0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 2 printk messages dropped ** [ 929.511801] binder: 28020:28032 ioctl c0306201 2000ffd0 returned -14 ** 5 printk messages dropped ** [ 929.553887] binder: 28058:28066 ioctl 40046207 0 returned -16 ** 13 printk messages dropped ** [ 929.726335] binder_alloc: 12386: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 929.760171] binder: 28082:28086 ioctl c0306201 2000ffd0 returned -14 [ 929.777192] binder: 28085:28096 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 929.830559] binder: 28128:28129 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 929.836782] binder: 28122:28125 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 929.862703] binder_alloc: 12386: binder_alloc_buf, no vma [ 929.862721] binder: 28122:28131 transaction failed 29189/-3, size 0-0 line 3133 [ 929.866428] binder_alloc: 12386: binder_alloc_buf, no vma [ 929.866446] binder: 28128:28138 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:15 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 929.898662] binder: 28122:28125 ioctl c0306201 2000ffd0 returned -14 [ 929.910924] binder: 28116:28118 ioctl c0306201 2000ffd0 returned -14 [ 929.960484] binder: 28128:28129 ioctl c0306201 2000ffd0 returned -14 [ 929.995412] binder: BINDER_SET_CONTEXT_MGR already set [ 929.995421] binder: 28154:28158 ioctl 40046207 0 returned -16 [ 930.001759] binder: BINDER_SET_CONTEXT_MGR already set [ 930.001767] binder: 28153:28164 ioctl 40046207 0 returned -16 2018/03/29 22:07:15 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 930.032583] binder_alloc: 12386: binder_alloc_buf, no vma [ 930.032603] binder: 28154:28169 transaction failed 29189/-3, size 0-0 line 3133 ** 4 printk messages dropped ** [ 930.084277] binder: 28153:28164 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:15 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 9 printk messages dropped ** [ 930.227753] binder: 28182:28185 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 930.276493] binder: 28209:28218 ioctl 40046207 0 returned -16 ** 8 printk messages dropped ** [ 930.386306] binder: 28211:28215 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 930.411352] binder: 28209:28218 ioctl c0306201 2000ffd0 returned -14 [ 930.462127] binder_alloc: 12386: binder_alloc_buf, no vma [ 930.462144] binder: 28247:28259 transaction failed 29189/-3, size 0-0 line 3133 [ 930.494707] binder: 28247:28253 ioctl c0306201 2000ffd0 returned -14 [ 930.534334] binder: BINDER_SET_CONTEXT_MGR already set [ 930.534342] binder: 28266:28270 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 930.583798] binder_alloc: 12386: binder_alloc_buf, no vma [ 930.583819] binder: 28266:28282 transaction failed 29189/-3, size 0-0 line 3133 [ 930.599546] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:15 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 930.599566] binder: 28262:28286 transaction failed 29189/-3, size 0-0 line 3133 [ 930.600141] binder_alloc: 12386: binder_alloc_buf, no vma [ 930.600157] binder: 28263:28285 transaction failed 29189/-3, size 0-0 line 3133 [ 930.640693] binder: 28262:28274 ioctl c0306201 2000ffd0 returned -14 [ 930.642212] binder: 28263:28276 ioctl c0306201 2000ffd0 returned -14 [ 930.652552] binder: 28266:28270 ioctl c0306201 2000ffd0 returned -14 [ 930.761989] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:15 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:15 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 930.761997] binder: 28304:28308 ioctl 40046207 0 returned -16 [ 930.762002] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 930.762009] binder: 28305:28315 ioctl 40046207 0 returned -16 ** 6 printk messages dropped ** [ 930.833078] binder: 28306:28310 ioctl c0306201 2000ffd0 returned -14 [ 930.850131] binder: 28304:28308 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:16 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 930.899907] binder: 28338:28344 transaction failed 29189/-3, size 0-0 line 3133 ** 8 printk messages dropped ** [ 930.977120] binder: 28343:28348 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 931.000744] binder: 28346:28349 ioctl c0306201 2000ffd0 returned -14 ** 5 printk messages dropped ** [ 931.088494] binder: BINDER_SET_CONTEXT_MGR already set [ 931.088500] binder: 28375:28382 ioctl 40046207 0 returned -16 [ 931.100674] binder: BINDER_SET_CONTEXT_MGR already set [ 931.100681] binder: 28378:28385 ioctl 40046207 0 returned -16 [ 931.115577] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.115595] binder: 28372:28394 transaction failed 29189/-3, size 0-0 line 3133 [ 931.138240] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.138260] binder: 28375:28397 transaction failed 29189/-3, size 0-0 line 3133 [ 931.138745] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.138761] binder: 28378:28400 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:16 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x0, 0x0, &(0x7f000000ef31)}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 931.166250] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.166267] binder: 28396:28398 transaction failed 29189/-3, size 0-0 line 3133 [ 931.178410] binder: 28375:28382 ioctl c0306201 2000ffd0 returned -14 [ 931.183826] binder: 28372:28379 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x0, 0x0, &(0x7f000000ef31)}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 1 printk messages dropped ** [ 931.242963] binder: BINDER_SET_CONTEXT_MGR already set ** 9 printk messages dropped ** [ 931.279955] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 5 printk messages dropped ** [ 931.364200] binder: 28436:28444 ioctl 40046207 0 returned -16 ** 9 printk messages dropped ** [ 931.409858] binder: 28436:28458 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 931.444317] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.444335] binder: 28443:28466 transaction failed 29189/-3, size 0-0 line 3133 [ 931.473227] binder: 28436:28444 ioctl c0306201 2000ffd0 returned -14 [ 931.476839] binder: 28443:28449 ioctl c0306201 2000ffd0 returned -14 [ 931.482110] binder: 28446:28452 ioctl c0306201 2000ffd0 returned -14 [ 931.518116] binder: BINDER_SET_CONTEXT_MGR already set [ 931.518124] binder: 28476:28480 ioctl 40046207 0 returned -16 [ 931.522372] binder: BINDER_SET_CONTEXT_MGR already set [ 931.522379] binder: 28474:28483 ioctl 40046207 0 returned -16 [ 931.531402] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:16 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x0, 0x0, &(0x7f000000ef31)}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 931.531410] binder: 28482:28487 ioctl 40046207 0 returned -16 [ 931.546182] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.546198] binder: 28471:28484 transaction failed 29189/-3, size 0-0 line 3133 [ 931.551140] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.551156] binder: 28474:28493 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 931.558390] binder_alloc: 12386: binder_alloc_buf, no vma [ 931.558409] binder: 28476:28492 transaction failed 29189/-3, size 0-0 line 3133 ** 3 printk messages dropped ** [ 931.620963] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 931.637548] binder: 28482:28487 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 3 printk messages dropped ** [ 931.708751] binder: 28509:28511 ioctl 40046207 0 returned -16 ** 7 printk messages dropped ** [ 931.780326] binder: 28519:28536 transaction failed 29189/-3, size 0-0 line 3133 ** 6 printk messages dropped ** [ 931.816587] binder: 28523:28544 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/03/29 22:07:16 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 931.831357] binder: 28525:28527 ioctl c0306201 2000ffd0 returned -14 [ 931.848893] binder: BINDER_SET_CONTEXT_MGR already set [ 931.848907] binder: 28542:28546 ioctl 40046207 0 returned -16 [ 931.854912] binder: 28523:28529 ioctl c0306201 2000ffd0 returned -14 [ 931.877037] binder: 28519:28521 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 931.995951] binder: BINDER_SET_CONTEXT_MGR already set [ 931.995958] binder: 28568:28581 ioctl 40046207 0 returned -16 [ 932.017919] binder_alloc: 12386: binder_alloc_buf, no vma ** 9 printk messages dropped ** [ 932.073115] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:16 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:16 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 932.073122] binder: 28602:28606 ioctl 40046207 0 returned -16 [ 932.074209] binder: 28568:28581 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:16 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 3 printk messages dropped ** [ 932.117145] binder: 28602:28614 transaction failed 29189/-3, size 0-0 line 3133 ** 7 printk messages dropped ** [ 932.246613] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 932.247237] binder: BINDER_SET_CONTEXT_MGR already set ** 5 printk messages dropped ** [ 932.281345] binder_alloc: 12386: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 932.352070] binder: 28630:28637 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 932.366924] binder: 28635:28641 ioctl c0306201 2000ffd0 returned -14 [ 932.393313] binder: 28633:28643 ioctl c0306201 2000ffd0 returned -14 [ 932.409496] binder: BINDER_SET_CONTEXT_MGR already set [ 932.409501] binder: 28676:28678 ioctl 40046207 0 returned -16 [ 932.414269] binder: BINDER_SET_CONTEXT_MGR already set [ 932.414276] binder: 28674:28679 ioctl 40046207 0 returned -16 [ 932.433458] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 932.433475] binder: 28676:28683 transaction failed 29189/-3, size 0-0 line 3133 [ 932.439053] binder_alloc: 12386: binder_alloc_buf, no vma [ 932.439070] binder: 28674:28684 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 3 printk messages dropped ** [ 932.511871] binder: 28696:28699 ioctl 40046207 0 returned -16 [ 932.521305] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 932.544412] binder_alloc: 12386: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 932.631392] binder: 28689:28691 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 932.644761] binder: 28696:28699 ioctl c0306201 2000ffd0 returned -14 [ 932.658312] binder: 28692:28694 ioctl c0306201 2000ffd0 returned -14 [ 932.660218] binder: 28697:28706 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 3 printk messages dropped ** [ 932.698514] binder: 28740:28745 ioctl 40046207 0 returned -16 [ 932.707476] binder: BINDER_SET_CONTEXT_MGR already set [ 932.707483] binder: 28742:28747 ioctl 40046207 0 returned -16 [ 932.722565] binder_alloc: 12386: binder_alloc_buf, no vma [ 932.722582] binder: 28741:28754 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 5 printk messages dropped ** [ 932.743305] binder: 28742:28756 transaction failed 29189/-3, size 0-0 line 3133 ** 10 printk messages dropped ** [ 932.885646] binder: 28776:28787 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 8 printk messages dropped ** [ 932.949607] binder: 28773:28796 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 933.023164] binder: BINDER_SET_CONTEXT_MGR already set ** 10 printk messages dropped ** [ 933.075421] binder: 28809:28831 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 933.198603] binder: 28845:28851 ioctl 40046207 0 returned -16 ** 9 printk messages dropped ** [ 933.236279] binder: 28853:28871 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 933.240503] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 933.278724] binder: 28857:28861 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 933.282425] binder: 28853:28856 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 933.391433] binder: BINDER_SET_CONTEXT_MGR already set [ 933.391443] binder: 28895:28906 ioctl 40046207 0 returned -16 [ 933.392944] binder: BINDER_SET_CONTEXT_MGR already set [ 933.392951] binder: 28893:28905 ioctl 40046207 0 returned -16 [ 933.396141] binder: BINDER_SET_CONTEXT_MGR already set [ 933.396150] binder: 28902:28908 ioctl 40046207 0 returned -16 2018/03/29 22:07:17 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 933.404099] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.404115] binder: 28894:28912 transaction failed 29189/-3, size 0-0 line 3133 [ 933.411763] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.411788] binder: 28897:28913 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 2 printk messages dropped ** [ 933.423272] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.423287] binder: 28895:28916 transaction failed 29189/-3, size 0-0 line 3133 [ 933.436254] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.436279] binder: 28902:28920 transaction failed 29189/-3, size 0-0 line 3133 ** 4 printk messages dropped ** [ 933.503157] binder: 28924:28937 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:17 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:17 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 3 printk messages dropped ** [ 933.548417] binder: BINDER_SET_CONTEXT_MGR already set ** 4 printk messages dropped ** [ 933.566181] binder_alloc: 12386: binder_alloc_buf, no vma ** 9 printk messages dropped ** [ 933.618797] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 933.655312] binder: 28940:28946 ioctl c0306201 2000ffd0 returned -14 ** 4 printk messages dropped ** [ 933.710529] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 933.720574] binder: 28993:28994 ioctl 40046207 0 returned -16 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 933.731308] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.731328] binder: 28983:29003 transaction failed 29189/-3, size 0-0 line 3133 [ 933.744346] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.744365] binder: 28988:29006 transaction failed 29189/-3, size 0-0 line 3133 [ 933.748398] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.748414] binder: 28986:29004 transaction failed 29189/-3, size 0-0 line 3133 [ 933.752033] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.752051] binder: 28993:29008 transaction failed 29189/-3, size 0-0 line 3133 [ 933.758033] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.758052] binder: 28992:29007 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 933.788786] binder: 28986:28990 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 933.814806] binder: 28983:28985 ioctl c0306201 2000ffd0 returned -14 ** 4 printk messages dropped ** [ 933.885396] binder_alloc: 12386: binder_alloc_buf, no vma [ 933.885412] binder: 29021:29030 transaction failed 29189/-3, size 0-0 line 3133 ** 6 printk messages dropped ** [ 933.969429] binder: 29044:29051 ioctl 40046207 0 returned -16 ** 5 printk messages dropped ** [ 933.982954] binder: 29036:29055 transaction failed 29189/-3, size 0-0 line 3133 ** 1 printk messages dropped ** [ 933.990199] binder: 29039:29058 transaction failed 29189/-3, size 0-0 line 3133 [ 934.006606] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 934.006626] binder: 29044:29059 transaction failed 29189/-3, size 0-0 line 3133 [ 934.031258] binder: 29036:29040 ioctl c0306201 2000ffd0 returned -14 [ 934.046416] binder: 29034:29041 ioctl c0306201 2000ffd0 returned -14 [ 934.052408] binder: 29038:29043 ioctl c0306201 2000ffd0 returned -14 [ 934.064131] binder: 29044:29051 ioctl c0306201 2000ffd0 returned -14 [ 934.076688] binder: 29039:29042 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 934.117665] binder: BINDER_SET_CONTEXT_MGR already set [ 934.117671] binder: 29088:29091 ioctl 40046207 0 returned -16 [ 934.137139] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.137158] binder: 29078:29097 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 8 printk messages dropped ** [ 934.163881] binder: 29078:29082 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:18 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x20000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 934.300451] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 934.319536] binder: 29128:29144 ioctl 40046207 0 returned -16 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 6 printk messages dropped ** [ 934.359060] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.359076] binder: 29131:29157 transaction failed 29189/-3, size 0-0 line 3133 ** 4 printk messages dropped ** [ 934.389931] binder: 29130:29137 ioctl c0306201 2000ffd0 returned -14 ** 6 printk messages dropped ** [ 934.493669] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 934.505780] binder: 29171:29184 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 934.520510] binder: 29175:29192 transaction failed 29189/-3, size 0-0 line 3133 ** 1 printk messages dropped ** [ 934.527287] binder: 29174:29194 transaction failed 29189/-3, size 0-0 line 3133 [ 934.527539] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.527553] binder: 29172:29197 transaction failed 29189/-3, size 0-0 line 3133 [ 934.542650] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.542665] binder: 29171:29200 transaction failed 29189/-3, size 0-0 line 3133 [ 934.549840] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.549857] binder: 29178:29199 transaction failed 29189/-3, size 0-0 line 3133 [ 934.606608] binder: 29175:29179 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x20000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 934.612159] binder: 29172:29183 ioctl c0306201 2000ffd0 returned -14 [ 934.623315] binder: 29174:29180 ioctl c0306201 2000ffd0 returned -14 [ 934.625383] binder: 29171:29184 ioctl c0306201 2000ffd0 returned -14 [ 934.645150] binder: 29178:29185 ioctl c0306201 2000ffd0 returned -14 [ 934.663645] binder: BINDER_SET_CONTEXT_MGR already set [ 934.663653] binder: 29217:29222 ioctl 40046207 0 returned -16 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 934.670456] binder: BINDER_SET_CONTEXT_MGR already set [ 934.670463] binder: 29216:29224 ioctl 40046207 0 returned -16 [ 934.700188] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.700206] binder: 29217:29237 transaction failed 29189/-3, size 0-0 line 3133 ** 6 printk messages dropped ** [ 934.729574] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x20000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 934.802750] binder: 29261:29265 ioctl 40046207 0 returned -16 ** 5 printk messages dropped ** [ 934.917505] binder: BINDER_SET_CONTEXT_MGR already set ** 5 printk messages dropped ** [ 934.934821] binder_alloc: 12386: binder_alloc_buf, no vma [ 934.934835] binder: 29270:29292 transaction failed 29189/-3, size 0-0 line 3133 [ 934.951658] binder_alloc: 12386: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 934.987391] binder: 29270:29283 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 935.072660] binder: BINDER_SET_CONTEXT_MGR already set [ 935.072668] binder: 29311:29321 ioctl 40046207 0 returned -16 [ 935.095543] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.095637] binder: 29314:29330 transaction failed 29189/-3, size 0-0 line 3133 [ 935.097439] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.097493] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.097507] binder: 29312:29332 transaction failed 29189/-3, size 0-0 line 3133 [ 935.097603] binder: 29315:29331 transaction failed 29189/-3, size 0-0 line 3133 [ 935.115746] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.115764] binder: 29310:29338 transaction failed 29189/-3, size 0-0 line 3133 [ 935.115859] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:18 executing program 7: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.115872] binder: 29311:29339 transaction failed 29189/-3, size 0-0 line 3133 [ 935.126029] binder: 29315:29320 ioctl c0306201 2000ffd0 returned -14 [ 935.150418] binder: 29311:29321 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:18 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.154783] binder: 29310:29317 ioctl c0306201 2000ffd0 returned -14 [ 935.163037] binder: 29312:29318 ioctl c0306201 2000ffd0 returned -14 [ 935.173089] binder: 29314:29319 ioctl c0306201 2000ffd0 returned -14 [ 935.214480] binder: BINDER_SET_CONTEXT_MGR already set [ 935.214488] binder: 29356:29360 ioctl 40046207 0 returned -16 2018/03/29 22:07:18 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 4: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 935.243668] binder: 29356:29377 transaction failed 29189/-3, size 0-0 line 3133 [ 935.270379] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.270398] binder: 29364:29378 transaction failed 29189/-3, size 0-0 line 3133 ** 1 printk messages dropped ** [ 935.271211] binder: 29358:29369 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 935.303161] binder: 29356:29360 ioctl c0306201 2000ffd0 returned -14 [ 935.312899] binder: 29358:29361 ioctl c0306201 2000ffd0 returned -14 [ 935.334804] binder: 29364:29370 ioctl c0306201 2000ffd0 returned -14 [ 935.375584] binder: BINDER_SET_CONTEXT_MGR already set [ 935.375592] binder: 29393:29398 ioctl 40046207 0 returned -16 [ 935.382567] binder: BINDER_SET_CONTEXT_MGR already set [ 935.382575] binder: 29396:29401 ioctl 40046207 0 returned -16 [ 935.386966] binder: BINDER_SET_CONTEXT_MGR already set [ 935.386973] binder: 29392:29402 ioctl 40046207 0 returned -16 [ 935.402325] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.402346] binder: 29394:29409 transaction failed 29189/-3, size 0-0 line 3133 [ 935.408985] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 7: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 4: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.409004] binder: 29393:29413 transaction failed 29189/-3, size 0-0 line 3133 [ 935.415681] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.415698] binder: 29389:29415 transaction failed 29189/-3, size 0-0 line 3133 [ 935.426470] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.426489] binder: 29396:29416 transaction failed 29189/-3, size 0-0 line 3133 [ 935.426590] binder_alloc: 12386: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 935.502413] binder: 29396:29401 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:19 executing program 4: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 7: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 8 printk messages dropped ** [ 935.556978] binder: 29433:29454 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:19 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 10 printk messages dropped ** [ 935.612816] binder: 29436:29442 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 2 printk messages dropped ** [ 935.677400] binder: BINDER_SET_CONTEXT_MGR already set ** 6 printk messages dropped ** [ 935.712299] binder: 29479:29495 transaction failed 29189/-3, size 0-0 line 3133 ** 9 printk messages dropped ** [ 935.769402] binder: 29477:29484 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 4: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 1 printk messages dropped ** [ 935.779850] binder: 29474:29485 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 935.808696] binder: 29507:29512 ioctl 40046207 0 returned -16 ** 4 printk messages dropped ** [ 935.903859] binder: 29525:29531 ioctl 40046207 0 returned -16 ** 3 printk messages dropped ** [ 935.911543] binder: 29518:29538 transaction failed 29189/-3, size 0-0 line 3133 ** 1 printk messages dropped ** [ 935.916436] binder: 29519:29532 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 935.942096] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:19 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 4: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.942119] binder: 29522:29542 transaction failed 29189/-3, size 0-0 line 3133 [ 935.948324] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.948342] binder: 29519:29545 transaction failed 29189/-3, size 0-0 line 3133 [ 935.948522] binder_alloc: 12386: binder_alloc_buf, no vma [ 935.948537] binder: 29523:29541 transaction failed 29189/-3, size 0-0 line 3133 [ 935.973693] binder: 29525:29531 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 935.985930] binder: 29518:29520 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 9 printk messages dropped ** [ 936.070546] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 936.078271] binder: 29551:29553 ioctl c0306201 2000ffd0 returned -14 ** 8 printk messages dropped ** [ 936.118708] binder: 29577:29588 transaction failed 29189/-3, size 0-0 line 3133 [ 936.122781] binder: BINDER_SET_CONTEXT_MGR already set [ 936.122788] binder: 29585:29586 ioctl 40046207 0 returned -16 [ 936.129195] binder: 29565:29570 ioctl c0306201 2000ffd0 returned -14 [ 936.139612] binder: 29564:29572 ioctl c0306201 2000ffd0 returned -14 [ 936.150901] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.150920] binder: 29585:29596 transaction failed 29189/-3, size 0-0 line 3133 [ 936.181125] binder: 29577:29580 ioctl c0306201 2000ffd0 returned -14 [ 936.191720] binder: 29585:29586 ioctl c0306201 2000ffd0 returned -14 [ 936.218358] binder: BINDER_SET_CONTEXT_MGR already set [ 936.218365] binder: 29604:29609 ioctl 40046207 0 returned -16 [ 936.232583] binder: BINDER_SET_CONTEXT_MGR already set [ 936.232590] binder: 29601:29606 ioctl 40046207 0 returned -16 [ 936.233145] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:19 executing program 4: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x0, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 936.233161] binder: 29601:29606 transaction failed 29189/-3, size 0-0 line 3133 [ 936.246506] binder: BINDER_SET_CONTEXT_MGR already set [ 936.246513] binder: 29611:29617 ioctl 40046207 0 returned -16 [ 936.258064] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.258086] binder: 29604:29620 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 936.258180] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.258193] binder: 29600:29622 transaction failed 29189/-3, size 0-0 line 3133 [ 936.280749] binder_alloc: 12386: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 936.286635] binder: 29603:29629 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:19 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 1 printk messages dropped ** [ 936.314196] binder: 29630:29633 ioctl 40046207 0 returned -16 2018/03/29 22:07:19 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:19 executing program 6: r0 = open(&(0x7f0000d93ff8)='./file0\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) mkdir(&(0x7f0000000940)='./file1\x00', 0x171) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="b63a42482c6224d47205694db03f018df08eb1e6969797d27a007c325edcd40961eb5c176948897f3397193e9a7b4027cd31c44d9a4e8c8c4f0e78ae105640b5ba4621c8f104e7569ec9a8585d808478", 0x50}], 0x1, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x14104a, 0x0) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x0, 0x100}], 0x18) sendfile(r2, r0, &(0x7f00009bcffe), 0x4c35) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x80) lseek(r0, 0x0, 0x3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000900)={0x3}, 0x4) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@random={'os2.', 'IPVS\x00'}, &(0x7f0000000100)='IPVS\x00', 0x5, 0x2) 2018/03/29 22:07:19 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 6 printk messages dropped ** [ 936.411142] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:19 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 5 printk messages dropped ** [ 936.465913] binder: 29646:29648 ioctl c0306201 2000ffd0 returned -14 ** 10 printk messages dropped ** [ 936.550824] binder_alloc: 12386: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 936.598348] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.598366] binder: 29679:29698 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 936.644292] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 936.649911] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.649928] binder: 29702:29709 transaction failed 29189/-3, size 0-0 line 3133 [ 936.657073] binder: BINDER_SET_CONTEXT_MGR already set [ 936.657080] binder: 29712:29718 ioctl 40046207 0 returned -16 [ 936.666458] binder_alloc: 12386: binder_alloc_buf, no vma [ 936.666480] binder: 29712:29718 transaction failed 29189/-3, size 0-0 line 3133 [ 936.667107] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 6: syz_emit_ethernet(0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="a17000009078003e0402fe06e2d4c3d9080a0000985e000000090000d4"], 0x0) 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r2 = getpgid(0x0) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) pwritev(r0, &(0x7f0000000b40)=[{&(0x7f0000000100)="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", 0x652}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001000)=0x14) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000b00)=0x0) getpgrp(r3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000c00)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ppoll(&(0x7f0000000a40)=[{r2, 0x8}, {r0}, {r2, 0x10}, {r2}, {r1, 0x1000}, {0xffffffffffffffff, 0x4}, {r0, 0x8000}, {r2}], 0x8, &(0x7f00000000c0), &(0x7f0000000ac0)={0x2}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000980)={'broute\x00'}, &(0x7f0000000c40)=0x50) socket$l2tp(0x18, 0x1, 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0400000000000000ff0f00000000000001000000020000000200000000000000800000000000000005000000000000007f000000000000000000000000000000000000000000000002000000000000000000000000000000ff000000000000000200000000000000070000000000000000000000000000000000db082dda20faa1940000000000000000000000000000457b61498551832930e1eea2d901b0597e116df06d724c0b3eb2bd41f361"]) utime(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)={0x0, 0x6}) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 936.667115] binder: 29716:29721 ioctl 40046207 0 returned -16 [ 936.677056] binder: 29679:29686 ioctl c0306201 2000ffd0 returned -14 [ 936.751819] binder: 29716:29721 ioctl c0306201 2000ffd0 returned -14 [ 936.800302] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 2 printk messages dropped ** [ 936.800814] binder: 29741:29749 transaction failed 29189/-3, size 0-0 line 3133 ** 8 printk messages dropped ** [ 936.833105] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 936.883587] binder: BINDER_SET_CONTEXT_MGR already set ** 4 printk messages dropped ** [ 936.899958] binder: 29735:29738 ioctl c0306201 2000ffd0 returned -14 ** 8 printk messages dropped ** [ 937.019688] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 937.033005] binder_alloc: 12386: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 937.068619] binder: 29786:29796 ioctl c0306201 2000ffd0 returned -14 [ 937.092927] binder: 29793:29798 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 937.126202] binder: BINDER_SET_CONTEXT_MGR already set [ 937.126209] binder: 29822:29830 ioctl 40046207 0 returned -16 [ 937.127256] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.127269] binder: 29822:29830 transaction failed 29189/-3, size 0-0 line 3133 [ 937.139583] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/29 22:07:20 executing program 6: syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x800) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f00000001c0)="1f0000000104fffff13b54c007110009f30501000b00044000000000020000", 0x1f) r2 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) r4 = getpid() prctl$setptracer(0x59616d61, r3) sched_setparam(r4, &(0x7f0000000400)) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r5) r7 = accept4$inet6(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r2, r8, r9) r10 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x1c4, 0x0, &(0x7f0000011f9d)}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f0000000180)=0x32b) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000240)}) sendfile(r5, r5, &(0x7f0000000080)=0x23, 0x102000004) write(0xffffffffffffffff, &(0x7f0000000300)="8be25f5790f664f32509e40d6f879d5add7e2d359c9a19afb750a2d25352875d187d4118c99a2d5c6db433c277cc7d345b87a34f1b417033d367cb0cfd6a25633f77aafb17e99c33cb65352c901ae75176f07bb0a4bb5ebff3d87eda62e7b1afaf", 0x61) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x8) 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 937.139590] binder: 29828:29832 ioctl 40046207 0 returned -16 [ 937.161773] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.161793] binder: 29828:29837 transaction failed 29189/-3, size 0-0 line 3133 [ 937.192794] binder: 29828:29832 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 937.211762] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 937.212155] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 13 printk messages dropped ** [ 937.339930] binder: 29878:29894 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 937.342155] binder: 29878:29894 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 937.371633] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 937.375433] binder: 29879:29904 transaction failed 29189/-3, size 0-0 line 3133 ** 14 printk messages dropped ** [ 937.532214] binder: 29933:29940 ioctl 40046207 0 returned -16 ** 3 printk messages dropped ** [ 937.554201] binder: 29934:29942 ioctl 40046207 0 returned -16 [ 937.554583] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.554640] binder: 29934:29942 transaction failed 29189/-3, size 0-0 line 3133 [ 937.567068] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.567089] binder: 29933:29951 transaction failed 29189/-3, size 0-0 line 3133 [ 937.567188] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.567203] binder: 29936:29952 transaction failed 29189/-3, size 0-0 line 3133 [ 937.578638] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.578659] binder: 29939:29954 transaction failed 29189/-3, size 0-0 line 3133 [ 937.578719] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:20 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bridge0\x00', 0x0, 0x0, 0xff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0xfffffffffffffff8, 0x3, 0x7}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x904e, 0x8}, &(0x7f0000000740)=0x90) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) splice(r3, &(0x7f0000000300), r2, &(0x7f00000003c0), 0x812, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x2, 0x2, 0x7, 0x0, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718", 0x3d}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'dh\x00', 0x25}, 0x2c) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), 0xfe57) socket$inet_sctp(0x2, 0x1, 0x84) pread64(r3, &(0x7f0000000080)=""/156, 0x9c, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000cecffc), 0x4) write(r6, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff", 0x23) r7 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) renameat2(r7, &(0x7f000001dff6)='./control\x00', 0xffffffffffffffff, &(0x7f0000e14ff6)='./control\x00', 0x2) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 937.578735] binder: 29935:29955 transaction failed 29189/-3, size 0-0 line 3133 [ 937.624772] binder: 29939:29945 ioctl c0306201 2000ffd0 returned -14 [ 937.627179] binder: 29935:29943 ioctl c0306201 2000ffd0 returned -14 [ 937.649470] binder: 29936:29944 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 937.651236] binder: 29933:29940 ioctl c0306201 2000ffd0 returned -14 ** 3 printk messages dropped ** [ 937.678578] binder: 29964:29977 transaction failed 29189/-3, size 0-0 line 3133 ** 3 printk messages dropped ** [ 937.686536] binder: 29983:29989 ioctl 40046207 0 returned -16 [ 937.706396] binder_alloc: 12386: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 937.723269] binder_alloc: 12386: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 937.758672] binder: 29971:29981 ioctl c0306201 2000ffd0 returned -14 [ 937.758880] binder: 29972:29980 ioctl c0306201 2000ffd0 returned -14 ** 3 printk messages dropped ** [ 937.826878] binder: 29982:29991 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 937.886349] binder: 30027:30030 ioctl 40046207 0 returned -16 [ 937.888136] binder: BINDER_SET_CONTEXT_MGR already set [ 937.888143] binder: 30025:30036 ioctl 40046207 0 returned -16 [ 937.898339] binder: BINDER_SET_CONTEXT_MGR already set [ 937.898347] binder: 30026:30034 ioctl 40046207 0 returned -16 [ 937.921920] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.921940] binder: 30025:30047 transaction failed 29189/-3, size 0-0 line 3133 [ 937.922337] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.922355] binder: 30027:30046 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:20 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) pwritev(r0, &(0x7f0000000b40), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001000)=0x14) ftruncate(r1, 0x3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000b00)=0x0) getpgrp(r3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000c00)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ppoll(&(0x7f0000000a40)=[{r2, 0x8}, {r0}, {r2, 0x10}, {r2}, {r1, 0x1000}, {0xffffffffffffffff, 0x4}, {r0, 0x8000}, {r2}], 0x8, &(0x7f00000000c0), &(0x7f0000000ac0)={0x2}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000080)=0x8) socket$l2tp(0x18, 0x1, 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0400000000000000ff0f00000000000001000000020000000200000000000000800000000000000005000000000000007f000000000000000000000000000000000000000000000002000000000000000000000000000000ff000000000000000200000000000000070000000000000000000000000000000000db082dda20faa1940000000000000000000000000000457b61498551832930e1eea2d901b0597e116df06d724c0b3eb2bd41f36186263f0c07a0b564c6fa7d9efdb5dedbd29b21398bc26a3b7a07b237a8488ae5376e2e65009a5e988c8fb1708ce0b6fa6d5f4708717904853ea0fc9721fd6b007dc97b84fc73bd05276d0a51cc6ad9cc578b9689a6a89345bb4479426f8a838f4e95259f6c19da9187f234bc5969e2b7693ee2a0eb032affe72e9e652d7a59987afbfe8152a7cf4560b8af0c1e0f67141e710dc48a53ebc76308473b7c73fed78c11be85e5ed11b498f54540a1b3f21da1f6ef627f00073b7cc5a8bcf0ba1b78770554aad4ca1569a55c819b4e9d165e051474adde497cf4fbee0f503bfbf8"]) utime(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)={0x0, 0x6}) 2018/03/29 22:07:20 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:20 executing program 5: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=ANY=[@ANYBLOB="fcf35860"], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 937.922840] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.922857] binder: 30022:30048 transaction failed 29189/-3, size 0-0 line 3133 [ 937.934293] binder_alloc: 12386: binder_alloc_buf, no vma [ 937.934310] binder: 30026:30050 transaction failed 29189/-3, size 0-0 line 3133 [ 937.958434] binder: 30022:30033 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 937.980827] binder: 30028:30029 ioctl c0306201 2000ffd0 returned -14 [ 937.980985] binder: 30025:30036 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 938.022226] binder: 30027:30030 ioctl c0306201 2000ffd0 returned -14 ** 1 printk messages dropped ** [ 938.028012] binder: 30060:30075 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 7 printk messages dropped ** [ 938.173023] binder: 30086:30107 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:21 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 2 printk messages dropped ** [ 938.175680] binder_alloc: 12386: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 938.251592] binder: 30088:30095 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) pwritev(r0, &(0x7f0000000b40)=[{&(0x7f0000000100)="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", 0x760}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001000)=0x14) ftruncate(r1, 0x3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000b00)=0x0) getpgrp(r3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000c00)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14}}}) ioprio_get$pid(0x0, 0x0) ppoll(&(0x7f0000000a40)=[{r2}, {}, {r2, 0x10}, {r2}, {r1, 0x1000}, {0xffffffffffffffff, 0x4}, {r0, 0x8000}, {r2}], 0x8, &(0x7f00000000c0), &(0x7f0000000ac0)={0x2}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000080)=0x8) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000980)={'broute\x00'}, &(0x7f0000000c40)=0x50) socket$l2tp(0x18, 0x1, 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000d40)=ANY=[]) utime(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)={0x0, 0x6}) 2018/03/29 22:07:21 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bridge0\x00', 0x0, 0x0, 0xff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0xfffffffffffffff8, 0x3, 0x7}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x904e, 0x8}, &(0x7f0000000740)=0x90) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) splice(r3, &(0x7f0000000300), r2, &(0x7f00000003c0), 0x812, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x2, 0x2, 0x7, 0x0, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718", 0x3d}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'dh\x00', 0x25}, 0x2c) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), 0xfe57) socket$inet_sctp(0x2, 0x1, 0x84) pread64(r3, &(0x7f0000000080)=""/156, 0x9c, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000cecffc), 0x4) write(r6, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff", 0x23) r7 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) renameat2(r7, &(0x7f000001dff6)='./control\x00', r8, &(0x7f0000e14ff6)='./control\x00', 0x2) 2018/03/29 22:07:21 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 10 printk messages dropped ** [ 938.344773] binder: 30133:30149 transaction failed 29189/-3, size 0-0 line 3133 ** 5 printk