INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 11794 Comm: syz-executor2 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xe9/0x14b lib/dump_stack.c:53 register_lock_class+0x164/0x5d0 kernel/locking/lockdep.c:752 __lock_acquire+0xb4/0x1430 kernel/locking/lockdep.c:3314 lock_acquire+0xbf/0x220 kernel/locking/lockdep.c:3914 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] ipc_lock_object ipc/util.h:171 [inline] sem_lock ipc/sem.c:339 [inline] sem_lock_and_putref ipc/sem.c:442 [inline] find_alloc_undo ipc/sem.c:1836 [inline] do_semtimedop+0x12cc/0x1970 ipc/sem.c:1936 SYSC_semop ipc/sem.c:2153 [inline] SyS_semop+0x26/0x30 ipc/sem.c:2150 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a39 RSP: 002b:00007f72b22f3c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000041 RAX: ffffffffffffffda RBX: 00007f72b22f4700 RCX: 0000000000452a39 RDX: 0000000000000004 RSI: 00000000207cefe8 RDI: 0000000000000000 RBP: 0000000000a6f880 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a6f7ff R14: 00007f72b22f49c0 R15: 0000000000000002 futex_wake_op: syz-executor2 tries to shift op by -65; fix this program futex_wake_op: syz-executor2 tries to shift op by -65; fix this program kauditd_printk_skb: 749 callbacks suppressed audit: type=1326 audit(1513352679.896:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.927:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=283 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.927:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.927:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.954:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=32 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.954:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.954:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.954:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.955:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352679.955:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11836 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 rfkill: input handler disabled rfkill: input handler enabled sctp: [Deprecated]: syz-executor4 (pid 12025) Use of int in maxseg socket option. Use struct sctp_assoc_value instead device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode Subscription rejected, illegal request sctp: [Deprecated]: syz-executor4 (pid 12025) Use of int in maxseg socket option. Use struct sctp_assoc_value instead Subscription rejected, illegal request IPv6: Can't replace route, no match found IPv6: Can't replace route, no match found device gre0 entered promiscuous mode *** Guest State *** CR0: actual=0x0000000080000031, shadow=0x00000000e0000011, gh_mask=fffffffffffffff7 CR4: actual=0x0000000000202060, shadow=0x0000000000200020, gh_mask=ffffffffffffe871 CR3 = 0x0000000000002000 RSP = 0x0000000000000f80 RIP = 0x000000000000000b RFLAGS=0x00000086 DR7 = 0x0000000000000400 Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 device gre0 entered promiscuous mode GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 GDTR: limit=0x000007ff, base=0x0000000000001000 LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 IDTR: limit=0x000001ff, base=0x0000000000003800 TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 EFER = 0x0000000000000501 PAT = 0x0007040600070406 DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 Interruptibility = 00000000 ActivityState = 00000000 *** Host State *** RIP = 0xffffffff81096f7b RSP = 0xffffc9000119fcd0 CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 FSBase=00007fa63ecae700 GSBase=ffff88021fc00000 TRBase=fffffffffe500000 GDTBase=fffffffffe4fe000 IDTBase=ffffffffff3fe000 CR0=0000000080050033 CR3=000000021425b000 CR4=00000000001426f0 Sysenter RSP=fffffffffe4ff200 CS:RIP=0010:ffffffff82601b00 EFER = 0x0000000000000d01 PAT = 0x0000000000000000 *** Control State *** PinBased=0000003f CPUBased=b6986dfa SecondaryExec=0000004a EntryControls=0000d3ff ExitControls=0023efff ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 reason=80000021 qualification=0000000000000000 IDTVectoring: info=00000000 errcode=00000000 TSC Offset = 0xffffffe1f2328714 EPT pointer = 0x00000001e152601e device  entered promiscuous mode device  left promiscuous mode netlink: 'syz-executor4': attribute type 15 has an invalid length. netlink: 'syz-executor4': attribute type 15 has an invalid length. pit: kvm: requested 53638 ns i8254 timer period limited to 500000 ns nla_parse: 16 callbacks suppressed netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. PF_BRIDGE: br_mdb_parse() with invalid ifindex netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. PF_BRIDGE: br_mdb_parse() with invalid ifindex device gre0 entered promiscuous mode binder: 12590:12596 ERROR: BC_REGISTER_LOOPER called without request binder: 12590:12596 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 12590:12596 BC_INCREFS_DONE u0000000000000000 node 92 cookie mismatch 0000000000000001 != 0000000000000000 binder: 12590:12596 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER binder: 12596 RLIMIT_NICE not set binder: 