binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 11780:11789 got transaction with invalid offsets ptr ====================================================== WARNING: possible circular locking dependency detected 4.16.0-rc3+ #242 Not tainted ------------------------------------------------------ syz-executor3/11784 is trying to acquire lock: (&mm->mmap_sem){++++}, at: [<00000000851c2ec0>] __might_fault+0xe0/0x1d0 mm/memory.c:4570 but task is already holding lock: (ashmem_mutex){+.+.}, at: [<00000000f70699da>] ashmem_pin_unpin drivers/staging/android/ashmem.c:705 [inline] (ashmem_mutex){+.+.}, at: [<00000000f70699da>] ashmem_ioctl+0x3db/0x11b0 drivers/staging/android/ashmem.c:782 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (ashmem_mutex){+.+.}: __mutex_lock_common kernel/locking/mutex.c:756 [inline] __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 ashmem_mmap+0x53/0x410 drivers/staging/android/ashmem.c:362 call_mmap include/linux/fs.h:1786 [inline] mmap_region+0xa99/0x15a0 mm/mmap.c:1705 do_mmap+0x6c0/0xe00 mm/mmap.c:1483 do_mmap_pgoff include/linux/mm.h:2223 [inline] vm_mmap_pgoff+0x1de/0x280 mm/util.c:355 SYSC_mmap_pgoff mm/mmap.c:1533 [inline] SyS_mmap_pgoff+0x462/0x5f0 mm/mmap.c:1491 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 -> #0 (&mm->mmap_sem){++++}: lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920 __might_fault+0x13a/0x1d0 mm/memory.c:4571 _copy_from_user+0x2c/0x110 lib/usercopy.c:10 copy_from_user include/linux/uaccess.h:147 [inline] ashmem_pin_unpin drivers/staging/android/ashmem.c:710 [inline] ashmem_ioctl+0x438/0x11b0 drivers/staging/android/ashmem.c:782 compat_ashmem_ioctl+0x3e/0x50 drivers/staging/android/ashmem.c:813 C_SYSC_ioctl fs/compat_ioctl.c:1461 [inline] compat_SyS_ioctl+0x151/0x2a30 fs/compat_ioctl.c:1407 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(ashmem_mutex); lock(&mm->mmap_sem); lock(ashmem_mutex); lock(&mm->mmap_sem); *** DEADLOCK *** 1 lock held by syz-executor3/11784: #0: (ashmem_mutex){+.+.}, at: [<00000000f70699da>] ashmem_pin_unpin drivers/staging/android/ashmem.c:705 [inline] #0: (ashmem_mutex){+.+.}, at: [<00000000f70699da>] ashmem_ioctl+0x3db/0x11b0 drivers/staging/android/ashmem.c:782 stack backtrace: CPU: 0 PID: 11784 Comm: syz-executor3 Not tainted 4.16.0-rc3+ #242 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 print_circular_bug.isra.38+0x2cd/0x2dc kernel/locking/lockdep.c:1223 check_prev_add kernel/locking/lockdep.c:1863 [inline] check_prevs_add kernel/locking/lockdep.c:1976 [inline] validate_chain kernel/locking/lockdep.c:2417 [inline] __lock_acquire+0x30a8/0x3e00 kernel/locking/lockdep.c:3431 lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920 __might_fault+0x13a/0x1d0 mm/memory.c:4571 _copy_from_user+0x2c/0x110 lib/usercopy.c:10 copy_from_user include/linux/uaccess.h:147 [inline] ashmem_pin_unpin drivers/staging/android/ashmem.c:710 [inline] ashmem_ioctl+0x438/0x11b0 drivers/staging/android/ashmem.c:782 compat_ashmem_ioctl+0x3e/0x50 drivers/staging/android/ashmem.c:813 C_SYSC_ioctl fs/compat_ioctl.c:1461 [inline] compat_SyS_ioctl+0x151/0x2a30 fs/compat_ioctl.c:1407 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f81c99 RSP: 002b:00000000f777d09c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000007709 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 binder: 11780:11789 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 11780:11803 ioctl 40046207 0 returned -16 binder_alloc: 11780: binder_alloc_buf, no vma binder: 11780:11789 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 11817:11822 got transaction with invalid offsets ptr binder: 11817:11822 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 11817:11840 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 11860:11869 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 11860:11874 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 11887:11901 ioctl 40046207 0 returned -16 binder: 11915:11916 got transaction with invalid offsets ptr binder: 11915:11916 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 11915:11916 ioctl 40046207 0 returned -16 binder_alloc: 11915: binder_alloc_buf, no vma binder: 11915:11928 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 11935:11941 ioctl c0306201 20000200 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 11935:11953 ioctl 40046207 0 returned -16 binder: 11986:11995 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 11986:12010 ioctl 40046207 0 returned -16 binder: 12019:12026 got transaction with invalid offsets ptr binder: 12019:12026 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 12019: binder_alloc_buf, no vma binder: 