messages dropped ** [ 938.415136] binder: 30133:30136 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 938.446452] binder: 30162:30182 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:21 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 13 printk messages dropped ** [ 938.595281] binder_alloc: 12386: binder_alloc_buf, no vma ** 8 printk messages dropped ** [ 938.680184] binder: 30231:30235 ioctl 40046207 0 returned -16 [ 938.691525] binder: BINDER_SET_CONTEXT_MGR already set [ 938.691532] binder: 30229:30241 ioctl 40046207 0 returned -16 [ 938.702190] binder_alloc: 12386: binder_alloc_buf, no vma [ 938.702208] binder: 30228:30248 transaction failed 29189/-3, size 0-0 line 3133 ** 2 printk messages dropped ** [ 938.734756] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 938.768878] binder: 30228:30234 ioctl c0306201 2000ffd0 returned -14 [ 938.780087] binder: 30233:30239 ioctl c0306201 2000ffd0 returned -14 [ 938.786305] binder: 30229:30241 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 6: 2018/03/29 22:07:21 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 5: 2018/03/29 22:07:21 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 6: 2018/03/29 22:07:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1fc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000b40)={0x0, 0x0, 0x4d}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000b80)={r3}) getpeername$inet(r2, &(0x7f0000000300)={0x0, 0x0, @multicast2}, &(0x7f0000000340)=0x10) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000a00)='trusted\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000a80)="3a4137e4e599b5acec68d739334ad8f4c00421ee3a877008a0ee0295a9b255a7be3272d3ba008ead49414bc361638eb174f44e5eb3b94471659827512bb8ea342dba528a27998a8ad9f1af0ecc1e80e54056c3c884fc1f2fb59458e8720f832ef476d5d20dc766623cf2573b6530bc668fd0697da383551a71e76f56004c8f7bca7ebd1272e41f1862f29f2badf7028a53ebf757be8ad52a71bf48f82f54c741396cfa373833ac6ff53d22a26b043a0817", 0xb1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000f00)={0x0, 0x2}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001000)={0x0, 0xc84}, &(0x7f0000001040)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000001180)={&(0x7f0000000480)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f00000004c0)="4c52f717698fc6acaba63bd8ad37d79685e0550e78fe89d13997952039b3cef7b9c74e564074f0cf5926caef05331e591e14d0155daf744a987315674c974aa974909eaea3791cf3aa1e04d7074a172719499cba6872aaa972b896e25fca1b99e0e98f473613c2", 0x67}], 0x1, &(0x7f0000001080)=[@init={0x18, 0x84, 0x0, {0xfffffffffffffc00, 0x2588ddaf, 0x1ff, 0xe17}}, @init={0x18, 0x84, 0x0, {0x6, 0x3, 0x6, 0x200}}, @sndinfo={0x20, 0x84, 0x2, {0x4ae4, 0x1, 0xad, 0x7fff}}], 0x90, 0x10}, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000bc0)) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000980)=[{&(0x7f0000000600)="27ba52ebcadaa0ae257069d218efb157549b3b3041d40ddf3cd3d5cdec7599fd194539d3d809a725d242e9235014562f74757701c21eb0bd96420b60c19b6f009b2a25474c355715f11c2b7ebd06a7587c8d780ce0aa832c65b313", 0x5b}, {&(0x7f0000000900)="11c664240015b698975bc9c029ffdda01a917d3cb21d9007df8629c784e2d3cce9f767cf569855f0d89854ea4ffb13f9a04f5c058c89b1121c33bba346b2ab05244ac617869c990dd8d93a8dee0f38674859c0f67882c4eebd1103806c88d3058865bd8b3ca0042889281856017ace59e0b65a7061e915bc16d6b4c6feb2", 0x7e}], 0x2, r5) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x0) r6 = dup(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xd11}}, 0x6, 0x5}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x18) ioctl$KDSKBLED(r2, 0x4b65, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e20, 0x3758, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x81}}, 0x8, 0x7ff}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x77cd}, @in={0x2, 0x4e23, @rand_addr=0xffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x4c) [ 938.802692] binder: 30231:30235 ioctl c0306201 2000ffd0 returned -14 [ 938.806384] binder: 30230:30236 ioctl c0306201 2000ffd0 returned -14 [ 938.879202] binder: BINDER_SET_CONTEXT_MGR already set [ 938.879210] binder: 30275:30281 ioctl 40046207 0 returned -16 [ 938.882214] binder: BINDER_SET_CONTEXT_MGR already set [ 938.882221] binder: 30278:30284 ioctl 40046207 0 returned -16 [ 938.889031] binder_alloc: 12386: binder_alloc_buf, no vma [ 938.889047] binder: 30277:30286 transaction failed 29189/-3, size 0-0 line 3133 2018/03/29 22:07:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000011c0)=ANY=[], 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000b40)={0x0, 0x0, 0x4d}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000b80)={r3}) getpeername$inet(r2, &(0x7f0000000300)={0x0, 0x0, @multicast2}, &(0x7f0000000340)=0x10) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000a00)='trusted\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000a80)="3a4137e4e599b5acec68d739334ad8f4c00421ee3a877008a0ee0295a9b255a7be3272d3ba008ead49414bc361638eb174f44e5eb3b94471659827512bb8ea342dba528a27998a8ad9f1af0ecc1e80e54056c3c884fc1f2fb59458e8720f832ef476d5d20dc766623cf2573b6530bc668fd0697da383551a71e76f56004c8f7bca7ebd1272e41f1862f29f2badf7028a53ebf757be8ad52a71bf48f82f54c741396cfa373833ac6ff53d22a26b043a0817", 0xb1, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000f00)={0x0, 0x2}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001000)={0x0, 0xc84}, &(0x7f0000001040)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000480)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000ec0), 0x1, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0xfffffffffffffc00, 0x2588ddaf, 0x1ff, 0xe17}}, @sndinfo={0x0, 0x84, 0x2, {0xffff, 0x6, 0x0, 0x0, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x4ae4, 0x1, 0xad, 0x7fff}}], 0xffffffffffffff79, 0x10}, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000bc0)) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000980)=[{&(0x7f0000000600)="27ba52ebcadaa0ae257069d218efb157549b3b3041d40ddf3cd3d5cdec7599fd194539d3d809a725d242e9235014562f74757701c21eb0bd96420b60c19b6f009b2a25474c355715f11c2b7ebd06a7587c8d780ce0aa832c65b313", 0x5b}], 0x1, r5) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x0) r7 = dup(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xd11}}, 0x6, 0x5}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x18) ioctl$KDSKBLED(r2, 0x4b65, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e20, 0x3758, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x81}}, 0x8, 0x7ff}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x77cd}, @in={0x2, 0x4e23, @rand_addr=0xffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x4c) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 938.906576] binder_alloc: 12386: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 938.914054] binder: 30279:30289 ioctl 40046207 0 returned -16 [ 938.928318] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:21 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bridge0\x00', 0x0, 0x0, 0xff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0xfffffffffffffff8, 0x3, 0x7}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x904e, 0x8}, &(0x7f0000000740)=0x90) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) splice(r3, &(0x7f0000000300), r2, &(0x7f00000003c0), 0x812, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0x4) rmdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x2, 0x2, 0x7, 0x0, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718", 0x3d}, 0x60) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'dh\x00', 0x25}, 0x2c) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), 0xfe57) socket$inet_sctp(0x2, 0x1, 0x84) pread64(r3, &(0x7f0000000080)=""/156, 0x9c, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000cecffc), 0x4) write(r6, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff", 0x23) r7 = open(&(0x7f0000ac3000)='./control\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) renameat2(r7, &(0x7f000001dff6)='./control\x00', r8, &(0x7f0000e14ff6)='./control\x00', 0x2) 2018/03/29 22:07:21 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x3441, &(0x7f0000000080)) mkdir(&(0x7f0000001180)='./file0\x00', 0x2) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x10000, &(0x7f0000000180)="e84b9ea2fb72f44796b4b1393efc39f8c8b98f15d211cbf5e713ce4299506fefc1e8139a64de9c4c6c82b5bca7f0b49534fa9cee09102eb2cac74f2224d19e68bf52cca29b4e838fa749e93fe7b19dfdca2ccdfc201babb545ff4c017291af6fc335ffcd0ab293bd067bf86e5e2e668126a11e4c05ecc0d702b9bcafe00e6001fe6c318e308cc703d750063a4d78339f86533394be3bb1c4db1f9e5eae7465dd15e243989be19d9deb6d3b342115112fbb34b02b1f9f40c1dd58864aa7b898858a98650d4d1b79233f4e4ff52394e639c8a9a248318ebd846fc74609eca80a798de874611318bc739364585552aa127143da42fa21168f2119ffa278ddff5f271f1cebacbe0cdcdf71728b91711ee3ce97b534742b91c4d8e50fb362783188b1445e7c7e549435e1809390611f2bace0060f15e07ae107e3d2a60b6ed4ec02ec414bd95d63e4a08b02c4a5d1653464a7031391a568f54fe9050ff6fb44cfa03da86468c5cf166a0c2ede888b5de98be5b64af750fc6f5b19184d67c58912e3338a3526e904b6dbff7dcfc14bff34eaaf383581ed99f87f959f6a2e3a61554581219ab617c14ae9b784b254e4a3a475aa168b777fcf40739ee08371148ba35585cf226bd669ec773301a200cbe7566d94d73ca940a7e7886e57a0e3b5db06efa9df4024430621084b94032c3c462f4f542d721e30cc92dd65d85602be29978c45141f87d0d9543b604ed295396be143b59793951867c82e9cda8c19d84a1ccd16454ce3970c2de266e591ae392bf1f19f1cdf80c6a133b6bff54d06e325415d6ee845231229166e10c8da92fb47144704a5b89428588dded822c5cdaf8f4f2a4cf3a1b68c185c3de69db74934f77ec869f638793bd69b0c521ffc2122dcccd94ccec9e45b2e99bcc79cce090fb53da7182d262430f93368a6c6cdf2e51c9e9ca90105d71d3c1d8727de89aa16ebff5310aeef97d6326d002fb6d1b3c775521439df1659813163fd7919d9f2d042f1247b27ed6f71c229c37aedbd51e0d948576c0108cbd9cd6eeb5fbf5edb312d0ea576fd12d4e37fb8e6e46a3362dbb0ac0c6536700bba11692fc8d3138a23d43bc74879c54aa770191619b8d41c3df10466ce4dfda0e234e1ec6eeb29823c6d315595c0e8941526c9b2512d2b9a9ae1356b7e88914193de5ea74a244da2588e37b3a1482b404529b838870f6b526ffaa63b672190645235346d4f4bad563ece731ec2012716e11edc3522f5511ac265802f0dc772b6cecf0c7d8ce5af5d404d88addf5be4aa5f3c357c8e6da73ddefbb82ae964068487159abe6a6b6c9f571a8046a0bd92ab40138c068d37d584eee68c3cfb7416b466ec9d792e0d3e5c11b00137ca84d76655f18c7d16c7819e7be32624aeb14dd773279e28414aaf085115c4f890a183f664d24c048bcaee983d877390c710b329952d686f6a97bf17057f265623f0adefdafa8407104c452815c629c0966be59bb393e84d17bbb9a004935f993e0bf63d47cabc4f440ecede5d425cda34d6e52b9b372e1446555a67e1ca308998f1a7c10e26bcc37fa0260cccf01b7dc7c0d0fc199a6418865aa5a4be513e5cd3fab6a9cc1b63d148dc6486a05b9b8a630ee5be220f00421bb4a38a45b4561f4cec4739570286cb72d9ec938282abf795257ff6d376ab46456900a285f243bccfa1f82fdc15f372e030391c2fa744cd3942731fc39d5072a44581097c6caef63233ee518b02f8ef992b2e6038de894d0694693294efad5419e5d19054b98a3f51d5d57ed1a69045ef0e3c9424efb26df99579a032825973e3147404843cda833fb6a8895b022e98253b4a878d57945f3639492f203ef8fe21e93e156a07eba5e784db565edc57623bd40d9a794debcb9a47d6d00ab5b51b0fa2e9000c6ce8d3d846aac8aa541d137f7ab835178dd695c008fc61d377558497932b49e107b864f68c0a776c33b07ed15b77e296c2b80ca9d09a98ddad08d2bc715ea1f3d1b1314b4ca3fbe4ecc15270474f3e6b7b1fd5a8dd2edb18b5a9d0efc07c4422ba354c3fc066c4208cae3255b0bc709d2c2daadd60064b64118343be8e8677eaa2c506ce6159553e9fd37367f55f436efd9cbbbea4eabc21977f84d449896fadc18b69a9ea3ec86fca6b3bc2c122af8b0ce374a3585a5c936b65fbb05bad93afa536522b8c40b9b4be89e7abb89963ea1178d6f8566a0f75f87c5ca664985b378f8f5ee40d9f9f20adbb0fc5a388b9f8912c9a56355c4e7efc0598aceadc5faf3d457b6d1d3d3ba256ba41e6fd3b268780fdafe38b7040f613c388aa3f92bdb53ee3f9866ef8d75c587f66d0dcbb41100ac74ecfdb28be0b5581c8398afb7b75f65bf718a00de16399fd4ce18b50bbe450ace50730773f32130108a8caae30089c05b7c64f9f3c02d479287116cc48353d37fd0c10bd805e85a5358cfb557ac2db8800a59309d266c8e3cb1f231527d3862d2915b4207c643fe1ee270b80a4f7c51de8a806de42bea763f25ec1dc0cf258b9208f28e0123e1a10b1a5c264a7a2cec8b2169c88377287de462be977dc3af3726f949fac035704302d2c2cc116d09907ab0ae6a7f5116ee81688d4c5d139c1dc95f24d3f348ece01d5f49733dc7283d17d702bb42df50f42f4a7e87f014f61ab3f10e6bd70befcca9d565b02bf6362033c658c15cb4324abe9c3f4c62015499d1a33cf9d19155557a1500ef22648fbafaed3ab32869a62b7bc9c472474c960c1f53eef71179719b50cefcb8b5d28cc23842cb2f822935026818260ffc6bedf32c5c0c2b173b4575810bb9d60ad4feda12e8a178729b40f03769004ddec3d7be832d03f2ce77f6e9ba03d7dc408f884b77875b8af046826915135774aec20169ac5c6d6e2f6f8677853b2da05fec727a5f9e1f5ed019eed4d6661613301d3d079a6131ce7ed48f5ca9dd5b261627ffffa40d1eef4eba22a7798238b6f30146c55c650f5a2c98d91f3bd5f11447393c52b857f3116aefffa0ac3961646bfe856f875d6ca8848995b0af350557c2ea685b3d7cb50a0722f47e47556f0beecd0dc38fc92d09b8bc4c081514e5c50feafa5a88227d36ebec6d1641d44d8c8eab8749605e42ff9b083a0fb64a779a6d4b20edc2f137c2a146e525a9c092af213dd267c070f9df3ef3556d8d0c0141eb504a1d9b833b99a0dcb34be29ed77df70b8163c7109b2d5927e35d73c018b7f53e2997200d3de218f817cbb7c2b8d39a858a56abfa8ecf7e218692e3a1be4a7538825ce61146612e4ca728fea6a7f223b3cff25b1099e764b864322d962b7dcf5dc5cd11e3a1cee4eb62cc0eac0ead935e8ad290ff5f16a592a84189fa4a33067f53155fdcc2e376070f183517e3c1e36cc4ce6bbae604355c910abaf86fbbee98db1090e115e01fbcf78a136dcc732b62219f548767853f876607510a117068e86d88743e23ac6acf9add60a26132e8abf8b3b9acf6708fd8dc8a658b478b43b6e89f20631985defc0c594a24d267bf5355e4dec16d0ece81038efb0f70bea5575e162e19324693614e1409cc5863533ffa2bc0c88d1d2af6322d50e38df9d276c68c50f1c3b3970f536f27484260049b4a48eb0ef44f5b9a93688aa47b7eb62757c299771a10f8a323feab19a1baa6533bbea8f23c5d9c73c23834b88ca2d7229de2dafc990c82a5b89b9b3dd3fa31970c48ea25d67046ebc51ccfd6884f2d2b99f259ec7a4f6d27fbcd64e16ee8f507d90f61bd4ae242fc7e944362c843be55e7145c7b09b61e14216770d11b9fc92b906571c2af94c4af09a1576e83e29b1b61c5ac6376a63f622eef8989c11471afadb9ed8388403533ded6a351b6b87c150eb11bbcbe51607f7978c3d6ffb379c9166fec8d0bae0f74acbb8e4f8c954227be935193cb7431b30f4ae45a0b5f8ba32adddf5b12eaf2ef695338ff91684e4d9a725e3e0f7909980c7401ae600ca569c036ea93f16ecbd10f19a99ed2afab35790d4a22c1a58640b03d292d539cac888f1833934649045e10b0fabc6b8d1af070c731e48bdd3a5fbfa4d70c3673be688654f37629e23475f32c6bb3e5d9386b2e3c461807ff785eb78cef88ba22d4b77245ece8bbf860e3cadf6f132be4218764cf10b82e693efa157d4aeb64fbf77e483234f6627e7e82465f0d9c4edafd9ee8a25923919470276b184d660c274125edf2b4fb7a1c48d7b3b8d9d3ccc783d4c50d96a066fe57444c13fe9723aa1530e36a6bf1c0e3bdf18a24613382de4c44d9a741027d2b5af6fec0195ac2a80773b7032ac9190afb97ba505505da7437e93baf1bf3077daa9dbcda05aa227a144701441f44be8f41d622720f4929a3b39df8f099f419d05ac82a594e7c069202f11a57dea731903699dfbb3ca9ebf8f3fa9ebd2165e9d9ba42622a7d531fbecd052c319fbef1a6d36c8d108854f618fa74e4d756c729b0e197d52a64ae13fa7482b4194b4a67639a0bc742216af7604a2c7a1bbd06f9a49b94d275e900ddd2475d360db15d15baecf1324a35c79e3c1e9551232ecdf2e514271de18ce196807209d7d2c83f93d87045443afec5a53942eb1847df3f3ae74434a5189a48bcc1df6cd426cad192b9fad5e89f76b6dad1fffc554fd575b7ef07df68faf58cc34c09dcba5b79f09741ca6498563ead4d6dc369395366917f487d1a7743ea161a5c13e5a3192294433cb18964603bcc52ae9f13081d00dda61efebb4ee648fefca37cd9fde58da5a219450773b898cb1158b9b1947beb9a1b634335e4b41547f967ac1ed87e184450ecb923a5ab1a0ebb6dfc57777a7f9f27fb4eefe08ebee851ab72babbcf7b5825f581f0a18ec9475dbf3fed8ffe3c1ceffda44a38f06f8507a3f8d934bdaf035ffdf2bc45dd22549de8c2b81477e23d2a501a9c9609566c4b4c9494fa549958a0375b1753799572caceeba0362dfac02f0c3737c233b3b8e889f0b52105209b27abcb1f04043bb63cde59343be4eee94ac1b41043238adba2d240483e8a3637e426614e2e66874457b0eae27f038f0b851779358ce5bc3ac48e83b16bfe4ee0adb82020d35117a6edae20e8f339c999929a810d9d52f75f6677df827d641ec1c1541078efb019cbdd38e856714ee80ac10d1043c79d136b6318cc60b4bf3504a516fb0d8639c9efbc3150d7bde4711fc20b7a65fdab553c88cfb4fdab96cf2e1e79d16151efc7e89c15396bab45c3852880cdbc49effacfd950b04a455e956dad16878405759a4b7dfbae9796662388dd0a3064d6b32042036aedfef9b436e3e40dcc97bd2e6e4c7535c1897c511bc30991df3041c817b96d3f41afb971785223c907fe79f39eab2932a66ac0ee1c1a3fc330ad84fd150988743b9f41ed3204a427c2e65a88fb1907c167916b6d48392d085d7f3fbb481dc4d9bac2b5474312e4056cbd608bab61740769abf94b3d89c7e1ecc5396da9d478bd0b051fbe1b6c538d60699d0409c221567424c252e9c6a0c9337973e53ced17d715a2a1eb4f8f4c9b71b899f63a60c9368205c42b50a45d22317241604fe44bd02703f0e088b45c7384eed62967a7eb17e2bd1aac74654d1d351057aaeeb48c08ef375138fb75ae6d984174d2ab1c28831254c630f8b0c0f04c7c381abd93b32a1a7705aeaa7465963de61fe0c1ebb00fb2656979436eef32edad167c16cff7f7f07d48f7a941b89b8270bf0b0f6568ad2cd19df58e584fd80340fed978965f121beb287fe16c18328f767ab741b2f25b2c4007342a6c54bec458ffa0f54655ac6661e604b5f87") socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000012c0)="66e8285803b81e3cb89d08877be58f798b43fbc483461148f4037c089b678670bbd81b74949eea6305607c5e22b22114d53a360364b4a0a1457ea5aaa3d806c47b2bec96c6e04a32119d262254a90f9ee73e1ed2f73f1c91fbae3e1052d49f0cdb587beedbd714d03e0cd2ecf6f7ab6cd2f5357a6504262f401000a9bb01bb786d3021c36a0f6f768db3541f28f5e8", 0x8f}], 0x1, 0x0, 0x0, 0x4040}, 0x8000) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x5, r0}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 938.928429] binder: 30274:30301 transaction failed 29189/-3, size 0-0 line 3133 ** 1 printk messages dropped ** [ 938.974666] binder: 30274:30287 ioctl c0306201 2000ffd0 returned -14 ** 10 printk messages dropped ** [ 939.107756] binder: 30321:30328 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 1 printk messages dropped ** [ 939.147860] binder: 30325:30330 ioctl c0306201 2000ffd0 returned -14 ** 9 printk messages dropped ** [ 939.242635] binder: 30365:30391 transaction failed 29189/-3, size 0-0 line 3133 [ 939.249030] binder: 30367:30373 ioctl c0306201 2000ffd0 returned -14 [ 939.297238] binder: 30365:30374 ioctl c0306201 2000ffd0 returned -14 [ 939.308757] binder: 30366:30372 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 939.345519] binder: BINDER_SET_CONTEXT_MGR already set [ 939.345526] binder: 30410:30415 ioctl 40046207 0 returned -16 [ 939.356213] binder: BINDER_SET_CONTEXT_MGR already set [ 939.356263] binder: 30404:30412 ioctl 40046207 0 returned -16 [ 939.357552] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.357569] binder: 30404:30412 transaction failed 29189/-3, size 0-0 line 3133 [ 939.363465] binder: BINDER_SET_CONTEXT_MGR already set [ 939.363472] binder: 30414:30417 ioctl 40046207 0 returned -16 [ 939.381547] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.381564] binder: 30403:30425 transaction failed 29189/-3, size 0-0 line 3133 [ 939.383999] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.384016] binder: 30407:30427 transaction failed 29189/-3, size 0-0 line 3133 [ 939.384239] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.384257] binder: 30406:30428 transaction failed 29189/-3, size 0-0 line 3133 [ 939.405887] binder: BINDER_SET_CONTEXT_MGR already set [ 939.405895] binder: 30433:30434 ioctl 40046207 0 returned -16 [ 939.407703] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.407720] binder: 30433:30434 transaction failed 29189/-3, size 0-0 line 3133 [ 939.410096] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.410112] binder: 30414:30438 transaction failed 29189/-3, size 0-0 line 3133 [ 939.426315] binder: 30403:30411 ioctl c0306201 2000ffd0 returned -14 [ 939.436005] binder: 30406:30413 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 0: unshare(0x20000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 5: perf_event_open(&(0x7f0000000f88)={0x2, 0x78, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f00000000c0), 0x0) 2018/03/29 22:07:21 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 6: 2018/03/29 22:07:21 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 0: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:21 executing program 6: [ 939.444905] binder: 30407:30408 ioctl c0306201 2000ffd0 returned -14 [ 939.465880] binder: 30414:30417 ioctl c0306201 2000ffd0 returned -14 [ 939.476071] binder: 30410:30415 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:21 executing program 6: [ 939.494473] binder: BINDER_SET_CONTEXT_MGR already set [ 939.494482] binder: 30448:30454 ioctl 40046207 0 returned -16 [ 939.518632] binder: BINDER_SET_CONTEXT_MGR already set [ 939.518640] binder: 30464:30468 ioctl 40046207 0 returned -16 [ 939.520150] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 939.523375] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.523395] binder: 30452:30475 transaction failed 29189/-3, size 0-0 line 3133 [ 939.523874] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.523889] binder: 30448:30476 transaction failed 29189/-3, size 0-0 line 3133 [ 939.525240] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.525257] binder: 30450:30465 transaction failed 29189/-3, size 0-0 line 3133 [ 939.525550] binder: BINDER_SET_CONTEXT_MGR already set [ 939.525557] binder: 30460:30466 ioctl 40046207 0 returned -16 [ 939.526461] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.526477] binder: 30460:30466 transaction failed 29189/-3, size 0-0 line 3133 [ 939.552719] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 0: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 6: [ 939.552738] binder: 30464:30480 transaction failed 29189/-3, size 0-0 line 3133 [ 939.557249] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.557267] binder: 30462:30481 transaction failed 29189/-3, size 0-0 line 3133 [ 939.561889] binder: 30448:30454 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:22 executing program 0: clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 939.568167] binder: 30450:30456 ioctl c0306201 2000ffd0 returned -14 [ 939.595560] binder: 30452:30459 ioctl c0306201 2000ffd0 returned -14 [ 939.597833] binder: BINDER_SET_CONTEXT_MGR already set ** 6 printk messages dropped ** [ 939.698004] binder: 30502:30510 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 939.703084] binder: 30504:30508 ioctl 40046207 0 returned -16 [ 939.708824] binder: BINDER_SET_CONTEXT_MGR already set ** 1 printk messages dropped ** [ 939.710945] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.710966] binder: 30503:30515 transaction failed 29189/-3, size 0-0 line 3133 [ 939.712521] binder: BINDER_SET_CONTEXT_MGR already set [ 939.712532] binder: 30509:30514 ioctl 40046207 0 returned -16 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 0: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: [ 939.731764] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.731784] binder: 30501:30522 transaction failed 29189/-3, size 0-0 line 3133 [ 939.740294] binder_alloc: 12386: binder_alloc_buf, no vma 2018/03/29 22:07:22 executing program 6: ** 1 printk messages dropped ** [ 939.742045] binder_alloc: 12386: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 939.750299] binder_alloc: 12386: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 939.774906] binder: 30502:30510 ioctl c0306201 2000ffd0 returned -14 [ 939.775683] binder: 30501:30506 ioctl c0306201 2000ffd0 returned -14 ** 2 printk messages dropped ** [ 939.803566] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.803584] binder: 30528:30531 transaction failed 29189/-3, size 0-0 line 3133 [ 939.805222] binder: 30504:30508 ioctl c0306201 2000ffd0 returned -14 [ 939.819741] binder: 30500:30512 ioctl c0306201 2000ffd0 returned -14 [ 939.833523] binder: BINDER_SET_CONTEXT_MGR already set [ 939.833529] binder: 30544:30547 ioctl 40046207 0 returned -16 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 1: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) getpgid(0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 0: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f000000cf90), 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 3: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: [ 939.837930] binder: 30509:30514 ioctl c0306201 2000ffd0 returned -14 [ 939.857366] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.857384] binder: 30544:30552 transaction failed 29189/-3, size 0-0 line 3133 [ 939.863951] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.863969] binder: 30543:30553 transaction failed 29189/-3, size 0-0 line 3133 [ 939.883316] binder: 30544:30547 ioctl c0306201 2000ffd0 returned -14 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[{0xc, 0x3}, {0x3, 0x8}, {0x4, 0x40}], 0x3) write$tun(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="bc765484a867b1fff7b7cf4c49962576a1cf1f48d65c1a0f0f92246f7d33f6039febbd9b9f41e799c19269b8bb2619d5ef4c13517083b9bd4c9ee4ac99fd5979d0e197bad6ebfb1a68b634590fe388e36f4f23a246ca29b367b68046630257c1e8fcaba619345ab0bf87c3e218f0eeb7b356", @ANYRES32=r1, @ANYPTR64], @ANYRES16=r0, @ANYRES32, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYBLOB="38ac0f045bd8b9b09fba5c44ddd48eb2b5d6893136b493193616278abaced148b378340cbddf8083c90590e8f9d29970", @ANYPTR64, @ANYRES64=r1, @ANYPTR, @ANYPTR, @ANYBLOB="708a9ed151a246fd3132e53d4ab42888a73a3612afca9f410fe1b4b254d2334997d9a8f506d15ece5023ec3c402ceee0959a92dec63a2245eefc350a1bfc4030efb6f9799bc6306afef85b8528f43ef5f0d40d4c3eb03383a0e8fd84031927977669eee99e7e54db425bc54f11b8caf775086fe9aa4b355c738087a55a22bc2796be677ac5d1cf0376cbf4e96a1d24ca6ed3235deedeb12d213229e76742bc5b86d712b6ff9808c87db76d92c2824bbe7ed3"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYPTR64], @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES64=r0], @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYPTR64, @ANYRES32], @ANYRES64]], 0x4) fcntl$setstatus(r1, 0x4, 0x6000) unlink(&(0x7f0000000080)='./file1\x00') lsetxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', '/dev/sequencer\x00'}, &(0x7f0000000440)='./cgroup.cpu\x00', 0xd, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x800, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0xfffffffffffffffc) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mlock(&(0x7f0000b1c000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) munlock(&(0x7f0000b20000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x7) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000002c0)={r3, 0x2}) vmsplice(0xffffffffffffffff, &(0x7f0000b1d000)=[{&(0x7f0000000040), 0xffffffffffffffde}], 0x275, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000b20000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000380)={r3, 0x21}) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8c, &(0x7f0000000540)="b6361b4e71d5c75628b750d079219d363369cca06fe955f61413c93fa6268101e9bd746b2a436f46f9714907607c32f4f9e4bab634fcfa4b95530c2d78d6e91dc328de1dcb81738bdc714a34aa6539ca3ce9b49aabea7cbd737ad120bfd6a32734e1211b9d50a24185473472b344a27201e12e30ece05473f4aa74b21d76f5463d2087c4b6183991b3819f2627e90a170452fa70b6a77bb4ef84", 0x9a) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000d2000000db7aee7c34dee39a9396a69deb471f881e9895845d000000d165108a99d4a0be6a2187d042049a4d207b767ad1f0e929ee6c5aaec83fd09a5ef0d8ee16b02181b8bfd77960cace2c3628eed11eeca97efa8d428f22ab4d7953e0cdfc961e7fd2e20895dbefe1cbdd1edd4086bf25ebc30625445d528e5dd9ecf85c440e28e3d1edc32be5a5155e4b522347f9e99fc19cc8723cc334ab5b61732b2607ae3555ed29"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000300)={0x7, 0x2, 0x2}) r5 = open(&(0x7f0000000300)='./file1\x00', 0x40400, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000c00)="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", 0x5fd}], 0x1, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{}, {}]}) ioctl$sock_ipx_SIOCAIPXITFCRT(r5, 0x89e0, &(0x7f0000000380)=0x2400000) 2018/03/29 22:07:22 executing program 6: 2018/03/29 22:07:22 executing program 0: unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setown(r0, 0x8, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x11, 0x807, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 939.903186] binder: 30543:30545 ioctl c0306201 2000ffd0 returned -14 [ 939.937344] binder: BINDER_SET_CONTEXT_MGR already set [ 939.937352] binder: 30559:30571 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 939.940658] binder: 30556:30566 ioctl 40046207 0 returned -16 2018/03/29 22:07:22 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x1fffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x8ed8}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @rand_addr=0x2}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)=""/174) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x3, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x5, r1}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) ioprio_set$pid(0x0, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) socketpair(0x0, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/29) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) ** 4 printk messages dropped ** [ 939.955486] binder: BINDER_SET_CONTEXT_MGR already set ** 5 printk messages dropped ** [ 939.990258] binder_alloc: 12386: binder_alloc_buf, no vma [ 939.990278] binder: 30564:30585 transaction failed 29189/-3, size 0-0 line 3133 [ 940.000125] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.000143] binder: 30563:30583 transaction failed 29189/-3, size 0-0 line 3133 [ 940.000210] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.000225] binder: 30558:30584 transaction failed 29189/-3, size 0-0 line 3133 [ 940.032974] binder: 30560:30565 ioctl c0306201 2000ffd0 returned -14 [ 940.039936] binder: 30559:30571 ioctl c0306201 2000ffd0 returned -14 [ 940.044048] binder: 30564:30567 ioctl c0306201 2000ffd0 returned -14 [ 940.047079] binder: 30558:30570 ioctl c0306201 2000ffd0 returned -14 [ 940.052210] binder: 30563:30573 ioctl c0306201 2000ffd0 returned -14 [ 940.069807] binder: BINDER_SET_CONTEXT_MGR already set [ 940.069816] binder: 30590:30591 ioctl 40046207 0 returned -16 [ 940.070369] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.070384] binder: 30590:30591 transaction failed 29189/-3, size 0-0 line 3133 [ 940.098294] binder: BINDER_SET_CONTEXT_MGR already set [ 940.098302] binder: 30610:30616 ioctl 40046207 0 returned -16 [ 940.108113] binder: BINDER_SET_CONTEXT_MGR already set [ 940.108122] binder: 30611:30617 ioctl 40046207 0 returned -16 [ 940.109162] binder: BINDER_SET_CONTEXT_MGR already set [ 940.109170] binder: 30607:30614 ioctl 40046207 0 returned -16 [ 940.113025] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.113042] binder: 30603:30623 transaction failed 29189/-3, size 0-0 line 3133 [ 940.126365] binder: BINDER_SET_CONTEXT_MGR already set [ 940.126373] binder: 30624:30626 ioctl 40046207 0 returned -16 [ 940.126826] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.126843] binder: 30624:30626 transaction failed 29189/-3, size 0-0 line 3133 [ 940.126929] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.126944] binder: 30610:30628 transaction failed 29189/-3, size 0-0 line 3133 [ 940.137422] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.137439] binder: 30607:30631 transaction failed 29189/-3, size 0-0 line 3133 [ 940.146755] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.146771] binder: 30611:30632 transaction failed 29189/-3, size 0-0 line 3133 [ 940.154362] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.154378] binder: 30606:30636 transaction failed 29189/-3, size 0-0 line 3133 [ 940.156853] binder: 30610:30616 ioctl c0306201 2000ffd0 returned -14 [ 940.179556] binder: 30611:30617 ioctl c0306201 2000ffd0 returned -14 [ 940.179887] binder: 30603:30605 ioctl c0306201 2000ffd0 returned -14 [ 940.191561] binder: 30606:30613 ioctl c0306201 2000ffd0 returned -14 [ 940.225877] binder: 30607:30614 ioctl c0306201 2000ffd0 returned -14 [ 940.269665] binder: BINDER_SET_CONTEXT_MGR already set [ 940.269672] binder: 30648:30658 ioctl 40046207 0 returned -16 [ 940.269792] binder: BINDER_SET_CONTEXT_MGR already set [ 940.269797] binder: 30653:30661 ioctl 40046207 0 returned -16 [ 940.269906] binder: BINDER_SET_CONTEXT_MGR already set [ 940.269912] binder: 30649:30655 ioctl 40046207 0 returned -16 [ 940.276092] binder: BINDER_SET_CONTEXT_MGR already set [ 940.276101] binder: 30650:30654 ioctl 40046207 0 returned -16 [ 940.276601] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.276617] binder: 30650:30654 transaction failed 29189/-3, size 0-0 line 3133 [ 940.296310] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.296325] binder: 30649:30670 transaction failed 29189/-3, size 0-0 line 3133 [ 940.297051] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.297067] binder: 30652:30673 transaction failed 29189/-3, size 0-0 line 3133 [ 940.303666] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.303683] binder: 30647:30671 transaction failed 29189/-3, size 0-0 line 3133 [ 940.305570] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.305588] binder: 30648:30674 transaction failed 29189/-3, size 0-0 line 3133 [ 940.306704] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.306720] binder: 30653:30675 transaction failed 29189/-3, size 0-0 line 3133 [ 940.323208] binder: BINDER_SET_CONTEXT_MGR already set [ 940.323215] binder: 30676:30678 ioctl 40046207 0 returned -16 [ 940.323832] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.323849] binder: 30676:30678 transaction failed 29189/-3, size 0-0 line 3133 [ 940.348823] binder: 30652:30659 ioctl c0306201 2000ffd0 returned -14 [ 940.351741] binder: 30649:30655 ioctl c0306201 2000ffd0 returned -14 [ 940.355162] binder: 30648:30658 ioctl c0306201 2000ffd0 returned -14 [ 940.365306] binder: 30647:30656 ioctl c0306201 2000ffd0 returned -14 [ 940.366003] binder: 30653:30661 ioctl c0306201 2000ffd0 returned -14 [ 940.401159] binder: BINDER_SET_CONTEXT_MGR already set [ 940.401166] binder: 30696:30700 ioctl 40046207 0 returned -16 [ 940.411673] binder: BINDER_SET_CONTEXT_MGR already set [ 940.411680] binder: 30693:30695 ioctl 40046207 0 returned -16 [ 940.422628] binder: BINDER_SET_CONTEXT_MGR already set [ 940.422636] binder: 30694:30703 ioctl 40046207 0 returned -16 [ 940.424304] binder: BINDER_SET_CONTEXT_MGR already set [ 940.424311] binder: 30701:30708 ioctl 40046207 0 returned -16 [ 940.425025] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.425041] binder: 30701:30708 transaction failed 29189/-3, size 0-0 line 3133 [ 940.438273] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.438291] binder: 30699:30706 transaction failed 29189/-3, size 0-0 line 3133 [ 940.441568] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.441586] binder: 30696:30711 transaction failed 29189/-3, size 0-0 line 3133 [ 940.448278] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.448299] binder: 30691:30713 transaction failed 29189/-3, size 0-0 line 3133 [ 940.450814] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.450828] binder: 30694:30718 transaction failed 29189/-3, size 0-0 line 3133 [ 940.451895] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.451911] binder: 30693:30716 transaction failed 29189/-3, size 0-0 line 3133 [ 940.474740] binder: 30691:30697 ioctl c0306201 2000ffd0 returned -14 [ 940.496215] binder: 30694:30703 ioctl c0306201 2000ffd0 returned -14 [ 940.504045] binder: 30693:30695 ioctl c0306201 2000ffd0 returned -14 [ 940.511007] binder: BINDER_SET_CONTEXT_MGR already set [ 940.511015] binder: 30721:30724 ioctl 40046207 0 returned -16 [ 940.511404] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.511420] binder: 30721:30724 transaction failed 29189/-3, size 0-0 line 3133 [ 940.521340] binder: 30696:30700 ioctl c0306201 2000ffd0 returned -14 [ 940.541348] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.541364] binder: 30734:30736 transaction failed 29189/-3, size 0-0 line 3133 [ 940.547022] binder: BINDER_SET_CONTEXT_MGR already set [ 940.547029] binder: 30735:30740 ioctl 40046207 0 returned -16 [ 940.558432] binder: BINDER_SET_CONTEXT_MGR already set [ 940.558440] binder: 30738:30745 ioctl 40046207 0 returned -16 [ 940.563802] binder: BINDER_SET_CONTEXT_MGR already set [ 940.563809] binder: 30747:30753 ioctl 40046207 0 returned -16 [ 940.574204] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.574223] binder: 30728:30758 transaction failed 29189/-3, size 0-0 line 3133 [ 940.577226] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.577246] binder: 30735:30759 transaction failed 29189/-3, size 0-0 line 3133 [ 940.579761] binder: BINDER_SET_CONTEXT_MGR already set [ 940.579768] binder: 30752:30755 ioctl 40046207 0 returned -16 [ 940.580123] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.580140] binder: 30752:30755 transaction failed 29189/-3, size 0-0 line 3133 [ 940.592051] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.592072] binder: 30747:30763 transaction failed 29189/-3, size 0-0 line 3133 [ 940.592937] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.592953] binder: 30738:30750 transaction failed 29189/-3, size 0-0 line 3133 [ 940.623571] binder: 30735:30740 ioctl c0306201 2000ffd0 returned -14 [ 940.623618] binder: 30728:30737 ioctl c0306201 2000ffd0 returned -14 [ 940.658842] binder: 30738:30745 ioctl c0306201 2000ffd0 returned -14 [ 940.667931] binder: BINDER_SET_CONTEXT_MGR already set [ 940.667938] binder: 30773:30777 ioctl 40046207 0 returned -16 [ 940.669314] binder: BINDER_SET_CONTEXT_MGR already set [ 940.669320] binder: 30772:30778 ioctl 40046207 0 returned -16 [ 940.695012] binder: 30747:30753 ioctl c0306201 2000ffd0 returned -14 [ 940.710005] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.710024] binder: 30775:30782 transaction failed 29189/-3, size 0-0 line 3133 [ 940.710571] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.710588] binder: 30772:30791 transaction failed 29189/-3, size 0-0 line 3133 [ 940.711784] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.711800] binder: 30773:30790 transaction failed 29189/-3, size 0-0 line 3133 [ 940.747437] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.747457] binder: 30779:30794 transaction failed 29189/-3, size 0-0 line 3133 [ 940.749049] binder: 30773:30777 ioctl c0306201 2000ffd0 returned -14 [ 940.817039] binder: BINDER_SET_CONTEXT_MGR already set [ 940.817047] binder: 30804:30809 ioctl 40046207 0 returned -16 [ 940.817384] binder: BINDER_SET_CONTEXT_MGR already set [ 940.817389] binder: 30800:30805 ioctl 40046207 0 returned -16 [ 940.820182] binder: BINDER_SET_CONTEXT_MGR already set [ 940.820190] binder: 30803:30814 ioctl 40046207 0 returned -16 [ 940.834318] binder: BINDER_SET_CONTEXT_MGR already set [ 940.834328] binder: 30807:30813 ioctl 40046207 0 returned -16 [ 940.841058] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.841077] binder: 30807:30813 transaction failed 29189/-3, size 0-0 line 3133 [ 940.844128] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.844148] binder: 30802:30822 transaction failed 29189/-3, size 0-0 line 3133 [ 940.852810] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.852831] binder: 30800:30824 transaction failed 29189/-3, size 0-0 line 3133 [ 940.859279] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.859295] binder: 30804:30825 transaction failed 29189/-3, size 0-0 line 3133 [ 940.871241] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.871260] binder: 30803:30826 transaction failed 29189/-3, size 0-0 line 3133 [ 940.905616] binder: 30804:30809 ioctl c0306201 2000ffd0 returned -14 [ 940.916385] binder: 30803:30814 ioctl c0306201 2000ffd0 returned -14 [ 940.939044] binder: BINDER_SET_CONTEXT_MGR already set [ 940.939051] binder: 30834:30841 ioctl 40046207 0 returned -16 [ 940.939489] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.939510] binder: 30834:30841 transaction failed 29189/-3, size 0-0 line 3133 [ 940.945903] binder: BINDER_SET_CONTEXT_MGR already set [ 940.945910] binder: 30845:30850 ioctl 40046207 0 returned -16 [ 940.948541] binder: 30800:30805 ioctl c0306201 2000ffd0 returned -14 [ 940.970024] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.970042] binder: 30845:30857 transaction failed 29189/-3, size 0-0 line 3133 [ 940.994000] binder_alloc: 12386: binder_alloc_buf, no vma [ 940.994015] binder: 30843:30859 transaction failed 29189/-3, size 0-0 line 3133 [ 940.998538] binder: 30845:30850 ioctl c0306201 2000ffd0 returned -14 [ 941.062452] binder: BINDER_SET_CONTEXT_MGR already set [ 941.062459] binder: 30866:30878 ioctl 40046207 0 returned -16 [ 941.068837] binder: BINDER_SET_CONTEXT_MGR already set [ 941.068844] binder: 30864:30876 ioctl 40046207 0 returned -16 [ 941.087253] binder: BINDER_SET_CONTEXT_MGR already set [ 941.087260] binder: 30867:30872 ioctl 40046207 0 returned -16 [ 941.087794] binder: BINDER_SET_CONTEXT_MGR already set [ 941.087801] binder: 30865:30877 ioctl 40046207 0 returned -16 [ 941.088206] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.088223] binder: 30865:30877 transaction failed 29189/-3, size 0-0 line 3133 [ 941.095052] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.095068] binder: 30869:30886 transaction failed 29189/-3, size 0-0 line 3133 [ 941.098117] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.098137] binder: 30864:30890 transaction failed 29189/-3, size 0-0 line 3133 [ 941.104836] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.104851] binder: 30866:30887 transaction failed 29189/-3, size 0-0 line 3133 [ 941.112281] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.112300] binder: 30867:30885 transaction failed 29189/-3, size 0-0 line 3133 [ 941.138797] binder: 30869:30874 ioctl c0306201 2000ffd0 returned -14 [ 941.140303] binder: 30866:30878 ioctl c0306201 2000ffd0 returned -14 [ 941.152360] binder: BINDER_SET_CONTEXT_MGR already set [ 941.152367] binder: 30898:30901 ioctl 40046207 0 returned -16 [ 941.152733] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.152750] binder: 30898:30901 transaction failed 29189/-3, size 0-0 line 