netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. ===================================== [ BUG: bad unlock balance detected! ] 4.9.67-gf26d3c7 #106 Not tainted ------------------------------------- syz-executor6/16997 is trying to release lock ([ 107.655551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pig=17004 comm=syz-executor4 netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. mrt_lock[ 107.682025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pig=17004 comm=syz-executor4 ) at: but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor6/16997: #0: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 fs/seq_file.c:178 stack backtrace: CPU: 1 PID: 16997 Comm: syz-executor6 Not tainted 4.9.67-gf26d3c7 #106 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d74a78e8 ffffffff81d906e9 ffffffff849ae8f8 ffff8801c6f98000 ffffffff834dec54 ffffffff849ae8f8 ffff8801c6f98888 ffff8801d74a7918 ffffffff812353f4 dffffc0000000000 ffffffff849ae8f8 00000000ffffffff Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398 [] __lock_release kernel/locking/lockdep.c:3540 [inline] [] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775 [] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline] [] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255 [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 [] seq_read+0xa83/0x1290 fs/seq_file.c:283 [] proc_reg_read+0xef/0x170 fs/proc/inode.c:202 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_readv+0x84/0xc0 fs/read_write.c:898 [] do_readv+0xe6/0x250 fs/read_write.c:924 [] SYSC_readv fs/read_write.c:1011 [inline] [] SyS_readv+0x27/0x30 fs/read_write.c:1008 [] entry_SYSCALL_64_fastpath+0x23/0xc6 device lo entered promiscuous mode tmpfs: No value for mount option '‹' tmpfs: No value for mount option '‹' sock: process `syz-executor6' is using obsolete setsockopt SO_BSDCOMPAT netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. IPv6: NLM_F_REPLACE set, but no existing node found! netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. IPv6: NLM_F_REPLACE set, but no existing node found! : renamed from syz3 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17383 comm=syz-executor7 binder: 17431:17438 ioctl 2403 ffff returned -22 device gre0 entered promiscuous mode device gre0 entered promiscuous mode binder: 17431:17444 ioctl 8004e500 20005000 returned -22 binder: 17431:17444 ioctl 401845ef 20004000 returned -22 binder: 17431:17482 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 binder: 17431:17444 ioctl 2403 ffff returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 17431:17444 ioctl 40046207 0 returned -16 binder: 17431:17444 ioctl 8004e500 20005000 returned -22 binder: 17431:17482 ioctl 401845ef 20004000 returned -22 binder: 17431:17507 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 device gre0 entered promiscuous mode IPVS: length: 24 != 8 IPv6: NLM_F_REPLACE set, but no existing node found! IPVS: Creating netns size=2536 id=29 device gre0 entered promiscuous mode binder: 17652:17661 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 binder: 17652:17661 DecRefs 0 refcount change on invalid ref 3 ret -22 binder: 17652:17661 got reply transaction with bad transaction stack, transaction 213 has target 17652:0 binder: 17652:17686 BC_DEAD_BINDER_DONE 0000000000000002 not found binder: 17652:17686 BC_FREE_BUFFER u0000000000000000 no match binder: 17652:17661 transaction failed 29201/-71, size 48-56 line 2938 binder: tried to use weak ref as strong ref binder: 17652:17686 got transaction to invalid handle binder: 17652:17686 transaction failed 29201/-22, size 0-32 line 3007 binder_alloc: binder_alloc_mmap_handler: 17652 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 17652:17661 ioctl 40046207 0 returned -16 binder_alloc: 17652: binder_alloc_buf, no vma binder: 17652:17686 transaction failed 29189/-3, size 80-16 line 3130 binder: 17652:17709 BC_DEAD_BINDER_DONE 0000000000000002 not found binder: 17652:17709 BC_FREE_BUFFER u0000000000000000 no match binder: 17652:17709 got transaction to invalid handle binder: 17652:17709 transaction failed 29201/-22, size 0-32 line 3007 binder: 17652:17661 IncRefs 0 refcount change on invalid ref 2 ret -22 binder: 17652:17661 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 binder: 17652:17661 DecRefs 0 refcount change on invalid ref 3 ret -22 binder: 17652:17661 got reply transaction with no transaction stack binder: 17652:17661 transaction failed 29201/-71, size 48-56 line 2923 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 17652:17661 transaction 213 out, still active binder: send failed reply for transaction 213, target dead PF_BRIDGE: RTM_SETLINK with unknown ifindex SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6419 sclass=netlink_route_socket pig=17743 comm=syz-executor7 