER_SET_CONTEXT_MGR already set [ 465.338689] binder: 4877:4888 ioctl 40046207 0 returned -16 [ 465.338692] binder: BINDER_SET_CONTEXT_MGR already set [ 465.338709] binder: 4884:4890 ioctl 40046207 0 returned -16 [ 465.339163] binder: BINDER_SET_CONTEXT_MGR already set [ 465.341685] binder: 4882:4886 ERROR: BC_REGISTER_LOOPER called without request [ 465.346170] binder: 4899:4901 ioctl 40046207 0 returned -16 [ 465.371875] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 465.371883] binder: 4897:4900 ioctl 40046207 0 returned -16 [ 465.373442] binder_alloc: 4882: binder_alloc_buf, no vma [ 465.373482] binder: 4897:4900 transaction failed 29189/-3, size 0-0 line 3134 [ 465.399135] binder: undelivered transaction 2149, process died. [ 465.405660] binder_alloc: 4880: binder_alloc_buf, no vma [ 465.417871] binder: 4876:4889 transaction failed 29189/-3, size 0-0 line 3134 [ 465.417956] binder: BINDER_SET_CONTEXT_MGR already set [ 465.417963] binder: 4906:4909 ioctl 40046207 0 returned -16 [ 465.420160] binder_alloc: 4882: binder_alloc_buf, no vma [ 465.420197] binder: 4906:4909 transaction failed 29189/-3, size 0-0 line 3134 [ 465.444555] binder: BINDER_SET_CONTEXT_MGR already set [ 465.444562] binder: 4910:4914 ioctl 40046207 0 returned -16 [ 465.453051] binder_alloc: 4882: binder_alloc_buf, no vma [ 465.453091] binder: 4910:4914 transaction failed 29189/-3, size 0-0 line 3134 [ 465.478394] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 465.500619] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.510985] binder: BINDER_SET_CONTEXT_MGR already set [ 465.516264] binder: 4907:4912 ioctl 40046207 0 returned -16 2018/03/29 23:44:26 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000007c0)='/dev/sg#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000800)=0x5, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000480)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000440)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0xab7a, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x9}, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{}, {}, {}]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000680)={0x6, {{0xa, 0x4e24, 0x800, @loopback={0x0, 0x1}}}, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x12}, 0x6}}}, 0x104) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000980)={0x28, 0x0, 0x2710, @host=0x2}, 0x10, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x90c, 0x401}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000840)={r4, 0x6}, &(0x7f0000000880)=0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0x0, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000027000)={0x1}) r2 = perf_event_open(&(0x7f0000220000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000003c0)={0x0, 0x1eb, 0x2, 'queue0\x00', 0xfffffffffffffffa}) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x800000000000008}, &(0x7f0000000380)=0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) fcntl$setflags(r2, 0x2, 0x1) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xff}, 0x1}, 0x20000000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x9}) readv(r0, &(0x7f0000001980), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_pts(r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x2, 0x5, 0x4, 0x8}) close(r0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/03/29 23:44:26 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x0, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 465.550073] binder: undelivered transaction 2152, process died. [ 465.578346] binder: 4919:4926 ERROR: BC_REGISTER_LOOPER called without request [ 465.580615] binder: BINDER_SET_CONTEXT_MGR already set [ 465.580622] binder: 4923:4930 ioctl 40046207 0 returned -16 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0x0, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x0, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000792ff0)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/40, 0x28}], 0x4) read(r0, &(0x7f0000000440), 0x0) r1 = dup2(r0, r0) writev(r1, &(0x7f000049fff0)=[{&(0x7f0000329000)='\x00', 0x1}], 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000001800)={&(0x7f00000017c0)=[0x8, 0x5, 0x52a, 0xcfb8d04], 0x4, 0x4, 0x7, 0x100000000, 0x4, 0x9, {0xffff, 0x7, 0x1000, 0x100, 0x1, 0x5, 0xfffffffffffffffa, 0xfff, 0x8, 0xfffffffffffffffd, 0x5a, 0x0, 0x1, 0x1, "47c58b4f4ff750ed65d1807304f4aa653b2a32015b899342f411b68c283ae228"}}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000100)={0xe7, &(0x7f0000000000)="5094412ac9f22c2b16d1f8eacfcf825de851221822586e8b0afc7264be4a885629bd47cdc7cd98b929e2aed11eae66d5d5d48d2520be42c4da9c24b904ba2faaf79a86cf1f9e161d32c80dfa3ea69c08b45361fe86a2077d33b9a48f6153f637fb5945aefd4641bc630fe7a04cb8c625cb2e219cc82ba89256ce76b74d18a20ebfc110bbdaa98ebc16be33fb282f022e847110921411aebe849287a2be069afabe4d0c2358d5ce9dad4ff7411cbc5dc6d970ff4d6cb1a1523669ac80235b870d3638d3212bde596ac6c488367d5c8c305456a3e6c0ab4f3a5cb0df8e95f37e02a587aa6c57d75c"}) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000400)=0x6e) fcntl$getown(r1, 