3133 [ 941.160051] binder: 30867:30872 ioctl c0306201 2000ffd0 returned -14 [ 941.170055] binder: 30864:30876 ioctl c0306201 2000ffd0 returned -14 [ 941.190167] binder: BINDER_SET_CONTEXT_MGR already set [ 941.190174] binder: 30907:30917 ioctl 40046207 0 returned -16 [ 941.212587] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.212606] binder: 30903:30925 transaction failed 29189/-3, size 0-0 line 3133 [ 941.214178] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.214197] binder: 30908:30927 transaction failed 29189/-3, size 0-0 line 3133 [ 941.215280] binder: BINDER_SET_CONTEXT_MGR already set [ 941.215287] binder: 30921:30923 ioctl 40046207 0 returned -16 [ 941.217332] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.217350] binder: 30907:30928 transaction failed 29189/-3, size 0-0 line 3133 [ 941.222201] binder: BINDER_SET_CONTEXT_MGR already set [ 941.222207] binder: 30916:30924 ioctl 40046207 0 returned -16 [ 941.239992] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.240008] binder: 30921:30933 transaction failed 29189/-3, size 0-0 line 3133 [ 941.243199] binder: 30908:30918 ioctl c0306201 2000ffd0 returned -14 [ 941.252514] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.252533] binder: 30916:30935 transaction failed 29189/-3, size 0-0 line 3133 [ 941.252911] binder: 30903:30906 ioctl c0306201 2000ffd0 returned -14 [ 941.265512] binder: 30907:30917 ioctl c0306201 2000ffd0 returned -14 [ 941.287838] binder: 30921:30923 ioctl c0306201 2000ffd0 returned -14 [ 941.312081] binder: 30916:30924 ioctl c0306201 2000ffd0 returned -14 [ 941.343067] binder: BINDER_SET_CONTEXT_MGR already set [ 941.343075] binder: 30942:30948 ioctl 40046207 0 returned -16 [ 941.343474] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.343490] binder: 30942:30948 transaction failed 29189/-3, size 0-0 line 3133 [ 941.350347] binder: BINDER_SET_CONTEXT_MGR already set [ 941.350354] binder: 30943:30949 ioctl 40046207 0 returned -16 [ 941.359099] binder: BINDER_SET_CONTEXT_MGR already set [ 941.359115] binder: 30947:30955 ioctl 40046207 0 returned -16 [ 941.377662] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.377682] binder: 30944:30968 transaction failed 29189/-3, size 0-0 line 3133 [ 941.377693] binder: BINDER_SET_CONTEXT_MGR already set [ 941.377700] binder: 30950:30959 ioctl 40046207 0 returned -16 [ 941.383253] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.383275] binder: 30945:30966 transaction failed 29189/-3, size 0-0 line 3133 [ 941.383992] binder: BINDER_SET_CONTEXT_MGR already set [ 941.383998] binder: 30964:30965 ioctl 40046207 0 returned -16 [ 941.384847] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.384865] binder: 30947:30970 transaction failed 29189/-3, size 0-0 line 3133 [ 941.384993] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.385007] binder: 30964:30965 transaction failed 29189/-3, size 0-0 line 3133 [ 941.386888] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.386903] binder: 30943:30971 transaction failed 29189/-3, size 0-0 line 3133 [ 941.404160] binder: 30944:30952 ioctl c0306201 2000ffd0 returned -14 [ 941.417695] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.417714] binder: 30950:30975 transaction failed 29189/-3, size 0-0 line 3133 [ 941.435681] binder: 30947:30955 ioctl c0306201 2000ffd0 returned -14 [ 941.450747] binder: 30945:30951 ioctl c0306201 2000ffd0 returned -14 [ 941.452281] binder: 30943:30949 ioctl c0306201 2000ffd0 returned -14 [ 941.491126] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.491143] binder: 30977:30995 transaction failed 29189/-3, size 0-0 line 3133 [ 941.491776] binder: BINDER_SET_CONTEXT_MGR already set [ 941.491783] binder: 30984:30991 ioctl 40046207 0 returned -16 [ 941.492399] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.492414] binder: 30984:30991 transaction failed 29189/-3, size 0-0 line 3133 [ 941.493891] binder: BINDER_SET_CONTEXT_MGR already set [ 941.493900] binder: 30993:30998 ioctl 40046207 0 returned -16 [ 941.496155] binder: 30950:30959 ioctl c0306201 2000ffd0 returned -14 [ 941.503807] binder: BINDER_SET_CONTEXT_MGR already set [ 941.503815] binder: 30989:30997 ioctl 40046207 0 returned -16 [ 941.520421] binder: 30977:30981 ioctl c0306201 2000ffd0 returned -14 [ 941.520560] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.520578] binder: 30993:31008 transaction failed 29189/-3, size 0-0 line 3133 [ 941.530936] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.530954] binder: 30992:31009 transaction failed 29189/-3, size 0-0 line 3133 [ 941.544174] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.544191] binder: 30989:31010 transaction failed 29189/-3, size 0-0 line 3133 [ 941.560206] binder: 30993:30998 ioctl c0306201 2000ffd0 returned -14 [ 941.579586] binder: 30989:30997 ioctl c0306201 2000ffd0 returned -14 [ 941.585917] binder: 30992:30999 ioctl c0306201 2000ffd0 returned -14 [ 941.617626] binder: BINDER_SET_CONTEXT_MGR already set [ 941.617635] binder: 31016:31025 ioctl 40046207 0 returned -16 [ 941.623566] binder: BINDER_SET_CONTEXT_MGR already set [ 941.623574] binder: 31018:31028 ioctl 40046207 0 returned -16 [ 941.624491] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.624510] binder: 31018:31028 transaction failed 29189/-3, size 0-0 line 3133 [ 941.630842] binder: BINDER_SET_CONTEXT_MGR already set [ 941.630850] binder: 31019:31027 ioctl 40046207 0 returned -16 [ 941.644814] binder: BINDER_SET_CONTEXT_MGR already set [ 941.644822] binder: 31023:31033 ioctl 40046207 0 returned -16 [ 941.647832] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.647850] binder: 31021:31039 transaction failed 29189/-3, size 0-0 line 3133 [ 941.650879] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.650896] binder: 31020:31041 transaction failed 29189/-3, size 0-0 line 3133 [ 941.651072] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.651113] binder: 31016:31040 transaction failed 29189/-3, size 0-0 line 3133 [ 941.668401] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.668415] binder: 31019:31043 transaction failed 29189/-3, size 0-0 line 3133 [ 941.683077] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.683099] binder: 31023:31048 transaction failed 29189/-3, size 0-0 line 3133 [ 941.684027] binder: BINDER_SET_CONTEXT_MGR already set [ 941.684034] binder: 31044:31046 ioctl 40046207 0 returned -16 [ 941.688560] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.688575] binder: 31044:31046 transaction failed 29189/-3, size 0-0 line 3133 [ 941.695338] binder: 31020:31026 ioctl c0306201 2000ffd0 returned -14 [ 941.705194] binder: 31016:31025 ioctl c0306201 2000ffd0 returned -14 [ 941.713250] binder: 31019:31027 ioctl c0306201 2000ffd0 returned -14 [ 941.720142] binder: 31023:31033 ioctl c0306201 2000ffd0 returned -14 [ 941.725691] binder: 31021:31024 ioctl c0306201 2000ffd0 returned -14 [ 941.758858] binder: BINDER_SET_CONTEXT_MGR already set [ 941.758865] binder: 31066:31067 ioctl 40046207 0 returned -16 [ 941.770098] binder: BINDER_SET_CONTEXT_MGR already set [ 941.770105] binder: 31065:31071 ioctl 40046207 0 returned -16 [ 941.770472] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.770489] binder: 31059:31073 transaction failed 29189/-3, size 0-0 line 3133 [ 941.797600] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.797617] binder: 31066:31077 transaction failed 29189/-3, size 0-0 line 3133 [ 941.797828] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.797841] binder: 31065:31078 transaction failed 29189/-3, size 0-0 line 3133 [ 941.798487] binder: 31059:31061 ioctl c0306201 2000ffd0 returned -14 [ 941.806263] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.806280] binder: 31070:31079 transaction failed 29189/-3, size 0-0 line 3133 [ 941.831626] binder: 31066:31067 ioctl c0306201 2000ffd0 returned -14 [ 941.851008] binder: 31070:31072 ioctl c0306201 2000ffd0 returned -14 [ 941.857344] binder: 31065:31071 ioctl c0306201 2000ffd0 returned -14 [ 941.889653] binder: BINDER_SET_CONTEXT_MGR already set [ 941.889661] binder: 31089:31096 ioctl 40046207 0 returned -16 [ 941.890168] binder: BINDER_SET_CONTEXT_MGR already set [ 941.890174] binder: 31092:31099 ioctl 40046207 0 returned -16 [ 941.896940] binder: BINDER_SET_CONTEXT_MGR already set [ 941.896947] binder: 31088:31100 ioctl 40046207 0 returned -16 [ 941.898314] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.898333] binder: 31088:31100 transaction failed 29189/-3, size 0-0 line 3133 [ 941.907827] binder: BINDER_SET_CONTEXT_MGR already set [ 941.907836] binder: 31091:31098 ioctl 40046207 0 returned -16 [ 941.918268] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.918285] binder: 31089:31110 transaction failed 29189/-3, size 0-0 line 3133 [ 941.923729] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.923747] binder: 31092:31109 transaction failed 29189/-3, size 0-0 line 3133 [ 941.926936] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.926955] binder: 31093:31111 transaction failed 29189/-3, size 0-0 line 3133 [ 941.941030] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.941049] binder: 31090:31113 transaction failed 29189/-3, size 0-0 line 3133 [ 941.948767] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.948785] binder: 31091:31114 transaction failed 29189/-3, size 0-0 line 3133 [ 941.957870] binder: BINDER_SET_CONTEXT_MGR already set [ 941.957877] binder: 31115:31118 ioctl 40046207 0 returned -16 [ 941.958533] binder_alloc: 12386: binder_alloc_buf, no vma [ 941.958549] binder: 31115:31118 transaction failed 29189/-3, size 0-0 line 3133 [ 941.976896] binder: 31089:31096 ioctl c0306201 2000ffd0 returned -14 [ 941.980262] binder: 31090:31102 ioctl c0306201 2000ffd0 returned -14 [ 941.997416] binder: BINDER_SET_CONTEXT_MGR already set [ 941.997423] binder: 31130:31131 ioctl 40046207 0 returned -16 [ 942.007809] binder: 31091:31098 ioctl c0306201 2000ffd0 returned -14 [ 942.010585] binder: 31093:31101 ioctl c0306201 2000ffd0 returned -14 [ 942.015912] binder: 31092:31099 ioctl c0306201 2000ffd0 returned -14 [ 942.018378] binder: BINDER_SET_CONTEXT_MGR already set [ 942.018385] binder: 31132:31133 ioctl 40046207 0 returned -16 [ 942.018890] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.018903] binder: 31132:31133 transaction failed 29189/-3, size 0-0 line 3133 [ 942.027756] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.027776] binder: 31130:31142 transaction failed 29189/-3, size 0-0 line 3133 [ 942.050585] binder: BINDER_SET_CONTEXT_MGR already set [ 942.050596] binder: 31145:31149 ioctl 40046207 0 returned -16 [ 942.063836] binder: 31130:31131 ioctl c0306201 2000ffd0 returned -14 [ 942.080191] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.080208] binder: 31134:31144 transaction failed 29189/-3, size 0-0 line 3133 [ 942.089242] binder: BINDER_SET_CONTEXT_MGR already set [ 942.089255] binder: 31148:31152 ioctl 40046207 0 returned -16 [ 942.089773] binder: BINDER_SET_CONTEXT_MGR already set [ 942.089780] binder: 31156:31158 ioctl 40046207 0 returned -16 [ 942.090227] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.090448] binder: 31156:31158 transaction failed 29189/-3, size 0-0 line 3133 [ 942.104191] binder: 31134:31138 ioctl c0306201 2000ffd0 returned -14 [ 942.113762] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.113780] binder: 31145:31162 transaction failed 29189/-3, size 0-0 line 3133 [ 942.117730] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.117747] binder: 31146:31165 transaction failed 29189/-3, size 0-0 line 3133 [ 942.118083] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.118096] binder: 31148:31166 transaction failed 29189/-3, size 0-0 line 3133 [ 942.144283] binder: 31148:31152 ioctl c0306201 2000ffd0 returned -14 [ 942.151848] binder: 31146:31150 ioctl c0306201 2000ffd0 returned -14 [ 942.173548] binder: 31145:31149 ioctl c0306201 2000ffd0 returned -14 [ 942.199263] binder: BINDER_SET_CONTEXT_MGR already set [ 942.199270] binder: 31177:31183 ioctl 40046207 0 returned -16 [ 942.215843] binder: BINDER_SET_CONTEXT_MGR already set [ 942.215851] binder: 31179:31190 ioctl 40046207 0 returned -16 [ 942.216581] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.216600] binder: 31179:31190 transaction failed 29189/-3, size 0-0 line 3133 [ 942.221343] binder: BINDER_SET_CONTEXT_MGR already set [ 942.221350] binder: 31182:31189 ioctl 40046207 0 returned -16 [ 942.228239] binder: BINDER_SET_CONTEXT_MGR already set [ 942.228245] binder: 31176:31187 ioctl 40046207 0 returned -16 [ 942.238879] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.238964] binder: 31177:31196 transaction failed 29189/-3, size 0-0 line 3133 [ 942.240652] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.240666] binder: 31181:31201 transaction failed 29189/-3, size 0-0 line 3133 [ 942.251401] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.251421] binder: 31180:31200 transaction failed 29189/-3, size 0-0 line 3133 [ 942.259387] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.259404] binder: 31182:31202 transaction failed 29189/-3, size 0-0 line 3133 [ 942.263623] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.263640] binder: 31176:31207 transaction failed 29189/-3, size 0-0 line 3133 [ 942.266115] binder: BINDER_SET_CONTEXT_MGR already set [ 942.266122] binder: 31199:31204 ioctl 40046207 0 returned -16 [ 942.266501] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.266517] binder: 31199:31204 transaction failed 29189/-3, size 0-0 line 3133 [ 942.274374] binder: 31177:31183 ioctl c0306201 2000ffd0 returned -14 [ 942.298012] binder: 31180:31185 ioctl c0306201 2000ffd0 returned -14 [ 942.298271] binder: 31176:31187 ioctl c0306201 2000ffd0 returned -14 [ 942.305451] binder: 31181:31184 ioctl c0306201 2000ffd0 returned -14 [ 942.316134] binder: 31182:31189 ioctl c0306201 2000ffd0 returned -14 [ 942.326503] binder: BINDER_SET_CONTEXT_MGR already set [ 942.326511] binder: 31213:31218 ioctl 40046207 0 returned -16 [ 942.352409] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.352425] binder: 31213:31226 transaction failed 29189/-3, size 0-0 line 3133 [ 942.378700] binder: 31213:31218 ioctl c0306201 2000ffd0 returned -14 [ 942.418928] binder: BINDER_SET_CONTEXT_MGR already set [ 942.418936] binder: 31234:31235 ioctl 40046207 0 returned -16 [ 942.420257] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.420277] binder: 31234:31235 transaction failed 29189/-3, size 0-0 line 3133 [ 942.431670] binder: BINDER_SET_CONTEXT_MGR already set [ 942.431679] binder: 31233:31240 ioctl 40046207 0 returned -16 [ 942.432457] binder: BINDER_SET_CONTEXT_MGR already set [ 942.432464] binder: 31237:31243 ioctl 40046207 0 returned -16 [ 942.442915] binder: BINDER_SET_CONTEXT_MGR already set [ 942.442923] binder: 31230:31244 ioctl 40046207 0 returned -16 [ 942.464021] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.464042] binder: 31229:31253 transaction failed 29189/-3, size 0-0 line 3133 [ 942.464158] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.464172] binder: 31233:31255 transaction failed 29189/-3, size 0-0 line 3133 [ 942.464286] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.464301] binder: 31237:31256 transaction failed 29189/-3, size 0-0 line 3133 [ 942.476889] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.476908] binder: 31230:31258 transaction failed 29189/-3, size 0-0 line 3133 [ 942.478524] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.478597] binder: 31231:31252 transaction failed 29189/-3, size 0-0 line 3133 [ 942.492458] binder: BINDER_SET_CONTEXT_MGR already set [ 942.492465] binder: 31259:31260 ioctl 40046207 0 returned -16 [ 942.492863] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.492880] binder: 31259:31260 transaction failed 29189/-3, size 0-0 line 3133 [ 942.520630] binder: 31231:31238 ioctl c0306201 2000ffd0 returned -14 [ 942.521958] binder: 31237:31243 ioctl c0306201 2000ffd0 returned -14 [ 942.522571] binder: 31230:31244 ioctl c0306201 2000ffd0 returned -14 [ 942.549700] binder: 31233:31240 ioctl c0306201 2000ffd0 returned -14 [ 942.574266] binder: 31229:31236 ioctl c0306201 2000ffd0 returned -14 [ 942.575975] binder: BINDER_SET_CONTEXT_MGR already set [ 942.575982] binder: 31275:31279 ioctl 40046207 0 returned -16 [ 942.582929] binder: BINDER_SET_CONTEXT_MGR already set [ 942.582937] binder: 31278:31280 ioctl 40046207 0 returned -16 [ 942.589905] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.589924] binder: 31278:31280 transaction failed 29189/-3, size 0-0 line 3133 [ 942.601459] binder: BINDER_SET_CONTEXT_MGR already set [ 942.601466] binder: 31285:31290 ioctl 40046207 0 returned -16 [ 942.618752] binder: BINDER_SET_CONTEXT_MGR already set [ 942.618760] binder: 31286:31291 ioctl 40046207 0 returned -16 [ 942.620726] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.620743] binder: 31275:31297 transaction failed 29189/-3, size 0-0 line 3133 [ 942.621375] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.621391] binder: 31276:31299 transaction failed 29189/-3, size 0-0 line 3133 [ 942.637162] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.637181] binder: 31285:31303 transaction failed 29189/-3, size 0-0 line 3133 [ 942.647165] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.647186] binder: 31286:31306 transaction failed 29189/-3, size 0-0 line 3133 [ 942.647665] binder: BINDER_SET_CONTEXT_MGR already set [ 942.647671] binder: 31300:31302 ioctl 40046207 0 returned -16 [ 942.648420] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.648438] binder: 31300:31302 transaction failed 29189/-3, size 0-0 line 3133 [ 942.656587] binder: 31275:31279 ioctl c0306201 2000ffd0 returned -14 [ 942.660097] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.660116] binder: 31292:31308 transaction failed 29189/-3, size 0-0 line 3133 [ 942.674410] binder: 31276:31281 ioctl c0306201 2000ffd0 returned -14 [ 942.683250] binder: 31286:31291 ioctl c0306201 2000ffd0 returned -14 [ 942.713587] binder: 31285:31290 ioctl c0306201 2000ffd0 returned -14 [ 942.721566] binder: 31292:31294 ioctl c0306201 2000ffd0 returned -14 [ 942.723122] binder: BINDER_SET_CONTEXT_MGR already set [ 942.723130] binder: 31315:31322 ioctl 40046207 0 returned -16 [ 942.741277] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.741294] binder: 31318:31328 transaction failed 29189/-3, size 0-0 line 3133 [ 942.747881] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.747897] binder: 31315:31329 transaction failed 29189/-3, size 0-0 line 3133 [ 942.765698] binder: 31318:31319 ioctl c0306201 2000ffd0 returned -14 [ 942.775617] binder: 31315:31322 ioctl c0306201 2000ffd0 returned -14 [ 942.803459] binder: BINDER_SET_CONTEXT_MGR already set [ 942.803468] binder: 31332:31339 ioctl 40046207 0 returned -16 [ 942.804970] binder: BINDER_SET_CONTEXT_MGR already set [ 942.804978] binder: 31333:31340 ioctl 40046207 0 returned -16 [ 942.813062] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.813083] binder: 31333:31340 transaction failed 29189/-3, size 0-0 line 3133 [ 942.817558] binder: BINDER_SET_CONTEXT_MGR already set [ 942.817566] binder: 31337:31347 ioctl 40046207 0 returned -16 [ 942.831101] binder: BINDER_SET_CONTEXT_MGR already set [ 942.831113] binder: 31334:31344 ioctl 40046207 0 returned -16 [ 942.842697] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.842717] binder: 31332:31355 transaction failed 29189/-3, size 0-0 line 3133 [ 942.854168] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.854185] binder: 31336:31357 transaction failed 29189/-3, size 0-0 line 3133 [ 942.855318] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.855335] binder: 31337:31356 transaction failed 29189/-3, size 0-0 line 3133 [ 942.857111] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.857128] binder: 31338:31360 transaction failed 29189/-3, size 0-0 line 3133 [ 942.857478] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.857492] binder: 31334:31361 transaction failed 29189/-3, size 0-0 line 3133 [ 942.857906] binder: BINDER_SET_CONTEXT_MGR already set [ 942.857912] binder: 31358:31359 ioctl 40046207 0 returned -16 [ 942.858259] binder_alloc: 12386: binder_alloc_buf, no vma [ 942.858273] binder: 31358:31359 transaction failed 29189/-3, size 0-0 line 3133 [ 942.881952] binder: 31337:31347 ioctl c0306201 2000ffd0 returned -14 [ 942.885858] binder: 31338:31348 ioctl c0306201 2000ffd0 returned -14 [ 942.892389] binder: 31334:31344 ioctl c0306201 2000ffd0 returned -14 [ 942.914905] binder: 31332:31339 ioctl c0306201 2000ffd0 returned -14 [ 942.930731] binder: 31336:31341 ioctl c0306201 2000ffd0 returned -14 [ 942.942825] binder: BINDER_SET_CONTEXT_MGR already set [ 942.942832] binder: 31371:31378 ioctl 40046207 0 returned -16 [ 942.977903] binder: BINDER_SET_CONTEXT_MGR already set [ 942.977911] binder: 31384:31390 ioctl 40046207 0 returned -16 [ 942.995178] binder: BINDER_SET_CONTEXT_MGR already set [ 942.995186] binder: 31392:31399 ioctl 40046207 0 returned -16 [ 943.000251] binder: BINDER_SET_CONTEXT_MGR already set [ 943.000258] binder: 31387:31397 ioctl 40046207 0 returned -16 [ 943.007703] binder: BINDER_SET_CONTEXT_MGR already set [ 943.007713] binder: 31389:31396 ioctl 40046207 0 returned -16 [ 943.011759] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.011777] binder: 31388:31407 transaction failed 29189/-3, size 0-0 line 3133 [ 943.012085] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.012101] binder: 31384:31406 transaction failed 29189/-3, size 0-0 line 3133 [ 943.029625] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.029642] binder: 31385:31410 transaction failed 29189/-3, size 0-0 line 3133 [ 943.029769] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.029781] binder: 31387:31411 transaction failed 29189/-3, size 0-0 line 3133 [ 943.032411] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.032428] binder: 31389:31404 transaction failed 29189/-3, size 0-0 line 3133 [ 943.040966] binder: BINDER_SET_CONTEXT_MGR already set [ 943.040978] binder: 31412:31413 ioctl 40046207 0 returned -16 [ 943.047894] binder: 31384:31390 ioctl c0306201 2000ffd0 returned -14 [ 943.060188] binder: 31385:31391 ioctl c0306201 2000ffd0 returned -14 [ 943.090572] binder: 31388:31395 ioctl c0306201 2000ffd0 returned -14 [ 943.106940] binder: BINDER_SET_CONTEXT_MGR already set [ 943.106948] binder: 31432:31435 ioctl 40046207 0 returned -16 [ 943.107115] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.107131] binder: 31432:31435 transaction failed 29189/-3, size 0-0 line 3133 [ 943.109818] binder: 31387:31397 ioctl c0306201 2000ffd0 returned -14 [ 943.115426] binder: 31389:31396 ioctl c0306201 2000ffd0 returned -14 [ 943.117174] binder: BINDER_SET_CONTEXT_MGR already set [ 943.117181] binder: 31425:31434 ioctl 40046207 0 returned -16 [ 943.149989] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.150010] binder: 31425:31452 transaction failed 29189/-3, size 0-0 line 3133 [ 943.153618] binder: BINDER_SET_CONTEXT_MGR already set [ 943.153624] binder: 31448:31453 ioctl 40046207 0 returned -16 [ 943.159521] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.159538] binder: 31428:31457 transaction failed 29189/-3, size 0-0 line 3133 [ 943.159665] binder: BINDER_SET_CONTEXT_MGR already set [ 943.159671] binder: 31449:31454 ioctl 40046207 0 returned -16 [ 943.166400] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.166417] binder: 31439:31460 transaction failed 29189/-3, size 0-0 line 3133 [ 943.171279] binder: BINDER_SET_CONTEXT_MGR already set [ 943.171286] binder: 31455:31459 ioctl 40046207 0 returned -16 [ 943.171386] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.171402] binder: 31455:31459 transaction failed 29189/-3, size 0-0 line 3133 [ 943.186272] binder: 31425:31434 ioctl c0306201 2000ffd0 returned -14 [ 943.189257] binder: 31428:31438 ioctl c0306201 2000ffd0 returned -14 [ 943.202792] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.202811] binder: 31448:31471 transaction failed 29189/-3, size 0-0 line 3133 [ 943.203231] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.203246] binder: 31449:31468 transaction failed 29189/-3, size 0-0 line 3133 [ 943.231286] binder: 31439:31442 ioctl c0306201 2000ffd0 returned -14 [ 943.269986] binder: 31448:31453 ioctl c0306201 2000ffd0 returned -14 [ 943.272928] binder: 31449:31454 ioctl c0306201 2000ffd0 returned -14 [ 943.326738] binder: BINDER_SET_CONTEXT_MGR already set [ 943.326744] binder: 31488:31500 ioctl 40046207 0 returned -16 [ 943.331639] binder: BINDER_SET_CONTEXT_MGR already set [ 943.331646] binder: 31490:31499 ioctl 40046207 0 returned -16 [ 943.333790] binder: BINDER_SET_CONTEXT_MGR already set [ 943.333797] binder: 31485:31494 ioctl 40046207 0 returned -16 [ 943.335452] binder: BINDER_SET_CONTEXT_MGR already set [ 943.335458] binder: 31491:31497 ioctl 40046207 0 returned -16 [ 943.335559] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.335576] binder: 31491:31497 transaction failed 29189/-3, size 0-0 line 3133 [ 943.354961] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.354997] binder: 31486:31508 transaction failed 29189/-3, size 0-0 line 3133 [ 943.362269] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.362286] binder: 31488:31509 transaction failed 29189/-3, size 0-0 line 3133 [ 943.363992] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.364007] binder: 31485:31512 transaction failed 29189/-3, size 0-0 line 3133 [ 943.364120] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.364133] binder: 31487:31510 transaction failed 29189/-3, size 0-0 line 3133 [ 943.367488] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.367502] binder: 31490:31513 transaction failed 29189/-3, size 0-0 line 3133 [ 943.395765] binder: 31486:31492 ioctl c0306201 2000ffd0 returned -14 [ 943.404545] binder: 31485:31494 ioctl c0306201 2000ffd0 returned -14 [ 943.438772] binder: 31487:31496 ioctl c0306201 2000ffd0 returned -14 [ 943.441536] binder: 31488:31500 ioctl c0306201 2000ffd0 returned -14 [ 943.448358] binder: 31490:31499 ioctl c0306201 2000ffd0 returned -14 [ 943.478177] binder: BINDER_SET_CONTEXT_MGR already set [ 943.478184] binder: 31528:31537 ioctl 40046207 0 returned -16 [ 943.480994] binder: BINDER_SET_CONTEXT_MGR already set [ 943.481002] binder: 31532:31535 ioctl 40046207 0 returned -16 [ 943.490018] binder: BINDER_SET_CONTEXT_MGR already set [ 943.490027] binder: 31530:31539 ioctl 40046207 0 returned -16 [ 943.508263] binder: BINDER_SET_CONTEXT_MGR already set [ 943.508271] binder: 31536:31544 ioctl 40046207 0 returned -16 [ 943.509464] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.509481] binder: 31528:31550 transaction failed 29189/-3, size 0-0 line 3133 [ 943.509830] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.509844] binder: 31532:31551 transaction failed 29189/-3, size 0-0 line 3133 [ 943.511133] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.511150] binder: 31530:31539 transaction failed 29189/-3, size 0-0 line 3133 [ 943.512243] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.512262] binder: 31529:31552 transaction failed 29189/-3, size 0-0 line 3133 [ 943.527614] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.527634] binder: 31533:31554 transaction failed 29189/-3, size 0-0 line 3133 [ 943.541540] binder: 31529:31538 ioctl c0306201 2000ffd0 returned -14 [ 943.550892] binder: 31528:31537 ioctl c0306201 2000ffd0 returned -14 [ 943.551889] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.551907] binder: 31536:31557 transaction failed 29189/-3, size 0-0 line 3133 [ 943.587099] binder: 31532:31535 ioctl c0306201 2000ffd0 returned -14 [ 943.595941] binder: 31536:31544 ioctl c0306201 2000ffd0 returned -14 [ 943.602010] binder: BINDER_SET_CONTEXT_MGR already set [ 943.602018] binder: 31568:31572 ioctl 40046207 0 returned -16 [ 943.602389] binder: 31533:31541 ioctl c0306201 2000ffd0 returned -14 [ 943.610310] binder: BINDER_SET_CONTEXT_MGR already set [ 943.610317] binder: 31565:31571 ioctl 40046207 0 returned -16 [ 943.610746] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.610763] binder: 31565:31571 transaction failed 29189/-3, size 0-0 line 3133 [ 943.623256] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.623274] binder: 31563:31575 transaction failed 29189/-3, size 0-0 line 3133 [ 943.628442] binder: BINDER_SET_CONTEXT_MGR already set [ 943.628448] binder: 31581:31584 ioctl 40046207 0 returned -16 [ 943.635560] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.635621] binder: 31568:31590 transaction failed 29189/-3, size 0-0 line 3133 [ 943.647426] binder: BINDER_SET_CONTEXT_MGR already set [ 943.647434] binder: 31583:31586 ioctl 40046207 0 returned -16 [ 943.650961] binder: 31563:31567 ioctl c0306201 2000ffd0 returned -14 [ 943.672400] binder: BINDER_SET_CONTEXT_MGR already set [ 943.672408] binder: 31596:31599 ioctl 40046207 0 returned -16 [ 943.672747] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.672764] binder: 31596:31599 transaction failed 29189/-3, size 0-0 line 3133 [ 943.679371] binder: 31568:31572 ioctl c0306201 2000ffd0 returned -14 [ 943.685810] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.685828] binder: 31581:31600 transaction failed 29189/-3, size 0-0 line 3133 [ 943.687844] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.687861] binder: 31583:31604 transaction failed 29189/-3, size 0-0 line 3133 [ 943.688136] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.688151] binder: 31587:31605 transaction failed 29189/-3, size 0-0 line 3133 [ 943.720583] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.720599] binder: 31615:31617 transaction failed 29189/-3, size 0-0 line 3133 [ 943.721848] binder: BINDER_SET_CONTEXT_MGR already set [ 943.721855] binder: 31609:31610 ioctl 40046207 0 returned -16 [ 943.724363] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.724381] binder: 31601:31624 transaction failed 29189/-3, size 0-0 line 3133 [ 943.727804] binder: 31583:31586 ioctl c0306201 2000ffd0 returned -14 [ 943.739762] binder: 31581:31584 ioctl c0306201 2000ffd0 returned -14 [ 943.741525] binder: 31587:31591 ioctl c0306201 2000ffd0 returned -14 [ 943.761428] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.761446] binder: 31609:31634 transaction failed 29189/-3, size 0-0 line 3133 [ 943.763099] binder: 31601:31607 ioctl c0306201 2000ffd0 returned -14 [ 943.790073] binder: BINDER_SET_CONTEXT_MGR already set [ 943.790080] binder: 31632:31636 ioctl 40046207 0 returned -16 [ 943.797773] binder: BINDER_SET_CONTEXT_MGR already set [ 943.797780] binder: 31630:31635 ioctl 40046207 0 returned -16 [ 943.799120] binder: 31609:31610 ioctl c0306201 2000ffd0 returned -14 [ 943.813387] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.813405] binder: 31632:31640 transaction failed 29189/-3, size 0-0 line 3133 [ 943.821510] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.821527] binder: 31630:31641 transaction failed 29189/-3, size 0-0 line 3133 [ 943.847824] binder: 31632:31636 ioctl c0306201 2000ffd0 returned -14 [ 943.851124] binder: 31630:31635 ioctl c0306201 2000ffd0 returned -14 [ 943.882759] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.882822] binder: 31646:31651 transaction failed 29189/-3, size 0-0 line 3133 [ 943.888877] binder: BINDER_SET_CONTEXT_MGR already set [ 943.888884] binder: 31648:31658 ioctl 40046207 0 returned -16 [ 943.897010] binder: BINDER_SET_CONTEXT_MGR already set [ 943.897018] binder: 31653:31656 ioctl 40046207 0 returned -16 [ 943.904878] binder: BINDER_SET_CONTEXT_MGR already set [ 943.904887] binder: 31652:31661 ioctl 40046207 0 returned -16 [ 943.921744] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.921762] binder: 31649:31671 transaction failed 29189/-3, size 0-0 line 3133 [ 943.928254] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.928274] binder: 31648:31670 transaction failed 29189/-3, size 0-0 line 3133 [ 943.943310] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.943328] binder: 31653:31673 transaction failed 29189/-3, size 0-0 line 3133 [ 943.943477] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.943491] binder: 31652:31676 transaction failed 29189/-3, size 0-0 line 3133 [ 943.943841] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.943858] binder: 31657:31674 transaction failed 29189/-3, size 0-0 line 3133 [ 943.974155] binder_alloc: 12386: binder_alloc_buf, no vma [ 943.974211] binder: 31678:31679 transaction failed 29189/-3, size 0-0 line 3133 [ 943.981788] binder: 31653:31656 ioctl c0306201 2000ffd0 returned -14 [ 943.986128] binder: 31649:31655 ioctl c0306201 2000ffd0 returned -14 [ 943.999338] binder: 31648:31658 ioctl c0306201 2000ffd0 returned -14 [ 944.022179] binder: 31657:31663 ioctl c0306201 2000ffd0 returned -14 [ 944.037309] binder: 31652:31661 ioctl c0306201 2000ffd0 returned -14 [ 944.097188] binder: BINDER_SET_CONTEXT_MGR already set [ 944.097195] binder: 31699:31702 ioctl 40046207 0 returned -16 [ 944.098988] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.099008] binder: 31699:31702 transaction failed 29189/-3, size 0-0 line 3133 [ 944.108721] binder: BINDER_SET_CONTEXT_MGR already set [ 944.108729] binder: 31704:31711 ioctl 40046207 0 returned -16 [ 944.108991] binder: BINDER_SET_CONTEXT_MGR already set [ 944.108998] binder: 31705:31708 ioctl 40046207 0 returned -16 [ 944.121331] binder: BINDER_SET_CONTEXT_MGR already set [ 944.121340] binder: 31700:31710 ioctl 40046207 0 returned -16 [ 944.136583] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.136601] binder: 31698:31721 transaction failed 29189/-3, size 0-0 line 3133 [ 944.143719] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.143741] binder: 31701:31723 transaction failed 29189/-3, size 0-0 line 3133 [ 944.143809] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.143823] binder: 31705:31724 transaction failed 29189/-3, size 0-0 line 3133 [ 944.153146] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.153166] binder: 31704:31726 transaction failed 29189/-3, size 0-0 line 3133 [ 944.159387] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.159404] binder: 31700:31728 transaction failed 29189/-3, size 0-0 line 3133 [ 944.160077] binder: 31698:31709 ioctl c0306201 2000ffd0 returned -14 [ 944.166798] binder: BINDER_SET_CONTEXT_MGR already set [ 944.166807] binder: 31722:31727 ioctl 40046207 0 returned -16 [ 944.167242] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.167254] binder: 31722:31727 transaction failed 29189/-3, size 0-0 line 3133 [ 944.191644] binder: 31704:31711 ioctl c0306201 2000ffd0 returned -14 [ 944.199788] binder: 31700:31710 ioctl c0306201 2000ffd0 returned -14 [ 944.225515] binder: BINDER_SET_CONTEXT_MGR already set [ 944.225524] binder: 31738:31748 ioctl 40046207 0 returned -16 [ 944.225684] binder: 31701:31707 ioctl c0306201 2000ffd0 returned -14 [ 944.227760] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.227778] binder: 31738:31748 transaction failed 29189/-3, size 0-0 line 3133 [ 944.242692] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.242714] binder: 31735:31747 transaction failed 29189/-3, size 0-0 line 3133 [ 944.259112] binder: 31705:31708 ioctl c0306201 2000ffd0 returned -14 [ 944.263002] binder: BINDER_SET_CONTEXT_MGR already set [ 944.263010] binder: 31745:31754 ioctl 40046207 0 returned -16 [ 944.271967] binder: BINDER_SET_CONTEXT_MGR already set [ 944.271975] binder: 31749:31756 ioctl 40046207 0 returned -16 [ 944.290212] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.290227] binder: 31757:31768 transaction failed 29189/-3, size 0-0 line 3133 [ 944.295801] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.295821] binder: 31749:31760 transaction failed 29189/-3, size 0-0 line 3133 [ 944.298352] binder: BINDER_SET_CONTEXT_MGR already set [ 944.298357] binder: 31766:31769 ioctl 40046207 0 returned -16 [ 944.303910] binder: 31735:31739 ioctl c0306201 2000ffd0 returned -14 [ 944.311159] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.311177] binder: 31745:31772 transaction failed 29189/-3, size 0-0 line 3133 [ 944.335360] binder: 31749:31756 ioctl c0306201 2000ffd0 returned -14 [ 944.338678] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.338696] binder: 31766:31779 transaction failed 29189/-3, size 0-0 line 3133 [ 944.358668] binder: 31757:31761 ioctl c0306201 2000ffd0 returned -14 [ 944.364925] binder: 31745:31754 ioctl c0306201 2000ffd0 returned -14 [ 944.393017] binder: 31766:31769 ioctl c0306201 2000ffd0 returned -14 [ 944.418991] binder: BINDER_SET_CONTEXT_MGR already set [ 944.418999] binder: 31793:31798 ioctl 40046207 0 returned -16 [ 944.437738] binder: BINDER_SET_CONTEXT_MGR already set [ 944.437747] binder: 31792:31800 ioctl 40046207 0 returned -16 [ 944.444550] binder: BINDER_SET_CONTEXT_MGR already set [ 944.444558] binder: 31787:31797 ioctl 40046207 0 returned -16 [ 944.451909] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.451928] binder: 31786:31810 transaction failed 29189/-3, size 0-0 line 3133 [ 944.452186] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.452201] binder: 31793:31808 transaction failed 29189/-3, size 0-0 line 3133 [ 944.461837] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.461858] binder: 31791:31811 transaction failed 29189/-3, size 0-0 line 3133 [ 944.478186] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.478203] binder: 31787:31817 transaction failed 29189/-3, size 0-0 line 3133 [ 944.483730] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.483747] binder: 31792:31816 transaction failed 29189/-3, size 0-0 line 3133 [ 944.502253] binder: 31791:31796 ioctl c0306201 2000ffd0 returned -14 [ 944.510688] binder: 31786:31794 ioctl c0306201 2000ffd0 returned -14 [ 944.527616] binder: 31792:31800 ioctl c0306201 2000ffd0 returned -14 [ 944.539239] binder: 31787:31797 ioctl c0306201 2000ffd0 returned -14 [ 944.552557] binder: 31793:31798 ioctl c0306201 2000ffd0 returned -14 [ 944.567397] binder: BINDER_SET_CONTEXT_MGR already set [ 944.567405] binder: 31839:31842 ioctl 40046207 0 returned -16 [ 944.583731] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.583748] binder: 31836:31851 transaction failed 29189/-3, size 0-0 line 3133 [ 944.591785] binder: BINDER_SET_CONTEXT_MGR already set [ 944.591792] binder: 31845:31850 ioctl 40046207 0 returned -16 [ 944.609262] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.609281] binder: 31833:31857 transaction failed 29189/-3, size 0-0 line 3133 [ 944.609651] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.609665] binder: 31839:31856 transaction failed 29189/-3, size 0-0 line 3133 [ 944.622105] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.622123] binder: 31845:31858 transaction failed 29189/-3, size 0-0 line 3133 [ 944.627178] binder: 31836:31840 ioctl c0306201 2000ffd0 returned -14 [ 944.634981] binder: 31833:31844 ioctl c0306201 2000ffd0 returned -14 [ 944.640526] binder: 31839:31842 ioctl c0306201 2000ffd0 returned -14 [ 944.675289] binder: 31845:31850 ioctl c0306201 2000ffd0 returned -14 [ 944.705744] binder: BINDER_SET_CONTEXT_MGR already set [ 944.705751] binder: 31865:31869 ioctl 40046207 0 returned -16 [ 944.719965] binder: BINDER_SET_CONTEXT_MGR already set [ 944.719972] binder: 31867:31873 ioctl 40046207 0 returned -16 [ 944.730591] binder: BINDER_SET_CONTEXT_MGR already set [ 944.730599] binder: 31866:31875 ioctl 40046207 0 returned -16 [ 944.731154] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.731170] binder: 31866:31875 transaction failed 29189/-3, size 0-0 line 3133 [ 944.732725] binder: BINDER_SET_CONTEXT_MGR already set [ 944.732732] binder: 31872:31878 ioctl 40046207 0 returned -16 [ 944.736809] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.736826] binder: 31865:31886 transaction failed 29189/-3, size 0-0 line 3133 [ 944.762655] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.762671] binder: 31871:31890 transaction failed 29189/-3, size 0-0 line 3133 [ 944.762720] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.762730] binder: 31867:31889 transaction failed 29189/-3, size 0-0 line 3133 [ 944.772681] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.772701] binder: 31872:31894 transaction failed 29189/-3, size 0-0 line 3133 [ 944.780741] binder: 31865:31869 ioctl c0306201 2000ffd0 returned -14 [ 944.783568] binder: 31870:31877 ioctl c0306201 2000ffd0 returned -14 [ 944.798331] binder: BINDER_SET_CONTEXT_MGR already set [ 944.798338] binder: 31898:31899 ioctl 40046207 0 returned -16 [ 944.799004] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.799020] binder: 31898:31899 transaction failed 29189/-3, size 0-0 line 3133 [ 944.820492] binder: BINDER_SET_CONTEXT_MGR already set [ 944.820500] binder: 31904:31910 ioctl 40046207 0 returned -16 [ 944.829239] binder: 31872:31878 ioctl c0306201 2000ffd0 returned -14 [ 944.830480] binder: 31867:31873 ioctl c0306201 2000ffd0 returned -14 [ 944.852879] binder: 31871:31879 ioctl c0306201 2000ffd0 returned -14 [ 944.858093] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.858111] binder: 31904:31921 transaction failed 29189/-3, size 0-0 line 3133 [ 944.883713] binder: 31904:31910 ioctl c0306201 2000ffd0 returned -14 [ 944.904454] binder: 31905:31915 ioctl c0306201 2000ffd0 returned -14 [ 944.963376] binder: BINDER_SET_CONTEXT_MGR already set [ 944.963385] binder: 31926:31936 ioctl 40046207 0 returned -16 [ 944.963746] binder_alloc: 12386: binder_alloc_buf, no vma [ 944.963762] binder: 