binder: 20609:20609 ioctl 40046602 20000000 returned -22
binder: 20600:20611 ioctl c0306201 20000080 returned -22

======================================================
[ INFO: possible circular locking dependency detected ]
4.4.165+ #15 Not tainted
-------------------------------------------------------
syz-executor1/20621 is trying to acquire lock:
 (&(&q->lock)->rlock){+.-...}, at: [<ffffffff823b4c6b>] spin_lock include/linux/spinlock.h:302 [inline]
 (&(&q->lock)->rlock){+.-...}, at: [<ffffffff823b4c6b>] ip_defrag+0x31b/0x40c0 net/ipv4/ip_fragment.c:680

but task is already holding lock:
 (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] spin_lock include/linux/spinlock.h:302 [inline]
 (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] __netif_tx_lock include/linux/netdevice.h:3306 [inline]
 (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] sch_direct_xmit+0x233/0x6c0 net/sched/sch_generic.c:163

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

       [<ffffffff8120370e>] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592
       [<ffffffff82713216>] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline]
       [<ffffffff82713216>] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151
       [<ffffffff8147a574>] spin_lock include/linux/spinlock.h:302 [inline]
       [<ffffffff8147a574>] get_partial_node.isra.27+0x44/0x410 mm/slub.c:1727
       [<ffffffff8147ad06>] get_partial mm/slub.c:1834 [inline]
       [<ffffffff8147ad06>] new_slab_objects mm/slub.c:2314 [inline]
       [<ffffffff8147ad06>] ___slab_alloc.constprop.33+0x216/0x3e0 mm/slub.c:2476
       [<ffffffff8147af20>] __slab_alloc.isra.28.constprop.32+0x50/0xa0 mm/slub.c:2518
       [<ffffffff8147b184>] slab_alloc_node mm/slub.c:2581 [inline]
       [<ffffffff8147b184>] slab_alloc mm/slub.c:2623 [inline]
       [<ffffffff8147b184>] kmem_cache_alloc+0x214/0x2c0 mm/slub.c:2628
       [<ffffffff821ea824>] skb_clone+0x124/0x280 net/core/skbuff.c:958
       [<ffffffff822541d9>] neigh_probe+0x59/0x100 net/core/neighbour.c:868
       [<ffffffff8225f640>] __neigh_event_send+0x2a0/0xc30 net/core/neighbour.c:1027
       [<ffffffff822605f9>] neigh_event_send include/net/neighbour.h:431 [inline]
       [<ffffffff822605f9>] neigh_resolve_output+0x629/0x780 net/core/neighbour.c:1313
       [<ffffffff82599d64>] dst_neigh_output include/net/dst.h:461 [inline]
       [<ffffffff82599d64>] ip6_finish_output2+0xb94/0x1ca0 net/ipv6/ip6_output.c:113
       [<ffffffff825aa4ee>] ip6_finish_output+0x2ee/0x750 net/ipv6/ip6_output.c:131
       [<ffffffff825aaaff>] NF_HOOK_COND include/linux/netfilter.h:240 [inline]
       [<ffffffff825aaaff>] ip6_output+0x1af/0x520 net/ipv6/ip6_output.c:145
       [<ffffffff826baf3b>] dst_output include/net/dst.h:498 [inline]
       [<ffffffff826baf3b>] ip6_local_out+0x9b/0x180 net/ipv6/output_core.c:169
       [<ffffffff825acb61>] ip6_send_skb+0xa1/0x340 net/ipv6/ip6_output.c:1725
       [<ffffffff825aceb3>] ip6_push_pending_frames+0xb3/0xe0 net/ipv6/ip6_output.c:1745
       [<ffffffff8261b1d5>] icmpv6_push_pending_frames+0x335/0x530 net/ipv6/icmp.c:276
       [<ffffffff8261c9c3>] icmp6_send+0x15f3/0x1b70 net/ipv6/icmp.c:537
       [<ffffffff8261e349>] icmpv6_param_prob+0x29/0x40 net/ipv6/icmp.c:551
       [<ffffffff82639876>] ip6_frag_queue net/ipv6/reassembly.c:263 [inline]
       [<ffffffff82639876>] ipv6_frag_rcv+0x3de6/0x4f80 net/ipv6/reassembly.c:562
       [<ffffffff825adecd>] ip6_input_finish+0x57d/0x1510 net/ipv6/ip6_input.c:248
       [<ffffffff825b0c66>] NF_HOOK_THRESH include/linux/netfilter.h:226 [inline]
       [<ffffffff825b0c66>] NF_HOOK include/linux/netfilter.h:249 [inline]