0x9) tee(r0, r1, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000300)=""/194) sendto$unix(r0, &(0x7f00000001c0)="cf6a1c9534b6e42ddf76cc74bca42b1e43efcf298f6042826be1282d6fe88efa677e02ab6c12398fcdff3cdc571b481ccf73e8731098fa18efc49eb3150fb5fd9aca82c4daf6c999903dce3eedb6383d6b57278d7aeb485435aa227354ec3b30947cf15219d841032ee1411b8bcb130402f974a94680a73021a0cf8cc885de2592de9105c6ebaefe7a18181e9014d88ac27ba119d0064eb33b4799", 0x9b, 0x4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) tee(0xffffffffffffffff, r1, 0x7ff, 0x1) 2018/03/29 23:44:26 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) r1 = mq_open(&(0x7f0000000000)="2d1f05", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x9, 0x10000, 0x8000, 0xfff}, 0x8) r3 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r3, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001600)}}, {{&(0x7f00000016c0)=@in6={0xa, 0x4e21, 0x7fffffff}, 0x1c, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)}}], 0x2, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000e71fff), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f000058eff0)={0x77359400}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000400)=""/4096) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mq_timedreceive(r1, &(0x7f0000659000)=""/131, 0xfffffffffffffd7a, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace$peek(0x3, r4, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x3, 0x4, [0x7, 0x0, 0x0, 0x6]}, &(0x7f00000003c0)=0x10) getsockname(r0, &(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x80) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040)) [ 465.613959] binder: BINDER_SET_CONTEXT_MGR already set [ 465.615936] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 465.621109] binder: 4923:4941 ERROR: BC_REGISTER_LOOPER called without request [ 465.640862] binder_alloc: 4919: binder_alloc_buf, no vma [ 465.646740] binder: 4920:4944 ERROR: BC_REGISTER_LOOPER called without request [ 465.654598] binder: 4923:4930 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:26 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x0, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 465.667061] binder_alloc: 4919: binder_alloc_buf, no vma [ 465.672593] binder: BINDER_SET_CONTEXT_MGR already set [ 465.678814] binder: 4927:4933 ioctl 40046207 0 returned -16 [ 465.682899] binder: 4942:4943 ERROR: BC_REGISTER_LOOPER called without request [ 465.687376] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 465.704630] binder: 4920:4934 transaction failed 29189/-3, size 0-0 line 3134 2018/03/29 23:44:26 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0x0, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:26 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 465.710116] binder: undelivered transaction 2157, process died. [ 465.719071] binder: 4922:4928 ioctl 40046207 0 returned -16 [ 465.721070] binder: 4952:4954 ERROR: BC_REGISTER_LOOPER called without request [ 465.750337] binder: undelivered transaction 2161, process died. [ 465.772852] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 465.774462] binder: BINDER_SET_CONTEXT_MGR already set [ 465.774469] binder: 4965:4967 ioctl 40046207 0 returned -16 [ 465.775687] binder_alloc: 4952: binder_alloc_buf, no vma [ 465.775726] binder: 4965:4967 transaction failed 29189/-3, size 0-0 line 3134 [ 465.793744] binder: BINDER_SET_CONTEXT_MGR already set [ 465.793751] binder: 4960:4962 ioctl 40046207 0 returned -16 [ 465.795172] binder_alloc: 4952: binder_alloc_buf, no vma 2018/03/29 23:44:27 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200, 0x0, 0x4}, &(0x7f0000000040)=0x14) r3 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r4 = socket(0x80008, 0x80002, 0x9) write(r4, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d00000008", 0x23) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r6 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r6, &(0x7f0000000400)) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r7 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r7, &(0x7f0000f50f90), 0x0, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) accept4$inet6(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000540)=0xc) fchown(r7, r8, 0x0) r9 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x0, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000027000)={0x1}) r2 = perf_event_open(&(0x7f0000220000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000003c0)={0x0, 0x1eb, 0x2, 'queue0\x00', 0xfffffffffffffffa}) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x800000000000008}, &(0x7f0000000380)=0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) fcntl$setflags(r2, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10b}, 0x1}, 