keychord: invalid keycode count 0 ===================================== [ BUG: bad unlock balance detected! ] 4.9.69-g3f1d77c #108 Not tainted ------------------------------------- syz-executor2/9361 is trying to release lock (mrt_lock[ 109.437573] device gre0 entered promiscuous mode ) at: but there are no more locks to release! other info that might help us debug this: 2 locks held by syz-executor2/9361: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0x9f/0xc0 fs/file.c:781 #1: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 fs/seq_file.c:178 stack backtrace: CPU: 0 PID: 9361 Comm: syz-executor2 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801cab578e8 ffffffff81d90a29 ffffffff849ae9f8 ffff8801d60ee000 ffffffff834dfd74 ffffffff849ae9f8 ffff8801d60ee888 ffff8801cab57918 ffffffff81235404 dffffc0000000000 ffffffff849ae9f8 00000000ffffffff Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398 [] __lock_release kernel/locking/lockdep.c:3540 [inline] [] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775 [] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline] [] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255 [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 [] seq_read+0xa83/0x1290 fs/seq_file.c:283 [] proc_reg_read+0xef/0x170 fs/proc/inode.c:202 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_readv+0x84/0xc0 fs/read_write.c:898 [] do_readv+0xe6/0x250 fs/read_write.c:924 [] SYSC_readv fs/read_write.c:1011 [inline] [] SyS_readv+0x27/0x30 fs/read_write.c:1008 [] entry_SYSCALL_64_fastpath+0x23/0xc6 pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) IPVS: Creating netns size=2536 id=13 keychord: invalid keycode count 0 keychord: invalid keycode count 0 pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29486 sclass=netlink_route_socket pig=9521 comm=syz-executor3 keychord: invalid keycode count 0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29486 sclass=netlink_route_socket pig=9521 comm=syz-executor3 keychord: invalid keycode count 0 keychord: invalid keycode count 0 netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. device gre0 entered promiscuous mode keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: 9745:9754 ERROR: BC_REGISTER_LOOPER called without request netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. keychord: invalid keycode count 0 netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. keychord: invalid keycode count 0 binder: 9745:9754 ioctl c0306201 20008fd0 returned -11 binder: 9774:9775 IncRefs 0 refcount change on invalid ref 2 ret -22 binder: 9774:9775 Acquire 1 refcount change on invalid ref 4 ret -22 binder: 9745:9768 ERROR: BC_REGISTER_LOOPER called without request binder: BINDER_SET_CONTEXT_MGR already set binder: 9745:9754 ioctl 40046207 0 returned -16 binder_alloc: 9745: binder_alloc_buf, no vma binder: 9745:9754 transaction failed 29189/-3, size 0-0 line 3130 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9758 Comm: syz-executor1 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d5ee78e0 ffffffff81d90a29 ffff8801d5ee7bc0 0000000000000000 ffff8801cd073790 ffff8801d5ee7ab0 ffff8801cd073680 ffff8801d5ee7ad8 ffffffff8165e557 ffff8801db221ce8 ffff8801d5ee7a30 00000001c7915067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SyS_rt_tgsigqueueinfo+0x2c/0x40 kernel/signal.c:3008 [] entry_SYSCALL_64_fastpath+0x23/0xc6 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9766 Comm: syz-executor1 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801cd8df850 ffffffff81d90a29 ffff8801cd8dfb30 0000000000000000 ffff8801cd073790 ffff8801cd8dfa20 ffff8801cd073680 ffff8801cd8dfa48 ffffffff8165e557 ffff8801cd8df8b8 ffff8801cd8df9a0 00000001c7915067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] do_fcntl fs/fcntl.c:284 [inline] [] SYSC_fcntl fs/fcntl.c:372 [inline] [] SyS_fcntl+0x81c/0xc70 fs/fcntl.c:357 [] entry_SYSCALL_64_fastpath+0x23/0xc6 keychord: invalid keycode count 0 binder: undelivered TRANSACTION_ERROR: 29189 binder: send failed reply for transaction 66 to 9745:9768 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 keychord: invalid keycode count 0 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9758 Comm: syz-executor1 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d5ee78e0 ffffffff81d90a29 ffff8801d5ee7bc0 0000000000000000 ffff8801cd073910 ffff8801d5ee7ab0 ffff8801cd073800 ffff8801d5ee7ad8 ffffffff8165e557 ffff8801d5609800 ffff8801d5ee7a30 00000001c982a067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SyS_rt_tgsigqueueinfo+0x2c/0x40 kernel/signal.c:3008 [] entry_SYSCALL_64_fastpath+0x23/0xc6 binder: 9774:9791 unknown command 0 binder: 9774:9791 ioctl c0306201 20000fd0 returned -22 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: 9820:9832 got new transaction with bad transaction stack, transaction 69 has target 9820:0 binder: 9820:9832 transaction failed 29201/-71, size 0-0 line 3034 keychord: invalid keycode count 0 binder: BINDER_SET_CONTEXT_MGR already set binder: 9820:9857 ioctl 40046207 0 returned -16 binder_alloc: 9820: binder_alloc_buf, no vma binder: 9820:9853 transaction failed 29189/-3, size 0-0 line 3130 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 9820:9832 transaction 69 out, still active binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29201 binder: send failed reply for transaction 69, target dead binder: 9774:9775 unknown command 0 binder: 9774:9775 ioctl c0306201 20000fd0 returned -22 keychord: invalid keycode count 0 keychord: invalid keycode count 0 netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. keychord: invalid keycode count 0 netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 FAULT_FLAG_ALLOW_RETRY missing 30 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9922 Comm: syz-executor3 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d4def830 ffffffff81d90a29 ffff8801d4defb10 0000000000000000 ffff8801cd073d90 ffff8801d4defa00 ffff8801cd073c80 ffff8801d4defa28 ffffffff8165e557 ffff8801db221400 ffff8801d4def980 00000001d11a1067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SYSC_mq_timedreceive ipc/mqueue.c:1092 [inline] [] SyS_mq_timedreceive+0xcd/0xdb0 ipc/mqueue.c:1077 [] entry_SYSCALL_64_fastpath+0x23/0xc6 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9901 Comm: syz-executor3 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a5ed78c0 ffffffff81d90a29 ffff8801a5ed7ba0 0000000000000000 ffff8801cd073d90 ffff8801a5ed7a90 ffff8801cd073c80 ffff8801a5ed7ab8 ffffffff8165e557 0000000000000000 ffff8801a5ed7a10 00000001d11a1067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] entry_SYSCALL_64_fastpath+0x23/0xc6 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9891 Comm: syz-executor3 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a5e9f890 ffffffff81d90a29 ffff8801a5e9fb70 0000000000000000 ffff8801cd073d90 ffff8801a5e9fa60 ffff8801cd073c80 ffff8801a5e9fa88 ffffffff8165e557 ffff8801cd378000 ffff8801a5e9f9e0 00000001d11a1067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] getname_flags+0x10e/0x580 fs/namei.c:148 [] getname+0x19/0x20 fs/namei.c:208 [] do_sys_open+0x21d/0x4c0 fs/open.c:1066 [] SYSC_openat fs/open.c:1099 [inline] [] SyS_openat+0x30/0x40 fs/open.c:1093 [] entry_SYSCALL_64_fastpath+0x23/0xc6 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 9940 Comm: syz-executor3 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a697f8c0 ffffffff81d90a29 ffff8801a697fba0 0000000000000000 ffff8801cd073d90 ffff8801a697fa90 ffff8801cd073c80 ffff8801a697fab8 ffffffff8165e557 0000000000000000 ffff8801a697fa10 00000001d11a1067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] entry_SYSCALL_64_fastpath+0x23/0xc6 keychord: invalid keycode count 0 keychord: invalid keycode count 0 CPU: 0 PID: 9935 Comm: syz-executor3 Not tainted 4.9.69-g3f1d77c #108 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801cda974a0 ffffffff81d90a29 ffff8801cda97780 