       [<ffffffff825b0c66>] ip6_input+0xf6/0x200 net/ipv6/ip6_input.c:280
       [<ffffffff825ad42e>] dst_input include/net/dst.h:504 [inline]
       [<ffffffff825ad42e>] ip6_rcv_finish+0x14e/0x670 net/ipv6/ip6_input.c:62
       [<ffffffff825aff12>] NF_HOOK_THRESH include/linux/netfilter.h:226 [inline]
       [<ffffffff825aff12>] NF_HOOK include/linux/netfilter.h:249 [inline]
       [<ffffffff825aff12>] ipv6_rcv+0x10b2/0x1d10 net/ipv6/ip6_input.c:186
       [<ffffffff82228b08>] __netif_receive_skb_core+0x12c8/0x2820 net/core/dev.c:4041
       [<ffffffff822311bb>] __netif_receive_skb+0x5b/0x1c0 net/core/dev.c:4076
       [<ffffffff8223855a>] process_backlog+0x20a/0x670 net/core/dev.c:4673
       [<ffffffff82237967>] napi_poll net/core/dev.c:4911 [inline]
       [<ffffffff82237967>] net_rx_action+0x367/0xd50 net/core/dev.c:4976
binder_alloc: binder_alloc_mmap_handler: 20583 20001000-20004000 already mapped failed -16
binder_alloc: 20583: binder_alloc_buf, no vma
binder: 20583:20597 transaction failed 29189/-3, size 0-0 line 3137
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20583:20594 ioctl 40046207 0 returned -16
binder: 20583:20597 got reply transaction with no transaction stack
binder: 20583:20597 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: release 20583:20594 transaction 1233 in, still active
binder: send failed reply for transaction 1233 to 20583:20586
binder: undelivered TRANSACTION_ERROR: 29201
       [<ffffffff8271702a>] __do_softirq+0x22a/0xa3e kernel/softirq.c:273
       [<ffffffff8271521c>] do_softirq_own_stack+0x1c/0x30 arch/x86/entry/entry_64.S:956
       [<ffffffff810e21b4>] do_softirq.part.2+0x54/0x60 kernel/softirq.c:317
       [<ffffffff810e2319>] do_softirq+0x19/0x20 kernel/softirq.c:320
       [<ffffffff8222716c>] netif_rx_ni+0xec/0x3a0 net/core/dev.c:3675
       [<ffffffff81e1bcba>] tun_get_user+0xf3a/0x2690 drivers/net/tun.c:1264
       [<ffffffff81e1d625>] tun_chr_write_iter+0xd5/0x190 drivers/net/tun.c:1283
       [<ffffffff81492653>] do_iter_readv_writev+0x133/0x1d0 fs/read_write.c:664
       [<ffffffff814941d7>] compat_do_readv_writev+0x337/0x6f0 fs/read_write.c:982
       [<ffffffff81494931>] compat_writev+0xe1/0x150 fs/read_write.c:1090
       [<ffffffff81496c48>] C_SYSC_writev fs/read_write.c:1110 [inline]
       [<ffffffff81496c48>] compat_SyS_writev+0xd8/0x1c0 fs/read_write.c:1099
       [<ffffffff810060fe>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
       [<ffffffff810060fe>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:397
       [<ffffffff82715890>] sysenter_flags_fixed+0xd/0x1a

       [<ffffffff81200244>] check_prev_add kernel/locking/lockdep.c:1853 [inline]
       [<ffffffff81200244>] check_prevs_add kernel/locking/lockdep.c:1958 [inline]
       [<ffffffff81200244>] validate_chain kernel/locking/lockdep.c:2144 [inline]
       [<ffffffff81200244>] __lock_acquire+0x3cd4/0x5530 kernel/locking/lockdep.c:3213
       [<ffffffff8120370e>] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592
       [<ffffffff82713216>] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline]
       [<ffffffff82713216>] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151
       [<ffffffff823b4c6b>] spin_lock include/linux/spinlock.h:302 [inline]
       [<ffffffff823b4c6b>] ip_defrag+0x31b/0x40c0 net/ipv4/ip_fragment.c:680
       [<ffffffff823b8db7>] ip_check_defrag+0x3a7/0x700 net/ipv4/ip_fragment.c:728
       [<ffffffff826db08a>] packet_rcv_fanout+0x52a/0x5e0 net/packet/af_packet.c:1458
       [<ffffffff8223d290>] deliver_skb net/core/dev.c:1842 [inline]