12019:12051 transaction failed 29189/-3, size 80-16 line 2963 binder: 12019:12046 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12092:12102 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 12092:12118 ioctl 40046207 0 returned -16 binder: 12123:12129 got transaction with invalid offsets ptr binder: 12123:12129 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12123:12129 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 12169:12180 ioctl 40046207 0 returned -16 binder_alloc: 12183: binder_alloc_buf, no vma binder: 12183:12196 transaction failed 29189/-3, size 80-16 line 2963 binder: BINDER_SET_CONTEXT_MGR already set binder: 12183:12209 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12214:12221 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12214:12221 transaction failed 29201/-14, size 80-16 line 2991 binder: 12217:12222 ioctl 40046207 0 returned -16 binder: 12217:12235 got transaction with invalid offsets ptr binder: undelivered TRANSACTION_ERROR: 29201 binder: 12217:12235 transaction failed 29201/-14, size 80-16 line 2991 binder: 12245:12249 got transaction with invalid offsets ptr binder: 12245:12249 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12217:12242 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12217:12222 transaction failed 29189/-22, size 80-16 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12257:12263 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12257:12263 transaction failed 29201/-14, size 80-16 line 2991 binder: 12262:12268 ioctl 40046207 0 returned -16 binder: 12262:12268 got transaction with invalid offsets ptr binder: 12262:12268 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 12257: binder_alloc_buf, no vma binder: 12257:12275 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12257:12263 ioctl 40046207 0 returned -16 binder_alloc: 12257: binder_alloc_buf, no vma binder: 12297:12301 transaction failed 29189/-3, size 80-16 line 2963 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 binder: undelivered TRANSACTION_ERROR: 29189 CPU: 0 PID: 12305 Comm: syz-executor7 Not tainted 4.16.0-rc3+ #242 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2959 [inline] prepare_alloc_pages mm/page_alloc.c:4198 [inline] __alloc_pages_nodemask+0x327/0xdd0 mm/page_alloc.c:4237 alloc_pages_current+0xb6/0x1e0 mm/mempolicy.c:2055 alloc_pages include/linux/gfp.h:492 [inline] skb_page_frag_refill+0x358/0x5f0 net/core/sock.c:2208 tun_build_skb.isra.50+0x2f0/0x1850 drivers/net/tun.c:1627 tun_get_user+0x18fa/0x3810 drivers/net/tun.c:1798 tun_chr_write_iter+0xbd/0x1c0 drivers/net/tun.c:1984 call_write_iter include/linux/fs.h:1781 [inline] do_iter_readv_writev+0x55c/0x830 fs/read_write.c:653 do_iter_write+0x154/0x540 fs/read_write.c:932 compat_writev+0x225/0x420 fs/read_write.c:1246 do_compat_writev+0x115/0x220 fs/read_write.c:1267 C_SYSC_writev fs/read_write.c:1278 [inline] compat_SyS_writev+0x26/0x30 fs/read_write.c:1274 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7fc2c99 RSP: 002b:00000000f77be034 EFLAGS: 00000296 ORIG_RAX: 0000000000000092 RAX: ffffffffffffffda RBX: 00000000000000fc RCX: 00000000f77be084 RDX: 0000000000000001 RSI: 000000000813af00 RDI: 0000000000000013 RBP: 00000000f77be158 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 binder: 12309:12320 transaction failed 29189/-22, size 80-16 line 2848 binder: 12313:12322 got transaction with invalid data ptr binder: 12313:12322 transaction failed 29201/-14, size 80-16 line 2982 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 12313:12322 ioctl 40046207 0 returned -16 binder_alloc: 12313: binder_alloc_buf, no vma binder: 12313:12329 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12340:12342 transaction failed 29189/-22, size 80-16 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12352:12357 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12352:12357 transaction failed 29201/-14, size 80-16 line 2991 binder: 12351:12361 ioctl 40046207 0 returned -16 binder: 12351:12361 got transaction with invalid offsets ptr binder: undelivered TRANSACTION_ERROR: 29201 binder: 12351:12361 transaction failed 29201/-14, size 80-16 line 2991 binder: 12380:12383 got transaction with invalid offsets ptr binder: 12380:12383 transaction failed 29201/-14, size 80-16 line 2991 binder: 12351:12379 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12351:12379 transaction failed 29201/-14, size 80-16 line 2991 binder: 12351:12361 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12392:12398 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12393:12399 ioctl 40046207 0 returned -16 binder: 12393:12399 ioctl c0306201 20000140 returned -14 