0000000000000000 ffff8801cd073d90 ffff8801cda97670 ffff8801cd073c80 ffff8801cda97698 ffffffff8165e557 0000000000000000 ffff8801cda975f0 00000001d11a1067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SYSC_poll fs/select.c:983 [inline] [] SyS_poll+0x120/0x3f0 fs/select.c:971 [] entry_SYSCALL_64_fastpath+0x23/0xc6 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: BINDER_SET_CONTEXT_MGR already set binder: 10002:10011 ioctl 40046207 0 returned -16 binder_alloc: 10002: binder_alloc_buf, no vma binder: 10002:10026 transaction failed 29189/-3, size 0-0 line 3130 binder: release 10002:10011 transaction 73 out, still active binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 binder: send failed reply for transaction 73, target dead IPv6: Can't replace route, no match found IPv6: Can't replace route, no match found keychord: invalid keycode count 0 keychord: invalid keycode count 0 netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. device lo entered promiscuous mode audit: type=1400 audit(1513419859.827:42): avc: denied { accept } for pid=10138 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: 10182:10184 ioctl 40046205 0 returned -22 binder: 10182:10184 ERROR: BC_REGISTER_LOOPER called without request binder: 10182:10184 ioctl c0306201 20008fd0 returned -11 binder: 10182:10184 unknown command 1400526783 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=10185 comm=syz-executor5 binder: 10182:10184 ioctl c0306201 20002fd0 returned -22 binder: 10182:10184 got reply transaction with bad transaction stack, transaction 76 has target 10182:0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=10190 comm=syz-executor5 binder: 10182:10184 transaction failed 29201/-71, size 24-8 line 2938 binder: 10182:10184 ioctl c018620b 20000fe8 returned -14 binder: 10182:10184 ioctl c0306201 20005fd0 returned -14 binder: 10182:10184 ioctl c018620b 20000000 returned -14 binder: release 10182:10184 transaction 76 out, still active binder: undelivered TRANSACTION_ERROR: 29201 binder: send failed reply for transaction 76, target dead binder: 10182:10184 ioctl 40046205 6 returned -22 binder: 10182:10197 ioctl 40046205 0 returned -22 binder: 10182:10197 ERROR: BC_REGISTER_LOOPER called without request binder: 10182:10184 unknown command 1400526783 binder: 10182:10184 ioctl c0306201 20002fd0 returned -22 binder: 10182:10184 got reply transaction with bad transaction stack, transaction 79 has target 10182:0 binder: 10182:10184 transaction failed 29201/-71, size 24-8 line 2938 binder: 10182:10220 ioctl c018620b 20000fe8 returned -14 binder: 10182:10184 ioctl c0306201 20005fd0 returned -11 binder: 10182:10220 ioctl c018620b 20000000 returned -14 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: send failed reply for transaction 79 to 10182:10184 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 device syz0 entered promiscuous mode keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 binder: 10319:10324 ERROR: BC_REGISTER_LOOPER called without request keychord: invalid keycode count 0 binder: 10319:10324 got transaction with invalid offset (40, min 0 max 32) or object. binder: 10319:10324 transaction failed 29201/-22, size 32-8 line 3193 binder: send failed reply for transaction 82 to 10319:10338 binder: undelivered TRANSACTION_ERROR: 29190 binder: undelivered TRANSACTION_COMPLETE binder: 10319:10324 ERROR: BC_REGISTER_LOOPER called without request binder: 10319:10324 got reply transaction with no transaction stack binder: 10319:10324 transaction failed 29201/-71, size 32-8 line 2923 keychord: invalid keycode count 0 device lo entered promiscuous mode keychord: invalid keycode count 0 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: release 10319:10338 transaction 85 out, still active binder: undelivered TRANSACTION_COMPLETE binder: send failed reply for transaction 85, target dead device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode Buffer I/O error on dev loop4, logical block 