       [<ffffffff8223d290>] dev_queue_xmit_nit net/core/dev.c:1898 [inline]
       [<ffffffff8223d290>] xmit_one net/core/dev.c:2777 [inline]
       [<ffffffff8223d290>] dev_hard_start_xmit+0x280/0x11c0 net/core/dev.c:2797
       [<ffffffff822ab178>] sch_direct_xmit+0x2b8/0x6c0 net/sched/sch_generic.c:165
       [<ffffffff8223f455>] __dev_xmit_skb net/core/dev.c:2979 [inline]
       [<ffffffff8223f455>] __dev_queue_xmit+0xf95/0x1c30 net/core/dev.c:3197
       [<ffffffff82240107>] dev_queue_xmit+0x17/0x20 net/core/dev.c:3263
       [<ffffffff822605d0>] neigh_resolve_output+0x600/0x780 net/core/neighbour.c:1329
       [<ffffffff823c0700>] dst_neigh_output include/net/dst.h:461 [inline]
       [<ffffffff823c0700>] ip_finish_output2+0x8f0/0x1100 net/ipv4/ip_output.c:213
       [<ffffffff823c2f80>] ip_do_fragment+0x1870/0x1f60 net/ipv4/ip_output.c:635
       [<ffffffff823c6c55>] ip_fragment.constprop.5+0x145/0x200 net/ipv4/ip_output.c:505
       [<ffffffff823c70a6>] ip_finish_output+0x396/0xc00 net/ipv4/ip_output.c:286
       [<ffffffff823cb189>] NF_HOOK_COND include/linux/netfilter.h:240 [inline]
       [<ffffffff823cb189>] ip_output+0x219/0x4c0 net/ipv4/ip_output.c:362
       [<ffffffff823c80ab>] dst_output include/net/dst.h:498 [inline]
       [<ffffffff823c80ab>] ip_local_out+0x9b/0x180 net/ipv4/ip_output.c:119
       [<ffffffff823cddcc>] ip_send_skb+0x3c/0xc0 net/ipv4/ip_output.c:1453
       [<ffffffff82472f23>] udp_send_skb+0x503/0xc70 net/ipv4/udp.c:842
       [<ffffffff824736de>] udp_push_pending_frames+0x4e/0xe0 net/ipv4/udp.c:870
       [<ffffffff82479827>] udp_sendmsg+0x1147/0x1c70 net/ipv4/udp.c:1104
       [<ffffffff8260e439>] udpv6_sendmsg+0x1d59/0x24c0 net/ipv6/udp.c:1178
       [<ffffffff824a3043>] inet_sendmsg+0x203/0x4d0 net/ipv4/af_inet.c:755
       [<ffffffff821d019b>] sock_sendmsg_nosec net/socket.c:638 [inline]
       [<ffffffff821d019b>] sock_sendmsg+0xbb/0x110 net/socket.c:648
       [<ffffffff821d1ce1>] ___sys_sendmsg+0x441/0x880 net/socket.c:1975
       [<ffffffff821d5314>] __sys_sendmmsg+0x1d4/0x2e0 net/socket.c:2053
       [<ffffffff822a6382>] C_SYSC_sendmmsg net/compat.c:728 [inline]
       [<ffffffff822a6382>] compat_SyS_sendmmsg+0x32/0x40 net/compat.c:725
       [<ffffffff810060fe>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
       [<ffffffff810060fe>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:397
       [<ffffffff82715890>] sysenter_flags_fixed+0xd/0x1a

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(_xmit_NETROM);
                               lock(&(&q->lock)->rlock);
                               lock(_xmit_NETROM);
  lock(&(&q->lock)->rlock);

 *** DEADLOCK ***

5 locks held by syz-executor1/20621:
 #0:  (sk_lock-AF_INET6){+.+.+.}, at: [<ffffffff8247951b>] lock_sock include/net/sock.h:1493 [inline]
 #0:  (sk_lock-AF_INET6){+.+.+.}, at: [<ffffffff8247951b>] udp_sendmsg+0xe3b/0x1c70 net/ipv4/udp.c:922
 #1:  (rcu_read_lock_bh){......}, at: [<ffffffff823c001b>] ip_finish_output2+0x20b/0x1100 net/ipv4/ip_output.c:193
 #2:  (rcu_read_lock_bh){......}, at: [<ffffffff8223e697>] __dev_queue_xmit+0x1d7/0x1c30 net/core/dev.c:3161
 #3:  (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] spin_lock include/linux/spinlock.h:302 [inline]
 #3:  (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] __netif_tx_lock include/linux/netdevice.h:3306 [inline]
 #3:  (_xmit_NETROM){+.-...}, at: [<ffffffff822ab0f3>] sch_direct_xmit+0x233/0x6c0 net/sched/sch_generic.c:163
 #4:  (rcu_read_lock){......}, at: [<ffffffff8223d0b8>] xmit_one net/core/dev.c:2776 [inline]
 #4:  (rcu_read_lock){......}, at: [<ffffffff8223d0b8>] dev_hard_start_xmit+0xa8/0x11c0 net/core/dev.c:2797