31926:31936 transaction failed 29189/-3, size 0-0 line 3133 [ 944.967811] binder: BINDER_SET_CONTEXT_MGR already set [ 944.967819] binder: 31930:31940 ioctl 40046207 0 returned -16 [ 944.967957] binder: BINDER_SET_CONTEXT_MGR already set [ 944.967963] binder: 31929:31937 ioctl 40046207 0 returned -16 [ 944.969142] binder: BINDER_SET_CONTEXT_MGR already set [ 944.969148] binder: 31927:31935 ioctl 40046207 0 returned -16 [ 945.005422] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.005441] binder: 31929:31953 transaction failed 29189/-3, size 0-0 line 3133 [ 945.011068] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.011085] binder: 31927:31948 transaction failed 29189/-3, size 0-0 line 3133 [ 945.011656] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.011673] binder: 31930:31951 transaction failed 29189/-3, size 0-0 line 3133 [ 945.017931] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.017951] binder: 31928:31954 transaction failed 29189/-3, size 0-0 line 3133 [ 945.049468] binder: 31930:31940 ioctl c0306201 2000ffd0 returned -14 [ 945.049871] binder: 31931:31934 ioctl c0306201 2000ffd0 returned -14 [ 945.063091] binder: 31929:31937 ioctl c0306201 2000ffd0 returned -14 [ 945.081634] binder: 31927:31935 ioctl c0306201 2000ffd0 returned -14 [ 945.081919] binder: BINDER_SET_CONTEXT_MGR already set [ 945.081925] binder: 31955:31958 ioctl 40046207 0 returned -16 [ 945.082375] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.082390] binder: 31955:31958 transaction failed 29189/-3, size 0-0 line 3133 [ 945.096946] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.096961] binder: 31969:31973 transaction failed 29189/-3, size 0-0 line 3133 [ 945.104131] binder: BINDER_SET_CONTEXT_MGR already set [ 945.104139] binder: 31970:31975 ioctl 40046207 0 returned -16 [ 945.109414] binder: 31928:31939 ioctl c0306201 2000ffd0 returned -14 [ 945.123718] binder: BINDER_SET_CONTEXT_MGR already set [ 945.123727] binder: 31976:31981 ioctl 40046207 0 returned -16 [ 945.130274] binder: BINDER_SET_CONTEXT_MGR already set [ 945.130283] binder: 31983:31987 ioctl 40046207 0 returned -16 [ 945.132874] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.132891] binder: 31970:31994 transaction failed 29189/-3, size 0-0 line 3133 [ 945.138914] binder: BINDER_SET_CONTEXT_MGR already set [ 945.138921] binder: 31988:31993 ioctl 40046207 0 returned -16 [ 945.139939] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.139956] binder: 31988:31993 transaction failed 29189/-3, size 0-0 line 3133 [ 945.167037] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.167054] binder: 31983:32000 transaction failed 29189/-3, size 0-0 line 3133 [ 945.167840] binder: 31970:31975 ioctl c0306201 2000ffd0 returned -14 [ 945.177212] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.177231] binder: 31976:32006 transaction failed 29189/-3, size 0-0 line 3133 [ 945.185361] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.185380] binder: 31989:32005 transaction failed 29189/-3, size 0-0 line 3133 [ 945.196580] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.196601] binder: 32004:32012 transaction failed 29189/-3, size 0-0 line 3133 [ 945.205282] binder: BINDER_SET_CONTEXT_MGR already set [ 945.205290] binder: 32008:32013 ioctl 40046207 0 returned -16 [ 945.206359] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.206376] binder: 32008:32013 transaction failed 29189/-3, size 0-0 line 3133 [ 945.213216] binder: 31976:31981 ioctl c0306201 2000ffd0 returned -14 [ 945.233095] binder: 31983:31987 ioctl c0306201 2000ffd0 returned -14 [ 945.251104] binder: 31989:31995 ioctl c0306201 2000ffd0 returned -14 [ 945.313390] binder: BINDER_SET_CONTEXT_MGR already set [ 945.313398] binder: 32034:32038 ioctl 40046207 0 returned -16 [ 945.315011] binder: BINDER_SET_CONTEXT_MGR already set [ 945.315018] binder: 32031:32040 ioctl 40046207 0 returned -16 [ 945.315668] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.315691] binder: 32031:32040 transaction failed 29189/-3, size 0-0 line 3133 [ 945.320835] binder: BINDER_SET_CONTEXT_MGR already set [ 945.320842] binder: 32030:32043 ioctl 40046207 0 returned -16 [ 945.326039] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.326057] binder: 32032:32041 transaction failed 29189/-3, size 0-0 line 3133 [ 945.339975] binder: BINDER_SET_CONTEXT_MGR already set [ 945.339982] binder: 32033:32039 ioctl 40046207 0 returned -16 [ 945.344891] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.344909] binder: 32034:32053 transaction failed 29189/-3, size 0-0 line 3133 [ 945.352908] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.352928] binder: 32030:32055 transaction failed 29189/-3, size 0-0 line 3133 [ 945.361198] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.361216] binder: 32035:32058 transaction failed 29189/-3, size 0-0 line 3133 [ 945.370457] binder: BINDER_SET_CONTEXT_MGR already set [ 945.370466] binder: 32057:32059 ioctl 40046207 0 returned -16 [ 945.370844] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.370861] binder: 32057:32059 transaction failed 29189/-3, size 0-0 line 3133 [ 945.382605] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.382625] binder: 32033:32060 transaction failed 29189/-3, size 0-0 line 3133 [ 945.424152] binder: 32034:32038 ioctl c0306201 2000ffd0 returned -14 [ 945.427290] binder: 32035:32044 ioctl c0306201 2000ffd0 returned -14 [ 945.451116] binder: 32030:32043 ioctl c0306201 2000ffd0 returned -14 [ 945.457826] binder: 32033:32039 ioctl c0306201 2000ffd0 returned -14 [ 945.499561] binder: BINDER_SET_CONTEXT_MGR already set [ 945.499569] binder: 32074:32083 ioctl 40046207 0 returned -16 [ 945.500068] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.500085] binder: 32074:32083 transaction failed 29189/-3, size 0-0 line 3133 [ 945.501122] binder: BINDER_SET_CONTEXT_MGR already set [ 945.501128] binder: 32077:32084 ioctl 40046207 0 returned -16 [ 945.507656] binder: BINDER_SET_CONTEXT_MGR already set [ 945.507663] binder: 32072:32085 ioctl 40046207 0 returned -16 [ 945.514464] binder: BINDER_SET_CONTEXT_MGR already set [ 945.514471] binder: 32079:32086 ioctl 40046207 0 returned -16 [ 945.521459] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.521519] binder: 32076:32095 transaction failed 29189/-3, size 0-0 line 3133 [ 945.521688] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.521701] binder: 32071:32094 transaction failed 29189/-3, size 0-0 line 3133 [ 945.536304] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.536324] binder: 32072:32098 transaction failed 29189/-3, size 0-0 line 3133 [ 945.577660] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.577691] binder: 32077:32099 transaction failed 29189/-3, size 0-0 line 3133 [ 945.588048] binder: BINDER_SET_CONTEXT_MGR already set [ 945.588054] binder: 32102:32104 ioctl 40046207 0 returned -16 [ 945.589546] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.589563] binder: 32102:32104 transaction failed 29189/-3, size 0-0 line 3133 [ 945.592489] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.592507] binder: 32079:32100 transaction failed 29189/-3, size 0-0 line 3133 [ 945.609709] binder: 32076:32078 ioctl c0306201 2000ffd0 returned -14 [ 945.612371] binder: 32072:32085 ioctl c0306201 2000ffd0 returned -14 [ 945.617619] binder: 32071:32080 ioctl c0306201 2000ffd0 returned -14 [ 945.631814] binder: 32079:32086 ioctl c0306201 2000ffd0 returned -14 [ 945.640657] binder: 32077:32084 ioctl c0306201 2000ffd0 returned -14 [ 945.679342] binder: BINDER_SET_CONTEXT_MGR already set [ 945.679349] binder: 32124:32128 ioctl 40046207 0 returned -16 [ 945.683863] binder: BINDER_SET_CONTEXT_MGR already set [ 945.683870] binder: 32114:32122 ioctl 40046207 0 returned -16 [ 945.702022] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.702043] binder: 32117:32142 transaction failed 29189/-3, size 0-0 line 3133 [ 945.704427] binder: BINDER_SET_CONTEXT_MGR already set [ 945.704438] binder: 32133:32134 ioctl 40046207 0 returned -16 [ 945.704925] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.704941] binder: 32133:32134 transaction failed 29189/-3, size 0-0 line 3133 [ 945.707336] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.707355] binder: 32114:32130 transaction failed 29189/-3, size 0-0 line 3133 [ 945.711418] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.711435] binder: 32127:32136 transaction failed 29189/-3, size 0-0 line 3133 [ 945.716064] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.716079] binder: 32124:32143 transaction failed 29189/-3, size 0-0 line 3133 [ 945.717156] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.717170] binder: 32119:32135 transaction failed 29189/-3, size 0-0 line 3133 [ 945.730116] binder: 32117:32125 ioctl c0306201 2000ffd0 returned -14 [ 945.735950] binder: 32114:32122 ioctl c0306201 2000ffd0 returned -14 [ 945.761936] binder: 32124:32128 ioctl c0306201 2000ffd0 returned -14 [ 945.778187] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.778203] binder: 32137:32157 transaction failed 29189/-3, size 0-0 line 3133 [ 945.785272] binder: 32119:32126 ioctl c0306201 2000ffd0 returned -14 [ 945.816002] binder: 32137:32144 ioctl c0306201 2000ffd0 returned -14 [ 945.862784] binder: BINDER_SET_CONTEXT_MGR already set [ 945.862791] binder: 32165:32173 ioctl 40046207 0 returned -16 [ 945.867792] binder: BINDER_SET_CONTEXT_MGR already set [ 945.867799] binder: 32164:32171 ioctl 40046207 0 returned -16 [ 945.870868] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.870887] binder: 32165:32173 transaction failed 29189/-3, size 0-0 line 3133 [ 945.877556] binder: BINDER_SET_CONTEXT_MGR already set [ 945.877566] binder: 32163:32168 ioctl 40046207 0 returned -16 [ 945.893154] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.893173] binder: 32167:32174 transaction failed 29189/-3, size 0-0 line 3133 [ 945.903083] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.903102] binder: 32164:32187 transaction failed 29189/-3, size 0-0 line 3133 [ 945.904316] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.904332] binder: 32166:32185 transaction failed 29189/-3, size 0-0 line 3133 [ 945.913186] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.913203] binder: 32162:32188 transaction failed 29189/-3, size 0-0 line 3133 [ 945.925820] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.925858] binder: 32163:32192 transaction failed 29189/-3, size 0-0 line 3133 [ 945.932741] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.932925] binder: 32169:32196 transaction failed 29189/-3, size 0-0 line 3133 [ 945.933611] binder: BINDER_SET_CONTEXT_MGR already set [ 945.933619] binder: 32191:32193 ioctl 40046207 0 returned -16 [ 945.934130] binder_alloc: 12386: binder_alloc_buf, no vma [ 945.934147] binder: 32191:32193 transaction failed 29189/-3, size 0-0 line 3133 [ 945.937792] binder: 32162:32175 ioctl c0306201 2000ffd0 returned -14 [ 945.952986] binder: 32164:32171 ioctl c0306201 2000ffd0 returned -14 [ 945.969883] binder: 32163:32168 ioctl c0306201 2000ffd0 returned -14 [ 945.979961] binder: 32166:32170 ioctl c0306201 2000ffd0 returned -14 [ 946.009884] binder: 32169:32177 ioctl c0306201 2000ffd0 returned -14 [ 946.016555] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.016573] binder: 32199:32203 transaction failed 29189/-3, size 0-0 line 3133 [ 946.027707] binder: BINDER_SET_CONTEXT_MGR already set [ 946.027715] binder: 32213:32222 ioctl 40046207 0 returned -16 [ 946.028099] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.028104] binder: BINDER_SET_CONTEXT_MGR already set [ 946.028110] binder: 32214:32218 ioctl 40046207 0 returned -16 [ 946.028117] binder: 32213:32222 transaction failed 29189/-3, size 0-0 line 3133 [ 946.029645] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.029662] binder: 32202:32227 transaction failed 29189/-3, size 0-0 line 3133 [ 946.033658] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.033678] binder: 32207:32233 transaction failed 29189/-3, size 0-0 line 3133 [ 946.055579] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.055598] binder: 32214:32238 transaction failed 29189/-3, size 0-0 line 3133 [ 946.063166] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.063201] binder: 32221:32232 transaction failed 29189/-3, size 0-0 line 3133 [ 946.066757] binder: 32202:32209 ioctl c0306201 2000ffd0 returned -14 [ 946.066847] binder: 32207:32217 ioctl c0306201 2000ffd0 returned -14 [ 946.090757] binder: BINDER_SET_CONTEXT_MGR already set [ 946.090764] binder: 32240:32242 ioctl 40046207 0 returned -16 [ 946.091152] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.091169] binder: 32240:32242 transaction failed 29189/-3, size 0-0 line 3133 [ 946.100184] binder: 32214:32218 ioctl c0306201 2000ffd0 returned -14 [ 946.122863] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.122884] binder: 32228:32256 transaction failed 29189/-3, size 0-0 line 3133 [ 946.135349] binder: 32221:32225 ioctl c0306201 2000ffd0 returned -14 [ 946.143143] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.143161] binder: 32246:32264 transaction failed 29189/-3, size 0-0 line 3133 [ 946.145301] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.145320] binder: 32243:32260 transaction failed 29189/-3, size 0-0 line 3133 [ 946.166588] binder: 32228:32234 ioctl c0306201 2000ffd0 returned -14 [ 946.174754] binder: 32243:32248 ioctl c0306201 2000ffd0 returned -14 [ 946.193017] binder: 32246:32250 ioctl c0306201 2000ffd0 returned -14 [ 946.225463] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.225479] binder: 32270:32275 transaction failed 29189/-3, size 0-0 line 3133 [ 946.227294] binder: BINDER_SET_CONTEXT_MGR already set [ 946.227301] binder: 32268:32279 ioctl 40046207 0 returned -16 [ 946.229948] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.229970] binder: 32268:32279 transaction failed 29189/-3, size 0-0 line 3133 [ 946.240694] binder: BINDER_SET_CONTEXT_MGR already set [ 946.240702] binder: 32272:32280 ioctl 40046207 0 returned -16 [ 946.263480] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.263498] binder: 32269:32291 transaction failed 29189/-3, size 0-0 line 3133 [ 946.271851] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.271872] binder: 32273:32296 transaction failed 29189/-3, size 0-0 line 3133 [ 946.271928] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.271944] binder: 32271:32294 transaction failed 29189/-3, size 0-0 line 3133 [ 946.272001] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.272015] binder: 32277:32295 transaction failed 29189/-3, size 0-0 line 3133 [ 946.274089] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.274107] binder: 32272:32297 transaction failed 29189/-3, size 0-0 line 3133 [ 946.289787] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.289808] binder: 32293:32298 transaction failed 29189/-3, size 0-0 line 3133 [ 946.295669] binder: BINDER_SET_CONTEXT_MGR already set [ 946.295676] binder: 32299:32302 ioctl 40046207 0 returned -16 [ 946.296036] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.296054] binder: 32299:32302 transaction failed 29189/-3, size 0-0 line 3133 [ 946.301542] binder: 32273:32283 ioctl c0306201 2000ffd0 returned -14 [ 946.306531] binder: 32272:32280 ioctl c0306201 2000ffd0 returned -14 [ 946.311769] binder: 32277:32281 ioctl c0306201 2000ffd0 returned -14 [ 946.330170] binder: 32269:32274 ioctl c0306201 2000ffd0 returned -14 [ 946.334399] binder: 32271:32278 ioctl c0306201 2000ffd0 returned -14 [ 946.341498] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.341516] binder: 32311:32314 transaction failed 29189/-3, size 0-0 line 3133 [ 946.349334] binder: BINDER_SET_CONTEXT_MGR already set [ 946.349340] binder: 32315:32320 ioctl 40046207 0 returned -16 [ 946.367471] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.367488] binder: 32322:32326 transaction failed 29189/-3, size 0-0 line 3133 [ 946.371865] binder: BINDER_SET_CONTEXT_MGR already set [ 946.371872] binder: 32318:32324 ioctl 40046207 0 returned -16 [ 946.391401] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.391418] binder: 32315:32329 transaction failed 29189/-3, size 0-0 line 3133 [ 946.399790] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.399808] binder: 32318:32331 transaction failed 29189/-3, size 0-0 line 3133 [ 946.422948] binder: 32315:32320 ioctl c0306201 2000ffd0 returned -14 [ 946.429209] binder: 32318:32324 ioctl c0306201 2000ffd0 returned -14 [ 946.459094] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.459111] binder: 32334:32339 transaction failed 29189/-3, size 0-0 line 3133 [ 946.461894] binder: BINDER_SET_CONTEXT_MGR already set [ 946.461905] binder: 32336:32340 ioctl 40046207 0 returned -16 [ 946.462430] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.462448] binder: 32336:32340 transaction failed 29189/-3, size 0-0 line 3133 [ 946.464961] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.464978] binder: 32338:32341 transaction failed 29189/-3, size 0-0 line 3133 [ 946.491727] binder: BINDER_SET_CONTEXT_MGR already set [ 946.491735] binder: 32342:32351 ioctl 40046207 0 returned -16 [ 946.510491] binder: BINDER_SET_CONTEXT_MGR already set [ 946.510498] binder: 32361:32362 ioctl 40046207 0 returned -16 [ 946.510848] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.510865] binder: 32361:32362 transaction failed 29189/-3, size 0-0 line 3133 [ 946.517661] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.517680] binder: 32335:32363 transaction failed 29189/-3, size 0-0 line 3133 [ 946.524945] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.524963] binder: 32342:32367 transaction failed 29189/-3, size 0-0 line 3133 [ 946.526510] binder: BINDER_SET_CONTEXT_MGR already set [ 946.526517] binder: 32343:32346 ioctl 40046207 0 returned -16 [ 946.528451] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.528470] binder: 32348:32368 transaction failed 29189/-3, size 0-0 line 3133 [ 946.532749] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.532766] binder: 32366:32369 transaction failed 29189/-3, size 0-0 line 3133 [ 946.557146] binder: 32342:32351 ioctl c0306201 2000ffd0 returned -14 [ 946.561322] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.561337] binder: 32370:32374 transaction failed 29189/-3, size 0-0 line 3133 [ 946.569719] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.569740] binder: 32343:32382 transaction failed 29189/-3, size 0-0 line 3133 [ 946.572355] binder: 32335:32345 ioctl c0306201 2000ffd0 returned -14 [ 946.582872] binder: BINDER_SET_CONTEXT_MGR already set [ 946.582880] binder: 32375:32376 ioctl 40046207 0 returned -16 [ 946.583280] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.583296] binder: 32375:32376 transaction failed 29189/-3, size 0-0 line 3133 [ 946.618145] binder: 32348:32352 ioctl c0306201 2000ffd0 returned -14 [ 946.628185] binder: 32343:32346 ioctl c0306201 2000ffd0 returned -14 [ 946.682520] binder: BINDER_SET_CONTEXT_MGR already set [ 946.682529] binder: 32396:32405 ioctl 40046207 0 returned -16 [ 946.684526] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.684544] binder: 32396:32405 transaction failed 29189/-3, size 0-0 line 3133 [ 946.690009] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.690025] binder: 32399:32406 transaction failed 29189/-3, size 0-0 line 3133 [ 946.693230] binder: BINDER_SET_CONTEXT_MGR already set [ 946.693236] binder: 32401:32409 ioctl 40046207 0 returned -16 [ 946.717344] binder: BINDER_SET_CONTEXT_MGR already set [ 946.717352] binder: 32403:32411 ioctl 40046207 0 returned -16 [ 946.719993] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.720010] binder: 32398:32422 transaction failed 29189/-3, size 0-0 line 3133 [ 946.722538] binder: BINDER_SET_CONTEXT_MGR already set [ 946.722545] binder: 32421:32426 ioctl 40046207 0 returned -16 [ 946.729177] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.729193] binder: 32421:32426 transaction failed 29189/-3, size 0-0 line 3133 [ 946.730842] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.730862] binder: 32397:32428 transaction failed 29189/-3, size 0-0 line 3133 [ 946.738810] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.738828] binder: 32401:32425 transaction failed 29189/-3, size 0-0 line 3133 [ 946.747599] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.747618] binder: 32403:32433 transaction failed 29189/-3, size 0-0 line 3133 [ 946.777913] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.777930] binder: 32432:32435 transaction failed 29189/-3, size 0-0 line 3133 [ 946.780308] binder: 32401:32409 ioctl c0306201 2000ffd0 returned -14 [ 946.785470] binder: 32398:32404 ioctl c0306201 2000ffd0 returned -14 [ 946.794360] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.794385] binder: 32429:32451 transaction failed 29189/-3, size 0-0 line 3133 [ 946.794573] binder: 32397:32408 ioctl c0306201 2000ffd0 returned -14 [ 946.813519] binder: 32403:32411 ioctl c0306201 2000ffd0 returned -14 [ 946.824178] binder: BINDER_SET_CONTEXT_MGR already set [ 946.824185] binder: 32453:32454 ioctl 40046207 0 returned -16 [ 946.830311] binder: 32429:32431 ioctl c0306201 2000ffd0 returned -14 [ 946.834584] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.834643] binder: 32453:32454 transaction failed 29189/-3, size 0-0 line 3133 [ 946.838093] binder: BINDER_SET_CONTEXT_MGR already set [ 946.838101] binder: 32439:32447 ioctl 40046207 0 returned -16 [ 946.838598] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.838616] binder: 32439:32447 transaction failed 29189/-3, size 0-0 line 3133 [ 946.866252] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.866269] binder: 32452:32468 transaction failed 29189/-3, size 0-0 line 3133 [ 946.870453] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.870468] binder: 32464:32466 transaction failed 29189/-3, size 0-0 line 3133 [ 946.888044] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.888064] binder: 32456:32474 transaction failed 29189/-3, size 0-0 line 3133 [ 946.915660] binder: 32452:32455 ioctl c0306201 2000ffd0 returned -14 [ 946.967271] binder: BINDER_SET_CONTEXT_MGR already set [ 946.967278] binder: 32484:32490 ioctl 40046207 0 returned -16 [ 946.967939] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.967960] binder: 32484:32490 transaction failed 29189/-3, size 0-0 line 3133 [ 946.970823] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.970838] binder: 32483:32493 transaction failed 29189/-3, size 0-0 line 3133 [ 946.996326] binder: BINDER_SET_CONTEXT_MGR already set [ 946.996334] binder: 32485:32495 ioctl 40046207 0 returned -16 [ 946.996734] binder_alloc: 12386: binder_alloc_buf, no vma [ 946.996751] binder: 32485:32495 transaction failed 29189/-3, size 0-0 line 3133 [ 947.015606] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.015625] binder: 32481:32510 transaction failed 29189/-3, size 0-0 line 3133 [ 947.015802] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.015815] binder: 32486:32509 transaction failed 29189/-3, size 0-0 line 3133 [ 947.015986] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.016000] binder: 32487:32504 transaction failed 29189/-3, size 0-0 line 3133 [ 947.017540] binder: BINDER_SET_CONTEXT_MGR already set [ 947.017547] binder: 32482:32492 ioctl 40046207 0 returned -16 [ 947.026599] binder: BINDER_SET_CONTEXT_MGR already set [ 947.026606] binder: 32508:32511 ioctl 40046207 0 returned -16 [ 947.027023] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.027038] binder: 32508:32511 transaction failed 29189/-3, size 0-0 line 3133 [ 947.045194] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.045212] binder: 32512:32515 transaction failed 29189/-3, size 0-0 line 3133 [ 947.053915] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.053934] binder: 32482:32519 transaction failed 29189/-3, size 0-0 line 3133 [ 947.061766] binder: 32481:32489 ioctl c0306201 2000ffd0 returned -14 [ 947.082399] binder: BINDER_SET_CONTEXT_MGR already set [ 947.082406] binder: 32517:32525 ioctl 40046207 0 returned -16 [ 947.084301] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.084316] binder: 32517:32525 transaction failed 29189/-3, size 0-0 line 3133 [ 947.101831] binder: 32486:32488 ioctl c0306201 2000ffd0 returned -14 [ 947.120736] binder: 32482:32492 ioctl c0306201 2000ffd0 returned -14 [ 947.151553] binder: BINDER_SET_CONTEXT_MGR already set [ 947.151561] binder: 32536:32542 ioctl 40046207 0 returned -16 [ 947.154310] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.155152] binder: 32536:32542 transaction failed 29189/-3, size 0-0 line 3133 [ 947.159113] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.159138] binder: 32540:32545 transaction failed 29189/-3, size 0-0 line 3133 [ 947.162611] binder: BINDER_SET_CONTEXT_MGR already set [ 947.162618] binder: 32541:32550 ioctl 40046207 0 returned -16 [ 947.165850] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.165869] binder: 32541:32550 transaction failed 29189/-3, size 0-0 line 3133 [ 947.181196] binder: BINDER_SET_CONTEXT_MGR already set [ 947.181203] binder: 32546:32551 ioctl 40046207 0 returned -16 [ 947.199944] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.199963] binder: 32537:32558 transaction failed 29189/-3, size 0-0 line 3133 [ 947.200149] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.200163] binder: 32538:32562 transaction failed 29189/-3, size 0-0 line 3133 [ 947.206935] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.206956] binder: 32539:32564 transaction failed 29189/-3, size 0-0 line 3133 [ 947.218606] binder: BINDER_SET_CONTEXT_MGR already set [ 947.218615] binder: 32566:32569 ioctl 40046207 0 returned -16 [ 947.219696] binder: BINDER_SET_CONTEXT_MGR already set [ 947.219703] binder: 32565:32570 ioctl 40046207 0 returned -16 [ 947.219855] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.219871] binder: 32566:32569 transaction failed 29189/-3, size 0-0 line 3133 [ 947.220608] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.220633] binder: 32565:32570 transaction failed 29189/-3, size 0-0 line 3133 [ 947.221882] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.221898] binder: 32567:32568 transaction failed 29189/-3, size 0-0 line 3133 [ 947.222567] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.222582] binder: 32546:32572 transaction failed 29189/-3, size 0-0 line 3133 [ 947.249344] binder: 32546:32551 ioctl c0306201 2000ffd0 returned -14 [ 947.249446] binder: 32538:32544 ioctl c0306201 2000ffd0 returned -14 [ 947.281138] binder: BINDER_SET_CONTEXT_MGR already set [ 947.281146] binder: 32587:32588 ioctl 40046207 0 returned -16 [ 947.281596] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.281614] binder: 32587:32588 transaction failed 29189/-3, size 0-0 line 3133 [ 947.306540] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.306559] binder: 32585:32592 transaction failed 29189/-3, size 0-0 line 3133 [ 947.310208] binder: 32537:32543 ioctl c0306201 2000ffd0 returned -14 [ 947.340097] binder: BINDER_SET_CONTEXT_MGR already set [ 947.340104] binder: 32582:32598 ioctl 40046207 0 returned -16 [ 947.340563] binder: BINDER_SET_CONTEXT_MGR already set [ 947.340568] binder: 32596:32605 ioctl 40046207 0 returned -16 [ 947.343393] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.343411] binder: 32582:32598 transaction failed 29189/-3, size 0-0 line 3133 [ 947.350376] binder: BINDER_SET_CONTEXT_MGR already set [ 947.350383] binder: 32614:32618 ioctl 40046207 0 returned -16 [ 947.351606] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.351628] binder: 32586:32615 transaction failed 29189/-3, size 0-0 line 3133 [ 947.366548] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.366564] binder: 32611:32617 transaction failed 29189/-3, size 0-0 line 3133 [ 947.368543] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.368561] binder: 32602:32624 transaction failed 29189/-3, size 0-0 line 3133 [ 947.370439] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.370456] binder: 32596:32625 transaction failed 29189/-3, size 0-0 line 3133 [ 947.385227] binder: 32586:32591 ioctl c0306201 2000ffd0 returned -14 [ 947.394015] binder: BINDER_SET_CONTEXT_MGR already set [ 947.394022] binder: 32626:32627 ioctl 40046207 0 returned -16 [ 947.394395] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.394412] binder: 32626:32627 transaction failed 29189/-3, size 0-0 line 3133 [ 947.396062] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.396080] binder: 32613:32632 transaction failed 29189/-3, size 0-0 line 3133 [ 947.402119] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.402137] binder: 32614:32634 transaction failed 29189/-3, size 0-0 line 3133 [ 947.412210] binder: 32596:32605 ioctl c0306201 2000ffd0 returned -14 [ 947.433463] binder: 32602:32608 ioctl c0306201 2000ffd0 returned -14 [ 947.444928] binder: 32614:32618 ioctl c0306201 2000ffd0 returned -14 [ 947.468531] binder: 32613:32621 ioctl c0306201 2000ffd0 returned -14 [ 947.499455] binder: BINDER_SET_CONTEXT_MGR already set [ 947.499463] binder: 32644:32653 ioctl 40046207 0 returned -16 [ 947.512726] binder: BINDER_SET_CONTEXT_MGR already set [ 947.512733] binder: 32648:32657 ioctl 40046207 0 returned -16 [ 947.517929] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.517951] binder: 32648:32657 transaction failed 29189/-3, size 0-0 line 3133 [ 947.520215] binder: BINDER_SET_CONTEXT_MGR already set [ 947.520222] binder: 32645:32659 ioctl 40046207 0 returned -16 [ 947.521441] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.521457] binder: 32647:32655 transaction failed 29189/-3, size 0-0 line 3133 [ 947.532988] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.533005] binder: 32644:32667 transaction failed 29189/-3, size 0-0 line 3133 [ 947.544412] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.544432] binder: 32646:32668 transaction failed 29189/-3, size 0-0 line 3133 [ 947.546562] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.546581] binder: 32645:32673 transaction failed 29189/-3, size 0-0 line 3133 [ 947.546690] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.546705] binder: 32651:32675 transaction failed 29189/-3, size 0-0 line 3133 [ 947.549483] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.549499] binder: 32649:32672 transaction failed 29189/-3, size 0-0 line 3133 [ 947.556609] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.556624] binder: 32674:32677 transaction failed 29189/-3, size 0-0 line 3133 [ 947.570860] binder: BINDER_SET_CONTEXT_MGR already set [ 947.570867] binder: 32676:32679 ioctl 40046207 0 returned -16 [ 947.574972] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.574989] binder: 32676:32679 transaction failed 29189/-3, size 0-0 line 3133 [ 947.579855] binder: 32644:32653 ioctl c0306201 2000ffd0 returned -14 [ 947.588036] binder: 32646:32654 ioctl c0306201 2000ffd0 returned -14 [ 947.596369] binder: 32645:32659 ioctl c0306201 2000ffd0 returned -14 [ 947.604515] binder: 32649:32656 ioctl c0306201 2000ffd0 returned -14 [ 947.623244] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.623261] binder: 32685:32689 transaction failed 29189/-3, size 0-0 line 3133 [ 947.629065] binder: 32651:32658 ioctl c0306201 2000ffd0 returned -14 [ 947.672709] binder: BINDER_SET_CONTEXT_MGR already set [ 947.672716] binder: 32702:32709 ioctl 40046207 0 returned -16 [ 947.673488] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.673506] binder: 32704:32711 transaction failed 29189/-3, size 0-0 line 3133 [ 947.673615] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.673630] binder: 32702:32709 transaction failed 29189/-3, size 0-0 line 3133 [ 947.677110] binder: BINDER_SET_CONTEXT_MGR already set [ 947.677118] binder: 32705:32710 ioctl 40046207 0 returned -16 [ 947.682958] binder: BINDER_SET_CONTEXT_MGR already set [ 947.682966] binder: 32698:32708 ioctl 40046207 0 returned -16 [ 947.708639] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.708657] binder: 32701:32724 transaction failed 29189/-3, size 0-0 line 3133 [ 947.710008] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.710024] binder: 32698:32729 transaction failed 29189/-3, size 0-0 line 3133 [ 947.716010] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.716029] binder: 32705:32725 transaction failed 29189/-3, size 0-0 line 3133 [ 947.716315] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.716329] binder: 32703:32726 transaction failed 29189/-3, size 0-0 line 3133 [ 947.716431] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.716445] binder: 32699:32727 transaction failed 29189/-3, size 0-0 line 3133 [ 947.719670] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.719686] binder: 32730:32732 transaction failed 29189/-3, size 0-0 line 3133 [ 947.724914] binder: BINDER_SET_CONTEXT_MGR already set [ 947.724920] binder: 32728:32731 ioctl 40046207 0 returned -16 [ 947.725537] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.725556] binder: 32728:32731 transaction failed 29189/-3, size 0-0 line 3133 [ 947.752168] binder: 32699:32706 ioctl c0306201 2000ffd0 returned -14 [ 947.760593] binder: 32705:32710 ioctl c0306201 2000ffd0 returned -14 [ 947.778732] binder: 32703:32712 ioctl c0306201 2000ffd0 returned -14 [ 947.804549] binder: BINDER_SET_CONTEXT_MGR already set [ 947.804557] binder: 32750:32754 ioctl 40046207 0 returned -16 [ 947.806516] binder: BINDER_SET_CONTEXT_MGR already set [ 947.806525] binder: 32749:32753 ioctl 40046207 0 returned -16 [ 947.807130] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.807147] binder: 32750:32754 transaction failed 29189/-3, size 0-0 line 3133 [ 947.816684] binder: 32701:32713 ioctl c0306201 2000ffd0 returned -14 [ 947.823982] binder: BINDER_SET_CONTEXT_MGR already set [ 947.823991] binder: 32751:32760 ioctl 40046207 0 returned -16 [ 947.826807] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.826823] binder: 32755:32762 transaction failed 29189/-3, size 0-0 line 3133 [ 947.839972] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.839990] binder: 32748:306 transaction failed 29189/-3, size 0-0 line 3133 [ 947.843099] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.843117] binder: 32749:304 transaction failed 29189/-3, size 0-0 line 3133 [ 947.860195] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.860214] binder: 32751:309 transaction failed 29189/-3, size 0-0 line 3133 [ 947.868584] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.868601] binder: 311:312 transaction failed 29189/-3, size 0-0 line 3133 [ 947.869288] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.869303] binder: 32756:314 transaction failed 29189/-3, size 0-0 line 3133 [ 947.870582] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.870600] binder: 302:313 transaction failed 29189/-3, size 0-0 line 3133 [ 947.872530] binder: 32748:32758 ioctl c0306201 2000ffd0 returned -14 [ 947.873133] binder: BINDER_SET_CONTEXT_MGR already set [ 947.873141] binder: 310:315 ioctl 40046207 0 returned -16 [ 947.873944] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.873959] binder: 310:315 transaction failed 29189/-3, size 0-0 line 3133 [ 947.895493] binder: 32749:32753 ioctl c0306201 2000ffd0 returned -14 [ 947.948692] binder: 302:303 ioctl c0306201 2000ffd0 returned -14 [ 947.955695] binder: 32756:32764 ioctl c0306201 2000ffd0 returned -14 [ 947.988275] binder: BINDER_SET_CONTEXT_MGR already set [ 947.988282] binder: 331:337 ioctl 40046207 0 returned -16 [ 947.992673] binder: BINDER_SET_CONTEXT_MGR already set [ 947.992679] binder: 333:339 ioctl 40046207 0 returned -16 [ 947.993102] binder_alloc: 12386: binder_alloc_buf, no vma [ 947.993119] binder: 333:339 transaction failed 29189/-3, size 0-0 line 3133 [ 948.004458] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.004479] binder: 332:346 transaction failed 29189/-3, size 0-0 line 3133 [ 948.031169] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.031185] binder: 331:356 transaction failed 29189/-3, size 0-0 line 3133 [ 948.037471] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.037488] binder: 338:359 transaction failed 29189/-3, size 0-0 line 3133 [ 948.038401] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.038418] binder: 336:361 transaction failed 29189/-3, size 0-0 line 3133 [ 948.040447] binder: BINDER_SET_CONTEXT_MGR already set [ 948.040454] binder: 334:340 ioctl 40046207 0 returned -16 [ 948.045746] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.045765] binder: 341:360 transaction failed 29189/-3, size 0-0 line 3133 [ 948.048625] binder: BINDER_SET_CONTEXT_MGR already set [ 948.048631] binder: 362:364 ioctl 40046207 0 returned -16 [ 948.049278] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.049294] binder: 362:364 transaction failed 29189/-3, size 0-0 line 3133 [ 948.053485] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.053503] binder: 363:365 transaction failed 29189/-3, size 0-0 line 3133 [ 948.066739] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.066757] binder: 334:358 transaction failed 29189/-3, size 0-0 line 3133 [ 948.074809] binder: 331:337 ioctl c0306201 2000ffd0 returned -14 [ 948.089555] binder: 341:348 ioctl c0306201 2000ffd0 returned -14 [ 948.102335] binder: 338:342 ioctl c0306201 2000ffd0 returned -14 [ 948.127752] binder: 336:345 ioctl c0306201 2000ffd0 returned -14 [ 948.128130] binder: BINDER_SET_CONTEXT_MGR already set [ 948.128138] binder: 377:382 ioctl 40046207 0 returned -16 [ 948.131668] binder: BINDER_SET_CONTEXT_MGR already set [ 948.131675] binder: 378:380 ioctl 40046207 0 returned -16 [ 948.134198] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.134214] binder: 378:380 transaction failed 29189/-3, size 0-0 line 3133 [ 948.151568] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.151586] binder: 377:391 transaction failed 29189/-3, size 0-0 line 3133 [ 948.177199] binder: 377:382 ioctl c0306201 2000ffd0 returned -14 [ 948.210163] binder: BINDER_SET_CONTEXT_MGR already set [ 948.210170] binder: 396:406 ioctl 40046207 0 returned -16 [ 948.210581] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.210599] binder: 396:406 transaction failed 29189/-3, size 0-0 line 3133 [ 948.225246] binder: BINDER_SET_CONTEXT_MGR already set [ 948.225255] binder: 398:405 ioctl 40046207 0 returned -16 [ 948.227310] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.227328] binder: 399:401 transaction failed 29189/-3, size 0-0 line 3133 [ 948.229938] binder: BINDER_SET_CONTEXT_MGR already set [ 948.229944] binder: 393:402 ioctl 40046207 0 returned -16 [ 948.240516] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.240537] binder: 394:417 transaction failed 29189/-3, size 0-0 line 3133 [ 948.249897] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.249919] binder: 397:419 transaction failed 29189/-3, size 0-0 line 3133 [ 948.261932] binder: BINDER_SET_CONTEXT_MGR already set [ 948.261940] binder: 418:420 ioctl 40046207 0 returned -16 [ 948.263103] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.263123] binder: 418:420 transaction failed 29189/-3, size 0-0 line 3133 [ 948.269718] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.269739] binder: 395:425 transaction failed 29189/-3, size 0-0 line 3133 [ 948.270883] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.270901] binder: 393:426 transaction failed 29189/-3, size 0-0 line 3133 [ 948.281693] binder: 394:403 ioctl c0306201 2000ffd0 returned -14 [ 948.283746] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.283760] binder: 428:431 transaction failed 29189/-3, size 0-0 line 3133 [ 948.305161] binder: 398:405 ioctl c0306201 2000ffd0 returned -14 [ 948.313022] binder: 393:402 ioctl c0306201 2000ffd0 returned -14 [ 948.327777] binder: 395:407 ioctl c0306201 2000ffd0 returned -14 [ 948.328054] binder: 397:404 ioctl c0306201 2000ffd0 returned -14 [ 948.355904] binder: BINDER_SET_CONTEXT_MGR already set [ 948.355914] binder: 437:447 ioctl 40046207 0 returned -16 [ 948.357056] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.357073] binder: 437:447 transaction failed 29189/-3, size 0-0 line 3133 [ 948.359045] binder: BINDER_SET_CONTEXT_MGR already set [ 948.359052] binder: 445:455 ioctl 40046207 0 returned -16 [ 948.367145] binder: BINDER_SET_CONTEXT_MGR already set [ 948.367152] binder: 448:452 ioctl 40046207 0 returned -16 [ 948.379703] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.379720] binder: 459:464 transaction failed 29189/-3, size 0-0 line 3133 [ 948.381391] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.381408] binder: 438:471 transaction failed 29189/-3, size 0-0 line 3133 [ 948.392813] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.392830] binder: 448:461 transaction failed 29189/-3, size 0-0 line 3133 [ 948.406061] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.406079] binder: 453:474 transaction failed 29189/-3, size 0-0 line 3133 [ 948.407589] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.407605] binder: 458:475 transaction failed 29189/-3, size 0-0 line 3133 [ 948.424561] binder: 448:452 ioctl c0306201 2000ffd0 returned -14 [ 948.432838] binder: 438:449 ioctl c0306201 2000ffd0 returned -14 [ 948.467287] binder: 453:462 ioctl c0306201 2000ffd0 returned -14 [ 948.471332] binder: 458:463 ioctl c0306201 2000ffd0 returned -14 [ 948.472390] binder: 445:455 ioctl c0306201 2000ffd0 returned -14 [ 948.512804] binder: BINDER_SET_CONTEXT_MGR already set [ 948.512811] binder: 492:493 ioctl 40046207 0 returned -16 [ 