binder: 12393:12399 ioctl 40a45321 20000040 returned -22 binder: 12392:12398 transaction failed 29201/-14, size 80-16 line 2991 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12393:12399 ioctl c0306201 20000140 returned -14 binder: 12432:12436 got transaction with invalid offsets ptr binder: 12432:12436 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: BINDER_SET_CONTEXT_MGR already set binder: 12429:12443 ioctl 40046207 0 returned -16 binder: 12432:12448 ioctl 40046207 0 returned -16 binder_alloc: 12432: binder_alloc_buf, no vma binder: 12429:12449 transaction failed 29189/-3, size 80-16 line 2963 binder_alloc: 12432: binder_alloc_buf, no vma binder: 12432:12436 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: undelivered TRANSACTION_ERROR: 29201 binder: 12465:12471 ioctl 40046207 0 returned -16 binder: 12465:12479 transaction failed 29189/-22, size 80-16 line 2848 binder: 12478:12482 got transaction with invalid offsets ptr binder: 12478:12482 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12478:12484 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 12489: binder_alloc_buf, no vma binder: 12489:12493 transaction failed 29189/-3, size 80-16 line 2963 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 12489: binder_alloc_buf, no vma binder: 12492:12499 ioctl 40046207 0 returned -16 binder: 12492:12508 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12492:12508 got transaction with invalid data ptr binder: 12492:12508 transaction failed 29201/-14, size 80-16 line 2982 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12522:12525 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 12521:12527 ioctl 40046207 0 returned -16 binder: 12522:12525 transaction failed 29201/-14, size 80-16 line 2991 binder: 12521:12527 got transaction with invalid offsets ptr binder: 12521:12527 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12522:12542 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12564:12574 got transaction with invalid offsets ptr binder: 12564:12574 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12564:12589 ioctl 40046207 0 returned -16 binder_alloc: 12564: binder_alloc_buf, no vma binder: 12564:12597 transaction failed 29189/-3, size 80-16 line 2963 binder: BINDER_SET_CONTEXT_MGR already set binder: 12601:12604 ioctl 40046207 0 returned -16 binder_alloc: 12564: binder_alloc_buf, no vma binder: undelivered TRANSACTION_ERROR: 29189 binder: 12601:12604 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12615:12623 ioctl c0306201 20000000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 12614:12634 got transaction with invalid offsets ptr binder: 12614:12626 ioctl 40046207 0 returned -16 binder: 12614:12634 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12615:12632 ioctl 40046207 0 returned -16 binder: 12615:12623 ioctl c0306201 20000000 returned -14 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12647:12660 ioctl 40046205 1ff returned -22 binder: 12647:12660 unknown command 19 binder: 12652:12661 got transaction with invalid offsets ptr binder: 12652:12661 transaction failed 29201/-14, size 80-16 line 2991 binder: 12647:12660 ioctl c0306201 20008000 returned -22 binder: 12647:12668 ioctl 40046205 1ff returned -22 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 12647:12668 unknown command 20 binder: 12647:12668 ioctl c0306201 20008000 returned -22 binder: 12647:12660 ioctl 40046207 0 returned -16 binder: 12697:12706 got transaction with invalid offsets ptr binder: 12697:12706 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 12725:12728 unknown command 536915920 binder: 12697:12719 ioctl 40046207 0 returned -16 binder: 12725:12728 ioctl c0306201 20008000 returned -22 binder_alloc: 12697: binder_alloc_buf, no vma binder: 12697:12706 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12749:12753 got transaction with invalid offsets ptr binder: 12744:12759 unknown command 536915920 binder: 12749:12753 transaction failed 29201/-14, size 80-16 line 2991 binder: 12744:12759 ioctl c0306201 20008000 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 12749:12765 ioctl 40046207 0 returned -16 binder_alloc: 12749: binder_alloc_buf, no vma binder: 12749:12753 transaction failed 29189/-3, size 80-16 line 2963 binder: 12776:12781 unknown command 536915920 binder: 12776:12781 ioctl c0306201 20008000 returned -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12801:12810 ioctl 400454cc 20000040 returned -22 binder: 12807:12813 unknown command 536915920 binder: 12801:12810 got transaction with invalid offsets ptr binder: 12807:12813 ioctl c0306201 20008000 returned -22 binder: 12801:12810 transaction failed 