stack backtrace:
CPU: 0 PID: 20621 Comm: syz-executor1 Not tainted 4.4.165+ #15
 0000000000000000 711b2783ba1bf007 ffff8801c15867b0 ffffffff81aa5c9d
 ffffffff83af43d0 ffffffff83af43d0 ffff8800a742af80 ffffffff83acd1c0
 ffff8800a742b8e0 ffff8801c1586800 ffffffff813a9479 ffff8800a742af80
Call Trace:
 [<ffffffff81aa5c9d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aa5c9d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff813a9479>] print_circular_bug.cold.31+0x2f6/0x435 kernel/locking/lockdep.c:1226
 [<ffffffff81200244>] check_prev_add kernel/locking/lockdep.c:1853 [inline]
 [<ffffffff81200244>] check_prevs_add kernel/locking/lockdep.c:1958 [inline]
 [<ffffffff81200244>] validate_chain kernel/locking/lockdep.c:2144 [inline]
 [<ffffffff81200244>] __lock_acquire+0x3cd4/0x5530 kernel/locking/lockdep.c:3213
 [<ffffffff8120370e>] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592
 [<ffffffff82713216>] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline]
 [<ffffffff82713216>] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151
 [<ffffffff823b4c6b>] spin_lock include/linux/spinlock.h:302 [inline]
 [<ffffffff823b4c6b>] ip_defrag+0x31b/0x40c0 net/ipv4/ip_fragment.c:680
 [<ffffffff823b8db7>] ip_check_defrag+0x3a7/0x700 net/ipv4/ip_fragment.c:728
 [<ffffffff826db08a>] packet_rcv_fanout+0x52a/0x5e0 net/packet/af_packet.c:1458
 [<ffffffff8223d290>] deliver_skb net/core/dev.c:1842 [inline]
 [<ffffffff8223d290>] dev_queue_xmit_nit net/core/dev.c:1898 [inline]
 [<ffffffff8223d290>] xmit_one net/core/dev.c:2777 [inline]
 [<ffffffff8223d290>] dev_hard_start_xmit+0x280/0x11c0 net/core/dev.c:2797
 [<ffffffff822ab178>] sch_direct_xmit+0x2b8/0x6c0 net/sched/sch_generic.c:165
 [<ffffffff8223f455>] __dev_xmit_skb net/core/dev.c:2979 [inline]
 [<ffffffff8223f455>] __dev_queue_xmit+0xf95/0x1c30 net/core/dev.c:3197
 [<ffffffff82240107>] dev_queue_xmit+0x17/0x20 net/core/dev.c:3263
 [<ffffffff822605d0>] neigh_resolve_output+0x600/0x780 net/core/neighbour.c:1329
 [<ffffffff823c0700>] dst_neigh_output include/net/dst.h:461 [inline]
 [<ffffffff823c0700>] ip_finish_output2+0x8f0/0x1100 net/ipv4/ip_output.c:213
 [<ffffffff823c2f80>] ip_do_fragment+0x1870/0x1f60 net/ipv4/ip_output.c:635
 [<ffffffff823c6c55>] ip_fragment.constprop.5+0x145/0x200 net/ipv4/ip_output.c:505
 [<ffffffff823c70a6>] ip_finish_output+0x396/0xc00 net/ipv4/ip_output.c:286
 [<ffffffff823cb189>] NF_HOOK_COND include/linux/netfilter.h:240 [inline]
 [<ffffffff823cb189>] ip_output+0x219/0x4c0 net/ipv4/ip_output.c:362
 [<ffffffff823c80ab>] dst_output include/net/dst.h:498 [inline]
 [<ffffffff823c80ab>] ip_local_out+0x9b/0x180 net/ipv4/ip_output.c:119
 [<ffffffff823cddcc>] ip_send_skb+0x3c/0xc0 net/ipv4/ip_output.c:1453
 [<ffffffff82472f23>] udp_send_skb+0x503/0xc70 net/ipv4/udp.c:842
 [<ffffffff824736de>] udp_push_pending_frames+0x4e/0xe0 net/ipv4/udp.c:870
 [<ffffffff82479827>] udp_sendmsg+0x1147/0x1c70 net/ipv4/udp.c:1104
 [<ffffffff8260e439>] udpv6_sendmsg+0x1d59/0x24c0 net/ipv6/udp.c:1178
 [<ffffffff824a3043>] inet_sendmsg+0x203/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff821d019b>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d019b>] sock_sendmsg+0xbb/0x110 net/socket.c:648
 [<ffffffff821d1ce1>] ___sys_sendmsg+0x441/0x880 net/socket.c:1975
 [<ffffffff821d5314>] __sys_sendmmsg+0x1d4/0x2e0 net/socket.c:2053
 [<ffffffff822a6382>] C_SYSC_sendmmsg net/compat.c:728 [inline]
 [<ffffffff822a6382>] compat_SyS_sendmmsg+0x32/0x40 net/compat.c:725
 [<ffffffff810060fe>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
 [<ffffffff810060fe>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:397