0x20000000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x9}) readv(r0, &(0x7f0000001980), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_pts(r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0x2, 0x5, 0x4, 0x8}) getxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='o\b\x00\x00\x00'], &(0x7f0000000200)=""/102, 0x66) close(r0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) 2018/03/29 23:44:27 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x0, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 465.795212] binder: 4960:4962 transaction failed 29189/-3, size 0-0 line 3134 [ 465.828802] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.885488] binder: BINDER_SET_CONTEXT_MGR already set [ 465.896755] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 465.902930] binder: BINDER_SET_CONTEXT_MGR already set [ 465.902946] binder: 4974:4984 ioctl 40046207 0 returned -16 [ 465.902975] binder: BINDER_SET_CONTEXT_MGR already set [ 465.902989] binder: 4972:4978 ioctl 40046207 0 returned -16 [ 465.903408] binder: BINDER_SET_CONTEXT_MGR already set [ 465.903422] binder: 4973:4979 ioctl 40046207 0 returned -16 [ 465.906558] binder_alloc: 4952: binder_alloc_buf, no vma [ 465.906604] binder: 4975:4981 transaction failed 29189/-3, size 0-0 line 3134 [ 465.909741] binder_alloc: 4952: binder_alloc_buf, no vma [ 465.909778] binder: 4974:4984 transaction failed 29189/-3, size 0-0 line 3134 [ 465.913864] binder: BINDER_SET_CONTEXT_MGR already set [ 465.913871] binder: 4982:4987 ioctl 40046207 0 returned -16 [ 465.928863] binder: 4976:4983 ioctl 40046207 0 returned -16 [ 465.930623] binder_alloc: 4952: binder_alloc_buf, no vma 2018/03/29 23:44:27 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x0, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:27 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x0, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000005c0)={{0x3, 0x8c}, 'port1\x00', 0x22, 0x0, 0x5eec, 0x0, 0xfffffffffffffe00, 0x0, 0x3, 0x0, 0x0, 0x6}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x4a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3f8b8410aea7c9"], 0x7}, 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200), 0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@loopback={0x0, 0x1}, @empty, @local={0xfe, 0x80, [], 0xaa}, 0x41a6, 0xffff, 0x1904000000000, 0x400, 0x0, 0x20000}) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/192, 0xc0}], 0x1, &(0x7f0000001500)=""/124, 0x7c}, 0x0) mremap(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000575000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f000058f000)='./file0\x00', 0x0) mremap(&(0x7f0000676000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000590000/0x4000)=nil) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x400}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000680)={r5}) accept4$inet6(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x1c, 0x80800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f00000019c0)=ANY=[@ANYBLOB]}) 2018/03/29 23:44:27 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000440)='net/igmp\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8001, 0x1, 0x80, 0x401}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x78, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x200}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x0, @rand_addr}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x23f}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x401]}, &(0x7f0000000080)=0x100) [ 465.930662] binder: 4976:4990 transaction failed 29189/-3, size 0-0 line 3134 [ 465.950903] binder: 4976:4983 ERROR: BC_REGISTER_LOOPER called without request [ 465.950918] binder: 4976:4983 ioctl c0306201 200b8000 returned -11 [ 466.020267] binder: undelivered TRANSACTION_ERROR: 29189 [ 466.044207] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.052817] binder: BINDER_SET_CONTEXT_MGR already set [ 466.059223] binder: 4999:5004 transaction failed 29189/-3, size 0-0 line 3134 [ 466.067188] binder: BINDER_SET_CONTEXT_MGR already set [ 466.073419] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 466.080684] binder: 4998:5009 ioctl 40046207 0 returned -16 [ 466.081504] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:27 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc), 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r5, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r3, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) socketpair$unix(0x1, 0x1000000000003, 0x0, &(0x7f000021bff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000340)="01", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000580)={0x0, 0xfffffffffffffff7}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000600)={0x0, 0x2}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000800), &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x94}}, 0x10000, 