948.515381] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.515399] binder: 490:496 transaction failed 29189/-3, size 0-0 line 3133 [ 948.520517] binder: BINDER_SET_CONTEXT_MGR already set [ 948.520524] binder: 489:498 ioctl 40046207 0 returned -16 [ 948.523349] binder: BINDER_SET_CONTEXT_MGR already set [ 948.523358] binder: 497:501 ioctl 40046207 0 returned -16 [ 948.526292] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.526312] binder: 497:501 transaction failed 29189/-3, size 0-0 line 3133 [ 948.546674] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.546692] binder: 494:512 transaction failed 29189/-3, size 0-0 line 3133 [ 948.555893] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.555911] binder: 489:527 transaction failed 29189/-3, size 0-0 line 3133 [ 948.560246] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.560392] binder: 491:517 transaction failed 29189/-3, size 0-0 line 3133 [ 948.562579] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.562597] binder: 488:524 transaction failed 29189/-3, size 0-0 line 3133 [ 948.572043] binder: BINDER_SET_CONTEXT_MGR already set [ 948.572050] binder: 529:530 ioctl 40046207 0 returned -16 [ 948.572772] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.572788] binder: 529:530 transaction failed 29189/-3, size 0-0 line 3133 [ 948.584166] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.584183] binder: 528:531 transaction failed 29189/-3, size 0-0 line 3133 [ 948.590709] binder: 488:502 ioctl c0306201 2000ffd0 returned -14 [ 948.599258] binder: 489:498 ioctl c0306201 2000ffd0 returned -14 [ 948.601517] binder: 492:493 ioctl c0306201 2000ffd0 returned -14 [ 948.626584] binder: 494:499 ioctl c0306201 2000ffd0 returned -14 [ 948.638770] binder: 491:500 ioctl c0306201 2000ffd0 returned -14 [ 948.658441] binder: BINDER_SET_CONTEXT_MGR already set [ 948.658449] binder: 549:552 ioctl 40046207 0 returned -16 [ 948.665775] binder: BINDER_SET_CONTEXT_MGR already set [ 948.665783] binder: 547:554 ioctl 40046207 0 returned -16 [ 948.676363] binder: BINDER_SET_CONTEXT_MGR already set [ 948.676370] binder: 559:562 ioctl 40046207 0 returned -16 [ 948.676449] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.676464] binder: 557:561 transaction failed 29189/-3, size 0-0 line 3133 [ 948.677029] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.677042] binder: 559:562 transaction failed 29189/-3, size 0-0 line 3133 [ 948.689790] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.689809] binder: 546:565 transaction failed 29189/-3, size 0-0 line 3133 [ 948.701924] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.701942] binder: 547:572 transaction failed 29189/-3, size 0-0 line 3133 [ 948.711573] binder: 549:552 ioctl c0306201 2000ffd0 returned -14 [ 948.724441] binder: 546:550 ioctl c0306201 2000ffd0 returned -14 [ 948.733259] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.733277] binder: 564:577 transaction failed 29189/-3, size 0-0 line 3133 [ 948.754091] binder: 547:554 ioctl c0306201 2000ffd0 returned -14 [ 948.780175] binder: 564:569 ioctl c0306201 2000ffd0 returned -14 [ 948.815305] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.815322] binder: 585:592 transaction failed 29189/-3, size 0-0 line 3133 [ 948.816977] binder: BINDER_SET_CONTEXT_MGR already set [ 948.816984] binder: 584:593 ioctl 40046207 0 returned -16 [ 948.817404] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.817420] binder: 584:593 transaction failed 29189/-3, size 0-0 line 3133 [ 948.821547] binder: BINDER_SET_CONTEXT_MGR already set [ 948.821556] binder: 587:595 ioctl 40046207 0 returned -16 [ 948.828985] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.829001] binder: 589:597 transaction failed 29189/-3, size 0-0 line 3133 [ 948.835489] binder: BINDER_SET_CONTEXT_MGR already set [ 948.835495] binder: 590:598 ioctl 40046207 0 returned -16 [ 948.847664] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.847683] binder: 586:609 transaction failed 29189/-3, size 0-0 line 3133 [ 948.868423] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.868438] binder: 591:616 transaction failed 29189/-3, size 0-0 line 3133 [ 948.870124] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.870141] binder: 590:619 transaction failed 29189/-3, size 0-0 line 3133 [ 948.876543] binder: 586:594 ioctl c0306201 2000ffd0 returned -14 [ 948.890700] binder: 587:595 ioctl c0306201 2000ffd0 returned -14 [ 948.910186] binder: 590:598 ioctl c0306201 2000ffd0 returned -14 [ 948.910724] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.910740] binder: 608:614 transaction failed 29189/-3, size 0-0 line 3133 [ 948.931830] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.931845] binder: 632:636 transaction failed 29189/-3, size 0-0 line 3133 [ 948.947162] binder: BINDER_SET_CONTEXT_MGR already set [ 948.947170] binder: 633:638 ioctl 40046207 0 returned -16 [ 948.950832] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.950854] binder: 627:647 transaction failed 29189/-3, size 0-0 line 3133 [ 948.953259] binder: 591:599 ioctl c0306201 2000ffd0 returned -14 [ 948.953503] binder: BINDER_SET_CONTEXT_MGR already set [ 948.953509] binder: 637:640 ioctl 40046207 0 returned -16 [ 948.954153] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.954170] binder: 621:643 transaction failed 29189/-3, size 0-0 line 3133 [ 948.981489] binder_alloc: 12386: binder_alloc_buf, no vma [ 948.981505] binder: 637:656 transaction failed 29189/-3, size 0-0 line 3133 [ 948.984831] binder: 627:630 ioctl c0306201 2000ffd0 returned -14 [ 949.028847] binder: 637:640 ioctl c0306201 2000ffd0 returned -14 [ 949.047100] binder: 633:638 ioctl c0306201 2000ffd0 returned -14 [ 949.087533] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.087550] binder: 661:673 transaction failed 29189/-3, size 0-0 line 3133 [ 949.089628] binder: BINDER_SET_CONTEXT_MGR already set [ 949.089635] binder: 666:669 ioctl 40046207 0 returned -16 [ 949.090070] binder: BINDER_SET_CONTEXT_MGR already set [ 949.090077] binder: 667:671 ioctl 40046207 0 returned -16 [ 949.108685] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.108703] binder: 660:687 transaction failed 29189/-3, size 0-0 line 3133 [ 949.124720] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.124739] binder: 667:689 transaction failed 29189/-3, size 0-0 line 3133 [ 949.125092] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.125107] binder: 666:688 transaction failed 29189/-3, size 0-0 line 3133 [ 949.127832] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.127848] binder: 664:684 transaction failed 29189/-3, size 0-0 line 3133 [ 949.132442] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.132462] binder: 665:691 transaction failed 29189/-3, size 0-0 line 3133 [ 949.149373] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.149388] binder: 692:695 transaction failed 29189/-3, size 0-0 line 3133 [ 949.157080] binder: 664:668 ioctl c0306201 2000ffd0 returned -14 [ 949.169388] binder: 666:669 ioctl c0306201 2000ffd0 returned -14 [ 949.169517] binder: 667:671 ioctl c0306201 2000ffd0 returned -14 [ 949.181661] binder: 660:670 ioctl c0306201 2000ffd0 returned -14 [ 949.209127] binder: BINDER_SET_CONTEXT_MGR already set [ 949.209135] binder: 712:716 ioctl 40046207 0 returned -16 [ 949.228184] binder: 665:676 ioctl c0306201 2000ffd0 returned -14 [ 949.231530] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.231547] binder: 706:729 transaction failed 29189/-3, size 0-0 line 3133 [ 949.231627] binder: BINDER_SET_CONTEXT_MGR already set [ 949.231633] binder: 714:719 ioctl 40046207 0 returned -16 [ 949.232184] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.232198] binder: 714:719 transaction failed 29189/-3, size 0-0 line 3133 [ 949.240936] binder: BINDER_SET_CONTEXT_MGR already set [ 949.240945] binder: 715:722 ioctl 40046207 0 returned -16 [ 949.241312] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.241331] binder: 712:730 transaction failed 29189/-3, size 0-0 line 3133 [ 949.263452] binder: 706:711 ioctl c0306201 2000ffd0 returned -14 [ 949.276523] binder: 712:716 ioctl c0306201 2000ffd0 returned -14 [ 949.283872] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.283890] binder: 718:736 transaction failed 29189/-3, size 0-0 line 3133 [ 949.288739] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.288758] binder: 715:735 transaction failed 29189/-3, size 0-0 line 3133 [ 949.316161] binder: 718:725 ioctl c0306201 2000ffd0 returned -14 [ 949.334306] binder: 715:722 ioctl c0306201 2000ffd0 returned -14 [ 949.372964] binder: BINDER_SET_CONTEXT_MGR already set [ 949.372972] binder: 744:751 ioctl 40046207 0 returned -16 [ 949.374092] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.374110] binder: 744:751 transaction failed 29189/-3, size 0-0 line 3133 [ 949.375389] binder: BINDER_SET_CONTEXT_MGR already set [ 949.375396] binder: 745:756 ioctl 40046207 0 returned -16 [ 949.389653] binder: BINDER_SET_CONTEXT_MGR already set [ 949.389660] binder: 748:752 ioctl 40046207 0 returned -16 [ 949.402027] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.402046] binder: 747:765 transaction failed 29189/-3, size 0-0 line 3133 [ 949.415935] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.415958] binder: 741:768 transaction failed 29189/-3, size 0-0 line 3133 [ 949.417231] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.417264] binder: 745:770 transaction failed 29189/-3, size 0-0 line 3133 [ 949.422717] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.422737] binder: 742:772 transaction failed 29189/-3, size 0-0 line 3133 [ 949.425696] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.425715] binder: 748:773 transaction failed 29189/-3, size 0-0 line 3133 [ 949.430227] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.430244] binder: 769:771 transaction failed 29189/-3, size 0-0 line 3133 [ 949.451152] binder: BINDER_SET_CONTEXT_MGR already set [ 949.451159] binder: 774:776 ioctl 40046207 0 returned -16 [ 949.451536] binder: 742:754 ioctl c0306201 2000ffd0 returned -14 [ 949.451674] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.451691] binder: 774:776 transaction failed 29189/-3, size 0-0 line 3133 [ 949.465162] binder: 747:749 ioctl c0306201 2000ffd0 returned -14 [ 949.469895] binder: 745:756 ioctl c0306201 2000ffd0 returned -14 [ 949.471462] binder: 748:752 ioctl c0306201 2000ffd0 returned -14 [ 949.500575] binder: 741:750 ioctl c0306201 2000ffd0 returned -14 [ 949.521594] binder: BINDER_SET_CONTEXT_MGR already set [ 949.521602] binder: 795:802 ioctl 40046207 0 returned -16 [ 949.526638] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.526658] binder: 782:796 transaction failed 29189/-3, size 0-0 line 3133 [ 949.532660] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.532680] binder: 787:809 transaction failed 29189/-3, size 0-0 line 3133 [ 949.534805] binder: BINDER_SET_CONTEXT_MGR already set [ 949.534811] binder: 791:801 ioctl 40046207 0 returned -16 [ 949.556161] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.556178] binder: 790:814 transaction failed 29189/-3, size 0-0 line 3133 [ 949.557868] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.557884] binder: 795:815 transaction failed 29189/-3, size 0-0 line 3133 [ 949.557989] binder: 787:789 ioctl c0306201 2000ffd0 returned -14 [ 949.567369] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.567386] binder: 791:808 transaction failed 29189/-3, size 0-0 line 3133 [ 949.568793] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.568810] binder: 804:816 transaction failed 29189/-3, size 0-0 line 3133 [ 949.589784] binder: 790:797 ioctl c0306201 2000ffd0 returned -14 [ 949.598033] binder: 795:802 ioctl c0306201 2000ffd0 returned -14 [ 949.598140] binder: 791:801 ioctl c0306201 2000ffd0 returned -14 [ 949.632000] binder: 804:807 ioctl c0306201 2000ffd0 returned -14 [ 949.666161] binder: BINDER_SET_CONTEXT_MGR already set [ 949.666168] binder: 828:832 ioctl 40046207 0 returned -16 [ 949.670656] binder: BINDER_SET_CONTEXT_MGR already set [ 949.670664] binder: 824:834 ioctl 40046207 0 returned -16 [ 949.671384] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.671403] binder: 824:834 transaction failed 29189/-3, size 0-0 line 3133 [ 949.678162] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.678179] binder: 826:839 transaction failed 29189/-3, size 0-0 line 3133 [ 949.678489] binder: BINDER_SET_CONTEXT_MGR already set [ 949.678496] binder: 830:833 ioctl 40046207 0 returned -16 [ 949.705115] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.705131] binder: 828:848 transaction failed 29189/-3, size 0-0 line 3133 [ 949.709368] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.709483] binder: 849:851 transaction failed 29189/-3, size 0-0 line 3133 [ 949.709510] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.709525] binder: 825:847 transaction failed 29189/-3, size 0-0 line 3133 [ 949.710641] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.710761] binder: 830:853 transaction failed 29189/-3, size 0-0 line 3133 [ 949.712229] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.712244] binder: 831:852 transaction failed 29189/-3, size 0-0 line 3133 [ 949.716834] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.716976] binder: 827:856 transaction failed 29189/-3, size 0-0 line 3133 [ 949.729754] binder: BINDER_SET_CONTEXT_MGR already set [ 949.729761] binder: 858:859 ioctl 40046207 0 returned -16 [ 949.729921] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.729937] binder: 858:859 transaction failed 29189/-3, size 0-0 line 3133 [ 949.739658] binder: 830:833 ioctl c0306201 2000ffd0 returned -14 [ 949.740303] binder: 825:838 ioctl c0306201 2000ffd0 returned -14 [ 949.761960] binder: 828:832 ioctl c0306201 2000ffd0 returned -14 [ 949.764656] binder: 827:840 ioctl c0306201 2000ffd0 returned -14 [ 949.777161] binder: 831:835 ioctl c0306201 2000ffd0 returned -14 [ 949.816779] binder: BINDER_SET_CONTEXT_MGR already set [ 949.816787] binder: 872:878 ioctl 40046207 0 returned -16 [ 949.816961] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.816979] binder: 873:880 transaction failed 29189/-3, size 0-0 line 3133 [ 949.819730] binder: BINDER_SET_CONTEXT_MGR already set [ 949.820002] binder: 876:882 ioctl 40046207 0 returned -16 [ 949.820185] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.820201] binder: 876:882 transaction failed 29189/-3, size 0-0 line 3133 [ 949.825345] binder: BINDER_SET_CONTEXT_MGR already set [ 949.825352] binder: 874:889 ioctl 40046207 0 returned -16 [ 949.841036] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.841056] binder: 871:897 transaction failed 29189/-3, size 0-0 line 3133 [ 949.858139] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.858155] binder: 872:900 transaction failed 29189/-3, size 0-0 line 3133 [ 949.862827] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.862845] binder: 884:903 transaction failed 29189/-3, size 0-0 line 3133 [ 949.864393] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.864413] binder: 874:904 transaction failed 29189/-3, size 0-0 line 3133 [ 949.865278] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.865296] binder: 879:893 transaction failed 29189/-3, size 0-0 line 3133 [ 949.881416] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.881437] binder: 901:905 transaction failed 29189/-3, size 0-0 line 3133 [ 949.889022] binder: BINDER_SET_CONTEXT_MGR already set [ 949.889030] binder: 906:907 ioctl 40046207 0 returned -16 [ 949.889167] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.889185] binder: 906:907 transaction failed 29189/-3, size 0-0 line 3133 [ 949.900667] binder: 874:889 ioctl c0306201 2000ffd0 returned -14 [ 949.902351] binder: 871:877 ioctl c0306201 2000ffd0 returned -14 [ 949.903277] binder: 872:878 ioctl c0306201 2000ffd0 returned -14 [ 949.923968] binder: 884:892 ioctl c0306201 2000ffd0 returned -14 [ 949.956964] binder: BINDER_SET_CONTEXT_MGR already set [ 949.956972] binder: 920:925 ioctl 40046207 0 returned -16 [ 949.958750] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.958768] binder: 921:927 transaction failed 29189/-3, size 0-0 line 3133 [ 949.959050] binder: 879:883 ioctl c0306201 2000ffd0 returned -14 [ 949.962655] binder: BINDER_SET_CONTEXT_MGR already set [ 949.962660] binder: 922:928 ioctl 40046207 0 returned -16 [ 949.988091] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.988111] binder: 920:947 transaction failed 29189/-3, size 0-0 line 3133 [ 949.992073] binder_alloc: 12386: binder_alloc_buf, no vma [ 949.992092] binder: 922:950 transaction failed 29189/-3, size 0-0 line 3133 [ 950.004539] binder: BINDER_SET_CONTEXT_MGR already set [ 950.004547] binder: 945:949 ioctl 40046207 0 returned -16 [ 950.005783] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.005801] binder: 945:949 transaction failed 29189/-3, size 0-0 line 3133 [ 950.017626] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.017644] binder: 932:954 transaction failed 29189/-3, size 0-0 line 3133 [ 950.018350] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.018364] binder: 952:955 transaction failed 29189/-3, size 0-0 line 3133 [ 950.023017] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.023038] binder: 931:956 transaction failed 29189/-3, size 0-0 line 3133 [ 950.024769] binder: 920:925 ioctl c0306201 2000ffd0 returned -14 [ 950.027857] binder: 922:928 ioctl c0306201 2000ffd0 returned -14 [ 950.032765] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.032783] binder: 942:961 transaction failed 29189/-3, size 0-0 line 3133 [ 950.059763] binder: BINDER_SET_CONTEXT_MGR already set [ 950.059770] binder: 965:969 ioctl 40046207 0 returned -16 [ 950.064333] binder: 931:940 ioctl c0306201 2000ffd0 returned -14 [ 950.070850] binder: BINDER_SET_CONTEXT_MGR already set [ 950.070858] binder: 964:970 ioctl 40046207 0 returned -16 [ 950.073598] binder: BINDER_SET_CONTEXT_MGR already set [ 950.073605] binder: 962:972 ioctl 40046207 0 returned -16 [ 950.073763] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.073778] binder: 962:972 transaction failed 29189/-3, size 0-0 line 3133 [ 950.088598] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.088616] binder: 965:985 transaction failed 29189/-3, size 0-0 line 3133 [ 950.093621] binder: 942:943 ioctl c0306201 2000ffd0 returned -14 [ 950.097435] binder: 932:937 ioctl c0306201 2000ffd0 returned -14 [ 950.103916] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.103930] binder: 979:982 transaction failed 29189/-3, size 0-0 line 3133 [ 950.110104] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.110125] binder: 964:989 transaction failed 29189/-3, size 0-0 line 3133 [ 950.129847] binder: 965:969 ioctl c0306201 2000ffd0 returned -14 [ 950.149629] binder: 964:970 ioctl c0306201 2000ffd0 returned -14 [ 950.187413] binder: BINDER_SET_CONTEXT_MGR already set [ 950.187420] binder: 994:999 ioctl 40046207 0 returned -16 [ 950.195128] binder: BINDER_SET_CONTEXT_MGR already set [ 950.195136] binder: 996:1007 ioctl 40046207 0 returned -16 [ 950.222076] binder: BINDER_SET_CONTEXT_MGR already set [ 950.222082] binder: 1005:1014 ioctl 40046207 0 returned -16 [ 950.225899] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.225913] binder: 1000:1020 transaction failed 29189/-3, size 0-0 line 3133 [ 950.226038] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.226049] binder: 996:1022 transaction failed 29189/-3, size 0-0 line 3133 [ 950.226253] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.226265] binder: 995:1019 transaction failed 29189/-3, size 0-0 line 3133 [ 950.229219] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.229237] binder: 998:1021 transaction failed 29189/-3, size 0-0 line 3133 [ 950.236131] binder: BINDER_SET_CONTEXT_MGR already set [ 950.236138] binder: 1023:1025 ioctl 40046207 0 returned -16 [ 950.257920] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.257937] binder: 1005:1031 transaction failed 29189/-3, size 0-0 line 3133 [ 950.277704] binder: 1000:1008 ioctl c0306201 2000ffd0 returned -14 [ 950.280822] binder: 996:1007 ioctl c0306201 2000ffd0 returned -14 [ 950.284427] binder: 998:1006 ioctl c0306201 2000ffd0 returned -14 [ 950.294365] binder: 1005:1014 ioctl c0306201 2000ffd0 returned -14 [ 950.301997] binder: 995:1002 ioctl c0306201 2000ffd0 returned -14 [ 950.315317] binder: BINDER_SET_CONTEXT_MGR already set [ 950.315324] binder: 1032:1038 ioctl 40046207 0 returned -16 [ 950.415874] binder: BINDER_SET_CONTEXT_MGR already set [ 950.415881] binder: 1052:1058 ioctl 40046207 0 returned -16 [ 950.428742] binder: BINDER_SET_CONTEXT_MGR already set [ 950.428749] binder: 1053:1065 ioctl 40046207 0 returned -16 [ 950.445161] binder: BINDER_SET_CONTEXT_MGR already set [ 950.445170] binder: 1062:1067 ioctl 40046207 0 returned -16 [ 950.446298] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.446317] binder: 1054:1077 transaction failed 29189/-3, size 0-0 line 3133 [ 950.446442] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.446455] binder: 1057:1078 transaction failed 29189/-3, size 0-0 line 3133 [ 950.457178] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.457195] binder: 1055:1079 transaction failed 29189/-3, size 0-0 line 3133 [ 950.461869] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.461887] binder: 1053:1080 transaction failed 29189/-3, size 0-0 line 3133 [ 950.472642] binder: BINDER_SET_CONTEXT_MGR already set [ 950.472649] binder: 1081:1083 ioctl 40046207 0 returned -16 [ 950.521486] binder: 1054:1059 ioctl c0306201 2000ffd0 returned -14 [ 950.521704] binder: 1055:1064 ioctl c0306201 2000ffd0 returned -14 [ 950.529656] binder: 1053:1065 ioctl c0306201 2000ffd0 returned -14 [ 950.531882] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.531901] binder: 1062:1094 transaction failed 29189/-3, size 0-0 line 3133 [ 950.565339] binder: 1057:1061 ioctl c0306201 2000ffd0 returned -14 [ 950.591289] binder: 1062:1067 ioctl c0306201 2000ffd0 returned -14 [ 950.606183] binder: BINDER_SET_CONTEXT_MGR already set [ 950.606190] binder: 1103:1108 ioctl 40046207 0 returned -16 [ 950.609278] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.609294] binder: 1102:1106 transaction failed 29189/-3, size 0-0 line 3133 [ 950.622618] binder: BINDER_SET_CONTEXT_MGR already set [ 950.622625] binder: 1100:1113 ioctl 40046207 0 returned -16 [ 950.627929] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.627947] binder: 1099:1121 transaction failed 29189/-3, size 0-0 line 3133 [ 950.645377] binder: BINDER_SET_CONTEXT_MGR already set [ 950.645385] binder: 1116:1122 ioctl 40046207 0 returned -16 [ 950.652833] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.652851] binder: 1101:1127 transaction failed 29189/-3, size 0-0 line 3133 [ 950.656510] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.656532] binder: 1100:1132 transaction failed 29189/-3, size 0-0 line 3133 [ 950.656760] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.656775] binder: 1107:1128 transaction failed 29189/-3, size 0-0 line 3133 [ 950.659243] binder: BINDER_SET_CONTEXT_MGR already set [ 950.659250] binder: 1129:1131 ioctl 40046207 0 returned -16 [ 950.659722] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.659740] binder: 1129:1131 transaction failed 29189/-3, size 0-0 line 3133 [ 950.662006] binder: 1099:1104 ioctl c0306201 2000ffd0 returned -14 [ 950.676542] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.676558] binder: 1134:1137 transaction failed 29189/-3, size 0-0 line 3133 [ 950.679374] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.679393] binder: 1116:1139 transaction failed 29189/-3, size 0-0 line 3133 [ 950.692179] binder: 1100:1113 ioctl c0306201 2000ffd0 returned -14 [ 950.710321] binder: 1101:1112 ioctl c0306201 2000ffd0 returned -14 [ 950.715647] binder: 1116:1122 ioctl c0306201 2000ffd0 returned -14 [ 950.727092] binder: 1107:1111 ioctl c0306201 2000ffd0 returned -14 [ 950.768376] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.768392] binder: 1160:1162 transaction failed 29189/-3, size 0-0 line 3133 [ 950.770098] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.770114] binder: 1159:1164 transaction failed 29189/-3, size 0-0 line 3133 [ 950.776401] binder: BINDER_SET_CONTEXT_MGR already set [ 950.776408] binder: 1157:1161 ioctl 40046207 0 returned -16 [ 950.783058] binder: BINDER_SET_CONTEXT_MGR already set [ 950.783067] binder: 1154:1165 ioctl 40046207 0 returned -16 [ 950.783434] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.783450] binder: 1154:1165 transaction failed 29189/-3, size 0-0 line 3133 [ 950.784907] binder: BINDER_SET_CONTEXT_MGR already set [ 950.784913] binder: 1156:1169 ioctl 40046207 0 returned -16 [ 950.791758] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.791778] binder: 1158:1179 transaction failed 29189/-3, size 0-0 line 3133 [ 950.794374] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.794390] binder: 1153:1180 transaction failed 29189/-3, size 0-0 line 3133 [ 950.818898] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.818914] binder: 1157:1182 transaction failed 29189/-3, size 0-0 line 3133 [ 950.826476] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.826494] binder: 1156:1202 transaction failed 29189/-3, size 0-0 line 3133 [ 950.833600] binder: 1153:1163 ioctl c0306201 2000ffd0 returned -14 [ 950.859680] binder: 1157:1161 ioctl c0306201 2000ffd0 returned -14 [ 950.867498] binder: 1158:1170 ioctl c0306201 2000ffd0 returned -14 [ 950.896440] binder: 1156:1169 ioctl c0306201 2000ffd0 returned -14 [ 950.930864] binder: BINDER_SET_CONTEXT_MGR already set [ 950.930872] binder: 1218:1221 ioctl 40046207 0 returned -16 [ 950.941565] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.941583] binder: 1216:1225 transaction failed 29189/-3, size 0-0 line 3133 [ 950.942144] binder: BINDER_SET_CONTEXT_MGR already set [ 950.942151] binder: 1217:1223 ioctl 40046207 0 returned -16 [ 950.942166] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.942181] binder: 1212:1220 transaction failed 29189/-3, size 0-0 line 3133 [ 950.942305] binder: BINDER_SET_CONTEXT_MGR already set [ 950.942310] binder: 1210:1219 ioctl 40046207 0 returned -16 [ 950.943148] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.943162] binder: 1210:1219 transaction failed 29189/-3, size 0-0 line 3133 [ 950.968276] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.968298] binder: 1218:1236 transaction failed 29189/-3, size 0-0 line 3133 [ 950.968391] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.968405] binder: 1213:1239 transaction failed 29189/-3, size 0-0 line 3133 [ 950.984076] binder_alloc: 12386: binder_alloc_buf, no vma [ 950.984096] binder: 1211:1237 transaction failed 29189/-3, size 0-0 line 3133 [ 951.000189] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.000209] binder: 1217:1242 transaction failed 29189/-3, size 0-0 line 3133 [ 951.000928] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.000942] binder: 1244:1246 transaction failed 29189/-3, size 0-0 line 3133 [ 951.010471] binder: BINDER_SET_CONTEXT_MGR already set [ 951.010481] binder: 1245:1250 ioctl 40046207 0 returned -16 [ 951.010870] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.010888] binder: 1245:1250 transaction failed 29189/-3, size 0-0 line 3133 [ 951.020652] binder: 1213:1222 ioctl c0306201 2000ffd0 returned -14 [ 951.032200] binder: 1217:1223 ioctl c0306201 2000ffd0 returned -14 [ 951.038319] binder: 1218:1221 ioctl c0306201 2000ffd0 returned -14 [ 951.044504] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.044518] binder: 1252:1255 transaction failed 29189/-3, size 0-0 line 3133 [ 951.078494] binder: 1211:1214 ioctl c0306201 2000ffd0 returned -14 [ 951.087398] binder: BINDER_SET_CONTEXT_MGR already set [ 951.087405] binder: 1280:1287 ioctl 40046207 0 returned -16 [ 951.094846] binder: BINDER_SET_CONTEXT_MGR already set [ 951.094854] binder: 1288:1296 ioctl 40046207 0 returned -16 [ 951.095386] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.095402] binder: 1288:1296 transaction failed 29189/-3, size 0-0 line 3133 [ 951.099097] binder: BINDER_SET_CONTEXT_MGR already set [ 951.099104] binder: 1282:1291 ioctl 40046207 0 returned -16 [ 951.099781] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.099797] binder: 1290:1293 transaction failed 29189/-3, size 0-0 line 3133 [ 951.108198] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.108216] binder: 1281:1304 transaction failed 29189/-3, size 0-0 line 3133 [ 951.127045] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.127064] binder: 1280:1307 transaction failed 29189/-3, size 0-0 line 3133 [ 951.136819] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.136836] binder: 1306:1309 transaction failed 29189/-3, size 0-0 line 3133 [ 951.137141] binder: 1281:1285 ioctl c0306201 2000ffd0 returned -14 [ 951.137443] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.137461] binder: 1282:1315 transaction failed 29189/-3, size 0-0 line 3133 [ 951.142522] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.142540] binder: 1299:1319 transaction failed 29189/-3, size 0-0 line 3133 [ 951.157500] binder: 1280:1287 ioctl c0306201 2000ffd0 returned -14 [ 951.170546] binder: 1282:1291 ioctl c0306201 2000ffd0 returned -14 [ 951.178008] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.178022] binder: 1318:1329 transaction failed 29189/-3, size 0-0 line 3133 [ 951.198124] binder: 1299:1301 ioctl c0306201 2000ffd0 returned -14 [ 951.222445] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.222463] binder: 1325:1340 transaction failed 29189/-3, size 0-0 line 3133 [ 951.246587] binder: 1325:1330 ioctl c0306201 2000ffd0 returned -14 [ 951.284186] binder: BINDER_SET_CONTEXT_MGR already set [ 951.284195] binder: 1344:1357 ioctl 40046207 0 returned -16 [ 951.286253] binder: BINDER_SET_CONTEXT_MGR already set [ 951.286261] binder: 1343:1350 ioctl 40046207 0 returned -16 [ 951.287160] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.287179] binder: 1343:1350 transaction failed 29189/-3, size 0-0 line 3133 [ 951.287290] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.287303] binder: 1348:1351 transaction failed 29189/-3, size 0-0 line 3133 [ 951.287967] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.287988] binder: 1347:1358 transaction failed 29189/-3, size 0-0 line 3133 [ 951.301344] binder: BINDER_SET_CONTEXT_MGR already set [ 951.301353] binder: 1345:1352 ioctl 40046207 0 returned -16 [ 951.306112] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.306131] binder: 1346:1367 transaction failed 29189/-3, size 0-0 line 3133 [ 951.319471] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.319488] binder: 1344:1370 transaction failed 29189/-3, size 0-0 line 3133 [ 951.328102] binder: BINDER_SET_CONTEXT_MGR already set [ 951.328109] binder: 1371:1375 ioctl 40046207 0 returned -16 [ 951.328461] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.328476] binder: 1371:1375 transaction failed 29189/-3, size 0-0 line 3133 [ 951.332820] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.332838] binder: 1372:1376 transaction failed 29189/-3, size 0-0 line 3133 [ 951.335863] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.335881] binder: 1345:1380 transaction failed 29189/-3, size 0-0 line 3133 [ 951.352307] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.352326] binder: 1353:1365 transaction failed 29189/-3, size 0-0 line 3133 [ 951.374415] binder: 1344:1357 ioctl c0306201 2000ffd0 returned -14 [ 951.387170] binder: 1353:1359 ioctl c0306201 2000ffd0 returned -14 [ 951.390668] binder: 1346:1349 ioctl c0306201 2000ffd0 returned -14 [ 951.392579] binder: 1345:1352 ioctl c0306201 2000ffd0 returned -14 [ 951.394436] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.394449] binder: 1390:1394 transaction failed 29189/-3, size 0-0 line 3133 [ 951.417809] binder: BINDER_SET_CONTEXT_MGR already set [ 951.417889] binder: 1396:1399 ioctl 40046207 0 returned -16 [ 951.419491] binder: BINDER_SET_CONTEXT_MGR already set [ 951.419497] binder: 1387:1391 ioctl 40046207 0 returned -16 [ 951.419945] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.419964] binder: 1387:1391 transaction failed 29189/-3, size 0-0 line 3133 [ 951.430845] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.430863] binder: 1392:1405 transaction failed 29189/-3, size 0-0 line 3133 [ 951.452383] binder: BINDER_SET_CONTEXT_MGR already set [ 951.452391] binder: 1404:1409 ioctl 40046207 0 returned -16 [ 951.455873] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.455890] binder: 1396:1415 transaction failed 29189/-3, size 0-0 line 3133 [ 951.471116] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.471134] binder: 1403:1419 transaction failed 29189/-3, size 0-0 line 3133 [ 951.472690] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.472705] binder: 1402:1421 transaction failed 29189/-3, size 0-0 line 3133 [ 951.486271] binder: 1396:1399 ioctl c0306201 2000ffd0 returned -14 [ 951.492866] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.492885] binder: 1404:1423 transaction failed 29189/-3, size 0-0 line 3133 [ 951.511520] binder: 1403:1407 ioctl c0306201 2000ffd0 returned -14 [ 951.520259] binder: 1404:1409 ioctl c0306201 2000ffd0 returned -14 [ 951.534179] binder: 1402:1412 ioctl c0306201 2000ffd0 returned -14 [ 951.560627] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.560645] binder: 1431:1436 transaction failed 29189/-3, size 0-0 line 3133 [ 951.573374] binder: BINDER_SET_CONTEXT_MGR already set [ 951.573384] binder: 1430:1439 ioctl 40046207 0 returned -16 [ 951.581456] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.581474] binder: 1430:1439 transaction failed 29189/-3, size 0-0 line 3133 [ 951.581905] binder: BINDER_SET_CONTEXT_MGR already set [ 951.581914] binder: 1433:1437 ioctl 40046207 0 returned -16 [ 951.582268] binder: BINDER_SET_CONTEXT_MGR already set [ 951.582274] binder: 1434:1440 ioctl 40046207 0 returned -16 [ 951.597641] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.597658] binder: 1432:1450 transaction failed 29189/-3, size 0-0 line 3133 [ 951.598317] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.598333] binder: 1435:1453 transaction failed 29189/-3, size 0-0 line 3133 [ 951.606595] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.606611] binder: 1452:1454 transaction failed 29189/-3, size 0-0 line 3133 [ 951.607387] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.607405] binder: 1433:1457 transaction failed 29189/-3, size 0-0 line 3133 [ 951.614558] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.614580] binder: 1434:1458 transaction failed 29189/-3, size 0-0 line 3133 [ 951.622186] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.622207] binder: 1429:1460 transaction failed 29189/-3, size 0-0 line 3133 [ 951.627514] binder: 1432:1438 ioctl c0306201 2000ffd0 returned -14 [ 951.652448] binder: 1433:1437 ioctl c0306201 2000ffd0 returned -14 [ 951.652952] binder: BINDER_SET_CONTEXT_MGR already set [ 951.652960] binder: 1461:1462 ioctl 40046207 0 returned -16 [ 951.653348] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.653365] binder: 1461:1462 transaction failed 29189/-3, size 0-0 line 3133 [ 951.660243] binder: 1435:1444 ioctl c0306201 2000ffd0 returned -14 [ 951.662115] binder: 1434:1440 ioctl c0306201 2000ffd0 returned -14 [ 951.694919] binder: 1429:1441 ioctl c0306201 2000ffd0 returned -14 [ 951.698513] binder: BINDER_SET_CONTEXT_MGR already set [ 951.698520] binder: 1480:1483 ioctl 40046207 0 returned -16 [ 951.702042] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.702058] binder: 1480:1483 transaction failed 29189/-3, size 0-0 line 3133 [ 951.702132] binder: BINDER_SET_CONTEXT_MGR already set [ 951.702138] binder: 1479:1484 ioctl 40046207 0 returned -16 [ 951.705995] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.706013] binder: 1467:1491 transaction failed 29189/-3, size 0-0 line 3133 [ 951.708952] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.708970] binder: 1474:1486 transaction failed 29189/-3, size 0-0 line 3133 [ 951.723085] binder: BINDER_SET_CONTEXT_MGR already set [ 951.723093] binder: 1481:1490 ioctl 40046207 0 returned -16 [ 951.724101] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.724119] binder: 1478:1495 transaction failed 29189/-3, size 0-0 line 3133 [ 951.732644] binder: 1467:1471 ioctl c0306201 2000ffd0 returned -14 [ 951.755814] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.755831] binder: 1479:1500 transaction failed 29189/-3, size 0-0 line 3133 [ 951.756104] binder: BINDER_SET_CONTEXT_MGR already set [ 951.756110] binder: 1503:1505 ioctl 40046207 0 returned -16 [ 951.756507] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.756523] binder: 1503:1505 transaction failed 29189/-3, size 0-0 line 3133 [ 951.758569] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.758584] binder: 1481:1507 transaction failed 29189/-3, size 0-0 line 3133 [ 951.777458] binder: 1478:1482 ioctl c0306201 2000ffd0 returned -14 [ 951.778666] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.778682] binder: 1493:1511 transaction failed 29189/-3, size 0-0 line 3133 [ 951.789441] binder: 1479:1484 ioctl c0306201 2000ffd0 returned -14 [ 951.799483] binder: 1481:1490 ioctl c0306201 2000ffd0 returned -14 [ 951.833073] binder: 1493:1498 ioctl c0306201 2000ffd0 returned -14 [ 951.860957] binder: BINDER_SET_CONTEXT_MGR already set [ 951.860964] binder: 1520:1527 ioctl 40046207 0 returned -16 [ 951.868116] binder: BINDER_SET_CONTEXT_MGR already set [ 951.868122] binder: 1517:1529 ioctl 40046207 0 returned -16 [ 951.868287] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.868303] binder: 1519:1525 transaction failed 29189/-3, size 0-0 line 3133 [ 951.868502] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.868515] binder: 1517:1529 transaction failed 29189/-3, size 0-0 line 3133 [ 951.875113] binder: BINDER_SET_CONTEXT_MGR already set [ 951.875120] binder: 1522:1528 ioctl 40046207 0 returned -16 [ 951.903754] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.903772] binder: 1520:1538 transaction failed 29189/-3, size 0-0 line 3133 [ 951.913598] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.913614] binder: 1518:1541 transaction failed 29189/-3, size 0-0 line 3133 [ 951.913634] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.913650] binder: 1522:1544 transaction failed 29189/-3, size 0-0 line 3133 [ 951.913702] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.913715] binder: 1526:1546 transaction failed 29189/-3, size 0-0 line 3133 [ 951.914453] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.914468] binder: 1543:1547 transaction failed 29189/-3, size 0-0 line 3133 [ 951.924180] binder: BINDER_SET_CONTEXT_MGR already set [ 951.924187] binder: 1545:1548 ioctl 40046207 0 returned -16 [ 951.924714] binder_alloc: 12386: binder_alloc_buf, no vma [ 951.924732] binder: 1545:1548 transaction failed 29189/-3, size 0-0 line 3133 [ 951.930850] binder: 1520:1527 ioctl c0306201 2000ffd0 returned -14 [ 951.949927] binder: 1518:1524 ioctl c0306201 2000ffd0 returned -14 [ 951.953219] binder: 1522:1528 ioctl c0306201 2000ffd0 returned -14 [ 951.968092] binder: BINDER_SET_CONTEXT_MGR already set [ 951.968099] binder: 1559:1561 ioctl 40046207 0 returned -16 [ 951.974037] binder: 1521:1523 ioctl c0306201 2000ffd0 returned -14 [ 951.977796] binder: 1526:1536 ioctl c0306201 2000ffd0 returned -14 [ 952.000630] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.000645] binder: 1562:1569 transaction failed 29189/-3, size 0-0 line 3133 [ 952.003919] binder: BINDER_SET_CONTEXT_MGR already set [ 952.003965] binder: 1567:1574 ioctl 40046207 0 returned -16 [ 952.006645] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.006662] binder: 1559:1580 transaction failed 29189/-3, size 0-0 line 3133 [ 952.021500] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.021517] binder: 1566:1583 transaction failed 29189/-3, size 0-0 line 3133 [ 952.031075] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.031092] binder: 1567:1585 transaction failed 29189/-3, size 0-0 line 3133 [ 952.040955] binder: 1559:1561 ioctl c0306201 2000ffd0 returned -14 [ 952.047726] binder: 1566:1572 ioctl c0306201 2000ffd0 returned -14 [ 952.068853] binder: 1567:1574 ioctl c0306201 2000ffd0 returned -14 [ 952.096534] binder: 1575:1579 ioctl c0306201 2000ffd0 returned -14 [ 952.128040] binder: BINDER_SET_CONTEXT_MGR already set [ 952.128047] binder: 1594:1600 ioctl 40046207 0 returned -16 [ 952.130356] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.130373] binder: 1594:1600 transaction failed 29189/-3, size 0-0 line 3133 [ 952.132565] binder: BINDER_SET_CONTEXT_MGR already set [ 952.132571] binder: 1597:1603 ioctl 40046207 0 returned -16 [ 952.132848] binder: BINDER_SET_CONTEXT_MGR already set [ 952.132854] binder: 1598:1601 ioctl 40046207 0 returned -16 [ 952.140124] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.140142] binder: 1592:1604 transaction failed 29189/-3, size 0-0 line 3133 [ 952.169992] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.170011] binder: 1595:1616 transaction failed 29189/-3, size 0-0 line 3133 [ 952.170093] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.170108] binder: 1596:1615 transaction failed 29189/-3, size 0-0 line 3133 [ 952.170401] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.170415] binder: 1597:1617 transaction failed 29189/-3, size 