 [<ffffffff82715890>] sysenter_flags_fixed+0xd/0x1a
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29189
binder: 20639:20646 unknown command 1253457286
binder: 20639:20646 ioctl c0306201 200001c0 returned -22
binder: 20639:20655 got reply transaction with no transaction stack
binder: 20639:20655 transaction failed 29201/-71, size 0-0 line 2922
binder_alloc: binder_alloc_mmap_handler: 20639 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20639:20646 ioctl 40046207 0 returned -16
binder: 20639:20655 unknown command 1253457286
binder: 20639:20655 ioctl c0306201 200001c0 returned -22
binder: 20639:20674 got reply transaction with no transaction stack
binder: 20639:20674 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29201
binder: 20680:20692 unknown command 18153666
binder: 20680:20692 ioctl c0306201 20000140 returned -22
binder: 20680:20692 got reply transaction with no transaction stack
binder: 20680:20692 transaction failed 29201/-71, size 939524096-0 line 2922
binder_alloc: binder_alloc_mmap_handler: 20680 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20680:20692 ioctl 40046207 0 returned -16
binder_alloc: 20680: binder_alloc_buf, no vma
binder: 20680:20700 transaction failed 29189/-3, size 0-0 line 3137
binder: 20680:20728 unknown command 18153666
binder: 20680:20728 ioctl c0306201 20000140 returned -22
binder: 20680:20728 got reply transaction with no transaction stack
binder: 20680:20728 transaction failed 29201/-71, size 939524096-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: send failed reply for transaction 1241 to 20680:20682
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29201
binder_alloc: binder_alloc_mmap_handler: 20736 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20736:20753 ioctl 40046207 0 returned -16
binder_alloc: 20736: binder_alloc_buf, no vma
binder: 20736:20753 transaction failed 29189/-3, size 0-0 line 3137
binder: 20736:20770 got reply transaction with no transaction stack
binder: 20736:20770 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189
binder: 20775:20780 ioctl c0306201 200001c0 returned -14
binder_alloc: binder_alloc_mmap_handler: 20775 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20775:20780 ioctl 40046207 0 returned -16
binder_alloc: 20775: binder_alloc_buf, no vma
binder: 20775:20793 transaction failed 29189/-3, size 0-0 line 3137
binder: 20775:20806 got reply transaction with no transaction stack
binder: 20775:20793 ioctl c0306201 200001c0 returned -14
binder: 20775:20806 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29189
binder_alloc: binder_alloc_mmap_handler: 20812 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20812:20813 ioctl 40046207 0 returned -16
binder_alloc: 20812: binder_alloc_buf, no vma
binder: 20812:20824 got reply transaction with no transaction stack
binder: 20812:20834 transaction failed 29189/-3, size 0-0 line 3137
binder: 20812:20824 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20855:20858 ioctl 40046207 0 returned -16
binder_alloc: binder_alloc_mmap_handler: 20850 20001000-20004000 already mapped failed -16
binder_alloc: 20850: binder_alloc_buf, no vma
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20850:20856 ioctl 40046207 0 returned -16
binder: 20855:20858 transaction failed 29189/-3, size 0-0 line 3137
binder_alloc: 20850: binder_alloc_buf, no vma
binder: 20850:20864 transaction failed 29189/-3, size 0-0 line 3137
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20855:20875 got reply transaction with no transaction stack
binder: 20850:20876 got reply transaction with no transaction stack
