[....] Starting enhanced syslogd: rsyslogd[ 13.001071] audit: type=1400 audit(1512841345.503:5): avc: denied { syslog } for pid=2993 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.342935] audit: type=1400 audit(1512841358.845:6): avc: denied { map } for pid=3135 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-7,10.128.0.37' (ECDSA) to the list of known hosts. [ 32.386824] audit: type=1400 audit(1512841364.889:7): avc: denied { map } for pid=3149 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/09 17:42:45 parsed 1 programs 2017/12/09 17:42:45 executed programs: 0 [ 32.870037] audit: type=1400 audit(1512841365.372:8): avc: denied { map } for pid=3149 comm="syz-execprog" path="/root/syzkaller-shm562601733" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.895626] audit: type=1400 audit(1512841365.380:9): avc: denied { sys_admin } for pid=3154 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.978499] audit: type=1400 audit(1512841365.481:10): avc: denied { sys_chroot } for pid=3156 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.982071] binder: 3157:3158 ioctl 40046205 81 returned -22 [ 32.983176] binder: 3157:3158 ERROR: BC_REGISTER_LOOPER called without request [ 32.983187] binder: 3158 RLIMIT_NICE not set [ 33.009710] binder: 3158 RLIMIT_NICE not set [ 33.023154] binder: release 3157:3158 transaction 2 in, still active [ 33.023166] binder: send failed reply for transaction 2 to 3157:3159 [ 33.027259] binder: 3157:3158 ioctl 40046205 81 returned -22 [ 33.032253] binder: 3157:3158 ERROR: BC_REGISTER_LOOPER called without request [ 33.032265] binder: 3158 RLIMIT_NICE not set [ 33.032394] binder: 3158 RLIMIT_NICE not set [ 33.043604] binder: release 3157:3158 transaction 4 in, still active [ 33.043611] binder: send failed reply for transaction 4 to 3157:3159 [ 33.043614] ------------[ cut here ]------------ [ 33.043618] Unexpected reply error: 29189 [ 33.043718] WARNING: CPU: 0 PID: 23 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 33.043722] Kernel panic - not syncing: panic_on_warn set ... [ 33.043722] [ 33.043733] CPU: 0 PID: 23 Comm: kworker/0:1 Not tainted 4.15.0-rc2+ #214 [ 33.043737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.043743] Workqueue: events binder_deferred_func [ 33.043749] Call Trace: [ 33.043758] dump_stack+0x194/0x257 [ 33.043767] ? arch_local_irq_restore+0x53/0x53 [ 33.043778] ? vsnprintf+0x1ed/0x1900 [ 33.043789] panic+0x1e4/0x41c [ 33.043795] ? refcount_error_report+0x214/0x214 [ 33.043802] ? show_regs_print_info+0x18/0x18 [ 33.043815] ? __warn+0x1c1/0x200 [ 33.043824] ? binder_send_failed_reply+0x13b/0x350 [ 33.043829] __warn+0x1dc/0x200 [ 33.043835] ? binder_send_failed_reply+0x13b/0x350 [ 33.043845] report_bug+0x211/0x2d0 [ 33.043859] fixup_bug.part.11+0x37/0x80 [ 33.043866] do_error_trap+0x2d7/0x3e0 [ 33.043877] ? math_error+0x400/0x400 [ 33.043882] ? vprintk_emit+0x3ea/0x590 [ 33.043890] ? vprintk_emit+0x3ea/0x590 [ 33.043905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.043917] do_invalid_op+0x1b/0x20 [ 33.043924] invalid_op+0x18/0x20 [ 33.043929] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 33.043933] RSP: 0018:ffff8801d9d071d0 EFLAGS: 00010282 [ 33.043939] RAX: dffffc0000000008 RBX: ffff8801d569a600 RCX: ffffffff815a047e [ 33.043943] RDX: 0000000000000000 RSI: 1ffff1003b39e129 RDI: 0000000000000293 [ 33.043947] RBP: ffff8801d9d071f8 R08: 1ffff1003b3a0dcd R09: 0000000000000000 [ 33.043950] R10: 000000000000000b R11: 0000000000000000 R12: ffff8801c4cae280 [ 33.043954] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c55 [ 33.043968] ? vprintk_func+0x5e/0xc0 [ 33.043983] binder_thread_release+0x263/0x540 [ 33.043997] binder_deferred_func+0x567/0x12f0 [ 33.044021] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 33.044031] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 33.044036] ? unwind_dump+0x4d0/0x4d0 [ 33.044042] ? set_next_entity+0x2ed/0xd70 [ 33.044052] ? find_held_lock+0x39/0x1d0 [ 33.044062] ? check_noncircular+0x20/0x20 [ 33.044076] ? lock_acquire+0x1d5/0x580 [ 33.044082] ? process_one_work+0xb2f/0x1be0 [ 33.044089] ? __save_stack_trace+0x6e/0xd0 [ 33.044104] ? __lock_is_held+0xbc/0x140 [ 33.044122] process_one_work+0xbfd/0x1be0 [ 33.044140] ? pwq_dec_nr_in_flight+0x450/0x450 [ 33.044146] ? finish_task_switch+0x1d3/0x740 [ 33.044151] ? finish_task_switch+0x1aa/0x740 [ 33.044184] ? __sched_text_start+0x8/0x8 [ 33.044195] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 33.044205] ? check_noncircular+0x20/0x20 [ 33.044216] ? find_held_lock+0x39/0x1d0 [ 33.044234] ? lock_acquire+0x1d5/0x580 [ 33.044239] ? worker_thread+0x4a3/0x1990 [ 33.044252] ? lock_release+0xda0/0xda0 [ 33.044263] ? check_noncircular+0x20/0x20 [ 33.044276] ? do_raw_spin_trylock+0x190/0x190 [ 33.044306] worker_thread+0x223/0x1990 [ 33.044346] ? process_one_work+0x1be0/0x1be0 [ 33.044361] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.044373] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.044384] ? trace_hardirqs_on+0xd/0x10 [ 33.044393] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.044404] ? finish_task_switch+0x1d3/0x740 [ 33.044412] ? finish_task_switch+0x1aa/0x740 [ 33.044429] ? copy_overflow+0x20/0x20 [ 33.044455] ? __schedule+0x8f3/0x2060 [ 33.044462] ? check_noncircular+0x20/0x20 [ 33.044484] ? find_held_lock+0x39/0x1d0 [ 33.044514] ? find_held_lock+0x39/0x1d0 [ 33.044540] ? lock_downgrade+0x980/0x980 [ 33.044552] ? default_wake_function+0x30/0x50 [ 33.044575] ? __schedule+0x2060/0x2060 [ 33.044584] ? do_wait_intr_irq+0x3e0/0x3e0 [ 33.044599] ? do_raw_spin_trylock+0x190/0x190 [ 33.044612] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 33.044624] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.044636] ? trace_hardirqs_on+0xd/0x10 [ 33.044646] ? __kthread_parkme+0x175/0x240 [ 33.044661] kthread+0x37a/0x440 [ 33.044671] ? process_one_work+0x1be0/0x1be0 [ 33.044678] ? kthread_stop+0x7b0/0x7b0 [ 33.044692] ret_from_fork+0x24/0x30 [ 33.050883] Dumping ftrace buffer: [ 33.050926] (ftrace buffer empty) [ 33.050930] Kernel Offset: disabled [ 33.478133] Rebooting in 86400 seconds..