binder: 9097:9113 ioctl 40046207 0 returned -16
binder_alloc: 9097: binder_alloc_buf, no vma
binder: 9097:9168 transaction failed 29189/-3, size 0-0 line 3141
binder: send failed reply for transaction 39 to 9097:9113
binder: undelivered TRANSACTION_ERROR: 29189
INFO: task syz-executor6:9111 blocked for more than 120 seconds.
      Not tainted 4.9.107-gdb2c520 #49
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor6   D28456  9111   3900 0x00000004
 ffff8801b49f8000 ffff8801d577b480 ffff8801d3e8b9c0 ffff8801c3856000
 ffff8801db321c18 ffff8801d56ff890 ffffffff839e8c1d 1ffff1003aadff06
 ffffffff8555e978 0000000041b58ab3 00ffffff843c2388 ffff8801db3224e8
Call Trace:
 [<ffffffff839ea21f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
 [<ffffffff839f6631>] schedule_timeout+0x861/0xf70 kernel/time/timer.c:1768
 [<ffffffff839e83fa>] io_schedule_timeout+0x1ba/0x390 kernel/sched/core.c:5180
 [<ffffffff839eb669>] io_schedule include/linux/sched.h:460 [inline]
 [<ffffffff839eb669>] bit_wait_io+0x19/0xa0 kernel/sched/wait.c:582
 [<ffffffff839eaf0e>] __wait_on_bit_lock+0xce/0x1c0 kernel/sched/wait.c:421
 [<ffffffff8143451f>] __lock_page+0xff/0x160 mm/filemap.c:934
 [<ffffffff8143a2e9>] lock_page include/linux/pagemap.h:454 [inline]
 [<ffffffff8143a2e9>] pagecache_get_page+0x409/0x720 mm/filemap.c:1216
 [<ffffffff8146bbe6>] find_lock_page include/linux/pagemap.h:284 [inline]
 [<ffffffff8146bbe6>] truncate_inode_pages_range+0xca6/0x1290 mm/truncate.c:320
 [<ffffffff816327fd>] blkdev_fallocate+0x21d/0x440 fs/block_dev.c:1817
 [<ffffffff81568629>] vfs_fallocate+0x359/0x600 fs/open.c:329
 [<ffffffff8156b533>] SYSC_fallocate fs/open.c:352 [inline]
 [<ffffffff8156b533>] SyS_fallocate+0x53/0x90 fs/open.c:346
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f9b13>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/520:
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136662c>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136662c>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81425cb7>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/3684:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d7fac>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3780:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839f7cc2>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff8211fc62>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133
1 lock held by syz-executor6/9111:
 #0:  (sb_writers){.+.+.+}, at: [<ffffffff815685cb>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers){.+.+.+}, at: [<ffffffff815685cb>] vfs_fallocate+0x2fb/0x600 fs/open.c:328

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 520 Comm: khungtaskd Not tainted 4.9.107-gdb2c520 #49
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d911fd08 ffffffff81eb3da9 0000000000000000 0000000000000001
 0000000000000001 0000000000000001 ffffffff810b96a0 ffff8801d911fd40
 ffffffff81ebf0a7 0000000000000001 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb3da9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb3da9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ebf0a7>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ebf03a>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b97a4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81366bc4>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81366bc4>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81366bc4>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81366bc4>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119d04d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839f9cdc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.9.107-gdb2c520 #49
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffffffff84629800 task.stack: ffffffff84600000
RIP: 0010:[<ffffffff839fbd73>] 
c [<ffffffff839fbd73>] reschedule_interrupt+0x3/0xb0 arch/x86/entry/entry_64.S:670
RSP: 0018:ffffffff84607d98  EFLAGS: 00000046
RAX: 0000000000000007 RBX: ffffffff84c4e648 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8462a0c4
RBP: ffffffff84607dc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff84c5e788 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000209b378 CR3: 00000001cdb2d000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff839f8726
c 0000000000000010
c 0000000000000246
c ffffffff84607dc0
c
 0000000000000018
c ffffffff84607df8
c ffffffff839f7d65
c ffffffff84629800
c
 0000000000000000
c dffffc0000000000
c ffffffff84c5e788
c 0000000000000000
c
Call Trace:
 [<ffffffff839f7d65>] arch_safe_halt arch/x86/include/asm/paravirt.h:104 [inline]
 [<ffffffff839f7d65>] default_idle+0x55/0x360 arch/x86/kernel/process.c:437
 [<ffffffff8106abb0>] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:428
 [<ffffffff839f8b85>] default_idle_call+0x45/0x60 kernel/sched/idle.c:97
 [<ffffffff81223185>] cpuidle_idle_call kernel/sched/idle.c:155 [inline]
 [<ffffffff81223185>] cpu_idle_loop kernel/sched/idle.c:248 [inline]
 [<ffffffff81223185>] cpu_startup_entry+0x2b5/0x380 kernel/sched/idle.c:303
 [<ffffffff839e59ec>] rest_init+0x183/0x189 init/main.c:409
 [<ffffffff84c97943>] start_kernel+0x67e/0x6b2 init/main.c:664
 [<ffffffff84c9629a>] x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:196
 [<ffffffff84c963db>] x86_64_start_kernel+0x13f/0x162 arch/x86/kernel/head64.c:177
Code: 
c7d 
c01 
c00 
c65 
c48 
c0f 
c44 
c24 
c25 
c58 
c7d 
c01 
c00 
c57 
ce8 
cc1 
c72 
c60 
cfd 
ce8 
cf0 
c2a 
c00 
c00 
ce9 
cbb 
ce6 
cff 
cff 
c90 
c66 
c2e 
c0f 
c1f 
c84 
c00 
c00 
c00 
c00 
c00 
c0f 
c1f 
c00 
c<68> 
c02 
cff 
cff 
cff 
cfc 
c48 
c83 
cc4 
c88 
c4c 
c89 
c5c 
c24 
c30 
c4c 
c89 
c54 
c24 
c38 
c4c 
c