input input186: cannot allocate more than FF_MAX_EFFECTS effects binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space ===================================================== kobject: 'loop1' (000000004f61db91): kobject_uevent_env WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected 5.0.0-rc3+ #43 Not tainted ----------------------------------------------------- syz-executor0/5513 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' 0000000069a9fb10 (&fiq->waitq){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline] 0000000069a9fb10 (&fiq->waitq){+.+.}, at: aio_poll+0x7b9/0x14e0 fs/aio.c:1772 and this task is already holding: kobject: 'input186' (000000004ac07442): kobject_cleanup, parent (null) 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: spin_lock_irq include/linux/spinlock.h:354 [inline] 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: aio_poll+0x790/0x14e0 fs/aio.c:1771 which would create a new lock dependency: (&(&ctx->ctx_lock)->rlock){..-.} -> (&fiq->waitq){+.+.} kobject: 'input186' (000000004ac07442): calling ktype release but this new dependency connects a SOFTIRQ-irq-safe lock: (&(&ctx->ctx_lock)->rlock){..-.} ... which became SOFTIRQ-irq-safe at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline] _raw_spin_lock_irq+0x60/0x80 kernel/locking/spinlock.c:160 binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) spin_lock_irq include/linux/spinlock.h:354 [inline] free_ioctx_users+0xa7/0x6e0 fs/aio.c:610 percpu_ref_put_many include/linux/percpu-refcount.h:285 [inline] percpu_ref_put include/linux/percpu-refcount.h:301 [inline] percpu_ref_call_confirm_rcu lib/percpu-refcount.c:123 [inline] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 lib/percpu-refcount.c:158 __rcu_reclaim kernel/rcu/rcu.h:240 [inline] rcu_do_batch kernel/rcu/tree.c:2452 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2773 [inline] rcu_process_callbacks+0xc4a/0x1680 kernel/rcu/tree.c:2754 __do_softirq+0x30b/0xb11 kernel/softirq.c:292 binder: 5515:5516 transaction failed 29201/-28, size 0-549755813888 line 3035 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] kmem_cache_free+0xab/0x260 mm/slab.c:3750 anon_vma_chain_free mm/rmap.c:134 [inline] unlink_anon_vmas+0x3ab/0xa50 mm/rmap.c:401 free_pgtables+0x1af/0x2f0 mm/memory.c:393 kobject: 'input186': free name exit_mmap+0x2e3/0x5d0 mm/mmap.c:3141 __mmput kernel/fork.c:1047 [inline] mmput+0x240/0x640 kernel/fork.c:1068 exec_mmap fs/exec.c:1046 [inline] flush_old_exec+0xb6d/0x21a0 fs/exec.c:1279 input input187: cannot allocate more than FF_MAX_EFFECTS effects load_elf_binary+0xa70/0x5580 fs/binfmt_elf.c:869 search_binary_handler fs/exec.c:1656 [inline] search_binary_handler+0x17f/0x570 fs/exec.c:1634 exec_binprm fs/exec.c:1698 [inline] __do_execve_file.isra.0+0x14f3/0x2700 fs/exec.c:1818 do_execveat_common fs/exec.c:1865 [inline] do_execve fs/exec.c:1882 [inline] __do_sys_execve fs/exec.c:1963 [inline] __se_sys_execve fs/exec.c:1958 [inline] __x64_sys_execve+0x8f/0xc0 fs/exec.c:1958 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 binder: 5515:5516 ioctl c0306201 20000040 returned -14 entry_SYSCALL_64_after_hwframe+0x49/0xbe to a SOFTIRQ-irq-unsafe lock: (&fiq->waitq){+.+.} ... which became SOFTIRQ-irq-unsafe at: ... lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] flush_bg_queue+0x28c/0x570 fs/fuse/dev.c:413 kobject: 'input187' (00000000435389a5): kobject_cleanup, parent (null) fuse_request_queue_background+0x360/0x640 fs/fuse/dev.c:652 fuse_request_send_background+0x58/0x120 fs/fuse/dev.c:663 cuse_send_init fs/fuse/cuse.c:458 [inline] cuse_channel_open+0x612/0x96a fs/fuse/cuse.c:518 binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space misc_open+0x398/0x4c0 drivers/char/misc.c:141 chrdev_open+0x270/0x7c0 fs/char_dev.c:417 kobject: 'input187' (00000000435389a5): calling ktype release do_dentry_open+0x48a/0x1210 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x144f/0x5650 fs/namei.c:3534 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_compat_sys_openat fs/open.c:1109 [inline] __se_compat_sys_openat fs/open.c:1107 [inline] __ia32_compat_sys_openat+0x98/0xf0 fs/open.c:1107 binder: undelivered TRANSACTION_ERROR: 29201 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 other info that might help us debug this: kobject: 'loop5' (000000002259ed43): kobject_uevent_env Possible interrupt unsafe locking scenario: kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' CPU0 CPU1 ---- ---- lock(&fiq->waitq); local_irq_disable(); lock(&(&ctx->ctx_lock)->rlock); binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) lock(&fiq->waitq); lock(&(&ctx->ctx_lock)->rlock); *** DEADLOCK *** 1 lock held by syz-executor0/5513: #0: 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: spin_lock_irq include/linux/spinlock.h:354 [inline] #0: 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: aio_poll+0x790/0x14e0 fs/aio.c:1771 the dependencies between SOFTIRQ-irq-safe lock and the holding lock: -> (&(&ctx->ctx_lock)->rlock){..-.