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=17744 comm=syz-executor2 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17744 comm=syz-executor2 PF_BRIDGE: RTM_SETLINK with unknown ifindex nla_parse: 1 callbacks suppressed netlink: 21 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 21 bytes leftover after parsing attributes in process `syz-executor4'. device  entered promiscuous mode device  left promiscuous mode binder: 17859:17860 BC_DEAD_BINDER_DONE 0000000000000003 not found binder: 17859:17860 BC_INCREFS_DONE u000000002011a000 no match binder: 17859:17860 got transaction with invalid parent offset or type binder: 17859:17860 transaction failed 29201/-22, size 32-24 line 3253 binder: 17859:17860 got transaction with unaligned buffers size, 58534 binder: 17859:17860 transaction failed 29201/-22, size 0-40 line 3175 binder: BINDER_SET_CONTEXT_MGR already set binder: 17859:17867 ioctl 40046207 0 returned -16 binder: 17859:17860 BC_DEAD_BINDER_DONE 0000000000000003 not found binder: 17859:17860 BC_INCREFS_DONE u000000002011a000 no match binder_alloc: 17859: binder_alloc_buf, no vma binder: 17859:17860 transaction failed 29189/-3, size 32-24 line 3130 binder_alloc: 17859: binder_alloc_buf, no vma binder: 17859:17867 transaction failed 29189/-3, size 0-40 line 3130 device lo left promiscuous mode binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 netlink: 72 bytes leftover after parsing attributes in process `syz-executor0'. tmpfs: No value for mount option 'ij' netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 72 bytes leftover after parsing attributes in process `syz-executor0'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor6'. device lo entered promiscuous mode netlink: 1 bytes leftover after parsing attributes in process `syz-executor6'. tmpfs: No value for mount option 'ij' qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev device lo left promiscuous mode netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. binder: 17995:18006 ERROR: BC_REGISTER_LOOPER called without request binder: 17995:18006 ioctl c0306201 20008fd0 returned -14 binder_alloc: 17995: binder_alloc_buf, no vma binder: 17995:18025 transaction failed 29189/-3, size 0-0 line 3130 binder_alloc: binder_alloc_mmap_handler: 17995 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 17995:18041 ioctl 40046207 0 returned -16 binder: 17995:18025 ERROR: BC_REGISTER_LOOPER called without request binder: 17995:18025 ioctl c0306201 20008fd0 returned -14 binder_alloc: 17995: binder_alloc_buf, no vma binder: 17995:18025 transaction failed 29189/-3, size 0-0 line 3130 binder: 18051:18054 got transaction with invalid parent offset binder: 18051:18054 transaction failed 29201/-22, size 80-32 line 3315 binder_alloc: binder_alloc_mmap_handler: 18051 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 18051:18054 ioctl 40046207 0 returned -16 binder_alloc: 18051: binder_alloc_buf, no vma binder: 18051:18056 transaction failed 29189/-3, size 80-32 line 3130 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. sg_write: data in/out 327644/32 bytes for SCSI command 0x4-- guessing data in; program syz-executor7 not setting count and/or reply_len properly IPVS: Creating netns size=2536 id=30 pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads loop_reread_partitions: partition scan of loop0 (2°]€fI¸Òæ¶Ì”B±!S,›ùDÏ') failed (rc=-13) binder: 18319:18320 ioctl c0306201 20009fd0 returned -11 binder: 18319:18320 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 18319:18320 unknown command 0 binder: 18319:18320 ioctl c0306201 20001fd0 returned -22 loop_reread_partitions: partition scan of loop0 () failed (rc=-13) binder: 18319:18320 ioctl c0306201 20009fd0 returned -11 binder: 18319:18342 DecRefs 0 refcount change on invalid ref 4 ret -22 binder: 18319:18342 unknown command 0 binder: 18319:18342 ioctl c0306201 20001fd0 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 18319:18352 ioctl 40046207 0 returned -16 sock: sock_set_timeout: `syz-executor6' (pid 18354) tries to set negative timeout device lo left promiscuous mode sock: sock_set_timeout: `syz-executor6' (pid 18315) tries to set negative timeout device lo entered promiscuous mode device lo left promiscuous mode sd 0:0:1:0: [sg0] tag#311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#311 CDB: Test Unit Ready sd 0:0:1:0: [sg0] tag#311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#311 CDB[10]: 00 00 00 00 10 27 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sd 0:0:1:0: [sg0] tag#311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 binder: 18583:18584 ERROR: BC_REGISTER_LOOPER called without request binder: 18583:18584 DecRefs 0 refcount change on invalid ref 2 ret -22 device gre0 entered promiscuous mode binder_alloc: binder_alloc_mmap_handler: 18583 20000000-20002000 