0x1c4}, &(0x7f0000000940)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000d40)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000ec0)=@assoc_value={0x0, 0x101}, &(0x7f0000000f00)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000f40)={0x0, 0x4}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001540)={0x7f, 0xfff, 0x0, 0x3ff, 0x0, 0x4, 0x100000000, 0x400}, &(0x7f0000001580)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000015c0)=ANY=[@ANYBLOB="02cc"], &(0x7f0000001600)=0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000003b80)={0x0, 0x4, 0x8001, 0x5}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000003c00)={0x0, 0x101, 0x79c0cfea}, &(0x7f0000003c40)=0x10) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 466.081522] binder: 5000:5007 ioctl 40046207 0 returned -16 [ 466.084325] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.084365] binder: 4998:5016 transaction failed 29189/-3, size 0-0 line 3134 [ 466.086444] binder: 4996:5006 ioctl 40046207 0 returned -16 [ 466.089238] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.089323] binder: 5000:5019 transaction failed 29189/-3, size 0-0 line 3134 [ 466.091235] binder: 5000:5007 ERROR: BC_REGISTER_LOOPER called without request [ 466.091245] binder: 5000:5007 ioctl c0306201 200b8000 returned -11 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 466.092517] binder: 4999:5015 ERROR: BC_REGISTER_LOOPER called without request [ 466.129480] binder: BINDER_SET_CONTEXT_MGR already set [ 466.129487] binder: 4997:5017 ioctl 40046207 0 returned -16 [ 466.153854] binder: BINDER_SET_CONTEXT_MGR already set [ 466.153861] binder: 5021:5025 ioctl 40046207 0 returned -16 [ 466.156444] binder: 5021:5025 ERROR: BC_REGISTER_LOOPER called without request [ 466.156456] binder: 5021:5025 ioctl c0306201 200b8000 returned -11 [ 466.158182] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:27 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:27 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0", 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x0, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 466.158189] binder: 5022:5027 ioctl 40046207 0 returned -16 [ 466.160784] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.160823] binder: 5022:5027 transaction failed 29189/-3, size 0-0 line 3134 [ 466.170029] binder: undelivered TRANSACTION_ERROR: 29189 [ 466.210349] binder: undelivered TRANSACTION_ERROR: 29189 [ 466.225262] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:27 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x0, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 466.241677] binder: 5029:5031 ioctl 40046207 0 returned -16 [ 466.254065] binder: BINDER_SET_CONTEXT_MGR already set [ 466.257314] binder: 5029:5041 ERROR: BC_REGISTER_LOOPER called without request [ 466.278478] binder: BINDER_SET_CONTEXT_MGR already set [ 466.281507] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 466.296166] binder: 5030:5034 ioctl 40046207 0 returned -16 [ 466.304317] binder: 5038:5043 ioctl 40046207 0 returned -16 [ 466.309777] binder: BINDER_SET_CONTEXT_MGR already set [ 466.309785] binder: 5035:5042 ioctl 40046207 0 returned -16 [ 466.312857] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.312899] binder: 5038:5049 transaction failed 29189/-3, size 0-0 line 3134 [ 466.325037] binder: BINDER_SET_CONTEXT_MGR already set [ 466.325045] binder: 5052:5054 ioctl 40046207 0 returned -16 [ 466.327071] binder: 5052:5054 ERROR: BC_REGISTER_LOOPER called without request [ 466.327083] binder: 5052:5054 ioctl c0306201 200b8000 returned -11 [ 466.334331] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 466.349786] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.349827] binder: 5030:5048 transaction failed 29189/-3, size 0-0 line 3134 [ 466.387417] binder: BINDER_SET_CONTEXT_MGR already set [ 466.393416] binder: 5040:5047 ioctl 40046207 0 returned -16 2018/03/29 23:44:27 executing program 6: unshare(0x60000000) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) 2018/03/29 23:44:27 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:27 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x0, 0x0, &(0x7f000092b000), 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004c", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f24bc124e16f7d2fade8e", 0xa9, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x20000) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5, 0x4}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:27 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x0, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:27 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x0, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 466.439891] binder: undelivered TRANSACTION_ERROR: 29189 [ 466.472080] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 23:44:27 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 466.485324] binder: 