} { IN-SOFTIRQ-W at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline] _raw_spin_lock_irq+0x60/0x80 kernel/locking/spinlock.c:160 spin_lock_irq include/linux/spinlock.h:354 [inline] free_ioctx_users+0xa7/0x6e0 fs/aio.c:610 percpu_ref_put_many include/linux/percpu-refcount.h:285 [inline] percpu_ref_put include/linux/percpu-refcount.h:301 [inline] percpu_ref_call_confirm_rcu lib/percpu-refcount.c:123 [inline] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 lib/percpu-refcount.c:158 __rcu_reclaim kernel/rcu/rcu.h:240 [inline] rcu_do_batch kernel/rcu/tree.c:2452 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2773 [inline] rcu_process_callbacks+0xc4a/0x1680 kernel/rcu/tree.c:2754 __do_softirq+0x30b/0xb11 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] kmem_cache_free+0xab/0x260 mm/slab.c:3750 anon_vma_chain_free mm/rmap.c:134 [inline] unlink_anon_vmas+0x3ab/0xa50 mm/rmap.c:401 free_pgtables+0x1af/0x2f0 mm/memory.c:393 exit_mmap+0x2e3/0x5d0 mm/mmap.c:3141 __mmput kernel/fork.c:1047 [inline] mmput+0x240/0x640 kernel/fork.c:1068 exec_mmap fs/exec.c:1046 [inline] flush_old_exec+0xb6d/0x21a0 fs/exec.c:1279 load_elf_binary+0xa70/0x5580 fs/binfmt_elf.c:869 search_binary_handler fs/exec.c:1656 [inline] search_binary_handler+0x17f/0x570 fs/exec.c:1634 exec_binprm fs/exec.c:1698 [inline] __do_execve_file.isra.0+0x14f3/0x2700 fs/exec.c:1818 do_execveat_common fs/exec.c:1865 [inline] do_execve fs/exec.c:1882 [inline] __do_sys_execve fs/exec.c:1963 [inline] __se_sys_execve fs/exec.c:1958 [inline] __x64_sys_execve+0x8f/0xc0 fs/exec.c:1958 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe INITIAL USE at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline] _raw_spin_lock_irq+0x60/0x80 kernel/locking/spinlock.c:160 spin_lock_irq include/linux/spinlock.h:354 [inline] free_ioctx_users+0xa7/0x6e0 fs/aio.c:610 percpu_ref_put_many include/linux/percpu-refcount.h:285 [inline] percpu_ref_put include/linux/percpu-refcount.h:301 [inline] percpu_ref_call_confirm_rcu lib/percpu-refcount.c:123 [inline] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 lib/percpu-refcount.c:158 __rcu_reclaim kernel/rcu/rcu.h:240 [inline] rcu_do_batch kernel/rcu/tree.c:2452 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2773 [inline] rcu_process_callbacks+0xc4a/0x1680 kernel/rcu/tree.c:2754 __do_softirq+0x30b/0xb11 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] kmem_cache_free+0xab/0x260 mm/slab.c:3750 anon_vma_chain_free mm/rmap.c:134 [inline] unlink_anon_vmas+0x3ab/0xa50 mm/rmap.c:401 free_pgtables+0x1af/0x2f0 mm/memory.c:393 exit_mmap+0x2e3/0x5d0 mm/mmap.c:3141 __mmput kernel/fork.c:1047 [inline] mmput+0x240/0x640 kernel/fork.c:1068 exec_mmap fs/exec.c:1046 [inline] flush_old_exec+0xb6d/0x21a0 fs/exec.c:1279 load_elf_binary+0xa70/0x5580 fs/binfmt_elf.c:869 search_binary_handler fs/exec.c:1656 [inline] search_binary_handler+0x17f/0x570 fs/exec.c:1634 exec_binprm fs/exec.c:1698 [inline] __do_execve_file.isra.0+0x14f3/0x2700 fs/exec.c:1818 do_execveat_common fs/exec.c:1865 [inline] do_execve fs/exec.c:1882 [inline] __do_sys_execve fs/exec.c:1963 [inline] __se_sys_execve fs/exec.c:1958 [inline] __x64_sys_execve+0x8f/0xc0 fs/exec.c:1958 do_syscall_64+0x1a3/0x800 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe } ... key at: [] __key.51948+0x0/0x40 ... acquired at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] aio_poll+0x7b9/0x14e0 fs/aio.c:1772 __io_submit_one fs/aio.c:1875 [inline] io_submit_one+0xc39/0x1050 fs/aio.c:1908 __do_compat_sys_io_submit fs/aio.c:1995 [inline] __se_compat_sys_io_submit fs/aio.c:1965 [inline] __ia32_compat_sys_io_submit+0x1c5/0x5c0 fs/aio.c:1965 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 the dependencies between the lock to be acquired and SOFTIRQ-irq-unsafe lock: -> (&fiq->waitq){+.+.} { HARDIRQ-ON-W at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] flush_bg_queue+0x28c/0x570 fs/fuse/dev.c:413 fuse_request_queue_background+0x360/0x640 fs/fuse/dev.c:652 fuse_request_send_background+0x58/0x120 fs/fuse/dev.c:663 cuse_send_init fs/fuse/cuse.c:458 [inline] cuse_channel_open+0x612/0x96a fs/fuse/cuse.c:518 misc_open+0x398/0x4c0 drivers/char/misc.c:141 chrdev_open+0x270/0x7c0 fs/char_dev.c:417 do_dentry_open+0x48a/0x1210 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x144f/0x5650 fs/namei.c:3534 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_compat_sys_openat fs/open.c:1109 [inline] __se_compat_sys_openat fs/open.c:1107 [inline] __ia32_compat_sys_openat+0x98/0xf0 fs/open.c:1107 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 SOFTIRQ-ON-W at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] flush_bg_queue+0x28c/0x570 fs/fuse/dev.c:413 fuse_request_queue_background+0x360/0x640 fs/fuse/dev.c:652 fuse_request_send_background+0x58/0x120 fs/fuse/dev.c:663 cuse_send_init fs/fuse/cuse.c:458 [inline] cuse_channel_open+0x612/0x96a fs/fuse/cuse.c:518 misc_open+0x398/0x4c0 drivers/char/misc.c:141 chrdev_open+0x270/0x7c0 fs/char_dev.c:417 do_dentry_open+0x48a/0x1210 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x144f/0x5650 fs/namei.c:3534 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_compat_sys_openat fs/open.c:1109 [inline] __se_compat_sys_openat fs/open.c:1107 [inline] __ia32_compat_sys_openat+0x98/0xf0 fs/open.c:1107 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 INITIAL USE at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] flush_bg_queue+0x28c/0x570 fs/fuse/dev.c:413 fuse_request_queue_background+0x360/0x640 fs/fuse/dev.c:652 fuse_request_send_background+0x58/0x120 fs/fuse/dev.c:663 cuse_send_init fs/fuse/cuse.c:458 [inline] cuse_channel_open+0x612/0x96a fs/fuse/cuse.c:518 misc_open+0x398/0x4c0 drivers/char/misc.c:141 chrdev_open+0x270/0x7c0 fs/char_dev.c:417 do_dentry_open+0x48a/0x1210 fs/open.c:771 vfs_open+0xa0/0xd0 fs/open.c:880 do_last fs/namei.c:3418 [inline] path_openat+0x144f/0x5650 fs/namei.c:3534 do_filp_open+0x26f/0x370 fs/namei.c:3564 do_sys_open+0x59a/0x7c0 fs/open.c:1063 __do_compat_sys_openat fs/open.c:1109 [inline] __se_compat_sys_openat fs/open.c:1107 [inline] __ia32_compat_sys_openat+0x98/0xf0 fs/open.c:1107 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 } ... key at: [] __key.43073+0x0/0x40 ... acquired at: lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] aio_poll+0x7b9/0x14e0 fs/aio.c:1772 __io_submit_one fs/aio.c:1875 [inline] io_submit_one+0xc39/0x1050 fs/aio.c:1908 __do_compat_sys_io_submit fs/aio.c:1995 [inline] __se_compat_sys_io_submit fs/aio.c:1965 [inline] __ia32_compat_sys_io_submit+0x1c5/0x5c0 