0-0 line 3133 [ 952.170570] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.170659] binder: 1598:1618 transaction failed 29189/-3, size 0-0 line 3133 [ 952.188018] binder: BINDER_SET_CONTEXT_MGR already set [ 952.188025] binder: 1622:1624 ioctl 40046207 0 returned -16 [ 952.188398] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.188414] binder: 1622:1624 transaction failed 29189/-3, size 0-0 line 3133 [ 952.192877] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.192898] binder: 1621:1623 transaction failed 29189/-3, size 0-0 line 3133 [ 952.211651] binder: 1598:1601 ioctl c0306201 2000ffd0 returned -14 [ 952.213567] binder: 1596:1605 ioctl c0306201 2000ffd0 returned -14 [ 952.215243] binder: 1597:1603 ioctl c0306201 2000ffd0 returned -14 [ 952.238425] binder: 1595:1602 ioctl c0306201 2000ffd0 returned -14 [ 952.240117] binder: 1599:1607 ioctl c0306201 2000ffd0 returned -14 [ 952.259251] binder: BINDER_SET_CONTEXT_MGR already set [ 952.259258] binder: 1630:1634 ioctl 40046207 0 returned -16 [ 952.260299] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.260317] binder: 1630:1634 transaction failed 29189/-3, size 0-0 line 3133 [ 952.264314] binder: BINDER_SET_CONTEXT_MGR already set [ 952.264321] binder: 1639:1645 ioctl 40046207 0 returned -16 [ 952.291191] binder: BINDER_SET_CONTEXT_MGR already set [ 952.291198] binder: 1643:1650 ioctl 40046207 0 returned -16 [ 952.291732] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.291749] binder: 1656:1660 transaction failed 29189/-3, size 0-0 line 3133 [ 952.297823] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.297842] binder: 1640:1663 transaction failed 29189/-3, size 0-0 line 3133 [ 952.306511] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.306529] binder: 1639:1662 transaction failed 29189/-3, size 0-0 line 3133 [ 952.315029] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.315047] binder: 1648:1665 transaction failed 29189/-3, size 0-0 line 3133 [ 952.315454] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.315470] binder: 1649:1672 transaction failed 29189/-3, size 0-0 line 3133 [ 952.316789] binder: BINDER_SET_CONTEXT_MGR already set [ 952.316796] binder: 1668:1669 ioctl 40046207 0 returned -16 [ 952.317154] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.317168] binder: 1668:1669 transaction failed 29189/-3, size 0-0 line 3133 [ 952.323342] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.323356] binder: 1666:1675 transaction failed 29189/-3, size 0-0 line 3133 [ 952.333598] binder: 1640:1646 ioctl c0306201 2000ffd0 returned -14 [ 952.358821] binder: BINDER_SET_CONTEXT_MGR already set [ 952.358830] binder: 1683:1689 ioctl 40046207 0 returned -16 [ 952.359229] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.359245] binder: 1683:1689 transaction failed 29189/-3, size 0-0 line 3133 [ 952.369058] binder: 1643:1650 ioctl c0306201 2000ffd0 returned -14 [ 952.375381] binder: 1639:1645 ioctl c0306201 2000ffd0 returned -14 [ 952.379622] binder: 1648:1655 ioctl c0306201 2000ffd0 returned -14 [ 952.397789] binder: 1649:1654 ioctl c0306201 2000ffd0 returned -14 [ 952.444938] binder: BINDER_SET_CONTEXT_MGR already set [ 952.444945] binder: 1700:1707 ioctl 40046207 0 returned -16 [ 952.445455] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.445471] binder: 1701:1708 transaction failed 29189/-3, size 0-0 line 3133 [ 952.459950] binder: BINDER_SET_CONTEXT_MGR already set [ 952.459958] binder: 1705:1711 ioctl 40046207 0 returned -16 [ 952.460399] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.460417] binder: 1705:1711 transaction failed 29189/-3, size 0-0 line 3133 [ 952.461705] binder: BINDER_SET_CONTEXT_MGR already set [ 952.461711] binder: 1702:1709 ioctl 40046207 0 returned -16 [ 952.473463] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.473480] binder: 1704:1723 transaction failed 29189/-3, size 0-0 line 3133 [ 952.482459] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.482477] binder: 1703:1722 transaction failed 29189/-3, size 0-0 line 3133 [ 952.484301] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.484318] binder: 1699:1725 transaction failed 29189/-3, size 0-0 line 3133 [ 952.491863] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.491909] binder: 1700:1721 transaction failed 29189/-3, size 0-0 line 3133 [ 952.497322] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.497338] binder: 1726:1727 transaction failed 29189/-3, size 0-0 line 3133 [ 952.509000] binder: BINDER_SET_CONTEXT_MGR already set [ 952.509006] binder: 1728:1730 ioctl 40046207 0 returned -16 [ 952.509368] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.509385] binder: 1728:1730 transaction failed 29189/-3, size 0-0 line 3133 [ 952.518179] binder: 1699:1712 ioctl c0306201 2000ffd0 returned -14 [ 952.540628] binder: 1702:1709 ioctl c0306201 2000ffd0 returned -14 [ 952.552005] binder: 1704:1706 ioctl c0306201 2000ffd0 returned -14 [ 952.559901] binder: 1700:1707 ioctl c0306201 2000ffd0 returned -14 [ 952.582336] binder: 1703:1710 ioctl c0306201 2000ffd0 returned -14 [ 952.615506] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.615613] binder: 1749:1756 transaction failed 29189/-3, size 0-0 line 3133 [ 952.617045] binder: BINDER_SET_CONTEXT_MGR already set [ 952.617051] binder: 1751:1759 ioctl 40046207 0 returned -16 [ 952.617826] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.617840] binder: 1751:1759 transaction failed 29189/-3, size 0-0 line 3133 [ 952.620504] binder: BINDER_SET_CONTEXT_MGR already set [ 952.620509] binder: 1753:1757 ioctl 40046207 0 returned -16 [ 952.646196] binder: BINDER_SET_CONTEXT_MGR already set [ 952.646204] binder: 1752:1760 ioctl 40046207 0 returned -16 [ 952.655543] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.655562] binder: 1753:1773 transaction failed 29189/-3, size 0-0 line 3133 [ 952.657099] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.657116] binder: 1754:1771 transaction failed 29189/-3, size 0-0 line 3133 [ 952.662334] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.662351] binder: 1772:1775 transaction failed 29189/-3, size 0-0 line 3133 [ 952.669376] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.669395] binder: 1750:1779 transaction failed 29189/-3, size 0-0 line 3133 [ 952.684449] binder: 1754:1758 ioctl c0306201 2000ffd0 returned -14 [ 952.698744] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.698764] binder: 1789:1793 transaction failed 29189/-3, size 0-0 line 3133 [ 952.714004] binder: BINDER_SET_CONTEXT_MGR already set [ 952.714010] binder: 1788:1790 ioctl 40046207 0 returned -16 [ 952.714733] binder: 1752:1760 ioctl c0306201 2000ffd0 returned -14 [ 952.715973] binder: 1753:1757 ioctl c0306201 2000ffd0 returned -14 [ 952.722053] binder: 1755:1763 ioctl c0306201 2000ffd0 returned -14 [ 952.738472] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.738540] binder: 1788:1790 transaction failed 29189/-3, size 0-0 line 3133 [ 952.760899] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.760923] binder: 1795:1817 transaction failed 29189/-3, size 0-0 line 3133 [ 952.761110] binder: 1750:1761 ioctl c0306201 2000ffd0 returned -14 [ 952.763814] binder: BINDER_SET_CONTEXT_MGR already set [ 952.763821] binder: 1812:1819 ioctl 40046207 0 returned -16 [ 952.770560] binder: BINDER_SET_CONTEXT_MGR already set [ 952.770569] binder: 1814:1821 ioctl 40046207 0 returned -16 [ 952.778983] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.779000] binder: 1813:1820 transaction failed 29189/-3, size 0-0 line 3133 [ 952.793212] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.793232] binder: 1812:1832 transaction failed 29189/-3, size 0-0 line 3133 [ 952.798535] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.798552] binder: 1826:1828 transaction failed 29189/-3, size 0-0 line 3133 [ 952.812398] binder: 1795:1797 ioctl c0306201 2000ffd0 returned -14 [ 952.817957] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.817978] binder: 1814:1835 transaction failed 29189/-3, size 0-0 line 3133 [ 952.830777] binder: BINDER_SET_CONTEXT_MGR already set [ 952.830784] binder: 1839:1842 ioctl 40046207 0 returned -16 [ 952.831619] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.831635] binder: 1839:1842 transaction failed 29189/-3, size 0-0 line 3133 [ 952.837217] binder: 1812:1819 ioctl c0306201 2000ffd0 returned -14 [ 952.847292] binder: 1814:1821 ioctl c0306201 2000ffd0 returned -14 [ 952.879854] binder: 1811:1815 ioctl c0306201 2000ffd0 returned -14 [ 952.913898] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.913915] binder: 1856:1858 transaction failed 29189/-3, size 0-0 line 3133 [ 952.925073] binder: BINDER_SET_CONTEXT_MGR already set [ 952.925081] binder: 1860:1864 ioctl 40046207 0 returned -16 [ 952.928430] binder: BINDER_SET_CONTEXT_MGR already set [ 952.928439] binder: 1857:1863 ioctl 40046207 0 returned -16 [ 952.928568] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.928586] binder: 1861:1867 transaction failed 29189/-3, size 0-0 line 3133 [ 952.944907] binder: BINDER_SET_CONTEXT_MGR already set [ 952.944912] binder: 1866:1872 ioctl 40046207 0 returned -16 [ 952.945253] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.945266] binder: 1866:1872 transaction failed 29189/-3, size 0-0 line 3133 [ 952.957443] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.957462] binder: 1857:1885 transaction failed 29189/-3, size 0-0 line 3133 [ 952.967947] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.967965] binder: 1860:1881 transaction failed 29189/-3, size 0-0 line 3133 [ 952.968027] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.968040] binder: 1859:1882 transaction failed 29189/-3, size 0-0 line 3133 [ 952.972246] binder_alloc: 12386: binder_alloc_buf, no vma [ 952.972263] binder: 1880:1884 transaction failed 29189/-3, size 0-0 line 3133 [ 953.006782] binder: 1859:1865 ioctl c0306201 2000ffd0 returned -14 [ 953.008516] binder: 1857:1863 ioctl c0306201 2000ffd0 returned -14 [ 953.013706] binder: BINDER_SET_CONTEXT_MGR already set [ 953.013713] binder: 1890:1891 ioctl 40046207 0 returned -16 [ 953.014092] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.014105] binder: 1890:1891 transaction failed 29189/-3, size 0-0 line 3133 [ 953.015588] binder: 1860:1864 ioctl c0306201 2000ffd0 returned -14 [ 953.037687] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.037704] binder: 1902:1908 transaction failed 29189/-3, size 0-0 line 3133 [ 953.047121] binder: BINDER_SET_CONTEXT_MGR already set [ 953.047128] binder: 1906:1909 ioctl 40046207 0 returned -16 [ 953.053779] binder: 1862:1868 ioctl c0306201 2000ffd0 returned -14 [ 953.054375] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.054391] binder: 1903:1911 transaction failed 29189/-3, size 0-0 line 3133 [ 953.057155] binder: BINDER_SET_CONTEXT_MGR already set [ 953.057162] binder: 1907:1912 ioctl 40046207 0 returned -16 [ 953.077104] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.077121] binder: 1906:1924 transaction failed 29189/-3, size 0-0 line 3133 [ 953.084473] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.084492] binder: 1907:1930 transaction failed 29189/-3, size 0-0 line 3133 [ 953.093045] binder: BINDER_SET_CONTEXT_MGR already set [ 953.093053] binder: 1925:1931 ioctl 40046207 0 returned -16 [ 953.093457] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.093474] binder: 1925:1931 transaction failed 29189/-3, size 0-0 line 3133 [ 953.108753] binder: 1906:1909 ioctl c0306201 2000ffd0 returned -14 [ 953.118225] binder: 1907:1912 ioctl c0306201 2000ffd0 returned -14 [ 953.126298] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.126363] binder: 1934:1937 transaction failed 29189/-3, size 0-0 line 3133 [ 953.127931] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.127946] binder: 1905:1940 transaction failed 29189/-3, size 0-0 line 3133 [ 953.149511] binder: BINDER_SET_CONTEXT_MGR already set [ 953.149519] binder: 1945:1949 ioctl 40046207 0 returned -16 [ 953.150003] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.150019] binder: 1945:1949 transaction failed 29189/-3, size 0-0 line 3133 [ 953.152096] binder: BINDER_SET_CONTEXT_MGR already set [ 953.152103] binder: 1943:1946 ioctl 40046207 0 returned -16 [ 953.161880] binder: 1905:1913 ioctl c0306201 2000ffd0 returned -14 [ 953.179498] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.179515] binder: 1943:1956 transaction failed 29189/-3, size 0-0 line 3133 [ 953.188172] binder: 1926:1928 ioctl c0306201 2000ffd0 returned -14 [ 953.211576] binder: 1943:1946 ioctl c0306201 2000ffd0 returned -14 [ 953.239022] binder: BINDER_SET_CONTEXT_MGR already set [ 953.239029] binder: 1963:1967 ioctl 40046207 0 returned -16 [ 953.239484] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.239500] binder: 1963:1967 transaction failed 29189/-3, size 0-0 line 3133 [ 953.243600] binder: BINDER_SET_CONTEXT_MGR already set [ 953.243607] binder: 1960:1962 ioctl 40046207 0 returned -16 [ 953.245054] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.245070] binder: 1960:1962 transaction failed 29189/-3, size 0-0 line 3133 [ 953.249279] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.249294] binder: 1964:1971 transaction failed 29189/-3, size 0-0 line 3133 [ 953.251448] binder: BINDER_SET_CONTEXT_MGR already set [ 953.251455] binder: 1966:1973 ioctl 40046207 0 returned -16 [ 953.276198] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.276220] binder: 1966:1986 transaction failed 29189/-3, size 0-0 line 3133 [ 953.276677] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.276693] binder: 1959:1983 transaction failed 29189/-3, size 0-0 line 3133 [ 953.276831] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.276845] binder: 1961:1985 transaction failed 29189/-3, size 0-0 line 3133 [ 953.294283] binder: BINDER_SET_CONTEXT_MGR already set [ 953.294289] binder: 1984:1987 ioctl 40046207 0 returned -16 [ 953.295232] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.295247] binder: 1984:1987 transaction failed 29189/-3, size 0-0 line 3133 [ 953.306494] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.306511] binder: 1990:1992 transaction failed 29189/-3, size 0-0 line 3133 [ 953.310585] binder: BINDER_SET_CONTEXT_MGR already set [ 953.310591] binder: 1991:1993 ioctl 40046207 0 returned -16 [ 953.312668] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.312684] binder: 1991:1993 transaction failed 29189/-3, size 0-0 line 3133 [ 953.317555] binder: 1966:1973 ioctl c0306201 2000ffd0 returned -14 [ 953.320137] binder: 1961:1970 ioctl c0306201 2000ffd0 returned -14 [ 953.358991] binder: BINDER_SET_CONTEXT_MGR already set [ 953.358998] binder: 2003:2009 ioctl 40046207 0 returned -16 [ 953.359713] binder: 1959:1969 ioctl c0306201 2000ffd0 returned -14 [ 953.366393] binder: 1965:1968 ioctl c0306201 2000ffd0 returned -14 [ 953.373253] binder: BINDER_SET_CONTEXT_MGR already set [ 953.373261] binder: 2004:2015 ioctl 40046207 0 returned -16 [ 953.373883] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.373924] binder: 2004:2015 transaction failed 29189/-3, size 0-0 line 3133 [ 953.381593] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.381610] binder: 2008:2010 transaction failed 29189/-3, size 0-0 line 3133 [ 953.386348] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.386366] binder: 2005:2027 transaction failed 29189/-3, size 0-0 line 3133 [ 953.393300] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.393319] binder: 2003:2026 transaction failed 29189/-3, size 0-0 line 3133 [ 953.415349] binder: BINDER_SET_CONTEXT_MGR already set [ 953.415356] binder: 2024:2030 ioctl 40046207 0 returned -16 [ 953.415812] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.415827] binder: 2024:2030 transaction failed 29189/-3, size 0-0 line 3133 [ 953.422681] binder: 2005:2012 ioctl c0306201 2000ffd0 returned -14 [ 953.431158] binder: 2003:2009 ioctl c0306201 2000ffd0 returned -14 [ 953.443873] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.443889] binder: 2037:2039 transaction failed 29189/-3, size 0-0 line 3133 [ 953.459142] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.459161] binder: 2023:2041 transaction failed 29189/-3, size 0-0 line 3133 [ 953.501238] binder: 2025:2031 ioctl c0306201 2000ffd0 returned -14 [ 953.508752] binder: 2023:2028 ioctl c0306201 2000ffd0 returned -14 [ 953.543615] binder: BINDER_SET_CONTEXT_MGR already set [ 953.543627] binder: 2052:2055 ioctl 40046207 0 returned -16 [ 953.546467] binder: BINDER_SET_CONTEXT_MGR already set [ 953.546473] binder: 2054:2057 ioctl 40046207 0 returned -16 [ 953.547724] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.547744] binder: 2054:2057 transaction failed 29189/-3, size 0-0 line 3133 [ 953.555648] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.555668] binder: 2059:2068 transaction failed 29189/-3, size 0-0 line 3133 [ 953.559844] binder: BINDER_SET_CONTEXT_MGR already set [ 953.559855] binder: 2053:2066 ioctl 40046207 0 returned -16 [ 953.561137] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.561153] binder: 2053:2066 transaction failed 29189/-3, size 0-0 line 3133 [ 953.572932] binder: BINDER_SET_CONTEXT_MGR already set [ 953.572939] binder: 2060:2064 ioctl 40046207 0 returned -16 [ 953.574770] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.574790] binder: 2052:2077 transaction failed 29189/-3, size 0-0 line 3133 [ 953.583608] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.583628] binder: 2056:2078 transaction failed 29189/-3, size 0-0 line 3133 [ 953.602795] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.602811] binder: 2062:2081 transaction failed 29189/-3, size 0-0 line 3133 [ 953.602900] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.602912] binder: 2061:2082 transaction failed 29189/-3, size 0-0 line 3133 [ 953.605538] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.605557] binder: 2060:2084 transaction failed 29189/-3, size 0-0 line 3133 [ 953.627640] binder: BINDER_SET_CONTEXT_MGR already set [ 953.627648] binder: 2085:2087 ioctl 40046207 0 returned -16 [ 953.632142] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.632160] binder: 2085:2087 transaction failed 29189/-3, size 0-0 line 3133 [ 953.636196] binder: 2056:2058 ioctl c0306201 2000ffd0 returned -14 [ 953.639648] binder: 2060:2064 ioctl c0306201 2000ffd0 returned -14 [ 953.641121] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.641138] binder: 2088:2092 transaction failed 29189/-3, size 0-0 line 3133 [ 953.645244] binder: 2052:2055 ioctl c0306201 2000ffd0 returned -14 [ 953.654062] binder: BINDER_SET_CONTEXT_MGR already set [ 953.654070] binder: 2094:2098 ioctl 40046207 0 returned -16 [ 953.654498] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.654515] binder: 2094:2098 transaction failed 29189/-3, size 0-0 line 3133 [ 953.657186] binder: 2062:2065 ioctl c0306201 2000ffd0 returned -14 [ 953.675624] binder: 2061:2069 ioctl c0306201 2000ffd0 returned -14 [ 953.707212] binder: BINDER_SET_CONTEXT_MGR already set [ 953.707220] binder: 2106:2110 ioctl 40046207 0 returned -16 [ 953.720260] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.720276] binder: 2116:2123 transaction failed 29189/-3, size 0-0 line 3133 [ 953.733549] binder: BINDER_SET_CONTEXT_MGR already set [ 953.733555] binder: 2121:2129 ioctl 40046207 0 returned -16 [ 953.749312] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.749329] binder: 2107:2130 transaction failed 29189/-3, size 0-0 line 3133 [ 953.751045] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.751062] binder: 2126:2128 transaction failed 29189/-3, size 0-0 line 3133 [ 953.760479] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.760499] binder: 2106:2136 transaction failed 29189/-3, size 0-0 line 3133 [ 953.769994] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.770011] binder: 2113:2137 transaction failed 29189/-3, size 0-0 line 3133 [ 953.773044] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.773061] binder: 2121:2138 transaction failed 29189/-3, size 0-0 line 3133 [ 953.805707] binder: 2121:2129 ioctl c0306201 2000ffd0 returned -14 [ 953.808593] binder: 2107:2109 ioctl c0306201 2000ffd0 returned -14 [ 953.831243] binder: 2113:2122 ioctl c0306201 2000ffd0 returned -14 [ 953.837741] binder: 2106:2110 ioctl c0306201 2000ffd0 returned -14 [ 953.870061] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.870086] binder: 2151:2156 transaction failed 29189/-3, size 0-0 line 3133 [ 953.877370] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.877389] binder: 2148:2153 transaction failed 29189/-3, size 0-0 line 3133 [ 953.885444] binder: BINDER_SET_CONTEXT_MGR already set [ 953.885451] binder: 2152:2158 ioctl 40046207 0 returned -16 [ 953.885679] binder: BINDER_SET_CONTEXT_MGR already set [ 953.885686] binder: 2149:2154 ioctl 40046207 0 returned -16 [ 953.886146] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.886162] binder: 2149:2154 transaction failed 29189/-3, size 0-0 line 3133 [ 953.893158] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.893173] binder: 2150:2159 transaction failed 29189/-3, size 0-0 line 3133 [ 953.898801] binder: BINDER_SET_CONTEXT_MGR already set [ 953.898808] binder: 2157:2166 ioctl 40046207 0 returned -16 [ 953.911405] binder: BINDER_SET_CONTEXT_MGR already set [ 953.911414] binder: 2147:2162 ioctl 40046207 0 returned -16 [ 953.922920] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.922938] binder: 2147:2162 transaction failed 29189/-3, size 0-0 line 3133 [ 953.936505] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.936523] binder: 2155:2172 transaction failed 29189/-3, size 0-0 line 3133 [ 953.937170] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.937189] binder: 2152:2173 transaction failed 29189/-3, size 0-0 line 3133 [ 953.937291] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.937304] binder: 2157:2178 transaction failed 29189/-3, size 0-0 line 3133 [ 953.950701] binder: BINDER_SET_CONTEXT_MGR already set [ 953.950708] binder: 2179:2183 ioctl 40046207 0 returned -16 [ 953.951397] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.951414] binder: 2180:2184 transaction failed 29189/-3, size 0-0 line 3133 [ 953.951490] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.951502] binder: 2179:2183 transaction failed 29189/-3, size 0-0 line 3133 [ 953.963437] binder_alloc: 12386: binder_alloc_buf, no vma [ 953.963455] binder: 2177:2185 transaction failed 29189/-3, size 0-0 line 3133 [ 953.966863] binder: 2157:2166 ioctl c0306201 2000ffd0 returned -14 [ 953.998765] binder: 2152:2158 ioctl c0306201 2000ffd0 returned -14 [ 954.012446] binder: 2155:2160 ioctl c0306201 2000ffd0 returned -14 [ 954.019585] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.019600] binder: 2202:2205 transaction failed 29189/-3, size 0-0 line 3133 [ 954.031058] binder: BINDER_SET_CONTEXT_MGR already set [ 954.031069] binder: 2206:2210 ioctl 40046207 0 returned -16 [ 954.031501] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.031517] binder: 2206:2210 transaction failed 29189/-3, size 0-0 line 3133 [ 954.037664] binder: BINDER_SET_CONTEXT_MGR already set [ 954.037671] binder: 2198:2200 ioctl 40046207 0 returned -16 [ 954.044570] binder: BINDER_SET_CONTEXT_MGR already set [ 954.044581] binder: 2213:2215 ioctl 40046207 0 returned -16 [ 954.069143] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.069159] binder: 2213:2221 transaction failed 29189/-3, size 0-0 line 3133 [ 954.070055] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.070077] binder: 2198:2214 transaction failed 29189/-3, size 0-0 line 3133 [ 954.095809] binder: 2198:2200 ioctl c0306201 2000ffd0 returned -14 [ 954.099148] binder: 2213:2215 ioctl c0306201 2000ffd0 returned -14 [ 954.134741] binder: BINDER_SET_CONTEXT_MGR already set [ 954.134748] binder: 2226:2231 ioctl 40046207 0 returned -16 [ 954.135683] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.135703] binder: 2226:2231 transaction failed 29189/-3, size 0-0 line 3133 [ 954.135959] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.135974] binder: 2225:2230 transaction failed 29189/-3, size 0-0 line 3133 [ 954.146501] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.146518] binder: 2227:2238 transaction failed 29189/-3, size 0-0 line 3133 [ 954.150477] binder: BINDER_SET_CONTEXT_MGR already set [ 954.150485] binder: 2229:2237 ioctl 40046207 0 returned -16 [ 954.150977] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.150993] binder: 2229:2237 transaction failed 29189/-3, size 0-0 line 3133 [ 954.151533] binder: BINDER_SET_CONTEXT_MGR already set [ 954.151540] binder: 2236:2240 ioctl 40046207 0 returned -16 [ 954.183545] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.183570] binder: 2224:2251 transaction failed 29189/-3, size 0-0 line 3133 [ 954.186259] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.186278] binder: 2236:2253 transaction failed 29189/-3, size 0-0 line 3133 [ 954.186416] binder: BINDER_SET_CONTEXT_MGR already set [ 954.186421] binder: 2235:2244 ioctl 40046207 0 returned -16 [ 954.213905] binder: BINDER_SET_CONTEXT_MGR already set [ 954.213915] binder: 2254:2259 ioctl 40046207 0 returned -16 [ 954.215232] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.215346] binder: 2235:2268 transaction failed 29189/-3, size 0-0 line 3133 [ 954.215539] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.215562] binder: 2254:2259 transaction failed 29189/-3, size 0-0 line 3133 [ 954.215678] binder: BINDER_SET_CONTEXT_MGR already set [ 954.215684] binder: 2256:2260 ioctl 40046207 0 returned -16 [ 954.216149] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.216164] binder: 2256:2260 transaction failed 29189/-3, size 0-0 line 3133 [ 954.223728] binder: 2236:2240 ioctl c0306201 2000ffd0 returned -14 [ 954.251251] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.251271] binder: 2255:2272 transaction failed 29189/-3, size 0-0 line 3133 [ 954.254860] binder: 2235:2244 ioctl c0306201 2000ffd0 returned -14 [ 954.259727] binder: 2224:2239 ioctl c0306201 2000ffd0 returned -14 [ 954.266231] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.266247] binder: 2263:2269 transaction failed 29189/-3, size 0-0 line 3133 [ 954.269091] binder: BINDER_SET_CONTEXT_MGR already set [ 954.269098] binder: 2273:2276 ioctl 40046207 0 returned -16 [ 954.270447] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.270464] binder: 2273:2276 transaction failed 29189/-3, size 0-0 line 3133 [ 954.284760] binder: BINDER_SET_CONTEXT_MGR already set [ 954.284767] binder: 2275:2279 ioctl 40046207 0 returned -16 [ 954.285628] binder: 2255:2258 ioctl c0306201 2000ffd0 returned -14 [ 954.318717] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.318733] binder: 2275:2289 transaction failed 29189/-3, size 0-0 line 3133 [ 954.341510] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.341528] binder: 2290:2296 transaction failed 29189/-3, size 0-0 line 3133 [ 954.354316] binder: 2275:2279 ioctl c0306201 2000ffd0 returned -14 [ 954.377683] binder: 2290:2292 ioctl c0306201 2000ffd0 returned -14 [ 954.399088] binder: BINDER_SET_CONTEXT_MGR already set [ 954.399096] binder: 2307:2313 ioctl 40046207 0 returned -16 [ 954.399707] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.399728] binder: 2307:2313 transaction failed 29189/-3, size 0-0 line 3133 [ 954.402794] binder: BINDER_SET_CONTEXT_MGR already set [ 954.402800] binder: 2306:2312 ioctl 40046207 0 returned -16 [ 954.404071] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.404088] binder: 2306:2312 transaction failed 29189/-3, size 0-0 line 3133 [ 954.414639] binder: BINDER_SET_CONTEXT_MGR already set [ 954.414645] binder: 2305:2318 ioctl 40046207 0 returned -16 [ 954.420898] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.420914] binder: 2309:2315 transaction failed 29189/-3, size 0-0 line 3133 [ 954.449151] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.449167] binder: 2308:2333 transaction failed 29189/-3, size 0-0 line 3133 [ 954.449317] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.449331] binder: 2311:2338 transaction failed 29189/-3, size 0-0 line 3133 [ 954.449730] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.449744] binder: 2314:2337 transaction failed 29189/-3, size 0-0 line 3133 [ 954.474997] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.475016] binder: 2305:2336 transaction failed 29189/-3, size 0-0 line 3133 [ 954.494658] binder: 2308:2321 ioctl c0306201 2000ffd0 returned -14 [ 954.497174] binder: 2311:2316 ioctl c0306201 2000ffd0 returned -14 [ 954.501990] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.502004] binder: 2343:2348 transaction failed 29189/-3, size 0-0 line 3133 [ 954.513218] binder: BINDER_SET_CONTEXT_MGR already set [ 954.513226] binder: 2341:2345 ioctl 40046207 0 returned -16 [ 954.513818] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.513835] binder: 2341:2345 transaction failed 29189/-3, size 0-0 line 3133 [ 954.528539] binder: 2305:2318 ioctl c0306201 2000ffd0 returned -14 [ 954.530309] binder: 2314:2317 ioctl c0306201 2000ffd0 returned -14 [ 954.542396] binder: BINDER_SET_CONTEXT_MGR already set [ 954.542403] binder: 2344:2346 ioctl 40046207 0 returned -16 [ 954.542792] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.542815] binder: 2344:2346 transaction failed 29189/-3, size 0-0 line 3133 [ 954.562175] binder: BINDER_SET_CONTEXT_MGR already set [ 954.562184] binder: 2373:2376 ioctl 40046207 0 returned -16 [ 954.568213] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.568231] binder: 2357:2370 transaction failed 29189/-3, size 0-0 line 3133 [ 954.581645] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.581663] binder: 2353:2382 transaction failed 29189/-3, size 0-0 line 3133 [ 954.582385] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.582444] binder: 2367:2378 transaction failed 29189/-3, size 0-0 line 3133 [ 954.586940] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.586957] binder: 2371:2385 transaction failed 29189/-3, size 0-0 line 3133 [ 954.590670] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.590686] binder: 2373:2386 transaction failed 29189/-3, size 0-0 line 3133 [ 954.600954] binder: 2357:2358 ioctl c0306201 2000ffd0 returned -14 [ 954.616908] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.616924] binder: 2364:2392 transaction failed 29189/-3, size 0-0 line 3133 [ 954.627607] binder: 2373:2376 ioctl c0306201 2000ffd0 returned -14 [ 954.637289] binder: 2371:2375 ioctl c0306201 2000ffd0 returned -14 [ 954.637552] binder: 2353:2356 ioctl c0306201 2000ffd0 returned -14 [ 954.656920] binder: 2364:2368 ioctl c0306201 2000ffd0 returned -14 [ 954.691872] binder: BINDER_SET_CONTEXT_MGR already set [ 954.691878] binder: 2401:2409 ioctl 40046207 0 returned -16 [ 954.692264] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.692278] binder: 2401:2409 transaction failed 29189/-3, size 0-0 line 3133 [ 954.699977] binder: BINDER_SET_CONTEXT_MGR already set [ 954.699984] binder: 2402:2411 ioctl 40046207 0 returned -16 [ 954.702167] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.702186] binder: 2403:2410 transaction failed 29189/-3, size 0-0 line 3133 [ 954.704806] binder: BINDER_SET_CONTEXT_MGR already set [ 954.704813] binder: 2399:2413 ioctl 40046207 0 returned -16 [ 954.705267] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.705283] binder: 2399:2413 transaction failed 29189/-3, size 0-0 line 3133 [ 954.728246] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.728264] binder: 2400:2425 transaction failed 29189/-3, size 0-0 line 3133 [ 954.728968] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.728983] binder: 2404:2427 transaction failed 29189/-3, size 0-0 line 3133 [ 954.741348] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.741366] binder: 2402:2428 transaction failed 29189/-3, size 0-0 line 3133 [ 954.744379] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.744395] binder: 2406:2422 transaction failed 29189/-3, size 0-0 line 3133 [ 954.756264] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.756281] binder: 2405:2436 transaction failed 29189/-3, size 0-0 line 3133 [ 954.767066] binder: BINDER_SET_CONTEXT_MGR already set [ 954.767077] binder: 2430:2432 ioctl 40046207 0 returned -16 [ 954.767667] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.767683] binder: 2430:2432 transaction failed 29189/-3, size 0-0 line 3133 [ 954.771106] binder: BINDER_SET_CONTEXT_MGR already set [ 954.771113] binder: 2431:2435 ioctl 40046207 0 returned -16 [ 954.771746] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.771763] binder: 2431:2435 transaction failed 29189/-3, size 0-0 line 3133 [ 954.772702] binder: 2404:2412 ioctl c0306201 2000ffd0 returned -14 [ 954.779718] binder: 2406:2414 ioctl c0306201 2000ffd0 returned -14 [ 954.785405] binder: 2402:2411 ioctl c0306201 2000ffd0 returned -14 [ 954.810731] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.810749] binder: 2433:2437 transaction failed 29189/-3, size 0-0 line 3133 [ 954.816274] binder: 2400:2407 ioctl c0306201 2000ffd0 returned -14 [ 954.821909] binder: BINDER_SET_CONTEXT_MGR already set [ 954.821916] binder: 2447:2453 ioctl 40046207 0 returned -16 [ 954.823098] binder: 2405:2408 ioctl c0306201 2000ffd0 returned -14 [ 954.836574] binder: BINDER_SET_CONTEXT_MGR already set [ 954.836581] binder: 2449:2456 ioctl 40046207 0 returned -16 [ 954.851294] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.851310] binder: 2448:2469 transaction failed 29189/-3, size 0-0 line 3133 [ 954.851577] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.851590] binder: 2447:2467 transaction failed 29189/-3, size 0-0 line 3133 [ 954.852971] binder: BINDER_SET_CONTEXT_MGR already set [ 954.852977] binder: 2458:2465 ioctl 40046207 0 returned -16 [ 954.853362] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.853375] binder: 2458:2465 transaction failed 29189/-3, size 0-0 line 3133 [ 954.869126] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.869143] binder: 2449:2471 transaction failed 29189/-3, size 0-0 line 3133 [ 954.884417] binder: 2448:2454 ioctl c0306201 2000ffd0 returned -14 [ 954.889475] binder: 2447:2453 ioctl c0306201 2000ffd0 returned -14 [ 954.905797] binder: 2449:2456 ioctl c0306201 2000ffd0 returned -14 [ 954.932195] binder: BINDER_SET_CONTEXT_MGR already set [ 954.932201] binder: 2477:2480 ioctl 40046207 0 returned -16 [ 954.938423] binder: BINDER_SET_CONTEXT_MGR already set [ 954.938431] binder: 2481:2486 ioctl 40046207 0 returned -16 [ 954.939397] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.939416] binder: 2481:2486 transaction failed 29189/-3, size 0-0 line 3133 [ 954.946735] binder: BINDER_SET_CONTEXT_MGR already set [ 954.946742] binder: 2478:2484 ioctl 40046207 0 returned -16 [ 954.946816] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.946833] binder: 2479:2487 transaction failed 29189/-3, size 0-0 line 3133 [ 954.971037] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.971057] binder: 2477:2499 transaction failed 29189/-3, size 0-0 line 3133 [ 954.973008] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.973025] binder: 2475:2500 transaction failed 29189/-3, size 0-0 line 3133 [ 954.978852] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.978869] binder: 2478:2503 transaction failed 29189/-3, size 0-0 line 3133 [ 954.979045] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.979058] binder: 2483:2505 transaction failed 29189/-3, size 0-0 line 3133 [ 954.986571] binder_alloc: 12386: binder_alloc_buf, no vma [ 954.986589] binder: 2476:2504 transaction failed 29189/-3, size 0-0 line 3133 [ 955.000071] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.000091] binder: 2485:2512 transaction failed 29189/-3, size 0-0 line 3133 [ 955.006868] binder: 2483:2489 ioctl c0306201 2000ffd0 returned -14 [ 955.013621] binder: 2478:2484 ioctl c0306201 2000ffd0 returned -14 [ 955.020643] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.020661] binder: 2508:2513 transaction failed 29189/-3, size 0-0 line 3133 [ 955.033197] binder: 2477:2480 ioctl c0306201 2000ffd0 returned -14 [ 955.043246] binder: 2475:2482 ioctl c0306201 2000ffd0 returned -14 [ 955.056008] binder: 2476:2488 ioctl c0306201 2000ffd0 returned -14 [ 955.072809] binder: BINDER_SET_CONTEXT_MGR already set [ 955.072815] binder: 2507:2511 ioctl 40046207 0 returned -16 [ 955.073177] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.073195] binder: 2507:2511 transaction failed 29189/-3, size 0-0 line 3133 [ 955.073595] binder: 2485:2493 ioctl c0306201 2000ffd0 returned -14 [ 955.092075] binder: BINDER_SET_CONTEXT_MGR already set [ 955.092083] binder: 2523:2529 ioctl 40046207 0 returned -16 [ 955.099855] binder: BINDER_SET_CONTEXT_MGR already set [ 955.099862] binder: 2531:2537 ioctl 40046207 0 returned -16 [ 955.101786] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.101804] binder: 2532:2539 transaction failed 29189/-3, size 0-0 line 3133 [ 955.115198] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.115217] binder: 2523:2538 transaction failed 29189/-3, size 0-0 line 3133 [ 955.129221] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.129238] binder: 2531:2556 transaction failed 29189/-3, size 0-0 line 3133 [ 955.129507] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.129521] binder: 2533:2555 transaction failed 29189/-3, size 0-0 line 3133 [ 955.129849] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.129862] binder: 2522:2554 transaction failed 29189/-3, size 0-0 line 3133 [ 955.144108] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.144126] binder: 2540:2557 transaction failed 29189/-3, size 0-0 line 3133 [ 955.155115] binder: 2523:2529 ioctl c0306201 2000ffd0 returned -14 [ 955.161710] binder: 2531:2537 ioctl c0306201 2000ffd0 returned -14 [ 955.171829] binder: 2522:2535 ioctl c0306201 2000ffd0 returned -14 [ 955.175101] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.175122] binder: 2544:2560 transaction failed 29189/-3, size 0-0 line 3133 [ 955.201788] binder: 2533:2541 ioctl c0306201 2000ffd0 returned -14 [ 955.209933] binder: 2540:2549 ioctl c0306201 2000ffd0 returned -14 [ 955.234544] binder: 2544:2550 ioctl c0306201 2000ffd0 returned -14 [ 955.258994] binder: BINDER_SET_CONTEXT_MGR already set [ 955.259002] binder: 2574:2582 ioctl 40046207 0 returned -16 [ 955.259743] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.259756] binder: 2574:2582 transaction failed 29189/-3, size 0-0 line 3133 [ 955.265422] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.265440] binder: 2577:2583 transaction failed 29189/-3, size 0-0 line 3133 [ 955.280131] binder: BINDER_SET_CONTEXT_MGR already set [ 955.280141] binder: 2573:2586 ioctl 40046207 0 returned -16 [ 955.309752] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.309770] binder: 2579:2602 transaction failed 29189/-3, size 0-0 line 3133 [ 955.312037] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.312051] binder: 2601:2603 transaction failed 29189/-3, size 0-0 line 3133 [ 955.313766] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.313782] binder: 2580:2605 transaction failed 29189/-3, size 0-0 line 3133 [ 955.329582] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.329599] binder: 2584:2611 transaction failed 29189/-3, size 0-0 line 3133 [ 955.329984] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.329998] binder: 2573:2613 transaction failed 29189/-3, size 0-0 line 3133 [ 955.338427] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.338447] binder: 2581:2608 transaction failed 29189/-3, size 0-0 line 3133 [ 955.339640] binder: BINDER_SET_CONTEXT_MGR already set [ 955.339648] binder: 2612:2615 ioctl 40046207 0 returned -16 [ 955.339989] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.340001] binder: 2612:2615 transaction failed 29189/-3, size 0-0 line 3133 [ 955.349571] binder: 2580:2585 ioctl c0306201 2000ffd0 returned -14 [ 955.369220] binder: 2573:2586 ioctl c0306201 2000ffd0 returned -14 [ 955.381133] binder: 2579:2589 ioctl c0306201 2000ffd0 returned -14 [ 955.403163] binder: BINDER_SET_CONTEXT_MGR already set [ 955.403171] binder: 2629:2633 ioctl 40046207 0 returned -16 [ 955.403734] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.403750] binder: 2629:2633 transaction failed 29189/-3, size 0-0 line 3133 [ 955.408117] binder: 2584:2591 ioctl c0306201 2000ffd0 returned -14 [ 955.408197] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.408216] binder: 2619:2626 transaction failed 29189/-3, size 0-0 line 3133 [ 955.409776] binder: 2581:2590 ioctl c0306201 2000ffd0 returned -14 [ 955.453473] binder: BINDER_SET_CONTEXT_MGR already set [ 955.453481] binder: 2637:2644 ioctl 40046207 0 returned -16 [ 955.469176] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.469196] binder: 2623:2655 transaction failed 29189/-3, size 0-0 line 3133 [ 955.493528] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.493546] binder: 2636:2658 transaction failed 29189/-3, size 0-0 line 3133 [ 955.494335] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.494349] binder: 2637:2659 transaction failed 29189/-3, size 0-0 line 3133 [ 955.495903] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.495917] binder: 2648:2660 transaction failed 29189/-3, size 0-0 line 3133 [ 955.514839] binder: 2623:2641 ioctl c0306201 2000ffd0 returned -14 [ 955.548679] binder: 2636:2645 ioctl c0306201 2000ffd0 returned -14 [ 955.573121] binder: 