binder: 20850:20876 transaction failed 29201/-71, size 0-0 line 2922
binder: 20871:20873 ioctl 40046207 0 returned -16
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_COMPLETE
binder: 20871:20880 transaction failed 29189/-22, size 0-0 line 3014
binder: 20871:20886 unknown command 18153666
binder: 20871:20886 ioctl c0306201 20000140 returned -22
binder: 20884:20887 got transaction to context manager from process owning it
binder: 20855:20875 transaction failed 29201/-71, size 0-0 line 2922
binder: 20884:20887 transaction failed 29201/-22, size 0-0 line 3005
binder: 20884:20887 got reply transaction with no transaction stack
binder: 20884:20887 transaction failed 29201/-71, size 0-0 line 2922
binder: 20871:20873 got reply transaction with no transaction stack
binder: 20871:20873 transaction failed 29201/-71, size 939524096-0 line 2922
binder_alloc: binder_alloc_mmap_handler: 20884 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20884:20887 ioctl 40046207 0 returned -16
binder_alloc: 20884: binder_alloc_buf, no vma
binder: 20884:20890 transaction failed 29189/-3, size 0-0 line 3137
binder: 20884:20891 got reply transaction with no transaction stack
binder: 20884:20891 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29201
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20896:20898 ioctl 40046207 0 returned -16
binder: 20893:20902 unknown command 18153666
binder: 20893:20902 ioctl c0306201 20000140 returned -22
binder: 20896:20903 got reply transaction with no transaction stack
binder: 20896:20903 transaction failed 29201/-71, size 0-274877906944 line 2922
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29201
binder: 20893:20905 got reply transaction with no transaction stack
binder: 20893:20905 transaction failed 29201/-71, size 939524096-0 line 2922
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20909:20910 ioctl 40046207 0 returned -16
binder_alloc: 20893: binder_alloc_buf, no vma
binder: 20909:20910 transaction failed 29189/-3, size 0-0 line 3137
binder: 20909:20910 unknown command 18153666
binder: 20909:20910 ioctl c0306201 20000140 returned -22
binder: 20909:20910 got reply transaction with no transaction stack
binder: 20909:20910 transaction failed 29201/-71, size 939524096-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20935:20937 ioctl 40046207 0 returned -16
binder_alloc: 20893: binder_alloc_buf, no vma
binder: 20935:20937 transaction failed 29189/-3, size 0-0 line 3137
binder: 20935:20937 unknown command 18153666
binder: 20935:20937 ioctl c0306201 20000140 returned -22
binder: 20935:20937 got reply transaction with no transaction stack
binder: 20935:20937 transaction failed 29201/-71, size 939524096-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29201
binder: send failed reply for transaction 1275 to 20893:20894
binder: send failed reply for transaction 1276 to 20896:20898
binder_alloc: binder_alloc_mmap_handler: 20896 20001000-20004000 already mapped failed -16
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29189
binder_alloc: 20896: binder_alloc_buf, no vma
binder: 20896:20903 transaction failed 29189/-3, size 0-0 line 3137
binder: undelivered TRANSACTION_ERROR: 29201
binder: 20896:20898 got reply transaction with no transaction stack
binder: 20896:20898 transaction failed 29201/-71, size 0-274877906944 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189
binder: 20946:20948 unknown command -145810024
binder: 20946:20948 ioctl c0306201 20000140 returned -22
binder: 20946:20948 unknown command 1
binder: 20946:20948 ioctl c0306201 20000600 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20950:20953 ioctl 40046207 0 returned -16