5059:5068 ioctl 40046207 0 returned -16 [ 466.485440] binder: BINDER_SET_CONTEXT_MGR already set [ 466.485455] binder: 5066:5072 ioctl 40046207 0 returned -16 [ 466.485481] binder: BINDER_SET_CONTEXT_MGR already set [ 466.485499] binder: 5064:5073 ioctl 40046207 0 returned -16 [ 466.488093] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.488131] binder: 5064:5073 transaction failed 29189/-3, size 0-0 line 3134 [ 466.488242] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.488275] binder: 5066:5072 transaction failed 29189/-3, size 0-0 line 3134 [ 466.488459] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 466.516328] binder: BINDER_SET_CONTEXT_MGR already set [ 466.516335] binder: 5081:5082 ioctl 40046207 0 returned -16 [ 466.517620] binder_alloc: 4952: binder_alloc_buf, no vma [ 466.517659] binder: 5081:5082 transaction failed 29189/-3, size 0-0 line 3134 [ 466.538526] binder: BINDER_SET_CONTEXT_MGR already set [ 466.538535] binder: 5063:5070 ioctl 40046207 0 returned -16 [ 466.540585] binder: 5063:5070 ERROR: BC_REGISTER_LOOPER called without request [ 466.540604] binder: 5063:5070 ioctl c0306201 200b8000 returned -11 [ 466.559139] binder: BINDER_SET_CONTEXT_MGR already set [ 466.559146] binder: 5065:5074 ioctl 40046207 0 returned -16 [ 466.608722] IPVS: Creating netns size=2552 id=21 [ 466.633829] pktgen: kernel_thread() failed for cpu 0 [ 466.638963] pktgen: Cannot create thread for cpu 0 (-4) [ 466.644393] pktgen: kernel_thread() failed for cpu 1 [ 466.649489] pktgen: Cannot create thread for cpu 1 (-4) [ 466.655392] pktgen: Initialization failed for all threads [ 466.759911] binder: undelivered transaction 2163, process died. [ 466.799677] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/29 23:44:28 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x0, 0x0, &(0x7f000092b000), 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x0, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:28 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004c", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:28 executing program 6: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) mq_getsetattr(r0, &(0x7f0000000440)={0x0, 0x1, 0x3, 0xdbd5, 0x5, 0x0, 0x2, 0x4}, &(0x7f0000000480)) r1 = memfd_create(&(0x7f0000000200)='\x00 ', 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="9f9fb8771737eeb776ed65500305d30edc0ebc7a1867853e285ca2da18f1e2d91194b3af4dc44e9b1716017f06bea43f928607eb9428be6082f68e48d9e9e7ff97126d4b5951b820e65051ce217de9200c6bd48906152130be743c49ae50c7e854396b59c3c0fce0a3d16973e12428767f37c9166678b1e22ae859", 0x7b, 0x10001, &(0x7f00000001c0)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x0, 0x0, 0xfb4e, 'queue0\x00', 0x1}) r2 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r3 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0xffffffffffffffc0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xff}}, 0x7, 0x1f}, &(0x7f0000000300)=0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000044fd0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(0xffffffffffffffff, &(0x7f0000048fe4), 0x0) write$sndseq(r3, &(0x7f0000053000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000003c0), 0x2) 2018/03/29 23:44:28 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:28 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000440)='net/igmp\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x80, 0x401, 0x100000001}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x23f}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x7, 0x0, 0x0, 0x401]}, &(0x7f0000000080)=0x100) [ 467.028774] binder: BINDER_SET_CONTEXT_MGR already set [ 467.036550] binder: 5092:5097 ERROR: BC_REGISTER_LOOPER called without request [ 467.040126] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 467.058374] binder: 5094:5096 ioctl 40046207 0 returned -16 [ 467.058377] binder: BINDER_SET_CONTEXT_MGR already set [ 467.058392] binder: 5093:5099 ioctl 40046207 0 returned -16 2018/03/29 23:44:28 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) 2018/03/29 23:44:28 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f", 0x9f, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000001c0)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7e764b87d0855") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1, 0x7}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r5, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/03/29 23:44:28 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000440)='net/igmp\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x80, 0x401, 0x100000001}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x4c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e23}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200}, &(0x7f0000000040)=0x14) 2018/03/29 23:44:28 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x0, 0x0, &(0x7f000092b000), 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) [ 