0, async page read binder: 10380:10381 ERROR: BC_REGISTER_LOOPER called without request keychord: invalid keycode count 0 binder: 10380:10381 got transaction with invalid offset (40, min 0 max 32) or object. binder: 10378:10390 ioctl 541b 202c3ffc returned -22 device lo entered promiscuous mode device lo left promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. binder: 10378:10390 Release 1 refcount change on invalid ref 4 ret -22 keychord: invalid keycode count 0 netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. device lo entered promiscuous mode binder: 10380:10381 transaction failed 29201/-22, size 32-8 line 3193 binder: send failed reply for transaction 88 to 10380:10393 device lo entered promiscuous mode binder: undelivered TRANSACTION_ERROR: 29190 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29201 keychord: invalid keycode count 0 binder: 10378:10415 ioctl 541b 202c3ffc returned -22 binder: 10378:10415 Release 1 refcount change on invalid ref 4 ret -22 keychord: invalid keycode count 0 device lo left promiscuous mode keychord: invalid keycode count 0 keychord: invalid keycode count 0 device lo left promiscuous mode keychord: invalid keycode count 0 netlink: 5 bytes leftover after parsing attributes in process `syz-executor7'. keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT keychord: invalid keycode count 0 keychord: invalid keycode count 0 tc_ctl_action: received NO action attribs keychord: invalid keycode count 0 tc_ctl_action: received NO action attribs keychord: invalid keycode count 0 keychord: invalid keycode count 0 keychord: invalid keycode count 0 nla_parse: 1 callbacks suppressed netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. devpts: called with bogus options netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. devpts: called with bogus options netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 9pnet_virtio: no channels available for device ./file0 netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 9pnet_virtio: no channels available for device ./file0 device gre0 entered promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode netlink: 2 bytes leftover after parsing attributes in process `syz-executor7'. netlink: 21 bytes leftover after parsing attributes in process `syz-executor1'. keychord: keycode 25638 out of range keychord: keycode 25638 out of range devpts: called with bogus options devpts: called with bogus options binder_alloc: 11753: binder_alloc_buf, no vma binder: 11753:11754 transaction failed 29189/-3, size 0-0 line 3130 binder: 11753:11776 BC_ACQUIRE_DONE node 90 has no pending acquire request binder: 11753:11776 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 binder: 11753:11776 unknown command 0 binder: 11753:11776 ioctl c0306201 20000000 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 11753:11776 ioctl 40046207 0 returned -16 binder_alloc: 11753: binder_alloc_buf, no vma binder: 11753:11776 transaction failed 29189/-3, size 0-0 line 3130 binder: 11753:11801 BC_ACQUIRE_DONE u0000000000000000 no match binder: 11753:11801 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 binder: 11753:11801 BC_DEAD_BINDER_DONE 0000000000000003 not found binder: 11753:11801 ERROR: BC_REGISTER_LOOPER called without request binder: 11753:11801 DecRefs 0 refcount change on invalid ref 3 ret -22 binder: 11753:11801 ioctl c0306201 20000000 returned -11 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. binder: 11848:11858 Acquire 1 refcount change on invalid ref 0 ret -22 binder: 11848:11858 unknown command 0 binder: 11848:11858 ioctl c0306201 2000a000 returned -22 binder: 11848:11858 transaction failed 29189/-22, size 24-8 line 3007 binder: 11848:11858 Acquire 1 refcount change on invalid ref 0 ret -22 binder: 11848:11892 transaction failed 29189/-22, size 24-8 line 3007 binder: 11848:11858 unknown command 0 binder: 11848:11858 ioctl c0306201 2000a000 returned -22 device gre0 entered promiscuous mode