binder_alloc: 20946: binder_alloc_buf, no vma
binder: 20950:20953 transaction failed 29189/-3, size 0-0 line 3137
binder: 20950:20953 unknown command 18153666
binder: 20950:20953 ioctl c0306201 20000140 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20983:20985 ioctl 40046207 0 returned -16
binder_alloc: 20946: binder_alloc_buf, no vma
binder: 20983:20985 transaction failed 29189/-3, size 0-0 line 3137
binder: 20983:20985 unknown command 18153666
binder: 20983:20985 ioctl c0306201 20000140 returned -22
binder_alloc: binder_alloc_mmap_handler: 20946 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20946:20948 ioctl 40046207 0 returned -16
binder_alloc: 20946: binder_alloc_buf, no vma
binder: 20946:20988 transaction failed 29189/-3, size 0-0 line 3137
binder: 20946:20988 unknown command -145810024
binder: 20946:20988 ioctl c0306201 20000140 returned -22
binder: 20946:20988 unknown command 1
binder: 20946:20988 ioctl c0306201 20000600 returned -22
binder: send failed reply for transaction 1287 to 20946:20947
binder: undelivered TRANSACTION_COMPLETE
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29189
binder: 20989:20990 unknown command 1077961588
binder: 20989:20990 ioctl c0306201 200001c0 returned -22
binder: 20989:20991 got reply transaction with no transaction stack
binder: 20989:20991 transaction failed 29201/-71, size 0-0 line 2922
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20994:20996 ioctl 40046207 0 returned -16
binder_alloc: 20989: binder_alloc_buf, no vma
binder: 20994:20996 transaction failed 29189/-3, size 0-0 line 3137
binder: 20994:20996 unknown command 18153666
binder: 20994:20996 ioctl c0306201 20000140 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
binder: 21007:21009 ioctl 40046207 0 returned -16
binder_alloc: 20989: binder_alloc_buf, no vma
binder: 21007:21009 transaction failed 29189/-3, size 0-0 line 3137
binder: 21007:21009 unknown command 18153666
binder: 21007:21009 ioctl c0306201 20000140 returned -22
binder_alloc: binder_alloc_mmap_handler: 20989 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 20989:20991 ioctl 40046207 0 returned -16
binder: 20989:21033 unknown command 1077961588
binder: 20989:21033 ioctl c0306201 200001c0 returned -22
binder: undelivered TRANSACTION_ERROR: 29201
binder: 21037:21041 unknown command 3
binder: 21037:21041 ioctl c0306201 200001c0 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
binder: 21037:21041 ioctl 40046207 0 returned -16
binder: release 21034:21035 transaction 1296 out, still active
binder: undelivered TRANSACTION_COMPLETE
binder: send failed reply for transaction 1296, target dead
binder: release 21078:21079 transaction 1298 out, still active
binder: undelivered TRANSACTION_COMPLETE
binder: send failed reply for transaction 1298, target dead
binder: 21037:21081 unknown command 4
binder: 21037:21081 ioctl c0306201 200001c0 returned -22
binder: 21091:21093 got transaction to context manager from process owning it
binder: 21091:21093 transaction failed 29201/-22, size 0-0 line 3005
binder: 21091:21093 got reply transaction with no transaction stack
binder: 21091:21093 transaction failed 29201/-71, size 0-0 line 2922
binder_alloc: binder_alloc_mmap_handler: 21091 20001000-20004000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 21091:21093 ioctl 40046207 0 returned -16
binder_alloc: 21091: binder_alloc_buf, no vma
binder: 21091:21097 transaction failed 29189/-3, size 0-0 line 3137
binder: 21091:21100 got reply transaction with no transaction stack
binder: 21091:21100 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29189