binder: 6354:6374 ioctl 40046207 0 returned -16 binder_alloc: 6354: binder_alloc_buf, no vma binder: 6354:6374 transaction failed 29189/-3, size 0-0 line 3134 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 6354:6355 transaction 9 in, still active BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor2/6383 binder: send failed reply for transaction 9 to 6354:6371 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62 CPU: 0 PID: 6383 Comm: syz-executor2 Not tainted 4.4.125-g38f41ec #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 0000000000000000 7887310d2a23181e ffff8800b15df648 ffffffff81d067bd 0000000000000000 ffffffff839fefa0 ffffffff83d0cfe0 ffff8800b68c4800 0000000000000003 ffff8800b15df688 ffffffff81d66754 ffff8800b15df6a0 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x124 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62 Option ' [] ipcomp_alloc_tfms net/xfrm/xfrm_ipcomp.c:286 [inline] Option ' [] ipcomp_init_state+0x188/0x980 net/xfrm/xfrm_ipcomp.c:363 [] ipcomp4_init_state+0xb0/0x7d0 net/ipv4/ipcomp.c:137 [] __xfrm_init_state+0x3e7/0xb30 net/xfrm/xfrm_state.c:2058 [] xfrm_init_state+0x1a/0x20 net/xfrm/xfrm_state.c:2084 [] pfkey_msg2xfrm_state net/key/af_key.c:1289 [inline] [] pfkey_add+0x1fbb/0x3490 net/key/af_key.c:1506 [] pfkey_process+0x68b/0x750 net/key/af_key.c:2834 [] pfkey_sendmsg+0x3a9/0x760 net/key/af_key.c:3678 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962 [] __sys_sendmsg+0xd3/0x190 net/socket.c:1996 [] C_SYSC_sendmsg net/compat.c:720 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:718 [] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline] [] do_fast_syscall_32+0x321/0x8a0 arch/x86/entry/common.c:459 [] sysenter_flags_fixed+0xd/0x17 Option ' ' to dns_resolver key: bad/missing value binder: 6388:6407 Acquire 1 refcount change on invalid ref 0 ret -22 tc_dump_action: action bad kind SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket tc_dump_action: action bad kind SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket IPVS: set_ctl: invalid protocol: 136 13.242.175.254:20000 lblc IPVS: Unknown mcast interface: IPVS: set_ctl: invalid protocol: 136 13.242.175.254:20000 lblc IPVS: Unknown mcast interface: binder: 6623:6625 BC_CLEAR_DEATH_NOTIFICATION death notification not active binder: undelivered death notification, 0000000000000000 binder: 6814:6821 ERROR: BC_REGISTER_LOOPER called without request binder: 6814:6821 ioctl c0306201 20007000 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 6844:6848 ioctl 40046207 0 returned -16 binder_alloc: binder_alloc_mmap_handler: 6814 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 6814:6845 ioctl 40046207 0 returned -16 binder: 6844:6848 ioctl c0306201 20007000 returned -14 binder: 6814:6860 ERROR: BC_REGISTER_LOOPER called without request binder: 6844:6848 ioctl c0a45322 20001380 returned -22 binder: 6814:6845 ioctl c0306201 20007000 returned -14 binder: 6844:6848 unknown command -33529298 binder: 6844:6848 ioctl c0306201 20004000 returned -22 binder: 6844:6848 ioctl c0306201 200001c0 returned -14 binder: 6844:6848 ioctl c0306201 20007000 returned -14 binder: 6844:6866 ioctl c0a45322 20001380 returned -22 binder: 6844:6867 unknown command -33529298 binder: 6844:6848 ioctl c0306201 200001c0 returned -14 binder: 6844:6867 ioctl c0306201 20004000 returned -22 mmap: syz-executor4 (6878) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. binder: 6896:6897 ioctl 8905 20000000 returned -22 binder: 6896:6897 got new transaction with bad transaction stack, transaction 21 has target 6896:0 binder: 6896:6897 transaction failed 29201/-71, size 0-0 line 3038 binder: BINDER_SET_CONTEXT_MGR already set binder: 6896:6897 ioctl 40046207 0 returned -16 binder: send failed reply for transaction 21 to 6896:6897 binder: send failed reply for transaction 25 to 6896:6918 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189