already mapped failed -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 18583:18620 ioctl 40046207 0 returned -16 binder: 18583:18603 ERROR: BC_REGISTER_LOOPER called without request binder_alloc: 18583: binder_alloc_buf, no vma binder: 18583:18603 transaction failed 29189/-3, size 0-0 line 3130 binder: 18583:18620 DecRefs 0 refcount change on invalid ref 2 ret -22 binder: 18650:18652 ioctl c00c642d 2000b000 returned -22 binder: 18650:18652 ERROR: BC_REGISTER_LOOPER called without request binder: undelivered TRANSACTION_ERROR: 29189 binder: release 18583:18584 transaction 236 in, still active binder: send failed reply for transaction 236 to 18583:18603 binder: 18650:18652 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_COMPLETE binder: undelivered transaction 240, process died. binder: 18650:18671 ioctl c00c642d 2000b000 returned -22 binder: 18650:18652 ERROR: BC_REGISTER_LOOPER called without request binder: 18650:18671 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 binder: send failed reply for transaction 244 to 18650:18671 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 device gre0 entered promiscuous mode syz-executor3: vmalloc: allocation failure: 17179082768 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) CPU: 0 PID: 18735 Comm: syz-executor3 Not tainted 4.9.67-gf26d3c7 #106 selinux_nlmsg_perm: 8 callbacks suppressed SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3131 sclass=netlink_xfrm_socket pig=18739 comm=syz-executor0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a5c2f880 ffffffff81d906e9 1ffff10034b85f13 ffff8801cff21800 ffffffff83ab7dc0 0000000000000001 0000000000400000 ffff8801a5c2f990 ffffffff8144ea02 024000c20bc97f83 0000000041b58ab3 ffffffff841913b5 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] warn_alloc+0x212/0x240 mm/page_alloc.c:3063 [] __vmalloc_node_range+0x3f5/0x5f0 mm/vmalloc.c:1722 [] __vmalloc_node mm/vmalloc.c:1744 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1758 [inline] [] vmalloc+0x5b/0x70 mm/vmalloc.c:1773 [] xt_alloc_entry_offsets+0x41/0x60 net/netfilter/x_tables.c:722 [] translate_table+0x2da/0x1cd0 net/ipv4/netfilter/arp_tables.c:549 [] do_replace net/ipv4/netfilter/arp_tables.c:986 [inline] [] do_arpt_set_ctl+0x2b7/0x650 net/ipv4/netfilter/arp_tables.c:1465 [] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:114 [] ip_setsockopt+0xa1/0xb0 net/ipv4/ip_sockglue.c:1248 [] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2736 [] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1771 [inline] [] SyS_setsockopt+0x160/0x250 net/socket.c:1750 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Mem-Info: active_anon:101822 inactive_anon:36 isolated_anon:0 active_file:3846 inactive_file:6890 isolated_file:0 unevictable:0 dirty:16 writeback:4 unstable:0 slab_reclaimable:7544 slab_unreclaimable:53372 mapped:22820 shmem:45 pagetables:750 bounce:0 free:1435636 free_pcp:371 free_cma:0 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3131 sclass=netlink_xfrm_socket pig=18745 comm=syz-executor0 Node 0 active_anon:384648kB inactive_anon:144kB active_file:15384kB inactive_file:27576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91280kB dirty:64kB writeback:52kB shmem:180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 61440kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT syz-executor3: vmalloc: allocation failure: 17179082768 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) CPU: 1 PID: 18771 Comm: syz-executor3 Not tainted 4.9.67-gf26d3c7 #106 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a8c57880 ffffffff81d906e9 1ffff1003518af13 ffff8801c4279800 ffffffff83ab7dc0 0000000000000001 0000000000400000 ffff8801a8c57990 ffffffff8144ea02 024000c23ad3efbc 0000000041b58ab3 ffffffff841913b5 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] warn_alloc+0x212/0x240 mm/page_alloc.c:3063 [] __vmalloc_node_range+0x3f5/0x5f0 mm/vmalloc.c:1722 [] __vmalloc_node mm/vmalloc.c:1744 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1758 [inline] [] vmalloc+0x5b/0x70 mm/vmalloc.c:1773 [] xt_alloc_entry_offsets+0x41/0x60 net/netfilter/x_tables.c:722 [] translate_table+0x2da/0x1cd0 net/ipv4/netfilter/arp_tables.c:549 [] do_replace net/ipv4/netfilter/arp_tables.c:986 [inline] [] do_arpt_set_ctl+0x2b7/0x650 net/ipv4/netfilter/arp_tables.c:1465 [] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:114 [] ip_setsockopt+0xa1/0xb0 net/ipv4/ip_sockglue.c:1248 [] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2736 [] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1771 [inline] [] SyS_setsockopt+0x160/0x250 net/socket.c:1750 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Mem-Info: active_anon:100782 inactive_anon:36 isolated_anon:0 active_file:3846 inactive_file:6894 isolated_file:0 unevictable:0 dirty:37 writeback:13 