29201/-14, size 80-16 line 2991 binder_alloc: binder_alloc_mmap_handler: 12801 20000000-20002000 already mapped failed -16 binder_alloc: 12801: binder_alloc_buf, no vma binder: 12801:12824 ioctl 400454cc 20000040 returned -22 binder: 12828:12836 transaction failed 29189/-3, size 0-0 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 12801: binder_alloc_buf, no vma binder: 12801:12810 ioctl 40046207 0 returned -16 binder: 12801:12824 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12845:12854 transaction failed 29189/-22, size 0-0 line 2848 binder: 12846:12857 got transaction with invalid offsets ptr binder: 12846:12857 transaction failed 29201/-14, size 80-16 line 2991 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 12846:12868 ioctl 40046207 0 returned -16 binder_alloc: 12846: binder_alloc_buf, no vma binder: 12869:12876 transaction failed 29189/-3, size 0-0 line 2963 binder_alloc: 12846: binder_alloc_buf, no vma binder: 12846:12857 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12894:12897 transaction failed 29189/-22, size 9007954363678800-0 line 2848 binder: 12890:12898 ioctl c0306201 20008000 returned -14 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12890:12898 ioctl 540a 0 returned -22 binder: 12890:12912 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 12890:12898 ioctl 40046207 0 returned -16 binder: 12919:12928 transaction failed 29189/-22, size 9007954363678800-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 12920:12932 got transaction with invalid offsets ptr binder_alloc: 12920: binder_alloc_buf size 9007954363678800 failed, no address space binder_alloc: allocated: 96 (num: 1 largest: 96), free: 8096 (num: 1 largest: 8096) binder: 12939:12945 transaction failed 29201/-28, size 9007954363678800-0 line 2963 binder: 12920:12932 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: undelivered TRANSACTION_ERROR: 29201 binder: 12920:12953 ioctl 40046207 0 returned -16 binder_alloc: 12920: binder_alloc_buf, no vma binder: 12946:12955 transaction failed 29189/-3, size 9007954363678800-0 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12962:12966 ioctl c0306201 20008000 returned -14 binder_alloc: 12962: binder_alloc_buf size 9007954363678800 failed, no address space binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 12961:12967 transaction failed 29201/-28, size 9007954363678800-0 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 12962:12970 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 12976:12982 transaction failed 29189/-22, size 9007954363678800-0 line 2848 binder: 12975:12983 transaction failed 29189/-22, size 80-35187321733136 line 2848 binder: 12977:12985 got transaction with invalid offsets ptr binder: undelivered TRANSACTION_ERROR: 29189 binder: 12977:12985 transaction failed 29201/-14, size 80-16 line 2991 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 12977:12993 ioctl 40046207 0 returned -16 binder_alloc: 12977: binder_alloc_buf, no vma binder: 12998:13003 transaction failed 29189/-3, size 80-35187321733136 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13010:13015 transaction failed 29189/-22, size 80-35187321733136 line 2848 binder: 13007:13020 ioctl c0306201 20008000 returned -14 binder_alloc: 13007: binder_alloc_buf size 9007954363678800 failed, no address space binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 13009:13018 transaction failed 29201/-28, size 9007954363678800-0 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 13007:13028 ioctl 40046207 0 returned -16 binder: 13007:13035 ioctl c0306201 20008000 returned -14 binder_alloc: 13007: binder_alloc_buf, no vma binder: 13030:13036 transaction failed 29189/-3, size 80-49486819342942224 line 2963 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13042:13044 transaction failed 29189/-22, size 9007954363678800-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13056:13070 transaction failed 29189/-22, size 80-49486819342942224 line 2848 binder: 13063:13071 got transaction with invalid data ptr binder: 13063:13071 transaction failed 29201/-14, size 80-16 line 2982 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 13063:13082 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13088:13095 transaction failed 29189/-22, size 80-49486819342942224 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13091:13101 unknown command 19 binder_alloc: 13091: binder_alloc_buf size -3458764513820540832 failed, no address space binder: 13091:13101 ioctl c0306201 20008000 returned -22 binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 13110:13112 transaction failed 29201/-28, size 80--3458764513820540912 line 2963 binder: 