binder: BINDER_SET_CONTEXT_MGR already set binder: 23303:23342 ioctl 40046207 0 returned -16 binder: 23303:23319 ERROR: BC_REGISTER_LOOPER called without request binder: 23319 RLIMIT_NICE not set binder: 23303:23342 BC_DEAD_BINDER_DONE 0000000000000003 not found INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 23319 Comm: syz-executor0 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xe9/0x14b lib/dump_stack.c:53 register_lock_class+0x164/0x5d0 kernel/locking/lockdep.c:752 __lock_acquire+0xb4/0x1430 kernel/locking/lockdep.c:3314 lock_acquire+0xbf/0x220 kernel/locking/lockdep.c:3914 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x56/0x70 kernel/locking/spinlock.c:152 remove_wait_queue+0x14/0x60 kernel/sched/wait.c:50 ep_remove_wait_queue fs/eventpoll.c:595 [inline] ep_unregister_pollwait.isra.7+0x79/0x1f0 fs/eventpoll.c:613 ep_free+0x71/0x140 fs/eventpoll.c:830 ep_eventpoll_release+0x26/0x30 fs/eventpoll.c:862 __fput+0x120/0x270 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0xa3/0xe0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x3e6/0x1050 kernel/exit.c:869 do_group_exit+0x60/0x100 kernel/exit.c:972 get_signal+0x36c/0xad0 kernel/signal.c:2337 do_signal+0x23/0x670 arch/x86/kernel/signal.c:809 exit_to_usermode_loop+0x13c/0x160 arch/x86/entry/common.c:161 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath+0x1b4/0x1e0 arch/x86/entry/common.c:264 entry_SYSCALL_64_fastpath+0x94/0x96 RIP: 0033:0x452a09 RSP: 002b:00007f62aeae0c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 000000000071bf58 RCX: 0000000000452a09 RDX: 0000000020008fd0 RSI: 00000000c0306201 RDI: 0000000000000016 RBP: 0000000000000164 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef200 R13: 00000000ffffffff R14: 00007f62aeae16d4 R15: 000000000000000c list_del corruption. prev->next should be 00000000a39e16da, but was (null) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 23319 Comm: syz-executor0 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: 0018:ffffc90001487b70 EFLAGS: 00010086 RAX: 0000000000000054 RBX: ffff8802143b3768 RCX: ffffffff8123dede RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88021fd136f0 RBP: ffffc90001487b70 R08: 0000000000000000 R09: ffffffff8123be9d R10: ffffc90001487ae8 R11: 0000000000000000 R12: ffff8801fb15a0a0 R13: 0000000000000286 R14: dead000000000100 R15: ffffffff81473cd5 FS: 00007f62aeae1700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000002422cd8 CR3: 000000000301e002 CR4: 00000000001606e0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del include/linux/list.h:125 [inline] __remove_wait_queue include/linux/wait.h:184 [inline] remove_wait_queue+0x20/0x60 kernel/sched/wait.c:51 ep_remove_wait_queue fs/eventpoll.c:595 [inline] ep_unregister_pollwait.isra.7+0x79/0x1f0 fs/eventpoll.c:613 ep_free+0x71/0x140 fs/eventpoll.c:830 ep_eventpoll_release+0x26/0x30 fs/eventpoll.c:862 __fput+0x120/0x270 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0xa3/0xe0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x3e6/0x1050 kernel/exit.c:869 do_group_exit+0x60/0x100 kernel/exit.c:972 get_signal+0x36c/0xad0 kernel/signal.c:2337 do_signal+0x23/0x670 arch/x86/kernel/signal.c:809 exit_to_usermode_loop+0x13c/0x160 arch/x86/entry/common.c:161 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath+0x1b4/0x1e0 arch/x86/entry/common.c:264 entry_SYSCALL_64_fastpath+0x94/0x96 RIP: 0033:0x452a09 RSP: 002b:00007f62aeae0c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 000000000071bf58 RCX: 0000000000452a09 RDX: 0000000020008fd0 RSI: 00000000c0306201 RDI: 0000000000000016 RBP: 0000000000000164 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef200 R13: 00000000ffffffff R14: 00007f62aeae16d4 R15: 000000000000000c Code: 82 e8 85 dd ae ff 0f 0b 48 89 fe 48 c7 c7 08 34 e8 82 e8 74 dd ae ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 40 34 e8 82 e8 60 dd ae ff <0f> 0b 48 c7 c7 80 34 e8 82 e8 52 dd ae ff 0f 0b 90 90 90 90 90 RIP: __list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: ffffc90001487b70 ---[ end trace 98f8bf7022e19281 ]---