binder: undelivered TRANSACTION_ERROR: 29189
binder_alloc: 24408: binder_alloc_buf, no vma
binder: 24408:24412 transaction failed 29189/-3, size 0-24 line 3256
------------[ cut here ]------------
binder: undelivered TRANSACTION_ERROR: 29189
WARNING: CPU: 0 PID: 24416 at fs/attr.c:211 notify_change2+0xae2/0xd90 fs/attr.c:211
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 24416 Comm: syz-executor.1 Not tainted 4.9.180+ #4
 ffff88010ae87430 ffffffff81b577f1 0000000000000000 ffffffff82a3a960
 00000000ffffffff 0000000000000000 0000000000000009 ffff88010ae87510
 ffffffff813fd2fa 0000000041b58ab3 ffffffff82e30d0a ffffffff813fd121
Call Trace:
 [<0000000050473d4a>] __dump_stack lib/dump_stack.c:15 [inline]
 [<0000000050473d4a>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<00000000f5a1a6ab>] panic+0x1d9/0x3bd kernel/panic.c:180
 [<000000008423e20a>] __warn.cold+0x2f/0x2f kernel/panic.c:546
 [<00000000cb28231f>] warn_slowpath_null+0x2d/0x40 kernel/panic.c:589
 [<00000000d13f0559>] notify_change2+0xae2/0xd90 fs/attr.c:211
 [<000000004d093deb>] __remove_privs fs/inode.c:1793 [inline]
 [<000000004d093deb>] file_remove_privs+0x285/0x4b0 fs/inode.c:1815
 [<00000000f3ffb535>] __generic_file_write_iter+0x157/0x530 mm/filemap.c:3010
 [<00000000197410a4>] blkdev_write_iter fs/block_dev.c:1726 [inline]
 [<00000000197410a4>] blkdev_write_iter+0x1bb/0x370 fs/block_dev.c:1706
 [<000000007b1eb265>] vfs_iter_write+0x2e2/0x580 fs/read_write.c:390
 [<00000000a1ff05f5>] iter_file_splice_write+0x5a9/0xb10 fs/splice.c:768
 [<00000000dc8aaad7>] do_splice_from fs/splice.c:870 [inline]
 [<00000000dc8aaad7>] direct_splice_actor+0x126/0x1a0 fs/splice.c:1037
 [<000000007010110e>] splice_direct_to_actor+0x2c8/0x820 fs/splice.c:992
 [<0000000036ca0d9d>] do_splice_direct+0x1a5/0x260 fs/splice.c:1080
 [<000000009a2cf700>] do_sendfile+0x503/0xc00 fs/read_write.c:1401
 [<00000000f0a9ed08>] SYSC_sendfile64 fs/read_write.c:1462 [inline]
 [<00000000f0a9ed08>] SyS_sendfile64+0x145/0x160 fs/read_write.c:1448
 [<00000000c7e35b13>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<0000000084e6005e>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..