fs/aio.c:1965 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 stack backtrace: CPU: 1 PID: 5513 Comm: syz-executor0 Not tainted 5.0.0-rc3+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 print_bad_irq_dependency kernel/locking/lockdep.c:1573 [inline] check_usage.cold+0x5e2/0x917 kernel/locking/lockdep.c:1605 check_irq_usage kernel/locking/lockdep.c:1661 [inline] check_prev_add_irq kernel/locking/lockdep_states.h:8 [inline] check_prev_add kernel/locking/lockdep.c:1871 [inline] check_prevs_add kernel/locking/lockdep.c:1979 [inline] validate_chain kernel/locking/lockdep.c:2350 [inline] __lock_acquire+0x2169/0x4a30 kernel/locking/lockdep.c:3338 lock_acquire+0x1db/0x570 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] aio_poll+0x7b9/0x14e0 fs/aio.c:1772 __io_submit_one fs/aio.c:1875 [inline] io_submit_one+0xc39/0x1050 fs/aio.c:1908 __do_compat_sys_io_submit fs/aio.c:1995 [inline] __se_compat_sys_io_submit fs/aio.c:1965 [inline] __ia32_compat_sys_io_submit+0x1c5/0x5c0 fs/aio.c:1965 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f68869 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5d640cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 RAX: ffffffffffffffda RBX: 00000000f5d3f000 RCX: 0000000000000001 RDX: 0000000020000600 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 binder: BC_ACQUIRE_RESULT not supported kobject: 'input187': free name binder: 5519:5524 ioctl c0306201 20000040 returned -22 binder: 5515:5516 transaction failed 29201/-28, size 0-549755813888 line 3035 binder: 5515:5516 ioctl c0306201 20000040 returned -14 binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 5535:5537 IncRefs 0 refcount change on invalid ref 1077961472 ret -22 binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) input input188: cannot allocate more than FF_MAX_EFFECTS effects binder: 5535:5537 unknown command 0 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input188' (0000000050bbd59a): kobject_cleanup, parent (null) binder: 5535:5537 ioctl c0306201 20000040 returned -22 binder: 5536:5538 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder: 5536:5538 ioctl c0306201 20000040 returned -14 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input188' (0000000050bbd59a): calling ktype release kobject: 'input188': free name kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' input input189: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input189' (000000009ee059f6): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'input189' (000000009ee059f6): calling ktype release kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input189': free name kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 5563:5566 DecRefs 0 refcount change on invalid ref 1077961472 ret -22 input input190: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5563:5566 unknown command 0 binder: 5565:5573 transaction failed 29201/-28, size 0-549755813888 line 3035 binder: 5563:5566 ioctl c0306201 20000040 returned -22 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input190' (000000006ca19a40): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5565:5573 ioctl c0306201 20000040 returned -14 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder: 5579:5581 BC_FREE_BUFFER u0000000040406300 no match kobject: 'input190' (000000006ca19a40): calling ktype release kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input190': free name binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 5579:5581 unknown command 0 uinput: write device info first kobject: 'input191' (00000000754387b4): kobject_cleanup, parent (null) binder: 5579:5581 ioctl c0306201 20000040 returned -22 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'input191' (00000000754387b4): calling ktype release kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5593:5594 ioctl c0306201 20000040 returned -14 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input191': free name binder: 5593:5594 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: BC_ATTEMPT_ACQUIRE not supported kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' input input192: cannot allocate more than FF_MAX_EFFECTS effects binder: 5600:5601 ioctl c0306201 20000040 returned -22 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5613:5614 ioctl c0306201 20000040 returned -14 kobject: 'input192' (000000006e58f513): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5613:5614 ioctl c0306201 20000040 returned -14 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder: 5615:5616 BC_DEAD_BINDER_DONE 0000000040406300 not found kobject: 'input192' (000000006e58f513): calling ktype release kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env binder: 5615:5616 unknown command 0 kobject: 'input192': free name binder: 5615:5616 ioctl c0306201 20000040 returned -22 kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input193' (00000000ab0e9ee7): kobject_cleanup, parent (null) kobject: 'input193' (00000000ab0e9ee7): calling ktype release kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 5629:5630 ioctl c0306201 20000040 returned -14 kobject: 'input193': free name kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder: 5634:5638 ioctl c0306201 20000040 returned -14 input input194: cannot allocate more than FF_MAX_EFFECTS effects binder: 5639:5640 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1077961472 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 5639:5640 unknown command 0 kobject: 'input194' (00000000c4da5d15): kobject_cleanup, parent (null) binder: 5634:5638 ioctl c0306201 20000040 returned -14 binder: 5639:5640 ioctl c0306201 20000040 returned -22 input input195: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'input194' (00000000c4da5d15): calling ktype release kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input194': free name kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input195' (00000000102a00c3): kobject_cleanup, parent (null) kobject: 'input196' (00000000c6e40c01): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input195' (00000000102a00c3): calling ktype release kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input195': free name binder: 5660:5661 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1077961472 binder: 5662:5663 ioctl c0306201 20000040 returned -14 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder: 5660:5661 unknown command 0 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 5660:5661 ioctl c0306201 20000040 returned -22 kobject: 'input196' (00000000c6e40c01): calling ktype release kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input196': free name binder: 5674:5676 ioctl c0306201 20000040 returned -14 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' input input197: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 5685:5686 BC_INCREFS_DONE u0000000040406300 no match kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input197' (000000000cd077da): kobject_cleanup, parent (null) binder: 5685:5686 unknown command 0 binder: 5684:5688 ioctl c0306201 20000040 returned -14 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input197' (000000000cd077da): calling ktype release binder: 5685:5686 ioctl c0306201 20000040 returned -22 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input197': free name binder: 5684:5688 ioctl c0306201 20000040 returned -14 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'input198' (00000000102e3cbc): kobject_cleanup, parent (null) kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' uinput: write device info first kobject: 'input198' (00000000102e3cbc): calling ktype release kobject: 'input198': free name kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input199' (000000007cc810ad): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input199' (000000007cc810ad): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input199': free name kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5697:5701 BC_ACQUIRE_DONE u0000000040406300 no match __nla_parse: 55 callbacks suppressed netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder_alloc_new_buf_locked: 12 callbacks suppressed binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: 5697:5701 unknown command 0 netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. binder: 5697:5701 ioctl c0306201 20000040 returned -22 netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' input input200: cannot allocate more than FF_MAX_EFFECTS effects binder_alloc_new_buf_locked: 12 callbacks suppressed binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input200' (000000004f2c58fa): kobject_cleanup, parent (null) binder: 5698:5699 ioctl c0306201 20000040 returned -14 kobject: 'input200' (000000004f2c58fa): calling ktype release kobject: 'input200': free name kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'input201' (000000008230c521): kobject_cleanup, parent (null) uinput: write device info first kobject: 'input201' (000000008230c521): calling ktype release netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5719:5720 got transaction to invalid handle kobject: 'input201': free name binder: 5719:5720 got transaction to invalid handle kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'input202' (00000000865fcf0f): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'input202' (00000000865fcf0f): calling ktype release kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input202': free name kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 5724:5731 got reply transaction with no transaction stack binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) binder_transaction: 14 callbacks suppressed binder: 5724:5731 transaction failed 29201/-71, size 0-0 line 2801 netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. binder_release_work: 14 callbacks suppressed binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5725:5733 transaction failed 29201/-28, size 0-549755813888 line 3035 input input203: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5725:5733 ioctl c0306201 20000040 returned -14 kobject: 'loop1' (000000004f61db91): kobject_uevent_env netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input203' (0000000027d754bd): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 5741:5742 got transaction to invalid handle kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 5741:5742 transaction failed 29201/-22, size 0-0 line 2896 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input203' (0000000027d754bd): calling ktype release kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input203': free name binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: undelivered TRANSACTION_ERROR: 29201 netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'input204' (00000000384336e0): kobject_cleanup, parent (null) binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5725:5733 transaction failed 29201/-28, size 0-549755813888 line 3035 uinput: write device info first kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 5753:5754 got reply transaction with no transaction stack kobject: 'input204' (00000000384336e0): calling ktype release binder: 5725:5733 ioctl c0306201 20000040 returned -14 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5753:5754 transaction failed 29201/-71, size 0-0 line 2801 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'input204': free name kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (000000004f61db91): kobject_uevent_env input input206: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder: 5766:5767 