13091:13120 ioctl c0306201 20000140 returned -14 binder_alloc: binder_alloc_mmap_handler: 13091 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 13091:13101 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13091:13137 unknown command 21 binder: 13091:13137 ioctl c0306201 20008000 returned -22 binder: 13139:13142 unknown command 536915920 binder: 13139:13142 ioctl c0306201 20008000 returned -22 binder: 13148:13151 unknown command 536915920 binder: 13150:13158 ioctl c0306201 20000080 returned -14 binder: 13148:13151 ioctl c0306201 20008000 returned -22 binder_alloc: 13150: binder_alloc_buf size -3458764513820540832 failed, no address space binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 13150:13164 ioctl c0306201 20000080 returned -14 binder: 13144:13157 transaction failed 29201/-28, size 80--3458764513820540912 line 2963 binder: 13150:13158 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13166:13168 unknown command 536915920 binder: 13166:13168 ioctl c0306201 20008000 returned -22 binder: 13171:13182 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 13171:13186 ioctl 40046207 0 returned -16 binder_alloc: 13171: binder_alloc_buf, no vma binder: 13179:13184 transaction failed 29189/-3, size 80--3458764513820540912 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13192:13199 unknown command 536915920 QAT: Invalid ioctl binder: 13196:13206 got transaction with invalid offsets ptr binder: 13197:13205 got transaction with invalid data ptr QAT: Invalid ioctl binder: 13192:13199 ioctl c0306201 20008000 returned -22 binder: 13196:13206 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 13196: binder_alloc_buf, no vma binder: 13196:13214 transaction failed 29189/-3, size 80-16 line 2963 binder: 13196:13213 ioctl 40046207 0 returned -16 binder: 13197:13205 transaction failed 29201/-14, size 80-16 line 2982 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13225:13231 transaction failed 29189/-22, size 0-0 line 2848 binder: 13230:13235 transaction failed 29189/-22, size 80-16 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13239:13242 ioctl c0306201 20008000 returned -14 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 13239:13251 ioctl 40046207 0 returned -16 binder_alloc: 13239: binder_alloc_buf, no vma binder: 13246:13256 transaction failed 29189/-3, size 80-16 line 2963 binder: 13254:13258 unknown command 11522048 Cannot find set identified by id 61783 to match binder: 13254:13258 ioctl c0306201 20008000 returned -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13267:13269 got transaction with invalid offsets ptr binder: 13267:13269 transaction failed 29201/-14, size 80-16 line 2991 Cannot find set identified by id 61783 to match binder: BINDER_SET_CONTEXT_MGR already set binder: 13267:13279 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13281:13285 unknown command 11522048 binder: 13282:13286 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 13281:13285 ioctl c0306201 20008000 returned -22 binder: 13284:13300 ioctl c0306201 20000000 returned -14 binder: 13302:13304 unknown command 11522048 binder: 13284:13293 ioctl 40046207 0 returned -16 binder: 13302:13304 ioctl c0306201 20008000 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 13306:13313 ioctl 40046207 0 returned -16 binder: 13306:13313 ioctl c0306201 20008000 returned -14 binder: 13324:13328 ioctl c0306201 20008000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: release 13326:13329 transaction 390 out, still active binder: undelivered TRANSACTION_COMPLETE binder: 13322:13334 ioctl 40046207 0 returned -16 binder_alloc: 13324: binder_alloc_buf, no vma binder: 13322:13339 transaction failed 29189/-3, size 80-16 line 2963 binder: send failed reply for transaction 390, target dead binder: 13342:13343 transaction failed 29189/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13322:13334 got transaction with invalid offsets ptr binder: BINDER_SET_CONTEXT_MGR already set binder: 13322:13334 transaction failed 29201/-14, size 80-16 line 2991 binder: 13358:13362 unknown command -1345297664 binder: 13350:13356 ioctl 40046207 0 returned -16 binder: 13358:13362 ioctl c0306201 20008000 returned -22 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13372:13373 got transaction to invalid handle binder: 13369:13376 transaction failed 29189/-22, size 80-16 line 2848 binder: 13372:13373 transaction failed 29201/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13369:13384 transaction failed 29189/-22, size 80-16 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13416:13418 got transaction with invalid offsets ptr binder: 13416:13418 transaction failed 29201/-14, size 