12590:12607 BC_FREE_BUFFER u0000020400000000 no match binder: 12596 RLIMIT_NICE not set binder: BINDER_SET_CONTEXT_MGR already set binder: 12590:12607 ioctl 40046207 0 returned -16 binder: 12590:12607 ERROR: BC_REGISTER_LOOPER called without request binder: 12590:12607 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 12590:12607 BC_INCREFS_DONE u0000000000000000 no match binder: 12590:12607 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER binder: 12607 RLIMIT_NICE not set binder: release 12590:12596 transaction 93 in, still active binder: send failed reply for transaction 93 to 12590:12607 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 binder: 12659:12664 transaction failed 29189/-22, size 64-48 line 2832 binder: 12659:12664 transaction failed 29189/-22, size 64-48 line 2832 RDS: rds_bind could not find a transport for 172.20.4.187, load rds_tcp or rds_rdma? QAT: Invalid ioctl QAT: Invalid ioctl netlink: 'syz-executor2': attribute type 15 has an invalid length. netlink: 'syz-executor2': attribute type 15 has an invalid length. netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor0'. device gre0 entered promiscuous mode netlink: 'syz-executor3': attribute type 29 has an invalid length. netlink: 'syz-executor3': attribute type 29 has an invalid length. netlink: 'syz-executor3': attribute type 29 has an invalid length. netlink: 5 bytes leftover after parsing attributes in process `syz-executor0'. TCP: request_sock_TCP: Possible SYN flooding on port 20026. Sending cookies. Check SNMP counters. netlink: 'syz-executor3': attribute type 29 has an invalid length. netlink: 'syz-executor3': attribute type 29 has an invalid length. netlink: 'syz-executor3': attribute type 29 has an invalid length. sctp: [Deprecated]: syz-executor3 (pid 13002) Use of struct sctp_assoc_value in delayed_ack socket option. Use struct sctp_sack_info instead sctp: [Deprecated]: syz-executor3 (pid 13011) Use of struct sctp_assoc_value in delayed_ack socket option. Use struct sctp_sack_info instead netlink: 6 bytes leftover after parsing attributes in process `syz-executor7'. sock: sock_set_timeout: `syz-executor4' (pid 13058) tries to set negative timeout sock: sock_set_timeout: `syz-executor4' (pid 13058) tries to set negative timeout netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl binder: 13223:13229 ioctl c0306201 2064dfd0 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 13223:13229 ioctl 40046207 0 returned -16 binder_alloc: 13223: binder_alloc_buf size 4294971384 failed, no address space binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 13223:13229 transaction failed 29201/-28, size 0-4294967295 line 2947 binder_alloc: binder_alloc_mmap_handler: 13223 20005000-20009000 already mapped failed -16 binder_alloc: binder_alloc_mmap_handler: 13223 20000000-20002000 already mapped failed -16 binder: 13240:13242 ERROR: BC_REGISTER_LOOPER called without request binder: BINDER_SET_CONTEXT_MGR already set binder: 13223:13229 ioctl 40046207 0 returned -16 binder: 13223:13249 ioctl c0306201 2064dfd0 returned -14 binder: BINDER_SET_CONTEXT_MGR already set binder: 13223:13249 ioctl 40046207 0 returned -16 binder_alloc: 13223: binder_alloc_buf, no vma binder: 13223:13249 transaction failed 29189/-3, size 0-4294967295 line 2947 binder_alloc: binder_alloc_mmap_handler: 13223 20005000-20009000 already mapped failed -16 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: 13240:13242 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 13240:13252 BC_FREE_BUFFER u0000020400000000 no match binder: 13240:13242 unknown command 0 binder: 13240:13242 ioctl c0306201 20004000 returned -22 binder_alloc: binder_alloc_mmap_handler: 13240 20000000-20002000 already mapped failed -16 loop_reread_partitions: partition scan of loop0 (-\t@r9hxGQ:[il L*@R-Tr-x) failed (rc=-13) binder: BINDER_SET_CONTEXT_MGR already set binder: 13240:13242 ioctl 40046207 0 returned -16 binder_alloc: 13240: binder_alloc_buf, no vma binder: 13240:13252 transaction failed 29189/-3, size 0-0 line 2947 binder: 13240:13252 ERROR: BC_REGISTER_LOOPER called without request binder: 13240:13252 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 13240:13252 BC_INCREFS_DONE u0000000080000000 no match binder: 13240:13252 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER binder: 13252 RLIMIT_NICE not set binder: 13240:13282 BC_FREE_BUFFER u0000020400000000 no match binder_alloc: 13240: binder_alloc_buf, no vma binder: 13240:13282 transaction failed 29189/-3, size 0-0 line 2947 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 13240:13242 transaction 99 out, still active binder: undelivered TRANSACTION_COMPLETE binder: release 13240:13252 transaction 101 out, still active binder: undelivered TRANSACTION_COMPLETE binder: send failed reply for transaction 99, target dead binder: send failed reply for transaction 101, target dead binder: undelivered TRANSACTION_ERROR: 29189 netlink: 'syz-executor5': attribute type 4 has an invalid length. QAT: Invalid ioctl QAT: Invalid ioctl netlink: 'syz-executor5': attribute type 4 has an invalid