2637:2644 ioctl c0306201 2000ffd0 returned -14 [ 955.600079] binder: BINDER_SET_CONTEXT_MGR already set [ 955.600087] binder: 2676:2681 ioctl 40046207 0 returned -16 [ 955.600510] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.600528] binder: 2676:2681 transaction failed 29189/-3, size 0-0 line 3133 [ 955.621416] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.621439] binder: 2677:2686 transaction failed 29189/-3, size 0-0 line 3133 [ 955.625339] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.625352] binder: 2674:2688 transaction failed 29189/-3, size 0-0 line 3133 [ 955.642580] binder: BINDER_SET_CONTEXT_MGR already set [ 955.642588] binder: 2680:2685 ioctl 40046207 0 returned -16 [ 955.643196] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.643215] binder: 2678:2699 transaction failed 29189/-3, size 0-0 line 3133 [ 955.644891] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.644908] binder: 2679:2702 transaction failed 29189/-3, size 0-0 line 3133 [ 955.645075] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.645089] binder: 2682:2701 transaction failed 29189/-3, size 0-0 line 3133 [ 955.678025] binder: BINDER_SET_CONTEXT_MGR already set [ 955.678033] binder: 2700:2705 ioctl 40046207 0 returned -16 [ 955.678376] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.678392] binder: 2700:2705 transaction failed 29189/-3, size 0-0 line 3133 [ 955.678701] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.678717] binder: 2680:2716 transaction failed 29189/-3, size 0-0 line 3133 [ 955.701834] binder: 2682:2687 ioctl c0306201 2000ffd0 returned -14 [ 955.704938] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.704955] binder: 2709:2718 transaction failed 29189/-3, size 0-0 line 3133 [ 955.705527] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.705540] binder: 2714:2717 transaction failed 29189/-3, size 0-0 line 3133 [ 955.711132] binder: 2679:2690 ioctl c0306201 2000ffd0 returned -14 [ 955.741377] binder: BINDER_SET_CONTEXT_MGR already set [ 955.741388] binder: 2715:2719 ioctl 40046207 0 returned -16 [ 955.749272] binder: 2680:2685 ioctl c0306201 2000ffd0 returned -14 [ 955.801860] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.801878] binder: 2715:2750 transaction failed 29189/-3, size 0-0 line 3133 [ 955.813693] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.813711] binder: 2734:2756 transaction failed 29189/-3, size 0-0 line 3133 [ 955.814260] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.814277] binder: 2742:2748 transaction failed 29189/-3, size 0-0 line 3133 [ 955.815384] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.815400] binder: 2740:2753 transaction failed 29189/-3, size 0-0 line 3133 [ 955.851871] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.851889] binder: 2737:2755 transaction failed 29189/-3, size 0-0 line 3133 [ 955.862762] binder: 2715:2719 ioctl c0306201 2000ffd0 returned -14 [ 955.876566] binder: 2734:2739 ioctl c0306201 2000ffd0 returned -14 [ 955.915415] binder: 2737:2746 ioctl c0306201 2000ffd0 returned -14 [ 955.953629] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.953647] binder: 2770:2784 transaction failed 29189/-3, size 0-0 line 3133 [ 955.956288] binder: BINDER_SET_CONTEXT_MGR already set [ 955.956295] binder: 2772:2779 ioctl 40046207 0 returned -16 [ 955.956857] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.956876] binder: 2773:2781 transaction failed 29189/-3, size 0-0 line 3133 [ 955.957113] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.957129] binder: 2772:2779 transaction failed 29189/-3, size 0-0 line 3133 [ 955.968859] binder: BINDER_SET_CONTEXT_MGR already set [ 955.968867] binder: 2775:2780 ioctl 40046207 0 returned -16 [ 955.981701] binder: BINDER_SET_CONTEXT_MGR already set [ 955.981707] binder: 2771:2778 ioctl 40046207 0 returned -16 [ 955.989279] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.989297] binder: 2774:2796 transaction failed 29189/-3, size 0-0 line 3133 [ 955.997919] binder_alloc: 12386: binder_alloc_buf, no vma [ 955.997936] binder: 2776:2801 transaction failed 29189/-3, size 0-0 line 3133 [ 956.002782] binder: BINDER_SET_CONTEXT_MGR already set [ 956.002789] binder: 2798:2802 ioctl 40046207 0 returned -16 [ 956.003160] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.003176] binder: 2798:2802 transaction failed 29189/-3, size 0-0 line 3133 [ 956.007285] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.007303] binder: 2777:2805 transaction failed 29189/-3, size 0-0 line 3133 [ 956.012389] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.012414] binder: 2775:2803 transaction failed 29189/-3, size 0-0 line 3133 [ 956.016855] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.016871] binder: 2771:2809 transaction failed 29189/-3, size 0-0 line 3133 [ 956.043618] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.043635] binder: 2808:2811 transaction failed 29189/-3, size 0-0 line 3133 [ 956.045563] binder: 2775:2780 ioctl c0306201 2000ffd0 returned -14 [ 956.056010] binder: BINDER_SET_CONTEXT_MGR already set [ 956.056018] binder: 2818:2823 ioctl 40046207 0 returned -16 [ 956.058301] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.058317] binder: 2818:2823 transaction failed 29189/-3, size 0-0 line 3133 [ 956.059030] binder: 2774:2782 ioctl c0306201 2000ffd0 returned -14 [ 956.065845] binder: 2776:2783 ioctl c0306201 2000ffd0 returned -14 [ 956.070493] binder: 2777:2785 ioctl c0306201 2000ffd0 returned -14 [ 956.092473] binder: 2771:2778 ioctl c0306201 2000ffd0 returned -14 [ 956.109969] binder: BINDER_SET_CONTEXT_MGR already set [ 956.109976] binder: 2830:2834 ioctl 40046207 0 returned -16 [ 956.151672] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.151691] binder: 2830:2848 transaction failed 29189/-3, size 0-0 line 3133 [ 956.152591] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.152605] binder: 2839:2849 transaction failed 29189/-3, size 0-0 line 3133 [ 956.177435] binder: 2830:2834 ioctl c0306201 2000ffd0 returned -14 [ 956.186814] binder: 2839:2843 ioctl c0306201 2000ffd0 returned -14 [ 956.216451] binder: BINDER_SET_CONTEXT_MGR already set [ 956.216458] binder: 2856:2861 ioctl 40046207 0 returned -16 [ 956.226413] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.226425] binder: BINDER_SET_CONTEXT_MGR already set [ 956.226430] binder: 2858:2862 transaction failed 29189/-3, size 0-0 line 3133 [ 956.226435] binder: 2855:2868 ioctl 40046207 0 returned -16 [ 956.228105] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.228119] binder: 2855:2868 transaction failed 29189/-3, size 0-0 line 3133 [ 956.248702] binder: BINDER_SET_CONTEXT_MGR already set [ 956.248711] binder: 2865:2874 ioctl 40046207 0 returned -16 [ 956.257512] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.257529] binder: 2856:2878 transaction failed 29189/-3, size 0-0 line 3133 [ 956.257587] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.257602] binder: 2854:2879 transaction failed 29189/-3, size 0-0 line 3133 [ 956.273583] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.273601] binder: 2859:2884 transaction failed 29189/-3, size 0-0 line 3133 [ 956.286702] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.286720] binder: 2863:2885 transaction failed 29189/-3, size 0-0 line 3133 [ 956.287569] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.287582] binder: 2865:2887 transaction failed 29189/-3, size 0-0 line 3133 [ 956.301641] binder: BINDER_SET_CONTEXT_MGR already set [ 956.301648] binder: 2890:2894 ioctl 40046207 0 returned -16 [ 956.302186] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.302203] binder: 2890:2894 transaction failed 29189/-3, size 0-0 line 3133 [ 956.319604] binder: 2856:2861 ioctl c0306201 2000ffd0 returned -14 [ 956.322219] binder: 2865:2874 ioctl c0306201 2000ffd0 returned -14 [ 956.324332] binder: 2854:2860 ioctl c0306201 2000ffd0 returned -14 [ 956.330188] binder: 2859:2867 ioctl c0306201 2000ffd0 returned -14 [ 956.348266] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.348295] binder: 2883:2915 transaction failed 29189/-3, size 0-0 line 3133 [ 956.356949] binder: BINDER_SET_CONTEXT_MGR already set [ 956.356956] binder: 2914:2916 ioctl 40046207 0 returned -16 [ 956.357341] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.357356] binder: 2914:2916 transaction failed 29189/-3, size 0-0 line 3133 [ 956.361725] binder: 2863:2872 ioctl c0306201 2000ffd0 returned -14 [ 956.385066] binder: 2883:2891 ioctl c0306201 2000ffd0 returned -14 [ 956.410166] binder: BINDER_SET_CONTEXT_MGR already set [ 956.410173] binder: 2926:2931 ioctl 40046207 0 returned -16 [ 956.427241] binder: BINDER_SET_CONTEXT_MGR already set [ 956.427248] binder: 2925:2930 ioctl 40046207 0 returned -16 [ 956.427699] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.427715] binder: 2925:2930 transaction failed 29189/-3, size 0-0 line 3133 [ 956.435518] binder: BINDER_SET_CONTEXT_MGR already set [ 956.435526] binder: 2923:2933 ioctl 40046207 0 returned -16 [ 956.444858] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.444881] binder: 2926:2947 transaction failed 29189/-3, size 0-0 line 3133 [ 956.446791] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.446807] binder: 2922:2950 transaction failed 29189/-3, size 0-0 line 3133 [ 956.469508] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.469528] binder: 2927:2944 transaction failed 29189/-3, size 0-0 line 3133 [ 956.469774] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.469789] binder: 2924:2952 transaction failed 29189/-3, size 0-0 line 3133 [ 956.469901] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.469915] binder: 2932:2955 transaction failed 29189/-3, size 0-0 line 3133 [ 956.471476] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.471493] binder: 2923:2957 transaction failed 29189/-3, size 0-0 line 3133 [ 956.478877] binder: BINDER_SET_CONTEXT_MGR already set [ 956.478884] binder: 2953:2956 ioctl 40046207 0 returned -16 [ 956.479839] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.479858] binder: 2953:2956 transaction failed 29189/-3, size 0-0 line 3133 [ 956.502378] binder: 2932:2934 ioctl c0306201 2000ffd0 returned -14 [ 956.518588] binder: 2923:2933 ioctl c0306201 2000ffd0 returned -14 [ 956.537673] binder: 2922:2938 ioctl c0306201 2000ffd0 returned -14 [ 956.539447] binder: 2926:2931 ioctl c0306201 2000ffd0 returned -14 [ 956.541446] binder: 2924:2928 ioctl c0306201 2000ffd0 returned -14 [ 956.543058] binder: 2927:2936 ioctl c0306201 2000ffd0 returned -14 [ 956.589235] binder: BINDER_SET_CONTEXT_MGR already set [ 956.589243] binder: 2978:2981 ioctl 40046207 0 returned -16 [ 956.589765] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.589780] binder: 2978:2981 transaction failed 29189/-3, size 0-0 line 3133 [ 956.599138] binder: BINDER_SET_CONTEXT_MGR already set [ 956.599146] binder: 2985:2997 ioctl 40046207 0 returned -16 [ 956.603571] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.603588] binder: 2993:2998 transaction failed 29189/-3, size 0-0 line 3133 [ 956.608113] binder: BINDER_SET_CONTEXT_MGR already set [ 956.608119] binder: 3001:3004 ioctl 40046207 0 returned -16 [ 956.627584] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.627603] binder: 2990:3010 transaction failed 29189/-3, size 0-0 line 3133 [ 956.627822] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.627837] binder: 2991:3012 transaction failed 29189/-3, size 0-0 line 3133 [ 956.628419] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.628438] binder: 2992:3014 transaction failed 29189/-3, size 0-0 line 3133 [ 956.638389] binder: 2977:2980 ioctl c0306201 2000ffd0 returned -14 [ 956.645028] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.645042] binder: 3001:3019 transaction failed 29189/-3, size 0-0 line 3133 [ 956.645339] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.645357] binder: 2985:3018 transaction failed 29189/-3, size 0-0 line 3133 [ 956.651284] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.651301] binder: 3015:3017 transaction failed 29189/-3, size 0-0 line 3133 [ 956.677204] binder: 2991:2995 ioctl c0306201 2000ffd0 returned -14 [ 956.680852] binder: 2985:2997 ioctl c0306201 2000ffd0 returned -14 [ 956.689547] binder: 2990:2994 ioctl c0306201 2000ffd0 returned -14 [ 956.706758] binder: 2992:2996 ioctl c0306201 2000ffd0 returned -14 [ 956.730532] binder: 3001:3004 ioctl c0306201 2000ffd0 returned -14 [ 956.765469] binder: BINDER_SET_CONTEXT_MGR already set [ 956.765476] binder: 3040:3049 ioctl 40046207 0 returned -16 [ 956.767825] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.767851] binder: 3040:3049 transaction failed 29189/-3, size 0-0 line 3133 [ 956.768649] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.768665] binder: 3042:3056 transaction failed 29189/-3, size 0-0 line 3133 [ 956.771187] binder: BINDER_SET_CONTEXT_MGR already set [ 956.771194] binder: 3046:3050 ioctl 40046207 0 returned -16 [ 956.776131] binder: BINDER_SET_CONTEXT_MGR already set [ 956.776139] binder: 3043:3047 ioctl 40046207 0 returned -16 [ 956.795638] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.795654] binder: 3046:3067 transaction failed 29189/-3, size 0-0 line 3133 [ 956.801318] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.801344] binder: 3044:3065 transaction failed 29189/-3, size 0-0 line 3133 [ 956.810371] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.810389] binder: 3041:3069 transaction failed 29189/-3, size 0-0 line 3133 [ 956.810434] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.810449] binder: 3043:3072 transaction failed 29189/-3, size 0-0 line 3133 [ 956.811872] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.811889] binder: 3064:3070 transaction failed 29189/-3, size 0-0 line 3133 [ 956.812087] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.812103] binder: 3045:3074 transaction failed 29189/-3, size 0-0 line 3133 [ 956.843745] binder: 3039:3053 ioctl c0306201 2000ffd0 returned -14 [ 956.845594] binder: 3043:3047 ioctl c0306201 2000ffd0 returned -14 [ 956.879552] binder: BINDER_SET_CONTEXT_MGR already set [ 956.879558] binder: 3076:3087 ioctl 40046207 0 returned -16 [ 956.879945] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.879960] binder: 3076:3087 transaction failed 29189/-3, size 0-0 line 3133 [ 956.885802] binder: 3044:3048 ioctl c0306201 2000ffd0 returned -14 [ 956.889004] binder: 3041:3054 ioctl c0306201 2000ffd0 returned -14 [ 956.901763] binder: 3045:3051 ioctl c0306201 2000ffd0 returned -14 [ 956.930366] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.930382] binder: 3099:3102 transaction failed 29189/-3, size 0-0 line 3133 [ 956.946428] binder: BINDER_SET_CONTEXT_MGR already set [ 956.946435] binder: 3101:3103 ioctl 40046207 0 returned -16 [ 956.951740] binder: BINDER_SET_CONTEXT_MGR already set [ 956.951748] binder: 3100:3110 ioctl 40046207 0 returned -16 [ 956.956847] binder: BINDER_SET_CONTEXT_MGR already set [ 956.956854] binder: 3108:3118 ioctl 40046207 0 returned -16 [ 956.957247] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.957264] binder: 3108:3118 transaction failed 29189/-3, size 0-0 line 3133 [ 956.980849] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.980868] binder: 3105:3128 transaction failed 29189/-3, size 0-0 line 3133 [ 956.983480] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.983499] binder: 3100:3125 transaction failed 29189/-3, size 0-0 line 3133 [ 956.984789] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.984808] binder: 3106:3127 transaction failed 29189/-3, size 0-0 line 3133 [ 956.985695] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.985711] binder: 3101:3126 transaction failed 29189/-3, size 0-0 line 3133 [ 956.987378] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.987393] binder: 3123:3129 transaction failed 29189/-3, size 0-0 line 3133 [ 956.999789] binder_alloc: 12386: binder_alloc_buf, no vma [ 956.999808] binder: 3107:3132 transaction failed 29189/-3, size 0-0 line 3133 [ 957.010805] binder: BINDER_SET_CONTEXT_MGR already set [ 957.010812] binder: 3135:3136 ioctl 40046207 0 returned -16 [ 957.011864] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.011883] binder: 3135:3136 transaction failed 29189/-3, size 0-0 line 3133 [ 957.014095] binder: 3098:3113 ioctl c0306201 2000ffd0 returned -14 [ 957.020361] binder: 3101:3103 ioctl c0306201 2000ffd0 returned -14 [ 957.047408] binder: 3106:3112 ioctl c0306201 2000ffd0 returned -14 [ 957.067613] binder: 3105:3111 ioctl c0306201 2000ffd0 returned -14 [ 957.070286] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.070303] binder: 3150:3158 transaction failed 29189/-3, size 0-0 line 3133 [ 957.076595] binder: 3107:3116 ioctl c0306201 2000ffd0 returned -14 [ 957.106563] binder: BINDER_SET_CONTEXT_MGR already set [ 957.106571] binder: 3165:3170 ioctl 40046207 0 returned -16 [ 957.114551] binder: BINDER_SET_CONTEXT_MGR already set [ 957.114558] binder: 3147:3155 ioctl 40046207 0 returned -16 [ 957.128965] binder: BINDER_SET_CONTEXT_MGR already set [ 957.128972] binder: 3177:3183 ioctl 40046207 0 returned -16 [ 957.129352] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.129371] binder: 3177:3183 transaction failed 29189/-3, size 0-0 line 3133 [ 957.131882] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.131899] binder: 3164:3188 transaction failed 29189/-3, size 0-0 line 3133 [ 957.131956] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.131970] binder: 3165:3189 transaction failed 29189/-3, size 0-0 line 3133 [ 957.138637] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.138653] binder: 3147:3167 transaction failed 29189/-3, size 0-0 line 3133 [ 957.142088] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.142103] binder: 3169:3190 transaction failed 29189/-3, size 0-0 line 3133 [ 957.147999] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.148017] binder: 3184:3187 transaction failed 29189/-3, size 0-0 line 3133 [ 957.156518] binder: 3149:3156 ioctl c0306201 2000ffd0 returned -14 [ 957.177065] binder: 3147:3155 ioctl c0306201 2000ffd0 returned -14 [ 957.180874] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.180891] binder: 3174:3196 transaction failed 29189/-3, size 0-0 line 3133 [ 957.189430] binder: 3164:3171 ioctl c0306201 2000ffd0 returned -14 [ 957.204055] binder: 3169:3176 ioctl c0306201 2000ffd0 returned -14 [ 957.212139] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.212167] binder: 3205:3209 transaction failed 29189/-3, size 0-0 line 3133 [ 957.238141] binder: BINDER_SET_CONTEXT_MGR already set [ 957.238150] binder: 3208:3214 ioctl 40046207 0 returned -16 [ 957.238949] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.238965] binder: 3208:3214 transaction failed 29189/-3, size 0-0 line 3133 [ 957.251782] binder: 3174:3181 ioctl c0306201 2000ffd0 returned -14 [ 957.261602] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.261621] binder: 3217:3235 transaction failed 29189/-3, size 0-0 line 3133 [ 957.265941] binder: BINDER_SET_CONTEXT_MGR already set [ 957.265948] binder: 3212:3223 ioctl 40046207 0 returned -16 [ 957.275570] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.275587] binder: 3221:3237 transaction failed 29189/-3, size 0-0 line 3133 [ 957.289513] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.289530] binder: 3212:3231 transaction failed 29189/-3, size 0-0 line 3133 [ 957.303090] binder: 3206:3210 ioctl c0306201 2000ffd0 returned -14 [ 957.314530] binder: 3221:3225 ioctl c0306201 2000ffd0 returned -14 [ 957.321710] binder: 3212:3223 ioctl c0306201 2000ffd0 returned -14 [ 957.339955] binder: 3217:3224 ioctl c0306201 2000ffd0 returned -14 [ 957.374433] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.374489] binder: 3246:3247 transaction failed 29189/-3, size 0-0 line 3133 [ 957.375657] binder: BINDER_SET_CONTEXT_MGR already set [ 957.375664] binder: 3248:3254 ioctl 40046207 0 returned -16 [ 957.380145] binder: BINDER_SET_CONTEXT_MGR already set [ 957.380153] binder: 3251:3259 ioctl 40046207 0 returned -16 [ 957.386516] binder: BINDER_SET_CONTEXT_MGR already set [ 957.386524] binder: 3253:3260 ioctl 40046207 0 returned -16 [ 957.405197] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.405218] binder: 3250:3270 transaction failed 29189/-3, size 0-0 line 3133 [ 957.416575] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.416593] binder: 3248:3273 transaction failed 29189/-3, size 0-0 line 3133 [ 957.418253] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.418269] binder: 3253:3275 transaction failed 29189/-3, size 0-0 line 3133 [ 957.418564] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.418577] binder: 3252:3276 transaction failed 29189/-3, size 0-0 line 3133 [ 957.432964] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.432982] binder: 3277:3278 transaction failed 29189/-3, size 0-0 line 3133 [ 957.440179] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.440199] binder: 3256:3279 transaction failed 29189/-3, size 0-0 line 3133 [ 957.454527] binder: 3253:3260 ioctl c0306201 2000ffd0 returned -14 [ 957.464518] binder: 3249:3255 ioctl c0306201 2000ffd0 returned -14 [ 957.479236] binder: 3252:3258 ioctl c0306201 2000ffd0 returned -14 [ 957.481097] binder: 3248:3254 ioctl c0306201 2000ffd0 returned -14 [ 957.483319] binder: 3250:3257 ioctl c0306201 2000ffd0 returned -14 [ 957.509040] binder: BINDER_SET_CONTEXT_MGR already set [ 957.509049] binder: 3285:3304 ioctl 40046207 0 returned -16 [ 957.520882] binder: 3256:3264 ioctl c0306201 2000ffd0 returned -14 [ 957.523654] binder: BINDER_SET_CONTEXT_MGR already set [ 957.523663] binder: 3296:3303 ioctl 40046207 0 returned -16 [ 957.525498] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.525513] binder: 3302:3309 transaction failed 29189/-3, size 0-0 line 3133 [ 957.544168] binder: BINDER_SET_CONTEXT_MGR already set [ 957.544176] binder: 3311:3317 ioctl 40046207 0 returned -16 [ 957.547221] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.547254] binder: 3296:3313 transaction failed 29189/-3, size 0-0 line 3133 [ 957.561537] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.561554] binder: 3306:3326 transaction failed 29189/-3, size 0-0 line 3133 [ 957.561760] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.561781] binder: 3300:3312 transaction failed 29189/-3, size 0-0 line 3133 [ 957.569888] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.569906] binder: 3311:3328 transaction failed 29189/-3, size 0-0 line 3133 [ 957.574556] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.574573] binder: 3310:3330 transaction failed 29189/-3, size 0-0 line 3133 [ 957.577579] binder: 3296:3303 ioctl c0306201 2000ffd0 returned -14 [ 957.593923] binder: 3300:3305 ioctl c0306201 2000ffd0 returned -14 [ 957.619888] binder: 3306:3314 ioctl c0306201 2000ffd0 returned -14 [ 957.628620] binder: 3311:3317 ioctl c0306201 2000ffd0 returned -14 [ 957.643402] binder: 3310:3318 ioctl c0306201 2000ffd0 returned -14 [ 957.682214] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.682231] binder: 3342:3351 transaction failed 29189/-3, size 0-0 line 3133 [ 957.690892] binder: BINDER_SET_CONTEXT_MGR already set [ 957.690900] binder: 3344:3354 ioctl 40046207 0 returned -16 [ 957.691393] binder: BINDER_SET_CONTEXT_MGR already set [ 957.691399] binder: 3348:3358 ioctl 40046207 0 returned -16 [ 957.695111] binder: BINDER_SET_CONTEXT_MGR already set [ 957.695118] binder: 3345:3357 ioctl 40046207 0 returned -16 [ 957.704386] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.704404] binder: 3343:3366 transaction failed 29189/-3, size 0-0 line 3133 [ 957.709116] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.709134] binder: 3350:3369 transaction failed 29189/-3, size 0-0 line 3133 [ 957.714566] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.714631] binder: 3349:3367 transaction failed 29189/-3, size 0-0 line 3133 [ 957.732609] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.732629] binder: 3346:3372 transaction failed 29189/-3, size 0-0 line 3133 [ 957.734274] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.734291] binder: 3345:3376 transaction failed 29189/-3, size 0-0 line 3133 [ 957.734515] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.734530] binder: 3348:3373 transaction failed 29189/-3, size 0-0 line 3133 [ 957.742813] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.742830] binder: 3371:3378 transaction failed 29189/-3, size 0-0 line 3133 [ 957.749966] binder: BINDER_SET_CONTEXT_MGR already set [ 957.749974] binder: 3374:3377 ioctl 40046207 0 returned -16 [ 957.750075] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.750089] binder: 3374:3377 transaction failed 29189/-3, size 0-0 line 3133 [ 957.759804] binder: 3346:3356 ioctl c0306201 2000ffd0 returned -14 [ 957.766691] binder: 3345:3357 ioctl c0306201 2000ffd0 returned -14 [ 957.788486] binder: 3349:3352 ioctl c0306201 2000ffd0 returned -14 [ 957.797510] binder: 3350:3353 ioctl c0306201 2000ffd0 returned -14 [ 957.810936] binder: 3348:3358 ioctl c0306201 2000ffd0 returned -14 [ 957.836450] binder: 3343:3347 ioctl c0306201 2000ffd0 returned -14 [ 957.870180] binder: BINDER_SET_CONTEXT_MGR already set [ 957.870186] binder: 3406:3409 ioctl 40046207 0 returned -16 [ 957.870497] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.870512] binder: 3406:3409 transaction failed 29189/-3, size 0-0 line 3133 [ 957.877909] binder: BINDER_SET_CONTEXT_MGR already set [ 957.877917] binder: 3408:3412 ioctl 40046207 0 returned -16 [ 957.887617] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.887637] binder: 3405:3415 transaction failed 29189/-3, size 0-0 line 3133 [ 957.888163] binder: BINDER_SET_CONTEXT_MGR already set [ 957.888169] binder: 3404:3416 ioctl 40046207 0 returned -16 [ 957.908133] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.908152] binder: 3408:3429 transaction failed 29189/-3, size 0-0 line 3133 [ 957.916045] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.916063] binder: 3402:3427 transaction failed 29189/-3, size 0-0 line 3133 [ 957.916171] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.916185] binder: 3403:3428 transaction failed 29189/-3, size 0-0 line 3133 [ 957.922370] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.922389] binder: 3407:3431 transaction failed 29189/-3, size 0-0 line 3133 [ 957.929697] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.929719] binder: 3414:3432 transaction failed 29189/-3, size 0-0 line 3133 [ 957.930749] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.930765] binder: 3433:3434 transaction failed 29189/-3, size 0-0 line 3133 [ 957.942708] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.942726] binder: 3404:3435 transaction failed 29189/-3, size 0-0 line 3133 [ 957.952014] binder: 3403:3411 ioctl c0306201 2000ffd0 returned -14 [ 957.954670] binder: 3402:3410 ioctl c0306201 2000ffd0 returned -14 [ 957.966398] binder: BINDER_SET_CONTEXT_MGR already set [ 957.966405] binder: 3440:3450 ioctl 40046207 0 returned -16 [ 957.966611] binder_alloc: 12386: binder_alloc_buf, no vma [ 957.966627] binder: 3440:3450 transaction failed 29189/-3, size 0-0 line 3133 [ 957.984350] binder: 3408:3412 ioctl c0306201 2000ffd0 returned -14 [ 957.991564] binder: 3404:3416 ioctl c0306201 2000ffd0 returned -14 [ 957.997627] binder: 3407:3418 ioctl c0306201 2000ffd0 returned -14 [ 958.024362] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.024380] binder: 3447:3459 transaction failed 29189/-3, size 0-0 line 3133 [ 958.029262] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.029281] binder: 3452:3463 transaction failed 29189/-3, size 0-0 line 3133 [ 958.034790] binder: BINDER_SET_CONTEXT_MGR already set [ 958.034802] binder: 3464:3472 ioctl 40046207 0 returned -16 [ 958.037125] binder: 3414:3420 ioctl c0306201 2000ffd0 returned -14 [ 958.058275] binder: BINDER_SET_CONTEXT_MGR already set [ 958.058285] binder: 3469:3473 ioctl 40046207 0 returned -16 [ 958.058586] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.058603] binder: 3455:3482 transaction failed 29189/-3, size 0-0 line 3133 [ 958.059426] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.059442] binder: 3469:3473 transaction failed 29189/-3, size 0-0 line 3133 [ 958.070643] binder: BINDER_SET_CONTEXT_MGR already set [ 958.070650] binder: 3466:3477 ioctl 40046207 0 returned -16 [ 958.074809] binder: 3452:3454 ioctl c0306201 2000ffd0 returned -14 [ 958.076109] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.076127] binder: 3468:3483 transaction failed 29189/-3, size 0-0 line 3133 [ 958.078999] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.079017] binder: 3464:3486 transaction failed 29189/-3, size 0-0 line 3133 [ 958.098247] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.098265] binder: 3489:3491 transaction failed 29189/-3, size 0-0 line 3133 [ 958.100105] binder: 3455:3462 ioctl c0306201 2000ffd0 returned -14 [ 958.119841] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.119858] binder: 3466:3496 transaction failed 29189/-3, size 0-0 line 3133 [ 958.130512] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.130531] binder: 3480:3501 transaction failed 29189/-3, size 0-0 line 3133 [ 958.139704] binder: 3464:3472 ioctl c0306201 2000ffd0 returned -14 [ 958.147373] binder: 3468:3470 ioctl c0306201 2000ffd0 returned -14 [ 958.191886] binder: 3480:3485 ioctl c0306201 2000ffd0 returned -14 [ 958.207564] binder: 3466:3477 ioctl c0306201 2000ffd0 returned -14 [ 958.241723] binder: BINDER_SET_CONTEXT_MGR already set [ 958.241731] binder: 3512:3524 ioctl 40046207 0 returned -16 [ 958.242298] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.242315] binder: 3514:3525 transaction failed 29189/-3, size 0-0 line 3133 [ 958.249168] binder: BINDER_SET_CONTEXT_MGR already set [ 958.249175] binder: 3510:3521 ioctl 40046207 0 returned -16 [ 958.249792] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.249809] binder: 3510:3521 transaction failed 29189/-3, size 0-0 line 3133 [ 958.255585] binder: BINDER_SET_CONTEXT_MGR already set [ 958.255592] binder: 3518:3522 ioctl 40046207 0 returned -16 [ 958.280473] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.280492] binder: 3516:3535 transaction failed 29189/-3, size 0-0 line 3133 [ 958.280914] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.280932] binder: 3512:3536 transaction failed 29189/-3, size 0-0 line 3133 [ 958.288047] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.288067] binder: 3513:3538 transaction failed 29189/-3, size 0-0 line 3133 [ 958.288326] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.288342] binder: 3517:3540 transaction failed 29189/-3, size 0-0 line 3133 [ 958.288691] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.288707] binder: 3518:3541 transaction failed 29189/-3, size 0-0 line 3133 [ 958.297674] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.297690] binder: 3539:3542 transaction failed 29189/-3, size 0-0 line 3133 [ 958.298040] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.298059] binder: 3511:3543 transaction failed 29189/-3, size 0-0 line 3133 [ 958.306490] binder: BINDER_SET_CONTEXT_MGR already set [ 958.306499] binder: 3544:3545 ioctl 40046207 0 returned -16 [ 958.309205] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.309222] binder: 3544:3545 transaction failed 29189/-3, size 0-0 line 3133 [ 958.319323] binder: 3518:3522 ioctl c0306201 2000ffd0 returned -14 [ 958.322257] binder: 3513:3520 ioctl c0306201 2000ffd0 returned -14 [ 958.328064] binder: 3511:3523 ioctl c0306201 2000ffd0 returned -14 [ 958.347976] binder: 3516:3527 ioctl c0306201 2000ffd0 returned -14 [ 958.353266] binder: 3512:3524 ioctl c0306201 2000ffd0 returned -14 [ 958.362551] binder: 3517:3519 ioctl c0306201 2000ffd0 returned -14 [ 958.390319] binder: BINDER_SET_CONTEXT_MGR already set [ 958.390326] binder: 3568:3571 ioctl 40046207 0 returned -16 [ 958.402595] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.402614] binder: 3577:3582 transaction failed 29189/-3, size 0-0 line 3133 [ 958.405339] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.405356] binder: 3561:3586 transaction failed 29189/-3, size 0-0 line 3133 [ 958.427591] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.427610] binder: 3573:3592 transaction failed 29189/-3, size 0-0 line 3133 [ 958.430572] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.430591] binder: 3568:3580 transaction failed 29189/-3, size 0-0 line 3133 [ 958.432520] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.432536] binder: 3579:3595 transaction failed 29189/-3, size 0-0 line 3133 [ 958.437809] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.437826] binder: 3565:3593 transaction failed 29189/-3, size 0-0 line 3133 [ 958.442988] binder: 3561:3569 ioctl c0306201 2000ffd0 returned -14 [ 958.461996] binder: 3568:3571 ioctl c0306201 2000ffd0 returned -14 [ 958.469159] binder: 3565:3581 ioctl c0306201 2000ffd0 returned -14 [ 958.496961] binder: 3573:3578 ioctl c0306201 2000ffd0 returned -14 [ 958.521645] binder: 3579:3583 ioctl c0306201 2000ffd0 returned -14 [ 958.547104] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.547121] binder: 3609:3615 transaction failed 29189/-3, size 0-0 line 3133 [ 958.558947] binder: BINDER_SET_CONTEXT_MGR already set [ 958.558953] binder: 3610:3617 ioctl 40046207 0 returned -16 [ 958.566623] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.566639] binder: 3608:3622 transaction failed 29189/-3, size 0-0 line 3133 [ 958.567789] binder: BINDER_SET_CONTEXT_MGR already set [ 958.567796] binder: 3613:3620 ioctl 40046207 0 returned -16 [ 958.597690] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.597710] binder: 3612:3636 transaction failed 29189/-3, size 0-0 line 3133 [ 958.600856] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.600872] binder: 3618:3641 transaction failed 29189/-3, size 0-0 line 3133 [ 958.601157] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.601171] binder: 3613:3642 transaction failed 29189/-3, size 0-0 line 3133 [ 958.604572] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.604639] binder: 3611:3638 transaction failed 29189/-3, size 0-0 line 3133 [ 958.604747] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.604762] binder: 3610:3639 transaction failed 29189/-3, size 0-0 line 3133 [ 958.605224] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.605241] binder: 3614:3637 transaction failed 29189/-3, size 0-0 line 3133 [ 958.613331] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.613348] binder: 3640:3643 transaction failed 29189/-3, size 0-0 line 3133 [ 958.636302] binder: 3613:3620 ioctl c0306201 2000ffd0 returned -14 [ 958.646044] binder: 3611:3619 ioctl c0306201 2000ffd0 returned -14 [ 958.660703] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.660721] binder: 3653:3658 transaction failed 29189/-3, size 0-0 line 3133 [ 958.682011] binder: 3610:3617 ioctl c0306201 2000ffd0 returned -14 [ 958.688797] binder: 3612:3623 ioctl c0306201 2000ffd0 returned -14 [ 958.693046] binder: 3614:3621 ioctl c0306201 2000ffd0 returned -14 [ 958.706514] binder: 3618:3625 ioctl c0306201 2000ffd0 returned -14 [ 958.725617] binder: BINDER_SET_CONTEXT_MGR already set [ 958.725624] binder: 3663:3669 ioctl 40046207 0 returned -16 [ 958.749207] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.749224] binder: 3663:3675 transaction failed 29189/-3, size 0-0 line 3133 [ 958.774456] binder: 3663:3669 ioctl c0306201 2000ffd0 returned -14 [ 958.811209] binder: BINDER_SET_CONTEXT_MGR already set [ 958.811217] binder: 3683:3694 ioctl 40046207 0 returned -16 [ 958.813363] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.813380] binder: 3689:3701 transaction failed 29189/-3, size 0-0 line 3133 [ 958.824324] binder: BINDER_SET_CONTEXT_MGR already set [ 958.824332] binder: 3684:3697 ioctl 40046207 0 returned -16 [ 958.827138] binder: BINDER_SET_CONTEXT_MGR already set [ 958.827144] binder: 3690:3695 ioctl 40046207 0 returned -16 [ 958.829201] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.829218] binder: 3684:3697 transaction failed 29189/-3, size 0-0 line 3133 [ 958.845036] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.845056] binder: 3683:3711 transaction failed 29189/-3, size 0-0 line 3133 [ 958.845444] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.845463] binder: 3688:3710 transaction failed 29189/-3, size 0-0 line 3133 [ 958.845608] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.845624] binder: 3686:3712 transaction failed 29189/-3, size 0-0 line 3133 [ 958.855591] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.855608] binder: 3690:3707 transaction failed 29189/-3, size 0-0 line 3133 [ 958.857193] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.857211] binder: 3687:3717 transaction failed 29189/-3, size 0-0 line 3133 [ 958.858174] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.858191] binder: 3685:3716 transaction failed 29189/-3, size 0-0 line 3133 [ 958.862710] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.862727] binder: 3713:3715 transaction failed 29189/-3, size 0-0 line 3133 [ 958.882953] binder: 3690:3695 ioctl c0306201 2000ffd0 returned -14 [ 958.891926] binder: 3685:3698 ioctl c0306201 2000ffd0 returned -14 [ 958.912981] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.912999] binder: 3733:3738 transaction failed 29189/-3, size 0-0 line 3133 [ 958.914340] binder: 3687:3699 ioctl c0306201 2000ffd0 returned -14 [ 958.917004] binder: 3688:3692 ioctl c0306201 2000ffd0 returned -14 [ 958.918484] binder: 3686:3693 ioctl c0306201 2000ffd0 returned -14 [ 958.919854] binder: 3683:3694 ioctl c0306201 2000ffd0 returned -14 [ 958.924828] binder: BINDER_SET_CONTEXT_MGR already set [ 958.924834] binder: 3720:3722 ioctl 40046207 0 returned -16 [ 958.925135] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.925148] binder: 3720:3722 transaction failed 29189/-3, size 0-0 line 3133 [ 958.977469] binder: BINDER_SET_CONTEXT_MGR already set [ 958.977476] binder: 3735:3749 ioctl 40046207 0 returned -16 [ 958.983326] binder: BINDER_SET_CONTEXT_MGR already set [ 958.983334] binder: 3755:3760 ioctl 40046207 0 returned -16 [ 958.993716] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.993734] binder: 3739:3751 transaction failed 29189/-3, size 0-0 line 3133 [ 958.996770] binder: BINDER_SET_CONTEXT_MGR already set [ 958.996778] binder: 3778:3780 ioctl 40046207 0 returned -16 [ 958.997201] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.997219] binder: 3778:3780 transaction failed 29189/-3, size 0-0 line 3133 [ 958.998458] binder_alloc: 12386: binder_alloc_buf, no vma [ 958.998473] binder: 3763:3779 transaction failed 29189/-3, size 0-0 line 3133 [ 959.015446] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.015463] binder: 3735:3756 transaction failed 29189/-3, size 0-0 line 3133 [ 959.017893] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.017912] binder: 3755:3787 transaction failed 29189/-3, size 0-0 line 3133 [ 959.018072] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.018090] binder: 3754:3784 transaction failed 29189/-3, size 0-0 line 3133 [ 959.018376] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.018390] binder: 3752:3785 transaction failed 29189/-3, size 0-0 line 3133 [ 959.029037] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.029055] binder: 3753:3786 transaction failed 29189/-3, size 0-0 line 3133 [ 959.036890] binder: 3739:3750 ioctl c0306201 2000ffd0 returned -14 [ 959.048772] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.048788] binder: 3789:3792 transaction failed 29189/-3, size 0-0 line 3133 [ 959.063182] binder: 3735:3749 ioctl c0306201 2000ffd0 returned -14 [ 959.086823] binder: 3755:3760 ioctl c0306201 2000ffd0 returned -14 [ 959.089869] binder: 3754:3762 ioctl c0306201 2000ffd0 returned -14 [ 959.094789] binder: 3753:3761 ioctl c0306201 2000ffd0 returned -14 [ 959.095596] binder: 3752:3759 ioctl c0306201 2000ffd0 returned -14 [ 959.126326] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.126346] binder: 3819:3821 transaction failed 29189/-3, size 0-0 line 3133 [ 959.127804] binder: BINDER_SET_CONTEXT_MGR already set [ 959.127812] binder: 3813:3823 ioctl 40046207 0 returned -16 [ 959.133882] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.133897] binder: 3801:3814 transaction failed 29189/-3, size 0-0 line 3133 [ 959.152867] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.152885] binder: 3813:3830 transaction failed 29189/-3, size 0-0 line 3133 [ 959.160153] binder: 3801:3804 ioctl c0306201 2000ffd0 returned -14 [ 959.184581] binder: 3813:3823 ioctl c0306201 2000ffd0 returned -14 [ 959.218825] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.218846] binder: 3836:3845 transaction failed 29189/-3, size 0-0 line 3133 [ 959.220638] binder: BINDER_SET_CONTEXT_MGR already set [ 959.220645] binder: 3835:3842 ioctl 40046207 0 returned -16 [ 959.222167] binder: BINDER_SET_CONTEXT_MGR already set [ 959.222173] binder: 3839:3843 ioctl 40046207 0 returned -16 [ 959.238869] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.238885] binder: 3832:3856 transaction failed 29189/-3, size 0-0 line 3133 [ 959.243599] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.243618] binder: 3833:3858 transaction failed 29189/-3, size 0-0 line 3133 [ 959.248347] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.248364] binder: 3837:3859 transaction failed 29189/-3, size 0-0 line 3133 [ 