80-16 line 2991 binder: BINDER_SET_CONTEXT_MGR already set binder: 13416:13423 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 13430: binder_alloc_buf, no vma binder: 13430:13438 transaction failed 29189/-3, size 80-16 line 2963 binder: 13424:13436 got transaction to invalid handle binder: 13424:13436 transaction failed 29201/-22, size 0-0 line 2848 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 13430: binder_alloc_buf, no vma binder: 13430:13448 transaction failed 29189/-3, size 80-16 line 2963 binder: 13430:13438 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13454:13459 unknown command -801086720 binder: 13453:13462 got transaction with invalid data ptr binder: 13454:13459 ioctl c0306201 20008000 returned -22 binder: 13453:13462 transaction failed 29201/-14, size 80-16 line 2982 binder: 13473:13476 got transaction to invalid handle binder: 13473:13476 transaction failed 29201/-22, size 0-0 line 2848 binder_alloc: binder_alloc_mmap_handler: 13453 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: undelivered TRANSACTION_ERROR: 29201 binder: 13453:13462 ioctl 40046207 0 returned -16 binder_alloc: 13453: binder_alloc_buf, no vma binder: 13490:13491 unknown command -801086720 binder: 13453:13485 transaction failed 29189/-3, size 80-16 line 2963 binder: 13490:13491 ioctl c0306201 20008000 returned -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13501:13506 got transaction to invalid handle binder: 13501:13506 transaction failed 29201/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13513:13515 got transaction with invalid offsets ptr binder: 13513:13515 transaction failed 29201/-14, size 80-16 line 2991 binder: 13516:13519 unknown command -801086720 binder: BINDER_SET_CONTEXT_MGR already set binder: 13516:13519 ioctl c0306201 20008000 returned -22 binder_alloc: 13513: binder_alloc_buf, no vma binder: 13513:13522 transaction failed 29189/-3, size 80-16 line 2963 binder: 13513:13515 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13531:13536 transaction failed 29189/-22, size 0-0 line 2848 binder: 13535:13540 ioctl 400454cc 20000000 returned -22 binder: 13535:13540 ioctl c0306201 20008000 returned -14 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 13554:13558 transaction 414 out, still active binder: 13535:13560 ioctl 400454cc 20000000 returned -22 binder: undelivered TRANSACTION_COMPLETE binder: BINDER_SET_CONTEXT_MGR already set binder: 13535:13560 ioctl c0306201 20008000 returned -14 binder: 13535:13540 ioctl 40046207 0 returned -16 binder: send failed reply for transaction 414, target dead binder: 13565:13572 transaction failed 29189/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13631:13633 got transaction with invalid data ptr binder: 13631:13633 transaction failed 29201/-14, size 80-16 line 2982 binder: undelivered TRANSACTION_ERROR: 29201 QAT: Invalid ioctl QAT: Invalid ioctl binder: 13674:13677 got transaction with invalid offsets ptr binder: 13674:13677 transaction failed 29201/-14, size 80-16 line 2991 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13732:13733 got transaction with invalid offsets ptr binder: 13732:13733 transaction failed 29201/-14, size 80-16 line 2991 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13746:13747 transaction failed 29189/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13754:13765 transaction failed 29189/-22, size 80-16 line 2848 Cannot find set identified by id 61783 to match binder: undelivered TRANSACTION_ERROR: 29189 Cannot find set identified by id 61783 to match binder: 13803:13810 unknown command 19 binder: 13803:13810 ioctl c0306201 20008000 returned -22 Cannot find set identified by id 61783 to match Cannot find set identified by id 61783 to match Cannot find set identified by id 61783 to match Cannot find set identified by id 61783 to match QAT: Invalid ioctl QAT: Invalid ioctl Cannot find set identified by id 61783 to match binder: 14033:14046 transaction failed 29189/-22, size 0-0 line 2848 binder: undelivered TRANSACTION_ERROR: 29189 Cannot find set identified by id 61783 to match binder_alloc: 14094: binder_alloc_buf, no vma binder: 14094:14095 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 14128: binder_alloc_buf, no vma binder: 14128:14137 transaction failed 29189/-3, size 80-16 line 2963 binder: BINDER_SET_CONTEXT_MGR already set binder: 14122:14133 ioctl 40046207 0 returned -16 binder_alloc: 14128: binder_alloc_buf, no vma binder: 14122:14150 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 14171: binder_alloc_buf, no vma binder: 14171:14176 transaction failed 29189/-3, size 80-16 line 2963 binder: undelivered TRANSACTION_ERROR: 29189