binder: 23305:23308 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 ================================================ [ BUG: lock held when returning to user space! ] binder: BINDER_SET_CONTEXT_MGR already set binder: 23305:23321 ioctl 40046207 0 returned -16 binder_alloc: 23305: binder_alloc_buf, no vma binder: 23305:23321 transaction failed 29189/-3, size -4420537106690542845--3510162792394576663 line 3136 4.9.124+ #32 Not tainted ------------------------------------------------ syz-executor2/23304 is leaving the kernel with locks still held! 1 lock held by syz-executor2/23304: #0: [ 1270.207476] binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 (&fi->mutex){+.+.+.}, at: [] fuse_lock_inode+0xa2/0xd0 fs/fuse/inode.c:362 binder_alloc: 23334: binder_alloc_buf, no vma binder: 23334:23338 transaction failed 29189/-3, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 23334:23351 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 23363:23369 ioctl 40046207 0 returned -16 binder: 23363:23377 got transaction to context manager from process owning it binder: 23363:23377 transaction failed 29201/-22, size -6198621044954641796-6249310751571458598 line 3004 binder: BINDER_SET_CONTEXT_MGR already set binder: 23363:23377 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 23363:23369 ioctl 40046207 0 returned -16 binder_alloc: 23363: binder_alloc_buf, no vma binder: 23363:23391 transaction failed 29189/-3, size -6198621044954641796-6249310751571458598 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 23424:23427 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 23424:23438 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: undelivered transaction 215, process died. binder: undelivered TRANSACTION_COMPLETE binder: 23456:23467 ioctl 40046207 0 returned -16 binder: 23492:23495 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=23471 comm=syz-executor1 binder: BINDER_SET_CONTEXT_MGR already set binder: 23492:23510 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=23509 comm=syz-executor1 binder: 23541:23544 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 23541:23544 transaction failed 29189/-22, size -4420537106690542845--3510162792394576663 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 23541:23562 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: 23596:23600 transaction failed 29201/-22, size -3377908032909198947-675743078728809497 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: undelivered TRANSACTION_ERROR: 29201 binder: 23596:23619 ioctl 40046207 0 returned -16 binder: 23648:23654 transaction failed 29189/-22, size -4420537106690542845--3510162792394576663 line 3013 binder: 23648:23674 transaction failed 29189/-22, size -4420537106690542845--3510162792394576663 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=23678 comm=syz-executor1 binder: 23700:23705 unknown command -2147483648 binder: 23700:23705 ioctl c0306201 200002c0 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 23700:23705 ioctl 40046207 0 returned -16 binder: 23700:23711 unknown command -2147483648 binder: 23700:23711 ioctl c0306201 200002c0 returned -22 binder: 23740:23745 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 23740:23762 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 23789:23794 unknown command 0 binder: 23789:23794 ioctl c0306201 20000280 returned -22 binder_alloc: binder_alloc_mmap_handler: 23789 20001000-20004000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 23789:23794 ioctl 40046207 0 returned -16 binder_alloc: 23789: binder_alloc_buf, no vma binder: send failed reply for transaction 229 to 23789:23794 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 binder: 23789:23832 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: binder_alloc_mmap_handler: 23861 20001000-20004000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 23861:23865 ioctl 40046207 0 returned -16 binder: send failed reply for transaction 232 to 23861:23865 binder: undelivered TRANSACTION_ERROR: 29189 binder: 23889:23892 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 23889:23902 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 23889: binder_alloc_buf, no vma binder: 23889:23892 transaction failed 29189/-3, size -4420537106690542845--3510162792394576663 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 23937:23941 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder_alloc: binder_alloc_mmap_handler: 23937 20001000-20004000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 23937:23941 ioctl 40046207 0 returned -16 binder_alloc: 23937: binder_alloc_buf, no vma binder: undelivered TRANSACTION_ERROR: 29201 binder: 23937:23982 transaction failed 29189/-3, size -4420537106690542845--3510162792394576663 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24008:24019 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24020 comm=syz-executor1 binder: undelivered TRANSACTION_ERROR: 29201 binder: 24008:24045 ioctl 40046207 0 returned -16 binder: 24067:24072 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 24067: binder_alloc_buf, no vma binder: 24067:24072 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 24067:24086 transaction failed 29189/-3, size -4420537106690542845--3510162792394576663 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24122:24126 unknown command -2069208303 binder: 24122:24126 ioctl c0306201 200002c0 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 24122:24138 ioctl 40046207 0 returned -16 binder: 24156:24163 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 24156:24175 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 24207:24227 transaction failed 29201/-22, size -4420537106690542845--3510162792394576663 line 3136 binder: BINDER_SET_CONTEXT_MGR already set