unstable:0 slab_reclaimable:7556 slab_unreclaimable:53696 mapped:22820 shmem:45 pagetables:739 bounce:0 free:1436475 free_pcp:307 free_cma:0 Node 0 active_anon:403128kB inactive_anon:144kB active_file:15384kB inactive_file:27576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91280kB dirty:148kB writeback:52kB shmem:180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 59392kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB DMA32 free:2981148kB min:30600kB low:38248kB high:45896kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2981844kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:696kB local_pcp:648kB free_cma:0kB Normal free:2748844kB min:36816kB low:46020kB high:55224kB active_anon:403128kB inactive_anon:144kB active_file:15384kB inactive_file:27576kB unevictable:0kB writepending:52kB present:4718592kB managed:3585220kB mlocked:0kB slab_reclaimable:30224kB slab_unreclaimable:214784kB kernel_stack:5888kB pagetables:2956kB bounce:0kB free_pcp:532kB local_pcp:272kB free_cma:0kB DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 10784 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 320236 pages reserved binder: 18782:18784 got reply transaction with no transaction stack binder: 18782:18784 transaction failed 29201/-71, size 2-6181628549 line 2923 DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2910 6411 6411 DMA32 free:2981148kB min:30600kB low:38248kB high:45896kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2981844kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:696kB local_pcp:48kB free_cma:0kB lowmem_reserve[]: 0 0 3501 3501 Normal free:2786256kB min:36816kB low:46020kB high:55224kB active_anon:365648kB inactive_anon:144kB active_file:15384kB inactive_file:27600kB unevictable:0kB writepending:88kB present:4718592kB managed:3585220kB mlocked:0kB slab_reclaimable:30248kB slab_unreclaimable:215652kB kernel_stack:5184kB pagetables:2596kB bounce:0kB free_pcp:1076kB local_pcp:436kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB DMA32: 1*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (M) 726*4096kB (M) = 2981148kB Normal: 1460*4kB (UME) 274*8kB (UM) 123*16kB (UM) 351*32kB (UM) 733*64kB (UME) 203*128kB (UME) 46*256kB (UME) 17*512kB (UM) 1*1024kB (E) 4*2048kB (UM) 650*4096kB (UM) = 2786224kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 10792 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 320236 pages reserved binder: 18892:18899 ioctl 540f 2034cffc returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 18892:18919 ioctl 40046207 0 returned -16 binder: 18892:18919 ioctl 540f 2034cffc returned -22 binder: 18978:18986 tried to acquire reference to desc 0, got 1 instead binder: 18978:18984 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 binder: 18978:18980 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 binder: 18988:19006 ERROR: BC_REGISTER_LOOPER called without request binder: undelivered death notification, 0000000000000000 binder_alloc: 18988: binder_alloc_buf failed to map page at 20000000 in userspace binder: 18988:19015 transaction failed 29201/-12, size 0-0 line 3130 binder: 19036:19039 ERROR: BC_REGISTER_LOOPER called without request binder: BINDER_SET_CONTEXT_MGR already set binder: 18988:19026 ERROR: BC_REGISTER_LOOPER called without request binder: 18988:19015 ioctl 40046207 0 returned -16 binder_alloc: 18988: binder_alloc_buf, no vma Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable binder: BINDER_SET_CONTEXT_MGR already set binder: 19036:19039 ioctl 40046207 0 returned -16 binder: 19036:19050 ERROR: BC_REGISTER_LOOPER called without request binder_alloc: 19036: binder_alloc_buf, no vma binder: 19036:19050 transaction failed 29189/-3, size 0-0 line 3130 binder: 19036:19039 got reply transaction with no transaction stack binder: 19036:19039 transaction failed 29201/-71, size 24-8 line 2923 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_COMPLETE binder: undelivered transaction 256, process died. binder: 18988:19049 transaction failed 29189/-3, size 0-0 line 3130 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 device ƒ entered promiscuous mode device ƒ left promiscuous mode Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable nla_parse: 9 callbacks suppressed netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. loop_reread_partitions: partition scan of loop0 (2°]€fI¸Òæ¶Ì”B±!S,›ùDÏ') failed (rc=-13) loop_reread_partitions: partition scan of loop0 () failed (rc=-13) netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. IPv6: NLM_F_REPLACE set, but no existing node found! netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. IPv6: NLM_F_REPLACE set, but no existing node found! device gre0 entered promiscuous mode : renamed from syz0 IPVS: Creating netns size=2536 id=31 IPVS: Creating netns size=2536 id=32