959.250120] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.250136] binder: 3835:3861 transaction failed 29189/-3, size 0-0 line 3133 [ 959.259560] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.259579] binder: 3839:3873 transaction failed 29189/-3, size 0-0 line 3133 [ 959.273460] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.273479] binder: 3834:3883 transaction failed 29189/-3, size 0-0 line 3133 [ 959.290239] binder: 3832:3840 ioctl c0306201 2000ffd0 returned -14 [ 959.297309] binder: 3833:3847 ioctl c0306201 2000ffd0 returned -14 [ 959.300865] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.300882] binder: 3886:3894 transaction failed 29189/-3, size 0-0 line 3133 [ 959.302530] binder: 3839:3843 ioctl c0306201 2000ffd0 returned -14 [ 959.307667] binder: 3837:3841 ioctl c0306201 2000ffd0 returned -14 [ 959.309252] binder: 3834:3844 ioctl c0306201 2000ffd0 returned -14 [ 959.321031] binder: 3835:3842 ioctl c0306201 2000ffd0 returned -14 [ 959.373342] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.373360] binder: 3914:3929 transaction failed 29189/-3, size 0-0 line 3133 [ 959.379258] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.379279] binder: 3915:3927 transaction failed 29189/-3, size 0-0 line 3133 [ 959.406256] binder: 3914:3919 ioctl c0306201 2000ffd0 returned -14 [ 959.455400] binder: 3915:3918 ioctl c0306201 2000ffd0 returned -14 [ 959.485257] binder: BINDER_SET_CONTEXT_MGR already set [ 959.485264] binder: 3939:3952 ioctl 40046207 0 returned -16 [ 959.485443] binder: BINDER_SET_CONTEXT_MGR already set [ 959.485449] binder: 3940:3953 ioctl 40046207 0 returned -16 [ 959.493396] binder: BINDER_SET_CONTEXT_MGR already set [ 959.493402] binder: 3943:3948 ioctl 40046207 0 returned -16 [ 959.495870] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.495886] binder: 3943:3948 transaction failed 29189/-3, size 0-0 line 3133 [ 959.506891] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.506909] binder: 3938:3950 transaction failed 29189/-3, size 0-0 line 3133 [ 959.518898] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.518918] binder: 3939:3963 transaction failed 29189/-3, size 0-0 line 3133 [ 959.519753] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.519889] binder: 3940:3964 transaction failed 29189/-3, size 0-0 line 3133 [ 959.525725] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.525744] binder: 3937:3966 transaction failed 29189/-3, size 0-0 line 3133 [ 959.525803] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.525818] binder: 3941:3968 transaction failed 29189/-3, size 0-0 line 3133 [ 959.533026] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.533058] binder: 3945:3969 transaction failed 29189/-3, size 0-0 line 3133 [ 959.540997] binder: BINDER_SET_CONTEXT_MGR already set [ 959.541004] binder: 3971:3973 ioctl 40046207 0 returned -16 [ 959.541539] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.541555] binder: 3971:3973 transaction failed 29189/-3, size 0-0 line 3133 [ 959.546975] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.546996] binder: 3944:3970 transaction failed 29189/-3, size 0-0 line 3133 [ 959.554950] binder: 3940:3953 ioctl c0306201 2000ffd0 returned -14 [ 959.579056] binder: 3941:3946 ioctl c0306201 2000ffd0 returned -14 [ 959.589283] binder: 3945:3949 ioctl c0306201 2000ffd0 returned -14 [ 959.606919] binder: 3939:3952 ioctl c0306201 2000ffd0 returned -14 [ 959.620868] binder: BINDER_SET_CONTEXT_MGR already set [ 959.620876] binder: 3986:3995 ioctl 40046207 0 returned -16 [ 959.623184] binder: 3944:3955 ioctl c0306201 2000ffd0 returned -14 [ 959.642784] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.642801] binder: 3984:3987 transaction failed 29189/-3, size 0-0 line 3133 [ 959.652063] binder: BINDER_SET_CONTEXT_MGR already set [ 959.652071] binder: 3998:4004 ioctl 40046207 0 returned -16 [ 959.655043] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.655061] binder: 3998:4004 transaction failed 29189/-3, size 0-0 line 3133 [ 959.658660] binder: 3937:3947 ioctl c0306201 2000ffd0 returned -14 [ 959.663733] binder: BINDER_SET_CONTEXT_MGR already set [ 959.663739] binder: 4007:4012 ioctl 40046207 0 returned -16 [ 959.665418] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.665435] binder: 3986:4016 transaction failed 29189/-3, size 0-0 line 3133 [ 959.690767] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.690784] binder: 3997:4024 transaction failed 29189/-3, size 0-0 line 3133 [ 959.697672] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.697691] binder: 4007:4026 transaction failed 29189/-3, size 0-0 line 3133 [ 959.709321] binder: 3986:3995 ioctl c0306201 2000ffd0 returned -14 [ 959.719771] binder: 3997:4000 ioctl c0306201 2000ffd0 returned -14 [ 959.720802] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.720819] binder: 4013:4031 transaction failed 29189/-3, size 0-0 line 3133 [ 959.731793] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.731809] binder: 4020:4034 transaction failed 29189/-3, size 0-0 line 3133 [ 959.751734] binder: 4007:4012 ioctl c0306201 2000ffd0 returned -14 [ 959.772784] binder: 4013:4014 ioctl c0306201 2000ffd0 returned -14 [ 959.783538] binder: 4020:4023 ioctl c0306201 2000ffd0 returned -14 [ 959.825011] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.825029] binder: 4043:4047 transaction failed 29189/-3, size 0-0 line 3133 [ 959.829204] binder: BINDER_SET_CONTEXT_MGR already set [ 959.829211] binder: 4042:4054 ioctl 40046207 0 returned -16 [ 959.830446] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.830463] binder: 4042:4054 transaction failed 29189/-3, size 0-0 line 3133 [ 959.836562] binder: BINDER_SET_CONTEXT_MGR already set [ 959.836567] binder: 4048:4062 ioctl 40046207 0 returned -16 [ 959.841363] binder: BINDER_SET_CONTEXT_MGR already set [ 959.841370] binder: 4045:4061 ioctl 40046207 0 returned -16 [ 959.858120] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.858234] binder: 4049:4073 transaction failed 29189/-3, size 0-0 line 3133 [ 959.858258] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.858271] binder: 4069:4070 transaction failed 29189/-3, size 0-0 line 3133 [ 959.859393] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.859410] binder: 4050:4071 transaction failed 29189/-3, size 0-0 line 3133 [ 959.862638] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.862654] binder: 4046:4074 transaction failed 29189/-3, size 0-0 line 3133 [ 959.876945] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.876962] binder: 4048:4076 transaction failed 29189/-3, size 0-0 line 3133 [ 959.881355] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.881373] binder: 4045:4077 transaction failed 29189/-3, size 0-0 line 3133 [ 959.888409] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.888429] binder: 4081:4083 transaction failed 29189/-3, size 0-0 line 3133 [ 959.900059] binder: 4046:4053 ioctl c0306201 2000ffd0 returned -14 [ 959.916503] binder: 4050:4051 ioctl c0306201 2000ffd0 returned -14 [ 959.921189] binder: 4049:4055 ioctl c0306201 2000ffd0 returned -14 [ 959.921432] binder: 4048:4062 ioctl c0306201 2000ffd0 returned -14 [ 959.936716] binder: 4045:4061 ioctl c0306201 2000ffd0 returned -14 [ 959.939632] binder: BINDER_SET_CONTEXT_MGR already set [ 959.939638] binder: 4082:4086 ioctl 40046207 0 returned -16 [ 959.940229] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.940247] binder: 4082:4086 transaction failed 29189/-3, size 0-0 line 3133 [ 959.963121] binder: BINDER_SET_CONTEXT_MGR already set [ 959.963128] binder: 4102:4103 ioctl 40046207 0 returned -16 [ 959.963206] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.963222] binder: 4099:4104 transaction failed 29189/-3, size 0-0 line 3133 [ 959.990080] binder: BINDER_SET_CONTEXT_MGR already set [ 959.990085] binder: 4108:4115 ioctl 40046207 0 returned -16 [ 959.998740] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.998970] binder_alloc: 12386: binder_alloc_buf, no vma [ 959.998989] binder: 4100:4119 transaction failed 29189/-3, size 0-0 line 3133 [ 959.999038] binder: 4102:4120 transaction failed 29189/-3, size 0-0 line 3133 [ 960.000542] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.000558] binder: 4101:4121 transaction failed 29189/-3, size 0-0 line 3133 [ 960.007398] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.007415] binder: 4094:4122 transaction failed 29189/-3, size 0-0 line 3133 [ 960.017142] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.017160] binder: 4108:4126 transaction failed 29189/-3, size 0-0 line 3133 [ 960.027651] binder: 4102:4103 ioctl c0306201 2000ffd0 returned -14 [ 960.036493] binder: 4094:4113 ioctl c0306201 2000ffd0 returned -14 [ 960.055335] binder: 4100:4105 ioctl c0306201 2000ffd0 returned -14 [ 960.063438] binder: 4108:4115 ioctl c0306201 2000ffd0 returned -14 [ 960.070483] binder: 4101:4106 ioctl c0306201 2000ffd0 returned -14 [ 960.102070] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.102088] binder: 4137:4141 transaction failed 29189/-3, size 0-0 line 3133 [ 960.105325] binder: BINDER_SET_CONTEXT_MGR already set [ 960.105333] binder: 4136:4140 ioctl 40046207 0 returned -16 [ 960.105769] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.105787] binder: 4136:4140 transaction failed 29189/-3, size 0-0 line 3133 [ 960.108011] binder: BINDER_SET_CONTEXT_MGR already set [ 960.108017] binder: 4135:4145 ioctl 40046207 0 returned -16 [ 960.132910] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.132930] binder: 4134:4157 transaction failed 29189/-3, size 0-0 line 3133 [ 960.135769] binder: BINDER_SET_CONTEXT_MGR already set [ 960.135776] binder: 4142:4153 ioctl 40046207 0 returned -16 [ 960.136698] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.136718] binder: 4138:4160 transaction failed 29189/-3, size 0-0 line 3133 [ 960.136892] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.136907] binder: 4142:4153 transaction failed 29189/-3, size 2199023255581-682899800065 line 3133 [ 960.137420] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.137435] binder: 4142:4153 transaction failed 29189/-3, size 0-0 line 3133 [ 960.137967] binder: BINDER_SET_CONTEXT_MGR already set [ 960.137975] binder: 4144:4154 ioctl 40046207 0 returned -16 [ 960.140026] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.140042] binder: 4135:4161 transaction failed 29189/-3, size 0-0 line 3133 [ 960.152435] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.152450] binder: 4143:4162 transaction failed 29189/-3, size 0-0 line 3133 [ 960.160529] binder: 4134:4139 ioctl c0306201 2000ffd0 returned -14 [ 960.172894] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.172913] binder: 4144:4168 transaction failed 29189/-3, size 0-0 line 3133 [ 960.182947] binder: BINDER_SET_CONTEXT_MGR already set [ 960.182955] binder: 4167:4170 ioctl 40046207 0 returned -16 [ 960.183596] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.183614] binder: 4167:4170 transaction failed 29189/-3, size 0-0 line 3133 [ 960.186562] binder: 4135:4145 ioctl c0306201 2000ffd0 returned -14 [ 960.206418] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.206440] binder: 4169:4172 transaction failed 29189/-3, size 0-0 line 3133 [ 960.206914] binder: BINDER_SET_CONTEXT_MGR already set [ 960.206922] binder: 4142:4153 ioctl 40046207 0 returned -16 [ 960.208218] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.208236] binder: 4142:4153 transaction failed 29189/-3, size 2199023255581-682899800065 line 3133 [ 960.209570] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.209588] binder: 4142:4153 transaction failed 29189/-3, size 0-0 line 3133 [ 960.216276] binder: 4144:4154 ioctl c0306201 2000ffd0 returned -14 [ 960.225836] binder: 4143:4147 ioctl c0306201 2000ffd0 returned -14 [ 960.226168] binder: 4138:4146 ioctl c0306201 2000ffd0 returned -14 [ 960.246309] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.246350] binder: 4175:4194 transaction failed 29189/-3, size 0-0 line 3133 [ 960.249280] binder: BINDER_SET_CONTEXT_MGR already set [ 960.249289] binder: 4182:4187 ioctl 40046207 0 returned -16 [ 960.269857] binder: BINDER_SET_CONTEXT_MGR already set [ 960.269865] binder: 4198:4200 ioctl 40046207 0 returned -16 [ 960.272246] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.272264] binder: 4182:4195 transaction failed 29189/-3, size 0-0 line 3133 [ 960.303058] binder: 4175:4179 ioctl c0306201 2000ffd0 returned -14 [ 960.305682] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.305702] binder: 4197:4206 transaction failed 29189/-3, size 0-0 line 3133 [ 960.311648] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.311667] binder: 4198:4207 transaction failed 29189/-3, size 0-0 line 3133 [ 960.321659] binder: 4182:4187 ioctl c0306201 2000ffd0 returned -14 [ 960.344623] binder: 4198:4200 ioctl c0306201 2000ffd0 returned -14 [ 960.352145] binder: 4197:4199 ioctl c0306201 2000ffd0 returned -14 [ 960.382320] binder: BINDER_SET_CONTEXT_MGR already set [ 960.382329] binder: 4213:4218 ioctl 40046207 0 returned -16 [ 960.384522] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.384536] binder: 4215:4219 transaction failed 29189/-3, size 0-0 line 3133 [ 960.396093] binder: BINDER_SET_CONTEXT_MGR already set [ 960.396100] binder: 4216:4224 ioctl 40046207 0 returned -16 [ 960.397986] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.398003] binder: 4216:4224 transaction failed 29189/-3, size 0-0 line 3133 [ 960.398346] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 960.398877] device lo entered promiscuous mode [ 960.408470] binder: BINDER_SET_CONTEXT_MGR already set [ 960.408477] binder: 4223:4229 ioctl 40046207 0 returned -16 [ 960.411420] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.411436] binder: 4213:4238 transaction failed 29189/-3, size 0-0 line 3133 [ 960.437185] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.437204] binder: 4221:4242 transaction failed 29189/-3, size 0-0 line 3133 [ 960.438233] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.438244] binder: 4217:4239 transaction failed 29189/-3, size 0-0 line 3133 [ 960.443485] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.443502] binder: 4243:4244 transaction failed 29189/-3, size 0-0 line 3133 [ 960.445105] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.445123] binder: 4223:4245 transaction failed 29189/-3, size 0-0 line 3133 [ 960.455594] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.455615] binder: 4222:4249 transaction failed 29189/-3, size 0-0 line 3133 [ 960.472194] binder: 4217:4220 ioctl c0306201 2000ffd0 returned -14 [ 960.478264] binder: 4213:4218 ioctl c0306201 2000ffd0 returned -14 [ 960.501307] binder: 4223:4229 ioctl c0306201 2000ffd0 returned -14 [ 960.507233] binder: BINDER_SET_CONTEXT_MGR already set [ 960.507240] binder: 4251:4253 ioctl 40046207 0 returned -16 [ 960.507707] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.507722] binder: 4251:4253 transaction failed 29189/-3, size 0-0 line 3133 [ 960.518390] binder: 4221:4226 ioctl c0306201 2000ffd0 returned -14 [ 960.525717] binder: 4222:4231 ioctl c0306201 2000ffd0 returned -14 [ 960.530309] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 960.539063] device lo left promiscuous mode [ 960.595490] device lo entered promiscuous mode [ 960.639034] binder: BINDER_SET_CONTEXT_MGR already set [ 960.639048] binder: 4283:4291 ioctl 40046207 0 returned -16 [ 960.639078] binder: BINDER_SET_CONTEXT_MGR already set [ 960.639084] binder: 4280:4285 ioctl 40046207 0 returned -16 [ 960.639183] binder: BINDER_SET_CONTEXT_MGR already set [ 960.639189] binder: 4282:4287 ioctl 40046207 0 returned -16 [ 960.639992] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.640010] binder: 4283:4291 transaction failed 29189/-3, size 0-0 line 3133 [ 960.656487] binder: 4289:4295 unknown command 1616442364 [ 960.656495] binder: 4289:4295 ioctl c0306201 20004000 returned -22 [ 960.656584] binder: BINDER_SET_CONTEXT_MGR already set [ 960.656590] binder: 4289:4295 ioctl 40046207 0 returned -16 [ 960.670893] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.670908] binder: 4281:4307 transaction failed 29189/-3, size 0-0 line 3133 [ 960.671010] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.671027] binder: 4280:4305 transaction failed 29189/-3, size 0-0 line 3133 [ 960.680686] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.680704] binder: 4282:4306 transaction failed 29189/-3, size 0-0 line 3133 [ 960.691679] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.691697] binder: 4286:4309 transaction failed 29189/-3, size 0-0 line 3133 [ 960.693826] binder: BINDER_SET_CONTEXT_MGR already set [ 960.693833] binder: 4310:4312 ioctl 40046207 0 returned -16 [ 960.695297] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.695316] binder: 4289:4314 transaction failed 29189/-3, size 0-0 line 3133 [ 960.696333] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.696394] binder: 4310:4312 transaction failed 29189/-3, size 0-0 line 3133 [ 960.727006] binder: 4281:4292 ioctl c0306201 2000ffd0 returned -14 [ 960.735054] binder: 4280:4285 ioctl c0306201 2000ffd0 returned -14 [ 960.751845] binder: 4282:4287 ioctl c0306201 2000ffd0 returned -14 [ 960.757592] binder: 4284:4288 ioctl c0306201 2000ffd0 returned -14 [ 960.783632] binder: BINDER_SET_CONTEXT_MGR already set [ 960.783641] binder: 4325:4328 ioctl 40046207 0 returned -16 [ 960.783956] binder: 4286:4294 ioctl c0306201 2000ffd0 returned -14 [ 960.784179] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.784195] binder: 4325:4328 transaction failed 29189/-3, size 0-0 line 3133 [ 960.793515] binder: BINDER_SET_CONTEXT_MGR already set [ 960.793524] binder: 4289:4335 ioctl 40046207 0 returned -16 [ 960.796359] binder: 4289:4314 ioctl c0306201 2000ffd0 returned -14 [ 960.796407] binder_alloc: binder_alloc_mmap_handler: 4289 2000c000-2000e000 already mapped failed -16 [ 960.808071] binder: BINDER_SET_CONTEXT_MGR already set [ 960.808080] binder: 4333:4337 ioctl 40046207 0 returned -16 [ 960.812355] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.812374] binder: 4327:4351 transaction failed 29189/-3, size 0-0 line 3133 [ 960.812747] binder: BINDER_SET_CONTEXT_MGR already set [ 960.812753] binder: 4342:4349 ioctl 40046207 0 returned -16 [ 960.830169] binder: 4289:4295 ioctl c0306201 2000ffd0 returned -14 [ 960.836212] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.836227] binder: 4333:4345 transaction failed 29189/-3, size 0-0 line 3133 [ 960.844239] binder: BINDER_SET_CONTEXT_MGR already set [ 960.844247] binder: 4357:4359 ioctl 40046207 0 returned -16 [ 960.844953] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.844969] binder: 4357:4359 transaction failed 29189/-3, size 0-0 line 3133 [ 960.857737] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.857754] binder: 4342:4362 transaction failed 29189/-3, size 0-0 line 3133 [ 960.858270] binder: 4327:4332 ioctl c0306201 2000ffd0 returned -14 [ 960.868315] device lo left promiscuous mode [ 960.871538] binder: 4333:4337 ioctl c0306201 2000ffd0 returned -14 [ 960.883673] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.883690] binder: 4348:4370 transaction failed 29189/-3, size 0-0 line 3133 [ 960.894490] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 960.909927] binder: BINDER_SET_CONTEXT_MGR already set [ 960.909941] binder: 4376:4382 ioctl 40046207 0 returned -16 [ 960.911120] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.911141] binder: 4376:4382 transaction failed 29189/-3, size 0-0 line 3133 [ 960.918302] binder: 4338:4347 ioctl c0306201 2000ffd0 returned -14 [ 960.938802] binder: 4342:4349 ioctl c0306201 2000ffd0 returned -14 [ 960.946632] binder: 4348:4350 ioctl c0306201 2000ffd0 returned -14 [ 960.955631] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.955653] binder: 4371:4398 transaction failed 29189/-3, size 0-0 line 3133 [ 960.956789] binder: BINDER_SET_CONTEXT_MGR already set [ 960.956798] binder: 4375:4383 ioctl 40046207 0 returned -16 [ 960.980173] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.980191] binder: 4375:4389 transaction failed 29189/-3, size 0-0 line 3133 [ 960.982229] binder: 4371:4377 ioctl c0306201 2000ffd0 returned -14 [ 960.993942] binder: BINDER_SET_CONTEXT_MGR already set [ 960.993950] binder: 4404:4408 ioctl 40046207 0 returned -16 [ 960.994359] binder_alloc: 12386: binder_alloc_buf, no vma [ 960.994376] binder: 4404:4408 transaction failed 29189/-3, size 0-0 line 3133 [ 960.997022] binder: BINDER_SET_CONTEXT_MGR already set [ 960.997030] binder: 4400:4407 ioctl 40046207 0 returned -16 [ 961.021537] binder: 4375:4383 ioctl c0306201 2000ffd0 returned -14 [ 961.044673] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.044690] binder: 4400:4420 transaction failed 29189/-3, size 0-0 line 3133 [ 961.060735] device lo entered promiscuous mode [ 961.060790] qtaguid: iface_stat: create(lo): no inet dev [ 961.060835] qtaguid: iface_stat: create6(lo): no inet dev [ 961.061599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 961.061626] qtaguid: iface_stat: create6(lo): no inet dev [ 961.070545] binder: 4391:4399 ioctl c0306201 2000ffd0 returned -14 [ 961.076496] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 961.082146] device lo left promiscuous mode [ 961.102119] binder: 4400:4407 ioctl c0306201 2000ffd0 returned -14 [ 961.143528] device lo entered promiscuous mode [ 961.143586] qtaguid: iface_stat: create(lo): no inet dev [ 961.143631] qtaguid: iface_stat: create6(lo): no inet dev [ 961.144414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 961.144441] qtaguid: iface_stat: create6(lo): no inet dev [ 961.184262] binder: BINDER_SET_CONTEXT_MGR already set [ 961.184269] binder: 4436:4446 ioctl 40046207 0 returned -16 [ 961.186794] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.186811] binder: 4436:4446 transaction failed 29189/-3, size 0-0 line 3133 [ 961.197532] binder: BINDER_SET_CONTEXT_MGR already set [ 961.197540] binder: 4440:4445 ioctl 40046207 0 returned -16 [ 961.199362] binder: BINDER_SET_CONTEXT_MGR already set [ 961.199370] binder: 4437:4443 ioctl 40046207 0 returned -16 [ 961.219874] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.219891] binder: 4434:4460 transaction failed 29189/-3, size 0-0 line 3133 [ 961.226204] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.226227] binder: 4435:4462 transaction failed 29189/-3, size 0-0 line 3133 [ 961.234763] binder: BINDER_SET_CONTEXT_MGR already set [ 961.234770] binder: 4461:4465 ioctl 40046207 0 returned -16 [ 961.235849] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.235865] binder: 4440:4466 transaction failed 29189/-3, size 0-0 line 3133 [ 961.235950] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.235962] binder: 4461:4465 transaction failed 29189/-3, size 0-0 line 3133 [ 961.238058] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.238077] binder: 4439:4467 transaction failed 29189/-3, size 0-0 line 3133 [ 961.239726] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.239742] binder: 4437:4471 transaction failed 29189/-3, size 0-0 line 3133 [ 961.248814] binder: 4434:4447 ioctl c0306201 2000ffd0 returned -14 [ 961.281987] binder: 4437:4443 ioctl c0306201 2000ffd0 returned -14 [ 961.289551] binder: 4435:4442 ioctl c0306201 2000ffd0 returned -14 [ 961.303428] device lo left promiscuous mode [ 961.307497] binder: BINDER_SET_CONTEXT_MGR already set [ 961.307502] binder: 4488:4490 ioctl 40046207 0 returned -16 [ 961.308334] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.308351] binder: 4488:4490 transaction failed 29189/-3, size 0-0 line 3133 [ 961.310634] binder: 4439:4444 ioctl c0306201 2000ffd0 returned -14 [ 961.311683] binder: 4440:4445 ioctl c0306201 2000ffd0 returned -14 [ 961.336874] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 961.339267] binder: BINDER_SET_CONTEXT_MGR already set [ 961.339274] binder: 4494:4499 ioctl 40046207 0 returned -16 [ 961.361236] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.361254] binder: 4477:4509 transaction failed 29189/-3, size 0-0 line 3133 [ 961.373031] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.373048] binder: 4494:4513 transaction failed 29189/-3, size 0-0 line 3133 [ 961.377480] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.377500] binder: 4493:4512 transaction failed 29189/-3, size 0-0 line 3133 [ 961.398470] binder: 4494:4499 ioctl c0306201 2000ffd0 returned -14 [ 961.410458] binder: 4477:4485 ioctl c0306201 2000ffd0 returned -14 [ 961.452809] binder: 4493:4498 ioctl c0306201 2000ffd0 returned -14 [ 961.454059] device lo entered promiscuous mode [ 961.485156] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 dh [ 961.486383] device lo left promiscuous mode [ 961.552065] device lo entered promiscuous mode [ 961.584647] binder: BINDER_SET_CONTEXT_MGR already set [ 961.584655] binder: 4538:4542 ioctl 40046207 0 returned -16 [ 961.585362] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.585379] binder: 4538:4542 transaction failed 29189/-3, size 0-0 line 3133 [ 961.591256] binder: BINDER_SET_CONTEXT_MGR already set [ 961.591263] binder: 4540:4545 ioctl 40046207 0 returned -16 [ 961.600077] binder: BINDER_SET_CONTEXT_MGR already set [ 961.600083] binder: 4537:4543 ioctl 40046207 0 returned -16 [ 961.617558] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.617577] binder: 4541:4561 transaction failed 29189/-3, size 0-0 line 3133 [ 961.623905] binder: BINDER_SET_CONTEXT_MGR already set [ 961.623912] binder: 4558:4560 ioctl 40046207 0 returned -16 [ 961.624349] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.624364] binder: 4558:4560 transaction failed 29189/-3, size 0-0 line 3133 [ 961.626053] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.626068] binder: 4540:4562 transaction failed 29189/-3, size 0-0 line 3133 [ 961.631732] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.631765] binder: 4536:4565 transaction failed 29189/-3, size 0-0 line 3133 [ 961.638029] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.638043] binder: 4537:4566 transaction failed 29189/-3, size 0-0 line 3133 [ 961.646325] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.646343] binder: 4544:4569 transaction failed 29189/-3, size 0-0 line 3133 [ 961.659240] binder: 4541:4547 ioctl c0306201 2000ffd0 returned -14 [ 961.667100] binder: 4537:4543 ioctl c0306201 2000ffd0 returned -14 [ 961.717418] binder: 4540:4545 ioctl c0306201 2000ffd0 returned -14 [ 961.735009] binder: 4536:4548 ioctl c0306201 2000ffd0 returned -14 [ 961.764157] binder: 4544:4551 ioctl c0306201 2000ffd0 returned -14 [ 961.808461] binder: BINDER_SET_CONTEXT_MGR already set [ 961.808469] binder: 4589:4593 ioctl 40046207 0 returned -16 [ 961.816045] binder: BINDER_SET_CONTEXT_MGR already set [ 961.816052] binder: 4585:4597 ioctl 40046207 0 returned -16 [ 961.816409] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.816427] binder: 4585:4597 transaction failed 29189/-3, size 0-0 line 3133 [ 961.830439] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.830456] binder: 4586:4604 transaction failed 29189/-3, size 0-0 line 3133 [ 961.832427] binder: BINDER_SET_CONTEXT_MGR already set [ 961.832434] binder: 4582:4588 ioctl 40046207 0 returned -16 [ 961.835417] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.835436] binder: 4587:4610 transaction failed 29189/-3, size 0-0 line 3133 [ 961.846020] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.846037] binder: 4589:4611 transaction failed 29189/-3, size 0-0 line 3133 [ 961.852849] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.852870] binder: 4591:4613 transaction failed 29189/-3, size 0-0 line 3133 [ 961.855205] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.855224] binder: 4582:4606 transaction failed 29189/-3, size 0-0 line 3133 [ 961.857160] binder: BINDER_SET_CONTEXT_MGR already set [ 961.857167] binder: 4609:4612 ioctl 40046207 0 returned -16 [ 961.857524] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.857539] binder: 4609:4612 transaction failed 29189/-3, size 0-0 line 3133 [ 961.867958] binder: 4586:4590 ioctl c0306201 2000ffd0 returned -14 [ 961.874711] binder: 4589:4593 ioctl c0306201 2000ffd0 returned -14 [ 961.904349] binder: 4587:4592 ioctl c0306201 2000ffd0 returned -14 [ 961.907043] binder: 4582:4588 ioctl c0306201 2000ffd0 returned -14 [ 961.929283] binder: 4591:4594 ioctl c0306201 2000ffd0 returned -14 [ 961.964570] binder: BINDER_SET_CONTEXT_MGR already set [ 961.964580] binder: 4635:4637 ioctl 40046207 0 returned -16 [ 961.965642] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.965658] binder: 4635:4637 transaction failed 29189/-3, size 0-0 line 3133 [ 961.969338] binder_alloc: 12386: binder_alloc_buf, no vma [ 961.969354] binder: 4630:4639 transaction failed 29189/-3, size 0-0 line 3133 [ 961.973756] binder: BINDER_SET_CONTEXT_MGR already set [ 961.973764] binder: 4634:4640 ioctl 40046207 0 returned -16 [ 961.990738] binder: BINDER_SET_CONTEXT_MGR already set [ 961.990946] binder: 4636:4646 ioctl 40046207 0 returned -16 [ 962.015283] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.015302] binder: 4638:4660 transaction failed 29189/-3, size 0-0 line 3133 [ 962.015365] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.015378] binder: 4634:4659 transaction failed 29189/-3, size 0-0 line 3133 [ 962.028083] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.028100] binder: 4633:4658 transaction failed 29189/-3, size 0-0 line 3133 [ 962.033076] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.033097] binder: 4636:4665 transaction failed 29189/-3, size 0-0 line 3133 [ 962.054518] binder: 4634:4640 ioctl c0306201 2000ffd0 returned -14 [ 962.057207] binder: 4633:4647 ioctl c0306201 2000ffd0 returned -14 [ 962.094164] binder: 4638:4641 ioctl c0306201 2000ffd0 returned -14 [ 962.101638] binder: 4636:4646 ioctl c0306201 2000ffd0 returned -14 [ 962.124915] binder: BINDER_SET_CONTEXT_MGR already set [ 962.124922] binder: 4676:4682 ioctl 40046207 0 returned -16 [ 962.125423] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.125441] binder: 4676:4682 transaction failed 29189/-3, size 0-0 line 3133 [ 962.143205] binder: BINDER_SET_CONTEXT_MGR already set [ 962.143213] binder: 4678:4684 ioctl 40046207 0 returned -16 [ 962.149887] binder: BINDER_SET_CONTEXT_MGR already set [ 962.149902] binder: 4686:4690 ioctl 40046207 0 returned -16 [ 962.169539] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.169558] binder: 4679:4700 transaction failed 29189/-3, size 0-0 line 3133 [ 962.176334] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.176352] binder: 4678:4704 transaction failed 29189/-3, size 0-0 line 3133 [ 962.187586] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.187618] binder: 4675:4707 transaction failed 29189/-3, size 0-0 line 3133 [ 962.195078] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.195097] binder: 4683:4694 transaction failed 29189/-3, size 0-0 line 3133 [ 962.200050] binder: 4679:4680 ioctl c0306201 2000ffd0 returned -14 [ 962.211141] binder: BINDER_SET_CONTEXT_MGR already set [ 962.211148] binder: 4709:4710 ioctl 40046207 0 returned -16 [ 962.211586] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.211602] binder: 4709:4710 transaction failed 29189/-3, size 0-0 line 3133 [ 962.222001] binder: 4678:4684 ioctl c0306201 2000ffd0 returned -14 [ 962.240800] binder: 4675:4681 ioctl c0306201 2000ffd0 returned -14 [ 962.262926] binder: 4683:4685 ioctl c0306201 2000ffd0 returned -14 [ 962.268596] binder: 4686:4690 ioctl c0306201 2000ffd0 returned -14 [ 962.278691] binder_alloc: 12386: binder_alloc_buf, no vma [ 962.278709] binder: 4717:4728 transaction failed 29189/-3, size 0-0 line 3133 [ 962.306682] binder: 4717:4720 ioctl c0306201 2000ffd0 returned -14 [ 982.390610] INFO: task init:13231 blocked for more than 120 seconds. [ 982.390616] Not tainted 4.9.91-gbb94f9d #8 [ 982.390618] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 982.390635] init D28976 13231 1 0x00000000 [ 982.390648] ffff8801ca4d9800 0000000000000000 ffff8801bed1b9c0 ffff8801d35bc800 [ 982.390657] ffff8801db221b98 ffff88015c0af580 ffffffff838a75cb ffff88015c0af6e0 [ 982.390665] 0000000000000046 00ffffff8107c7fd ffff8801db222468 ffff8801db222490 [ 982.390667] Call Trace: [ 982.390683] [] ? __schedule+0x67b/0x1ba0 [ 982.390691] [] schedule+0x7f/0x1b0 [ 982.390697] [] schedule_timeout+0x56c/0x10b0 [ 982.390703] [] ? usleep_range+0x140/0x140 [ 982.390712] [] ? do_dentry_open+0x607/0xc60 [ 982.390739] [] ? mark_held_locks+0xaf/0x100 [ 982.390746] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 982.390752] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 982.390759] [] __down+0x128/0x1c0 [ 982.390766] [] ? ww_mutex_unlock+0x300/0x300 [ 982.390774] [] down+0x5e/0x80 [ 982.390781] [] console_lock+0x2c/0x80 [ 982.390788] [] ? kmem_cache_alloc_trace+0xfb/0x2a0 [ 982.390794] [] console_device+0x1c/0xc0 [ 982.390802] [] tty_open+0x425/0xdf0 [ 982.390808] [] ? tty_init_dev+0x4b0/0x4b0 [ 982.390815] [] ? chrdev_open+0xc7/0x4c0 [ 982.390822] [] ? tty_init_dev+0x4b0/0x4b0 [ 982.390828] [] chrdev_open+0x22b/0x4c0 [ 982.390834] [] ? cdev_put.part.0+0x50/0x50 [ 982.390841] [] do_dentry_open+0x607/0xc60 [ 982.390847] [] ? cdev_put.part.0+0x50/0x50 [ 982.390853] [] vfs_open+0x105/0x220 [ 982.390860] [] ? may_open+0x231/0x2e0 [ 982.390866] [] path_openat+0x5ac/0x2910 [ 982.390872] [] ? path_lookupat+0x3f0/0x3f0 [ 982.390879] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 982.390886] [] ? __lock_is_held+0xa1/0xf0 [ 982.390892] [] do_filp_open+0x197/0x290 [ 982.390898] [] ? may_open_dev+0xe0/0xe0 [ 982.390904] [] ? _raw_spin_unlock+0x2c/0x50 [ 982.390911] [] ? __alloc_fd+0x1d7/0x510 [ 982.390918] [] do_sys_open+0x366/0x620 [ 982.390927] [] ? proc_id_connector+0x536/0x560 [ 982.390934] [] ? filp_open+0x70/0x70 [ 982.390940] [] ? proc_clear_tty+0xd9/0x140 [ 982.390946] [] ? _raw_write_unlock_irq+0x27/0x50 [ 982.390953] [] SyS_open+0x2d/0x40 [ 982.390959] [] ? do_sys_open+0x620/0x620 [ 982.390966] [] do_syscall_64+0x1a4/0x490 [ 982.390973] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 982.390976] [ 982.390976] Showing all locks held in the system: [ 982.390985] 2 locks held by khungtaskd/514: [ 982.390999] #0: (rcu_read_lock){......}, at: [] watchdog+0x125/0xa70 [ 982.391012] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x70/0x280 [ 982.391027] 1 lock held by rsyslogd/3651: [ 982.391038] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0x9f/0xc0 [ 982.391042] 2 locks held by getty/3748: [ 982.391052] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 982.391064] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1f4/0x16c0 [ 982.391071] 1 lock held by init/13231: [ 982.391082] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391085] 1 lock held by init/13235: [ 982.391095] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391099] 1 lock held by init/13237: [ 982.391110] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391113] 1 lock held by init/13246: [ 982.391124] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391127] 1 lock held by init/13492: [ 982.391138] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391141] 1 lock held by init/13518: [ 982.391152] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x407/0xdf0 [ 982.391157] 2 locks held by syz-executor5/4713: [ 982.391170] #0: (lock#2){+.+...}, at: [] lru_add_drain_all+0x3f/0x400 [ 982.391184] #1: (cpu_hotplug.dep_map){++++++}, at: [] get_online_cpus+0x32/0x90 [ 982.391188] 1 lock held by syz-executor5/4727: [ 982.391200] #0: (lock#2){+.+...}, at: [] lru_add_drain_all+0x3f/0x400 [ 982.391203] [ 982.391204] ============================================= [ 982.391204] [ 982.391207] NMI backtrace for cpu 1 [ 982.391214] CPU: 1 PID: 514 Comm: khungtaskd Not tainted 4.9.91-gbb94f9d #8 [ 982.391217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.391225] ffff8801d871fd00 ffffffff81d95169 0000000000000000 0000000000000001 [ 982.391234] 0000000000000001 0000000000000001 ffffffff810bb8f0 ffff8801d871fd38 [ 982.391242] ffffffff81da02bd 0000000000000001 0000000000000000 ffff8801ca4d9c18 [ 982.391243] Call Trace: [ 982.391251] [] dump_stack+0xc1/0x128 [ 982.391259] [] ? irq_force_complete_move+0x390/0x390 [ 982.391266] [] nmi_cpu_backtrace+0xfd/0x120 [ 982.391272] [] ? irq_force_complete_move+0x390/0x390 [ 982.391279] [] nmi_trigger_cpumask_backtrace+0x117/0x190 [ 982.391285] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 982.391291] [] watchdog+0x6f0/0xa70 [ 982.391296] [] ? watchdog+0x125/0xa70 [ 982.391304] [] kthread+0x26d/0x300 [ 982.391310] [] ? reset_hung_task_detector+0x20/0x20 [ 982.391316] [] ? kthread_park+0xa0/0xa0 [ 982.391323] [] ? kthread_park+0xa0/0xa0 [ 982.391329] [] ? kthread_park+0xa0/0xa0 [ 982.391335] [] ret_from_fork+0x5c/0x70 [ 982.391341] Sending NMI from CPU 1 to CPUs 0: [ 982.392351] NMI backtrace for cpu 0 [ 982.392354] CPU: 0 PID: 20188 Comm: kworker/0:0 Not tainted 4.9.91-gbb94f9d #8 [ 982.392358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.392360] Workqueue: events binder_deferred_funcc [ 982.392363] task: ffff8801d35bc800 task.stack: ffff8801d8398000 [ 982.392366] RIP: 0010:[] c [] io_serial_in+0x6b/0x90 [ 982.392368] RSP: 0018:ffff8801d839f690 EFLAGS: 00000002 [ 982.392372] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 982.392374] RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8627c378 [ 982.392377] RBP: ffff8801d839f6a0 R08: 0000000000000001 R09: 0000000000000000 [ 982.392381] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8627c340 [ 982.392383] R13: 0000000000000020 R14: fffffbfff0c4f8af R15: fffffbfff0c4f871 [ 982.392387] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 982.392389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.392392] CR2: 000000000807eb60 CR3: 000000000441e000 CR4: 0000000000160670 [ 982.392395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 982.392398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 982.392399] Stack: [ 982.392403] ffffffff8627c340c 000000000000270cc ffff8801d839f6f0c ffffffff8203c99ec [ 982.392406] ffffffff83a6786dc ffffffff8627c388c ffffffff8627c57ac ffffffff8627c340c [ 982.392409] 0000000000000032c ffffffff8203cae0c dffffc0000000000c 0000000000000032c [ 982.392411] Call Trace: [ 982.392413] [] wait_for_xmitr+0x8e/0x1d0 [ 982.392416] [] ? wait_for_xmitr+0x1d0/0x1d0 [ 982.392418] [] serial8250_console_putchar+0x1f/0x60 [ 982.392421] [] uart_console_write+0xac/0xe0 [ 982.392424] [] serial8250_console_write+0x2e0/0x850 [ 982.392426] [] ? serial8250_start_tx+0xa00/0xa00 [ 982.392429] [] ? scnprintf+0x110/0x110 [ 982.392431] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 982.392434] [] ? univ8250_console_setup+0x160/0x160 [ 982.392436] [] univ8250_console_write+0x5f/0x70 [ 982.392439] [] call_console_drivers.isra.20.constprop.29+0x1a5/0x350 [ 982.392442] [] console_unlock+0x425/0xb20 [ 982.392445] [] vprintk_emit+0x4e2/0x750 [ 982.392447] [] vprintk+0x28/0x30 [ 982.392449] [] vprintk_default+0x1d/0x30 [ 982.392451] [] printk+0xb7/0xe2 [ 982.392454] [] ? load_image_and_restore+0xf9/0xf9 [ 982.392457] [] ? _binder_inner_proc_unlock+0x2c/0x50 [ 982.392459] [] ? binder_release_work+0x13b/0x260 [ 982.392462] [] binder_release_work+0x166/0x260 [ 982.392465] [] ? _raw_spin_unlock+0x2c/0x50 [ 982.392467] [] binder_thread_release+0x428/0x600 [ 982.392470] [] ? _raw_spin_unlock+0x2c/0x50 [ 982.392472] [] binder_deferred_func+0x43f/0xd10 [ 982.392475] [] ? __lock_is_held+0xa1/0xf0 [ 982.392478] [] process_one_work+0x7e0/0x1610 [ 982.392480] [] ? process_one_work+0x72c/0x1610 [ 982.392483] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 982.392486] [] worker_thread+0xe0/0x10d0 [ 982.392488] [] ? __schedule+0x683/0x1ba0 [ 982.392490] [] kthread+0x26d/0x300 [ 982.392493] [] ? process_one_work+0x1610/0x1610 [ 982.392495] [] ? kthread_park+0xa0/0xa0 [ 982.392498] [] ? kthread_park+0xa0/0xa0 [ 982.392500] [] ? kthread_park+0xa0/0xa0 [ 982.392503] [] ret_from_fork+0x5c/0x70 [ 982.392512] Code: c24 cc9 c00 c00 c00 c49 c8d c7c c24 c38 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cfa c48 cc1 cea c03 cd3 ce3 c80 c3c c02 c00 c75 c17 c41 c03 c5c c24 c38 c89 cda cec c<5b> c0f cb6 cc0 c41 c5c c5d cc3 ce8 ce8 c2e c50 cff ceb cc2 ce8 c41 c2f c50 cff ceb c [ 982.392517] Kernel panic - not syncing: hung_task: blocked tasks [ 982.392522] CPU: 1 PID: 514 Comm: khungtaskd Not tainted 4.9.91-gbb94f9d #8 [ 982.392525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.392533] ffff8801d871fcb8 ffffffff81d95169 ffffffff83a8b220 ffff8801d871fd90 [ 982.392541] ffff8801ca4d9c00 dffffc0000000000 ffffffff84409000 ffff8801d871fd80 [ 982.392550] ffffffff8142e7f1 0000000041b58ab3 ffffffff8418b7b0 ffffffff8142e635 [ 982.392551] Call Trace: [ 982.392558] [] dump_stack+0xc1/0x128 [ 982.392566] [] panic+0x1bc/0x3a8 [ 982.392574] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 982.392580] [] ? printk_nmi_flush+0xb1/0xe0 [ 982.392588] [] ? nmi_trigger_cpumask_backtrace+0x100/0x190 [ 982.392594] [] watchdog+0x701/0xa70 [ 982.392599] [] ? watchdog+0x125/0xa70 [ 982.392606] [] kthread+0x26d/0x300 [ 982.392612] [] ? reset_hung_task_detector+0x20/0x20 [ 982.392618] [] ? kthread_park+0xa0/0xa0 [ 982.392625] [] ? kthread_park+0xa0/0xa0 [ 982.392630] [] ? kthread_park+0xa0/0xa0 [ 982.392636] [] ret_from_fork+0x5c/0x70 [ 982.397639] Dumping ftrace buffer: [ 982.397685] (ftrace buffer empty) [ 982.397688] Kernel Offset: disabled