467.058415] binder: BINDER_SET_CONTEXT_MGR already set [ 467.058437] binder: 5090:5100 ioctl 40046207 0 returned -16 [ 467.079445] binder: 5090:5100 ERROR: BC_REGISTER_LOOPER called without request [ 467.079459] binder: 5090:5100 ioctl c0306201 200b8000 returned -11 [ 467.099827] binder: BINDER_SET_CONTEXT_MGR already set [ 467.105095] binder: 5091:5098 ioctl 40046207 0 returned -16 2018/03/29 23:44:28 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x0, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000440)='net/igmp\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x80, 0x401, 0x100000001}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x68, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd776, 0x5, 0x200}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x23f}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x3, 0x7, 0x0, 0x0, 0x401]}, &(0x7f0000000080)=0x100) 2018/03/29 23:44:28 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x200000000000022b, 0x10000003) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x80002, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004c", 0x18) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 467.128259] binder: 5091:5098 ERROR: BC_REGISTER_LOOPER called without request [ 467.135881] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 467.153282] binder: 5091:5098 ioctl c0306201 200b8000 returned -11 [ 467.183048] binder: BINDER_SET_CONTEXT_MGR already set [ 467.199453] binder: 5115:5116 ioctl 40046207 0 returned -16 [ 467.211236] binder: undelivered transaction 2180, process died. [ 467.212256] binder: BINDER_SET_CONTEXT_MGR already set [ 467.212263] binder: 5118:5119 ioctl 40046207 0 returned -16 2018/03/29 23:44:28 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x0) signalfd4(r2, &(0x7f0000000540), 0x8, 0x80000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x8, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x8440, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x80) r2 = syz_open_procfs(r0, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000000), 0x200000000000022b, 0x10000003) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300)=""/89, &(0x7f0000000380)=0x59) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x400, 0x1, [0x0]}, &(0x7f0000000640)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23}}, [0xff, 0x6, 0x5, 0x0, 0x0, 0x4, 0xde7, 0x6, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x401, 0x3, 0x3]}, &(0x7f0000000080)=0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) r4 = syz_open_dev$binder(&(0x7f0000000680)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000b8000)={0x4, 0x0, &(0x7f0000109000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000583f53)="e7"}) 2018/03/29 23:44:28 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000480)='attr/fscreate\x00') preadv(r1, &(0x7f0000000000), 0x200000000000022b, 0x10000003) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r3 = socket(0x80008, 0x0, 0x9) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r1, &(0x7f0000000180)="1f00f501000b1404400000000002d1a0ed7700000000004cb8e5958000867d0000", 0x21) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), 0xfffffffffffffdaa) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x402, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x3) r5 = getpid() clock_nanosleep(0x6, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) sched_setparam(r5, &(0x7f0000000400)) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) fchown(r6, r7, 0x0) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) [ 467.213548] binder_alloc: 5106: binder_alloc_buf, no vma [ 467.213585] binder: 5118:5119 transaction failed 29189/-3, size 0-0 line 3134 [ 467.221432] binder: BINDER_SET_CONTEXT_MGR already set [ 467.221438] binder: 5121:5124 ioctl 40046207 0 returned -16 [ 467.222515] binder_alloc: 5106: binder_alloc_buf, no vma [ 467.222553] binder: 5121:5124 transaction failed 29189/-3, size 0-0 line 3134 [ 467.235336] binder: 5115:5116 ERROR: BC_REGISTER_LOOPER called without request [ 467.235349] binder: 5115:5116 ioctl c0306201 200b8000 returned -11 [ 467.243767] binder: BINDER_SET_CONTEXT_MGR already set [ 467.243774] binder: 5120:5123 ioctl 40046207 0 returned -16 [ 467.287306] binder: BINDER_SET_CONTEXT_MGR already set [ 467.287313] binder: 5128:5131 ioctl 40046207 0 returned -16 [ 467.288644] binder_alloc: 5106: binder_alloc_buf, no vma [ 467.288684] binder: 5128:5131 transaction failed 29189/-3, size 0-0 line 3134 [ 467.291416] binder: BINDER_SET_CONTEXT_MGR already set [ 467.291423] binder: 5129:5132 ioctl 40046207 0 returned -16 [ 467.292752] binder_alloc: 5106: binder_alloc_buf, no vma 2018/03/29 23:44:28 executing program 5: futex(&(0x7f0000000040)=0x4, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() r1 