unknown command 1205004 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder: 5766:5767 ioctl c0306201 20000040 returned -22 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input206' (000000004f59b51e): kobject_cleanup, parent (null) binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5755:5769 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 5774:5775 unknown command 302015244 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input206' (000000004f59b51e): calling ktype release binder: 5755:5769 ioctl c0306201 20000040 returned -14 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5774:5775 ioctl c0306201 20000040 returned -22 binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'input206': free name binder: 5774:5775 unknown command 302015244 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5774:5775 ioctl c0306201 20000040 returned -22 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' input input208: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'input208' (000000006eeeaa2a): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) binder: 5795:5797 unknown command 302015244 kobject: 'input208' (000000006eeeaa2a): calling ktype release kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5795:5797 ioctl c0306201 20000040 returned -22 binder: 5791:5792 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'input208': free name kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5791:5792 ioctl c0306201 20000040 returned -14 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' input input209: cannot allocate more than FF_MAX_EFFECTS effects binder: 5809:5811 unknown command 1077961490 kobject: 'input209' (00000000b63ab408): kobject_cleanup, parent (null) binder: 5809:5811 ioctl c0306201 20000040 returned -22 binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input209' (00000000b63ab408): calling ktype release kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input209': free name binder: 5817:5818 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5817:5818 unknown command 0 binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5817:5818 ioctl c0306201 20000040 returned -22 kobject: 'input210' (00000000ddaf6855): kobject_cleanup, parent (null) binder: 5822:5823 transaction failed 29201/-28, size 0-549755813888 line 3035 binder: 5822:5823 ioctl c0306201 20000040 returned -14 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input210' (00000000ddaf6855): calling ktype release binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input210': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5832:5833 unknown command 0 binder: 5832:5833 ioctl c0306201 20000040 returned -22 input input211: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input211' (0000000014c21c1a): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'input211' (0000000014c21c1a): calling ktype release kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input211': free name binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'input212' (00000000a18b6703): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5841:5842 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5849:5852 unknown command 0 uinput: write device info first binder: 5841:5842 ioctl c0306201 20000040 returned -14 kobject: 'input212' (00000000a18b6703): calling ktype release kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5849:5852 ioctl c0306201 20000040 returned -22 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input212': free name binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'input213' (000000009d189218): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input213' (000000009d189218): calling ktype release kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input213': free name kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: BC_ACQUIRE_RESULT not supported binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: 5861:5862 ioctl c0306201 20000040 returned -22 kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' input input214: cannot allocate more than FF_MAX_EFFECTS effects binder: 5865:5866 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'input214' (0000000000956385): kobject_cleanup, parent (null) binder: 5865:5866 ioctl c0306201 20000040 returned -14 kobject: 'input214' (0000000000956385): calling ktype release kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input214': free name kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' uinput: write device info first kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input215' (000000004aeb5bb5): kobject_cleanup, parent (null) kobject: 'input215' (000000004aeb5bb5): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input215': free name kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' uinput: write device info first kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space uinput: write device info first binder: 5902:5903 unknown command 0 binder: 5902:5903 ioctl c0306201 20000040 returned -22 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5897:5898 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' uinput: write device info first binder: 5909:5912 DecRefs 0 refcount change on invalid ref 0 ret -22 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: 5909:5912 unknown command 0 binder: 5909:5912 ioctl c0306201 20000040 returned -22 binder: 5909:5912 DecRefs 0 refcount change on invalid ref 0 ret -22 input input219: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input219' (000000005a0182de): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: 5909:5912 unknown command 0 kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5909:5912 ioctl c0306201 20000040 returned -22 binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048) kobject: 