binder: 6064:6095 transaction failed 29201/-71, size 0-0 line 2922 page:ffffea0007290000 count:2 mapcount:0 mapping: (null) index:0x0 flags: 0x8000000000004004(referenced|head) page dumped because: VM_BUG_ON_PAGE(!PageLocked(page)) ------------[ cut here ]------------ kernel BUG at mm/filemap.c:817! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 6113 Comm: syz-executor5 Not tainted 4.4.152-ge5c5f1f #89 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800b62a0000 task.stack: ffff8800b08a8000 RIP: 0010:[] [] unlock_page+0x115/0x150 mm/filemap.c:817 RSP: 0018:ffff8800b08af8a0 EFLAGS: 00010216 RAX: ffffffff83a6f940 RBX: ffffea0007290000 RCX: ffffc9000a4bb000 RDX: 000000000001dddf RSI: ffffffff81519559 RDI: ffff8800b62a08dc RBP: ffff8800b08af8c0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 R13: ffffea0007290300 R14: ffffea0007290008 R15: ffff8800b08af988 FS: 00007f4fa91ef700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 00000001cbb65000 CR4: 00000000001606f0 Stack: ffffea0007290000 dffffc0000000000 ffffea0007290300 ffffea0007290008 ffff8800b08af9b0 ffffffff812cf20d 0000000000000000 ffff8800b08afaf8 ffff8800b317ca00 1ffff10016115f25 00000001cebd9fb0 ffff8800b08afae8 Call Trace: [] get_futex_key+0x8ad/0xdc0 kernel/futex.c:598 [] futex_requeue+0x1e7/0x1690 kernel/futex.c:1780 [] do_futex+0x204/0x17f0 kernel/futex.c:3248 [] SYSC_futex kernel/futex.c:3286 [inline] [] SyS_futex+0x1f0/0x300 kernel/futex.c:3254 [] entry_SYSCALL_64_fastpath+0x22/0x9e Code: e8 48 8d 04 c0 49 8d [ 95.191913] binder: BINDER_SET_CONTEXT_MGR already set binder: 6064:6117 ioctl 40046207 0 returned -16 binder: 6064:6117 Acquire 1 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29201 3c c6 e8 88 bd df ff 5b 41 5c 41 5d 41 5e 5d c3 e8 8a 31 f3 ff 48 c7 c6 e0 bb a9 83 48 89 df e8 bb ee 06 00 <0f> 0b 48 89 df e8 51 d3 0d 00 e9 0a ff ff ff e8 47 d3 0d 00 e9 RIP [] unlock_page+0x115/0x150 mm/filemap.c:817 RSP ---[ end trace df7eda4675c490b9 ]--- IPVS: Creating netns size=2552 id=10