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="1bc3978ad3d5f20b70408e22c67fcfd6e22739cdf1e13fe64a5ae685da17361fd19d00847c99b16b5f2cb14a36980c6b7847932ebdc04e6f9762e83c0541d5c13113ebfeb57387ba43f3294bf11149e1d22c30c3efa0e75448cda634ee5ae9b6ac666fcad64f63b5e51da1222acb6ed7c9d71d10e1a0148a34a4d19f3b76b56069aa79a3ab4725d5f74de791a7b766375e0f3afe78eed39b24db75fd85c13f24bc124e16f7d2fade8e", 0xa9, 0xfffffffffffffff8) keyctl$clear(0x7, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tun(&(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x20000) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r3, 0x540d) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000009c0)="690ec9e4acab3063b3991b89c5100ce6b45bcca6661049002d18d8d54b6a9fb633e6f19b465d2b46ed89bf54ffd1568b736ebc4edbc8baf2ee13e094c1d0633150cb16c324ea71cc7cc82eac759f541d18505bb9d88dcacc03a5ca365fe65d66e765ea96d81431faf01fc6f75c3dcc66fd452b89722ab65ac744c7c2cc89179d2c1e0a4ddc19ae4fe1a5e2da010d421a245fc9df7e56", &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000007c0)="e389218d60c4045f8e5fa54e39c396800f8d18b688d937b61e5be03d76b50a1b7364210ffca5b5df37b7") tkill(r0, 0x1000000000016) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x5, 0x401, 0x9, 0x5, 0x7, 0x5, 0x4}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0xff, @loopback=0x7f000001, 0x4e24, 0x2, 'lblcr\x00', 0xa, 0x1}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x2, 0x7, 0x2, 0x1de}}, 0x44) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x0, 0x4, 0x1, 0x0, 0x401}, &(0x7f0000000540)=0xfffffe4f) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) [ 467.292789] binder: 5129:5132 transaction failed 29189/-3, size 0-0 line 3134 [ 467.361503] binder: BINDER_SET_CONTEXT_MGR already set [ 467.375977] binder: 5130:5134 ioctl 40046207 0 returned -16 [ 467.382593] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 467.409800] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 lblcr [ 467.553380] binder: undelivered transaction 2179, process died. [ 467.819896] binder: undelivered TRANSACTION_COMPLETE [ 479.009902] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 489.149725] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 499.289724] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 509.429789] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 519.569732] unregister_netdevice: waiting for lo to become free. Usage count = 4 INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes [ 529.709918] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 539.849689] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 549.989726] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 560.129744] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 570.269747] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 580.409967] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 590.549722] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 600.689700] unregister_netdevice: waiting for lo to become free. Usage count = 4 [ 602.179778] INFO: task syz-executor6:5143 blocked for more than 120 seconds. [ 602.186991] Not tainted 4.4.125-g38f41ec #63 [ 602.192253] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 602.200244] syz-executor6 D ffff8801d33b7c38 29016 5143 1 0x00000004 [ 602.207643] ffff8801d33b7c38 ffff8801d2751800 0000000000000000 0000000000000007 [ 602.216343] ffff8801d2751800 ffff8801db21fdb8 ffff8801db21fde0 ffff8801db21f4d8 [ 602.224393] ffff8801db21f4c0 ffffffff84217840 ffff8801d2751800 0000000000000000 [ 602.232645] Call Trace: [ 602.235217] [] schedule+0x7a/0x1b0 [ 602.240505] [] schedule_preempt_disabled+0x13/0x20 [ 602.247063] [] mutex_lock_nested+0x306/0x850 [ 602.253147] [] ? copy_net_ns+0xc7/0x190 [ 602.258761] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 602.265036] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 602.272231] [] copy_net_ns+0xc7/0x190 [ 602.277665] [] create_new_namespaces+0x2f6/0x610 [ 602.284084] [] unshare_nsproxy_namespaces+0xae/0x1e0 [ 602.290836] [] SyS_unshare+0x3da/0x700 [ 602.296352] [] ? SyS_clone+0x50/0x50 [ 602.301735] [] ? task_work_run+0x14a/0x180 [ 602.307790] [] ? int_ret_from_sys_call+0x52/0xa3 [ 602.314288] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 602.320877] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 602.327496] 1 lock held by syz-executor6/5143: [ 602.332211] #0: (net_mutex){+.+.+.