'input219' (000000005a0182de): calling ktype release kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input219': free name binder: 5930:5933 BC_FREE_BUFFER u0000000000000000 no match kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 5930:5933 unknown command 0 binder: 5925:5926 ioctl c0306201 20000040 returned -14 input input220: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'input220' (00000000516c9b88): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder: 5930:5933 ioctl c0306201 20000040 returned -22 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input220' (00000000516c9b88): calling ktype release kobject: 'input220': free name kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: BC_ATTEMPT_ACQUIRE not supported kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5956:5957 ioctl c0306201 20000040 returned -14 binder: 5944:5947 ioctl c0306201 20000040 returned -22 input input221: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input221' (00000000a3d6b679): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input221' (00000000a3d6b679): calling ktype release kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input221': free name binder: 5962:5963 BC_DEAD_BINDER_DONE 0000000000000000 not found kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 5962:5963 unknown command 0 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 5965:5966 ioctl c0306201 20000040 returned -14 kobject: 'input222' (00000000977c529c): kobject_cleanup, parent (null) binder: 5962:5963 ioctl c0306201 20000040 returned -22 binder: 5965:5966 ioctl c0306201 20000040 returned -14 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env uinput: write device info first kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input222' (00000000977c529c): calling ktype release kobject: 'input222': free name kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input223' (00000000dc37bfd4): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input223' (00000000dc37bfd4): calling ktype release kobject: 'input223': free name kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 5979:5981 ioctl c0306201 20000040 returned -14 binder: 5983:5984 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' input input224: cannot allocate more than FF_MAX_EFFECTS effects binder: 5983:5984 unknown command 0 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env binder: 5983:5984 ioctl c0306201 20000040 returned -22 kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' input input225: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 5983:5984 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 kobject: 'input224' (00000000d50aae27): kobject_cleanup, parent (null) binder: 5983:5984 unknown command 0 kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 5983:5984 ioctl c0306201 20000040 returned -22 binder: 6002:6003 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input225' (0000000073c1f84f): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input224' (00000000d50aae27): calling ktype release binder: 6002:6003 ioctl c0306201 20000040 returned -14 kobject: 'input224': free name kobject: 'input225' (0000000073c1f84f): calling ktype release kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input225': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: 6012:6013 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 6012:6013 unknown command 0 binder: 6012:6013 ioctl c0306201 20000040 returned -22 uinput: write device info first kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6018:6022 ioctl c0306201 20000040 returned -14 kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 6028:6029 BC_INCREFS_DONE u0000000000000000 no match kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 6028:6029 unknown command 0 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6028:6029 ioctl c0306201 20000040 returned -22 binder: 6037:6039 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env input input227: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input227' (0000000086198927): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): kobject_uevent_env binder: 6048:6049 BC_ACQUIRE_DONE u0000000000000000 no match kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input227' (0000000086198927): calling ktype release kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 6048:6049 unknown command 0 binder: 6052:6053 ioctl c0306201 20000040 returned -14 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6048:6049 ioctl c0306201 20000040 returned -22 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input227': free name kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6063:6064 got reply transaction with no transaction stack kobject: 'input228' (00000000a7d02270): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input228' (00000000a7d02270): calling ktype release kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6065:6067 ioctl c0306201 20000040 returned -14 kobject: 'input228': free name binder: 6065:6067 ioctl c0306201 20000040 returned -14 kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder: 6076:6081 unknown command 1077961490 kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 6076:6081 ioctl c0306201 20000040 returned -22 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' input input229: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input229' (000000002cf0d7ce): kobject_cleanup, parent (null) kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input229' (000000002cf0d7ce): calling ktype release kobject: 'input229': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env binder: 6084:6086 ioctl c0306201 20000040 returned -14 kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env uinput: write device info first kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6084:6086 ioctl c0306201 20000040 returned -14 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input231' (00000000fc42ec9b): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input231' (00000000fc42ec9b): calling ktype release kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input231': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: undelivered TRANSACTION_COMPLETE binder: 6106:6107 ioctl c0306201 20000040 returned -14 input input232: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input232' (000000002e7f1f3c): kobject_cleanup, parent (null) binder: 6117:6118 got reply transaction with no transaction stack kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input232' (000000002e7f1f3c): calling ktype release uinput: write device info first kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input232': free name kobject: 'input233' (0000000097050acf): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input233' (0000000097050acf): calling ktype release binder: 6128:6129 ioctl c0306201 20000040 returned -14 kobject: 'input234' (000000005a4efa61): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input234' (000000005a4efa61): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input233': free name kobject: 'input234': free name kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6135:6137 unknown command -935304448 binder: 6140:6141 ioctl c0306201 20000040 returned -14 binder: 6135:6137 ioctl c0306201 20000040 returned -22 input input235: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 6135:6137 unknown command -935304448 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6135:6137 ioctl c0306201 20000040 returned -22 kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input235' (000000005c82fd8a): kobject_cleanup, parent (null) kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input235' (000000005c82fd8a): calling ktype release kobject: 'input235': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder: 6158:6159 ioctl c0306201 20000040 returned -14 binder: 6156:6157 got transaction to invalid handle kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env input input236: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input236' (00000000a5a08662): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6171:6173 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input236' (00000000a5a08662): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 6174:6176 got transaction to invalid handle kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input236': free name kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder: 6188:6189 ioctl c0306201 20000040 returned -14 binder: 6190:6191 got transaction to invalid handle kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 6188:6189 ioctl c0306201 20000040 returned -14 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env input input238: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input238' (00000000f3c55e2c): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input238' (00000000f3c55e2c): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6210:6211 ioctl c0306201 20000040 returned -14 binder: 6207:6212 got transaction to invalid handle kobject: 'input238': free name kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' input input240: cannot allocate more than FF_MAX_EFFECTS effects binder: 6207:6212 got transaction to invalid handle __nla_parse: 131 callbacks suppressed netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input240' (00000000e04ab3ed): kobject_cleanup, parent (null) netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'input240' (00000000e04ab3ed): calling ktype release netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'input240': free name kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input239' (00000000fbf51670): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'input239' (00000000fbf51670): calling ktype release kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'input239': free name kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input241' (000000005d8f70a3): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input241' (000000005d8f70a3): calling ktype release kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input241': free name kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (000000002259ed43): kobject_uevent_env netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. binder_alloc_new_buf_locked: 21 callbacks suppressed binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space input input242: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6226:6229 got transaction to invalid handle binder_alloc_new_buf_locked: 21 callbacks suppressed binder_alloc: allocated: 1248 (num: 135 largest: 32), free: 11040 (num: 1 largest: 11040) netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'input242' (000000007097ecd7): kobject_cleanup, parent (null) netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: 6226:6229 got transaction to invalid handle binder: 6222:6223 ioctl c0306201 20000040 returned -14 kobject: 'input242' (000000007097ecd7): calling ktype release kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' uinput: write device info first netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'input243' (00000000c79f11d7): kobject_cleanup, parent (null) netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. kobject: 'input242': free name kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'input243' (00000000c79f11d7): calling ktype release kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6245:6247 got transaction to invalid handle kobject: 'input243': free name kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env binder_transaction: 33 