[....] Starting enhanced syslogd: rsyslogd[ 11.517527] audit: type=1400 audit(1514787038.716:5): avc: denied { syslog } for pid=3000 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.959903] audit: type=1400 audit(1514787044.158:6): avc: denied { map } for pid=3139 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. [ 23.116422] audit: type=1400 audit(1514787050.315:7): avc: denied { map } for pid=3153 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/01 06:10:50 parsed 1 programs 2018/01/01 06:10:50 executed programs: 0 [ 23.239577] audit: type=1400 audit(1514787050.438:8): avc: denied { map } for pid=3153 comm="syz-execprog" path="/root/syzkaller-shm299482552" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 23.265228] audit: type=1400 audit(1514787050.461:9): avc: denied { map } for pid=3161 comm="syz-executor0" path="/dev/binder0" dev="devtmpfs" ino=8957 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 23.269423] binder: send failed reply for transaction 2 to 3161:3162 [ 23.296487] audit: type=1400 audit(1514787050.461:10): avc: denied { set_context_mgr } for pid=3161 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 23.309292] binder: send failed reply for transaction 4 to 3161:3162 [ 23.309295] ------------[ cut here ]------------ [ 23.309297] Unexpected reply error: 29189 [ 23.309403] WARNING: CPU: 0 PID: 1410 at drivers/android/binder.c:1998 binder_send_failed_reply+0x13b/0x390 [ 23.309406] Kernel panic - not syncing: panic_on_warn set ... [ 23.309406] [ 23.309412] CPU: 0 PID: 1410 Comm: kworker/0:2 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 23.309415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.309421] Workqueue: events binder_deferred_func [ 23.309425] Call Trace: [ 23.309433] dump_stack+0x194/0x257 [ 23.309441] ? arch_local_irq_restore+0x53/0x53 [ 23.309452] ? vsnprintf+0x1ed/0x1900 [ 23.309463] panic+0x1e4/0x41c [ 23.309469] ? refcount_error_report+0x214/0x214 [ 23.309477] ? show_regs_print_info+0x18/0x18 [ 23.309488] ? __warn+0x1c1/0x200 [ 23.309496] ? binder_send_failed_reply+0x13b/0x390 [ 23.309500] __warn+0x1dc/0x200 [ 23.309505] ? binder_send_failed_reply+0x13b/0x390 [ 23.309512] report_bug+0x211/0x2d0 [ 23.309532] fixup_bug.part.11+0x37/0x80 [ 23.309538] do_error_trap+0x2d7/0x3e0 [ 23.309543] ? __down_trylock_console_sem+0x10d/0x1e0 [ 23.309552] ? math_error+0x400/0x400 [ 23.309556] ? vprintk_emit+0x3ea/0x590 [ 23.309563] ? vprintk_emit+0x3ea/0x590 [ 23.309576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 23.309586] do_invalid_op+0x1b/0x20 [ 23.309592] invalid_op+0x22/0x40 [ 23.309596] RIP: 0010:binder_send_failed_reply+0x13b/0x390 [ 23.309598] RSP: 0018:ffff8801d3fef128 EFLAGS: 00010286 [ 23.309603] RAX: dffffc0000000008 RBX: ffff8801d3bac400 RCX: ffffffff8159f9ce [ 23.309606] RDX: 0000000000000000 RSI: 1ffff1003a7d1925 RDI: 0000000000000293 [ 23.309608] RBP: ffff8801d3fef150 R08: 1ffff1003a7fddb8 R09: 0000000000000000 [ 23.309611] R10: ffff8801d3feefa0 R11: 0000000000000000 R12: ffff8801cf0f5a80 [ 23.309613] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c59 [ 23.309626] ? vprintk_func+0x5e/0xc0 [ 23.309636] ? binder_send_failed_reply+0x13b/0x390 [ 23.309644] binder_cleanup_transaction+0xd2/0x140 [ 23.309651] binder_release_work+0x340/0x490 [ 23.309657] ? lock_downgrade+0x980/0x980 [ 23.309665] ? kzalloc.constprop.50+0x20/0x20 [ 23.309675] ? do_raw_spin_trylock+0x190/0x190 [ 23.309685] ? kfree+0xf0/0x260 [ 23.309689] ? binder_deferred_func+0xed7/0x1340 [ 23.309698] ? _raw_spin_unlock+0x22/0x30 [ 23.309706] binder_deferred_func+0xe42/0x1340 [ 23.309722] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 23.309731] ? debug_object_deactivate+0x364/0x560 [ 23.309737] ? lock_downgrade+0x980/0x980 [ 23.309745] ? lock_release+0xa40/0xa40 [ 23.309753] ? check_noncircular+0x20/0x20 [ 23.309765] ? lock_acquire+0x1d5/0x580 [ 23.309769] ? lock_acquire+0x1d5/0x580 [ 23.309776] ? process_one_work+0xb01/0x1af0 [ 23.309791] ? __lock_is_held+0xb6/0x140 [ 23.309808] process_one_work+0xbbf/0x1af0 [ 23.309813] ? trace_hardirqs_on+0xd/0x10 [ 23.309827] ? pwq_dec_nr_in_flight+0x450/0x450 [ 23.309842] ? __schedule+0x8f3/0x2060 [ 23.309847] ? update_curr+0x47b/0xa60 [ 23.309860] ? check_noncircular+0x20/0x20 [ 23.309865] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.309871] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.309882] ? retint_kernel+0x10/0x10 [ 23.309902] ? lock_acquire+0x1d5/0x580 [ 23.309906] ? lock_acquire+0x1d5/0x580 [ 23.309910] ? worker_thread+0x4a3/0x1990 [ 23.309916] ? lock_downgrade+0x980/0x980 [ 23.309924] ? lock_release+0xa40/0xa40 [ 23.309930] ? retint_kernel+0x10/0x10 [ 23.309937] ? do_raw_spin_trylock+0x190/0x190 [ 23.309954] worker_thread+0x223/0x1990 [ 23.309977] ? process_one_work+0x1af0/0x1af0 [ 23.309985] ? _raw_spin_unlock_irq+0x27/0x70 [ 23.309992] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.309998] ? trace_hardirqs_on+0xd/0x10 [ 23.310005] ? mmdrop+0x18/0x30 [ 23.310011] ? finish_task_switch+0x1f6/0x740 [ 23.310019] ? copy_overflow+0x20/0x20 [ 23.310034] ? __schedule+0x8f3/0x2060 [ 23.310059] ? find_held_lock+0x35/0x1d0 [ 23.310071] ? find_held_lock+0x35/0x1d0 [ 23.310083] ? complete+0x62/0x80 [ 23.310096] ? __schedule+0x2060/0x2060 [ 23.310100] ? do_wait_intr_irq+0x3e0/0x3e0 [ 23.310104] ? __lockdep_init_map+0xe4/0x650 [ 23.310111] ? do_raw_spin_trylock+0x190/0x190 [ 23.310115] ? lockdep_init_map+0x9/0x10 [ 23.310120] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 23.310127] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.310133] ? trace_hardirqs_on+0xd/0x10 [ 23.310138] ? __kthread_parkme+0x175/0x240 [ 23.310147] kthread+0x33c/0x400 [ 23.310152] ? process_one_work+0x1af0/0x1af0 [ 23.310155] ? kthread_stop+0x7a0/0x7a0 [ 23.310162] ret_from_fork+0x24/0x30 [ 23.319651] Dumping ftrace buffer: [ 23.319681] (ftrace buffer empty) [ 23.319684] Kernel Offset: disabled [ 23.772842] Rebooting in 86400 seconds..