}, at: [] copy_net_ns+0xc7/0x190 [ 602.340869] Sending NMI to all CPUs: [ 602.345724] NMI backtrace for cpu 0 [ 602.349327] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.125-g38f41ec #63 [ 602.356363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.365711] task: ffffffff84217840 task.stack: ffffffff84200000 [ 602.371772] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 602.380263] RSP: 0018:ffffffff84207dc0 EFLAGS: 00000246 [ 602.385689] RAX: 0000000000000007 RBX: ffffffff847dec48 RCX: 0000000000000000 [ 602.393054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8421811c [ 602.400324] RBP: ffffffff84207dc0 R08: 0000000000000000 R09: 0000000000000000 [ 602.407586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 602.414866] R13: fffffbfff07088c0 R14: ffffffff847ecfb8 R15: 0000000000000000 [ 602.422336] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 602.430609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.436465] CR2: 00000000007a4000 CR3: 00000000b699a000 CR4: 0000000000160670 [ 602.443778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.451053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.458300] Stack: [ 602.460467] ffffffff84207df8 ffffffff81027e65 ffffffff84208000 ffffffff847dec48 [ 602.467975] fffffbfff07088c0 ffffffff847ecfb8 0000000000000000 ffffffff84207e08 [ 602.475533] ffffffff810293da ffffffff84207e20 ffffffff81221948 dffffc0000000000 [ 602.483068] Call Trace: [ 602.485623] [] default_idle+0x55/0x3c0 [ 602.491166] [] arch_cpu_idle+0xa/0x10 [ 602.496589] [] default_idle_call+0x48/0x70 [ 602.502511] [] cpu_startup_entry+0x5fd/0x8f0 [ 602.508548] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 602.515496] [] ? call_cpuidle+0xe0/0xe0 [ 602.521111] [] rest_init+0x189/0x190 [ 602.526452] [] start_kernel+0x6b9/0x6ee [ 602.532078] [] ? thread_stack_cache_init+0xb/0xb [ 602.538470] [] ? early_idt_handler_array+0x120/0x120 [ 602.545330] [] ? early_idt_handler_array+0x120/0x120 [ 602.552091] [] x86_64_start_reservations+0x2a/0x2c [ 602.558641] [] x86_64_start_kernel+0x140/0x163 [ 602.564884] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 602.583975] NMI backtrace for cpu 1 [ 602.587583] CPU: 1 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 602.594864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.604224] task: ffff8800bace6000 task.stack: ffff8800bac50000 [ 602.610284] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 602.619007] RSP: 0018:ffff8800bac57cb8 EFLAGS: 00000046 [ 602.624473] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 602.631743] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 602.638989] RBP: ffff8800bac57ce0 R08: 0000000000000001 R09: 0000000000000000 [ 602.646264] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 602.653537] R13: 0000000000000003 R14: ffffffff8426f5a0 R15: 0000000000000002 [ 602.660825] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 602.669027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.674943] CR2: 000000c457737010 CR3: 00000000b699a000 CR4: 0000000000160670 [ 602.682216] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.689474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.696777] Stack: [ 602.698903] ffffffff8426f5a0 ffffffff847f0b40 fffffbfff08fdc1c dffffc0000000000 [ 602.706455] ffff8801db31bca0 ffff8800bac57d00 ffffffff810b9abb ffffffff839f6dc0 [ 602.714006] 0000000000000003 ffff8800bac57d60 ffffffff81d11764 ffffffff8141b993 [ 602.721549] Call Trace: [ 602.724106] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 602.730518] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 602.737589] [] ? print_lock+0xab/0xae [ 602.743042] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 602.749790] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 602.756777] [] watchdog+0x6fa/0xae0 [ 602.762068] [] ? watchdog+0xc3/0xae0 [ 602.767406] [] kthread+0x268/0x300 [ 602.772622] [] ? reset_hung_task_detector+0x20/0x20 [ 602.779272] [] ? kthread_create_on_node+0x400/0x400 [ 602.785967] [] ? kthread_create_on_node+0x400/0x400 [ 602.792641] [] ret_from_fork+0x55/0x80 [ 602.798152] [] ? kthread_create_on_node+0x400/0x400 [ 602.804841] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 2b 33 17 00 4c 89 e7 57 9d 0f 1f [ 602.824079] Kernel panic - not syncing: hung_task: blocked tasks [ 602.830238] CPU: 0 PID: 486 Comm: khungtaskd Not tainted 4.4.125-g38f41ec #63 [ 602.837497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.846873] 0000000000000000 099eea5c57c7b27f ffff8800bac57ca8 ffffffff81d067bd [ 602.854883] ffffffff838831a0 ffff8800bac57d80 dffffc0000000000 7fffffffffffffff [ 602.862855] ffff8801d2751c48 ffff8800bac57d70 ffffffff8141b46a 0000000041b58ab3 [ 602.870828] Call Trace: [ 602.873394] [] dump_stack+0xc1/0x124 [ 602.878732] [] panic+0x1aa/0x388 [ 602.883717] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 602.890614] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 602.897871] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 602.905123] [] watchdog+0x70b/0xae0 [ 602.910386] [] ? watchdog+0xc3/0xae0 [ 602.915730] [] kthread+0x268/0x300 [ 602.920890] [] ? reset_hung_task_detector+0x20/0x20 [ 602.927529] [] ? kthread_create_on_node+0x400/0x400 [ 602.934166] [] ? kthread_create_on_node+0x400/0x400 [ 602.940814] [] ret_from_fork+0x55/0x80 [ 602.946413] [] ? kthread_create_on_node+0x400/0x400 [ 602.953718] Dumping ftrace buffer: [ 602.957288] (ftrace buffer empty) [ 602.960975] Kernel Offset: disabled [ 602.964596] Rebooting in 86400 seconds..