callbacks suppressed binder: 6245:6247 transaction failed 29201/-22, size 0-0 line 2896 kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder_alloc: allocated: 1248 (num: 135 largest: 32), free: 11040 (num: 1 largest: 11040) netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. binder: 6241:6244 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 6245:6247 got transaction to invalid handle binder_release_work: 33 callbacks suppressed binder: undelivered TRANSACTION_ERROR: 29201 binder: 6245:6247 transaction failed 29201/-22, size 0-0 line 2896 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env input input244: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: undelivered TRANSACTION_ERROR: 29201 netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. binder: 6241:6244 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input244' (0000000060e3e518): kobject_cleanup, parent (null) kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000004f61db91): kobject_uevent_env kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'input244' (0000000060e3e518): calling ktype release binder: 6254:6255 got transaction to invalid handle binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' binder: 6254:6255 transaction failed 29201/-22, size 0-0 line 2896 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: allocated: 1248 (num: 135 largest: 32), free: 11040 (num: 1 largest: 11040) kobject: 'input244': free name binder: 6241:6244 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6241:6244 ioctl c0306201 20000040 returned -14 input input245: cannot allocate more than FF_MAX_EFFECTS effects binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input245' (000000005921669b): kobject_cleanup, parent (null) binder: 6268:6269 got transaction to invalid handle kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'input245' (000000005921669b): calling ktype release binder: 6268:6269 transaction failed 29201/-22, size 0-0 line 2896 binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space kobject: 'input245': free name kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder_alloc: allocated: 1248 (num: 135 largest: 32), free: 11040 (num: 1 largest: 11040) kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: 6278:6279 transaction failed 29201/-28, size 0-549755813888 line 3035 binder: 6268:6269 got transaction to invalid handle binder: undelivered TRANSACTION_ERROR: 29201 binder: 6278:6279 ioctl c0306201 20000040 returned -14 kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env binder: 6268:6269 transaction failed 29201/-22, size 0-0 line 2896 kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: undelivered TRANSACTION_ERROR: 29201 input input246: cannot allocate more than FF_MAX_EFFECTS effects binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder_alloc: allocated: 1248 (num: 135 largest: 32), free: 11040 (num: 1 largest: 11040) kobject: 'loop5' (000000002259ed43): kobject_uevent_env kobject: 'input246' (000000003b889c90): kobject_cleanup, parent (null) binder: 6290:6291 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' binder: undelivered TRANSACTION_COMPLETE kobject: 'input246' (000000003b889c90): calling ktype release kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'input246': free name kobject: 'loop0' (000000002d872dc8): kobject_uevent_env kobject: 'input247' (00000000d98877f3): kobject_cleanup, parent (null) kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder: 6290:6291 ioctl c0306201 20000040 returned -14 kobject: 'loop5' (000000002259ed43): kobject_uevent_env uinput: write device info first binder: undelivered TRANSACTION_COMPLETE kobject: 'input247' (00000000d98877f3): calling ktype release binder: undelivered TRANSACTION_ERROR: 29201 kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input247': free name kobject: 'input248' (00000000f51012e9): kobject_cleanup, parent (null) kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env kobject: 'input248' (00000000f51012e9): calling ktype release kobject: 'input248': free name kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3' input input249: cannot allocate more than FF_MAX_EFFECTS effects binder: undelivered TRANSACTION_COMPLETE kobject: 'input249' (000000009716a3ed): kobject_cleanup, parent (null) binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: undelivered TRANSACTION_COMPLETE kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env uinput: write device info first kobject: 'input250' (0000000023ecd816): kobject_cleanup, parent (null) kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4' binder_alloc: allocated: 1280 (num: 139 largest: 32), free: 11008 (num: 1 largest: 11008) kobject: 'input249' (000000009716a3ed): calling ktype release kobject: 'input250' (0000000023ecd816): calling ktype release kobject: 'input249': free name binder: 6332:6333 got transaction to invalid handle binder: 6317:6321 transaction failed 29201/-28, size 0-549755813888 line 3035 kobject: 'loop0' (000000002d872dc8): kobject_uevent_env binder: undelivered TRANSACTION_ERROR: 29201 binder: 6317:6321 ioctl c0306201 20000040 returned -14 kobject: 'input250': free name kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0' binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space binder: 6344:6345 got transaction to invalid handle kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env input input251: cannot allocate more than FF_MAX_EFFECTS effects kobject: 'input251' (000000009e87a090): kobject_cleanup, parent (null) kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2' binder_alloc: allocated: 1280 (num: 139 largest: 32), free: 11008 (num: 1 largest: 11008) kobject: 'loop5' (000000002259ed43): kobject_uevent_env binder: 6317:6321 ioctl c0306201 20000040 returned -14