length. sctp: [Deprecated]: syz-executor4 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. Use struct sctp_sack_info instead sctp: [Deprecated]: syz-executor4 (pid 13418) Use of int in maxseg socket option. Use struct sctp_assoc_value instead sctp: [Deprecated]: syz-executor4 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. Use struct sctp_sack_info instead sctp: [Deprecated]: syz-executor4 (pid 13418) Use of int in maxseg socket option. Use struct sctp_assoc_value instead A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. binder: 13528:13531 transaction failed 29189/-22, size 64-48 line 2832 binder: 13528:13531 transaction failed 29189/-22, size 64-48 line 2832 QAT: Invalid ioctl QAT: Invalid ioctl print_req_error: 149 callbacks suppressed print_req_error: I/O error, dev loop6, sector 0 print_req_error: I/O error, dev loop6, sector 0 buffer_io_error: 146 callbacks suppressed Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read print_req_error: I/O error, dev loop6, sector 0 Buffer I/O error on dev loop6, logical block 0, async page read Buffer I/O error on dev loop6, logical block 0, async page read device lo entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready device lo entered promiscuous mode RDS: rds_bind could not find a transport for 172.20.0.187, load rds_tcp or rds_rdma? RDS: rds_bind could not find a transport for 172.20.0.187, load rds_tcp or rds_rdma? kauditd_printk_skb: 819 callbacks suppressed audit: type=1326 audit(1513352685.272:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13688 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0xffff0000 device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode audit: type=1326 audit(1513352685.420:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13688 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0xffff0000 QAT: Invalid ioctl QAT: Invalid ioctl QAT: failed to copy from user cfg_data. QAT: Invalid ioctl QAT: Invalid ioctl QAT: failed to copy from user cfg_data. device gre0 entered promiscuous mode audit: type=1400 audit(1513352686.424:2596): avc: denied { map } for pid=13998 comm="syz-executor0" path="/dev/fuse" dev="devtmpfs" ino=1050 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fuse_device_t:s0 tclass=chr_file permissive=1 audit: type=1326 audit(1513352686.462:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13993 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x0 device gre0 entered promiscuous mode audit: type=1400 audit(1513352686.567:2598): avc: denied { setgid } for pid=14038 comm="syz-executor4" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1326 audit(1513352686.606:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13993 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x0 audit: type=1326 audit(1513352686.676:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14068 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352686.677:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14068 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=2 compat=0 ip=0x40cd71 code=0x7ffc0000 audit: type=1326 audit(1513352686.677:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14068 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452a39 code=0x7ffc0000 audit: type=1326 audit(1513352686.677:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14068 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=157 compat=0 ip=0x452a39 code=0x7ffc0000 QAT: Invalid ioctl binder: 14136:14137 transaction failed 29189/-22, size 0-0 line 2832 binder: 14136:14137 ioctl c0306201 2000dfd0 returned -14 QAT: Invalid ioctl binder: 14136:14156 transaction failed 29189/-22, size 0-0 line 2832 binder: undelivered TRANSACTION_ERROR: 29189 xprt_adjust_timeout: rq_timeout = 0! binder: BINDER_SET_CONTEXT_MGR already set binder: 14189:14190 ioctl 40046207 0 returned -16 binder: binder_mmap: 14189 204c6000-204c7000 bad vm_flags failed -1 binder: undelivered TRANSACTION_COMPLETE xprt_adjust_timeout: rq_timeout = 0! binder: BINDER_SET_CONTEXT_MGR already set binder: 14189:14190 ioctl 40046207 0 returned -16 binder: 14189:14190 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 14189:14190 ERROR: BC_REGISTER_LOOPER called without request binder: 14189:14190 Acquire 1 refcount change on invalid ref 1 ret -22 binder: 14189:14190 IncRefs 0 refcount change on invalid ref 1 ret -22 binder: 14189:14190 unknown command 0 binder: 14189:14190 ioctl c0306201 20004fd0 returned -22 binder_alloc: binder_alloc_mmap_handler: 14189 20000000-20002000 already mapped failed -16 binder_alloc: binder_alloc_mmap_handler: 14189 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 14210:14222 ioctl c0306201 20b6afd0 returned -14 binder: 14189:14217 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 14189: binder_alloc_buf, no vma binder: 14189:14217 ioctl 40046207 0 returned -16 binder: binder_mmap: 14189 204c6000-204c7000 bad vm_flags failed -1 binder_alloc: 14189: binder_alloc_buf, no vma binder: 14189:14190 transaction failed 29189/-3, size 0-0 line 2947 binder: 14189:14217 transaction failed 29189/-3, size 0-0 line 2947 binder: 14189:14190 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 14189:14190 ERROR: BC_REGISTER_LOOPER called without request binder: 14189:14190 Acquire 1 refcount change on invalid ref 1 ret -22 binder: 14189:14190 IncRefs 0 refcount change on invalid ref 1 ret -22 binder: 14189:14190 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER binder: 14189:14190 DecRefs 0 refcount change on invalid ref 4096 ret -22 binder: 14189:14190 unknown command 0 binder: 14189:14190 ioctl c0306201 20004fd0 returned -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: 14257:14259 got transaction with invalid offset (72, min 72 max 72) or object. binder: 14257:14259 transaction failed 29201/-22, size 72-32 line 3010 binder: BINDER_SET_CONTEXT_MGR already set binder: 14257:14259 ioctl 40046207 0 returned -16 binder_alloc: 14257: binder_alloc_buf, no vma binder: 14257:14259 transaction failed 29189/-3, size 72-32 line 2947 RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma? binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered transaction 110, process died. binder: undelivered transaction 109, process died. kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008f data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008e data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008d data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008c data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008b data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x4000008a data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000089 data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000088 data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000087 data 0x0 kvm [14305]: vcpu0, guest rIP: 0x9115 Hyper-V uhandled wrmsr: 0x40000086 data 0x0 device gre0 entered promiscuous mode netlink: 'syz-executor5': attribute type 29 has an invalid length. nla_parse: 17 callbacks suppressed netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 'syz-executor5': attribute type 29 has an invalid length. netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. device lo entered promiscuous mode device eql entered promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. sg_write: data in/out 822404280/197 bytes for SCSI command 0x12-- guessing data in; program syz-executor1 not setting count and/or reply_len properly netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. binder_alloc: binder_alloc_mmap_handler: 14496 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set sg_write: data in/out 822404280/197 bytes for SCSI command 0x12-- guessing data in; program syz-executor1 not setting count and/or reply_len properly binder: 14496:14515 ioctl 40046207 0 returned -16 binder_alloc: 14496: binder_alloc_buf, no vma binder: 14496:14537 transaction failed 29189/-3, size 64-0 line 2947 netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. binder: undelivered transaction 117, process died. netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. binder: 14616:14617 ERROR: BC_REGISTER_LOOPER called without request binder: 14617 RLIMIT_NICE not set binder_alloc: 14616: binder_alloc_buf, no vma RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma? binder: 14616:14617 transaction failed 29189/-3, size 0-0 line 2947 rfkill: input handler disabled rfkill: input handler enabled binder: 14616:14650 BC_ACQUIRE_DONE node 119 has no pending acquire request binder: 14616:14650 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 binder: 14616:14650 BC_DEAD_BINDER_DONE 0000000000000003 not found binder: 14616:14650 DecRefs 0 refcount change on invalid ref 3 ret -22 binder: 14650 RLIMIT_NICE not set binder: BINDER_SET_CONTEXT_MGR already set binder: 14616:14654 ERROR: BC_REGISTER_LOOPER called without request binder: 14654 RLIMIT_NICE not set binder: 14616:14650 ioctl 40046207 0 returned -16 binder_alloc: 14616: binder_alloc_buf, no vma binder: 14616:14652 transaction failed 29189/-3, size 0-0 line 2947 binder: 14616:14654 BC_ACQUIRE_DONE u0000000000000000 no match binder: 14616:14654 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 binder: 14616:14654 BC_DEAD_BINDER_DONE 0000000000000003 not found binder: 14616:14654 ERROR: BC_REGISTER_LOOPER called without request binder: 14616:14654 DecRefs 0 refcount change on invalid ref 3 ret -22 binder: 14654 RLIMIT_NICE not set binder: 14616:14654 ioctl c0306201 20000000 returned -11 RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma? netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 device gre0 entered promiscuous mode QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl device gre0 entered promiscuous mode binder: BINDER_SET_CONTEXT_MGR already set netlink: 1 bytes leftover after parsing attributes in process `syz-executor0'. binder: 14790:14837 ioctl 40046207 0 returned -16 binder: 14790:14837 Release 1 refcount change on invalid ref 0 ret -22 validate_nla: 3 callbacks suppressed netlink: 'syz-executor1': attribute type 8 has an invalid length. netlink: 'syz-executor1': attribute type 8 has an invalid length.