INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-4,10.128.0.8' (ECDSA) to the list of known hosts. 2017/12/07 14:02:51 parsed 1 programs 2017/12/07 14:02:51 executed programs: 0 syzkaller login: [ 128.249766] binder: 3102:3103 ioctl 40046205 3 returned -22 [ 128.258166] binder: send failed reply for transaction 2 to 3102:3103 [ 128.260437] binder: 3102:3104 ioctl 40046205 3 returned -22 [ 128.275703] binder: release 3102:3103 transaction 4 out, still active [ 128.280250] binder: 3105:3106 ioctl 40046205 3 returned -22 [ 128.280424] binder: BINDER_SET_CONTEXT_MGR already set [ 128.280430] binder: 3105:3106 ioctl 40046207 0 returned -16 [ 128.280560] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.280579] binder: 3105:3106 transaction failed 29189/-3, size 0-0 line 2890 [ 128.288462] binder: 3105:3107 ioctl 40046205 3 returned -22 [ 128.291924] binder: BINDER_SET_CONTEXT_MGR already set [ 128.291928] binder: 3105:3106 ioctl 40046207 0 returned -16 [ 128.307135] binder: 3108:3109 ioctl 40046205 3 returned -22 [ 128.307306] binder: BINDER_SET_CONTEXT_MGR already set [ 128.307310] binder: 3108:3109 ioctl 40046207 0 returned -16 [ 128.307421] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.307432] binder: 3108:3109 transaction failed 29189/-3, size 0-0 line 2890 [ 128.314818] binder: 3108:3110 ioctl 40046205 3 returned -22 [ 128.318309] binder: BINDER_SET_CONTEXT_MGR already set [ 128.318315] binder: 3108:3109 ioctl 40046207 0 returned -16 [ 128.333136] binder: 3111:3112 ioctl 40046205 3 returned -22 [ 128.333307] binder: BINDER_SET_CONTEXT_MGR already set [ 128.333311] binder: 3111:3112 ioctl 40046207 0 returned -16 [ 128.333420] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.333431] binder: 3111:3112 transaction failed 29189/-3, size 0-0 line 2890 [ 128.340862] binder: 3111:3113 ioctl 40046205 3 returned -22 [ 128.344274] binder: BINDER_SET_CONTEXT_MGR already set [ 128.344279] binder: 3111:3112 ioctl 40046207 0 returned -16 [ 128.359150] binder: 3114:3115 ioctl 40046205 3 returned -22 [ 128.359323] binder: BINDER_SET_CONTEXT_MGR already set [ 128.359327] binder: 3114:3115 ioctl 40046207 0 returned -16 [ 128.359435] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.359446] binder: 3114:3115 transaction failed 29189/-3, size 0-0 line 2890 [ 128.366878] binder: 3114:3116 ioctl 40046205 3 returned -22 [ 128.370307] binder: BINDER_SET_CONTEXT_MGR already set [ 128.370311] binder: 3114:3115 ioctl 40046207 0 returned -16 [ 128.384894] binder: 3117:3118 ioctl 40046205 3 returned -22 [ 128.385094] binder: BINDER_SET_CONTEXT_MGR already set [ 128.385099] binder: 3117:3118 ioctl 40046207 0 returned -16 [ 128.385207] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.385219] binder: 3117:3118 transaction failed 29189/-3, size 0-0 line 2890 [ 128.392642] binder: 3117:3119 ioctl 40046205 3 returned -22 [ 128.396056] binder: BINDER_SET_CONTEXT_MGR already set [ 128.396061] binder: 3117:3118 ioctl 40046207 0 returned -16 [ 128.410694] binder: 3120:3121 ioctl 40046205 3 returned -22 [ 128.410865] binder: BINDER_SET_CONTEXT_MGR already set [ 128.410868] binder: 3120:3121 ioctl 40046207 0 returned -16 [ 128.410977] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.410989] binder: 3120:3121 transaction failed 29189/-3, size 0-0 line 2890 [ 128.418405] binder: 3120:3122 ioctl 40046205 3 returned -22 [ 128.421806] binder: BINDER_SET_CONTEXT_MGR already set [ 128.421811] binder: 3120:3121 ioctl 40046207 0 returned -16 [ 128.436463] binder: 3123:3124 ioctl 40046205 3 returned -22 [ 128.436638] binder: BINDER_SET_CONTEXT_MGR already set [ 128.436642] binder: 3123:3124 ioctl 40046207 0 returned -16 [ 128.436750] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.436762] binder: 3123:3124 transaction failed 29189/-3, size 0-0 line 2890 [ 128.444171] binder: 3123:3125 ioctl 40046205 3 returned -22 [ 128.447576] binder: BINDER_SET_CONTEXT_MGR already set [ 128.447580] binder: 3123:3124 ioctl 40046207 0 returned -16 [ 128.462322] binder: 3126:3127 ioctl 40046205 3 returned -22 [ 128.462491] binder: BINDER_SET_CONTEXT_MGR already set [ 128.462495] binder: 3126:3127 ioctl 40046207 0 returned -16 [ 128.462603] binder_alloc: 3102: binder_alloc_buf, no vma [ 128.462614] binder: 3126:3127 transaction failed 29189/-3, size 0-0 line 2890 [ 128.470134] binder: 3126:3128 ioctl 40046205 3 returned -22 [ 128.473553] binder: BINDER_SET_CONTEXT_MGR already set [ 128.473558] binder: 3126:3127 ioctl 40046207 0 returned -16 [ 128.649601] binder: undelivered TRANSACTION_COMPLETE [ 128.654753] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.660192] binder: undelivered TRANSACTION_COMPLETE [ 128.665636] binder: send failed reply for transaction 4, target dead [ 128.672921] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.677169] binder: 3129:3130 ioctl 40046205 3 returned -22 [ 128.684079] binder: send failed reply for transaction 14 to 3129:3130 [ 128.684918] binder: 3129:3131 ioctl 40046205 3 returned -22 [ 128.696387] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.701857] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.707356] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.712833] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.718321] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.723794] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.729272] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.734774] binder: send failed reply for transaction 16 to 3129:3130 [ 128.741346] ------------[ cut here ]------------ [ 128.746086] Unexpected reply error: 29189 [ 128.750310] WARNING: CPU: 1 PID: 1406 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 128.760152] Kernel panic - not syncing: panic_on_warn set ... [ 128.760152] [ 128.767478] CPU: 1 PID: 1406 Comm: kworker/1:2 Not tainted 4.15.0-rc2+ #211 [ 128.774538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.783865] Workqueue: events binder_deferred_func [ 128.788759] Call Trace: [ 128.791312] dump_stack+0x194/0x257 [ 128.794908] ? arch_local_irq_restore+0x53/0x53 [ 128.799546] ? vsnprintf+0x1ed/0x1900 [ 128.803319] panic+0x1e4/0x41c [ 128.806476] ? refcount_error_report+0x214/0x214 [ 128.811199] ? show_regs_print_info+0x18/0x18 [ 128.815667] ? __warn+0x1c1/0x200 [ 128.819090] ? binder_send_failed_reply+0x13b/0x350 [ 128.824070] __warn+0x1dc/0x200 [ 128.827315] ? console_unlock+0x983/0xd80 [ 128.831428] ? binder_send_failed_reply+0x13b/0x350 [ 128.836414] report_bug+0x211/0x2d0 [ 128.840015] fixup_bug.part.11+0x37/0x80 [ 128.844043] do_error_trap+0x2d7/0x3e0 [ 128.847895] ? __down_trylock_console_sem+0x10d/0x1e0 [ 128.853052] ? math_error+0x400/0x400 [ 128.856819] ? vprintk_emit+0x3ea/0x590 [ 128.860763] ? vprintk_emit+0x3ea/0x590 [ 128.864711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 128.869525] do_invalid_op+0x1b/0x20 [ 128.873205] invalid_op+0x18/0x20 [ 128.876620] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 128.882206] RSP: 0018:ffff8801d2b170c8 EFLAGS: 00010286 [ 128.887534] RAX: dffffc0000000008 RBX: ffff8801d78bb800 RCX: ffffffff815a047e [ 128.894772] RDX: 0000000000000000 RSI: 1ffff1003a562dd4 RDI: ffff8801d2b16dd0 [ 128.902007] RBP: ffff8801d2b170f0 R08: 1ffff1003a562d96 R09: 0000000000000000 [ 128.909241] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ccaf4300 [ 128.916477] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c39 [ 128.923724] ? vprintk_func+0x5e/0xc0 [ 128.927496] ? binder_send_failed_reply+0x13b/0x350 [ 128.932479] binder_cleanup_transaction+0xd2/0x140 [ 128.937375] binder_release_work+0x340/0x490 [ 128.941751] ? kzalloc.constprop.53+0x20/0x20 [ 128.946219] ? do_raw_spin_trylock+0x190/0x190 [ 128.950773] ? kfree+0xe4/0x250 [ 128.954016] ? binder_deferred_func+0xe8a/0x12f0 [ 128.958743] ? _raw_spin_unlock+0x22/0x30 [ 128.962863] binder_deferred_func+0xdf5/0x12f0 [ 128.967422] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 128.972578] ? mntput_no_expire+0x15e/0xa90 [ 128.976873] ? find_held_lock+0x39/0x1d0 [ 128.980904] ? check_noncircular+0x20/0x20 [ 128.985113] ? lock_acquire+0x1d5/0x580 [ 128.989054] ? process_one_work+0xb2f/0x1be0 [ 128.993438] ? __lock_is_held+0xbc/0x140 [ 128.997475] process_one_work+0xbfd/0x1be0 [ 129.001687] ? pwq_dec_nr_in_flight+0x450/0x450 [ 129.006319] ? finish_task_switch+0x1d3/0x740 [ 129.010800] ? update_curr+0x47b/0xa60 [ 129.014663] ? __sched_text_start+0x8/0x8 [ 129.018784] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 129.023944] ? check_noncircular+0x20/0x20 [ 129.028149] ? find_held_lock+0x39/0x1d0 [ 129.032188] ? lock_acquire+0x1d5/0x580 [ 129.036129] ? worker_thread+0x4a3/0x1990 [ 129.040249] ? lock_release+0xda0/0xda0 [ 129.044191] ? retint_kernel+0x10/0x10 [ 129.048047] ? do_raw_spin_trylock+0x190/0x190 [ 129.052608] worker_thread+0x223/0x1990 [ 129.056568] ? process_one_work+0x1be0/0x1be0 [ 129.061041] ? _raw_spin_unlock_irq+0x27/0x70 [ 129.065517] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 129.070506] ? trace_hardirqs_on+0xd/0x10 [ 129.074620] ? _raw_spin_unlock_irq+0x27/0x70 [ 129.079081] ? finish_task_switch+0x1d3/0x740 [ 129.083539] ? finish_task_switch+0x1aa/0x740 [ 129.088003] ? copy_overflow+0x20/0x20 [ 129.091867] ? __schedule+0x8f3/0x2060 [ 129.095719] ? check_noncircular+0x20/0x20 [ 129.099930] ? find_held_lock+0x39/0x1d0 [ 129.103962] ? find_held_lock+0x39/0x1d0 [ 129.108000] ? lock_downgrade+0x980/0x980 [ 129.112114] ? default_wake_function+0x30/0x50 [ 129.116669] ? __schedule+0x2060/0x2060 [ 129.120614] ? do_wait_intr_irq+0x3e0/0x3e0 [ 129.124903] ? do_raw_spin_trylock+0x190/0x190 [ 129.129452] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 129.134519] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 129.139503] ? trace_hardirqs_on+0xd/0x10 [ 129.143619] ? __kthread_parkme+0x175/0x240 [ 129.147909] kthread+0x37a/0x440 [ 129.151246] ? process_one_work+0x1be0/0x1be0 [ 129.155704] ? kthread_stop+0x7b0/0x7b0 [ 129.159648] ret_from_fork+0x24/0x30 [ 129.163494] Dumping ftrace buffer: [ 129.167044] (ftrace buffer empty) [ 129.170724] Kernel Offset: disabled [ 129.174319] Rebooting in 86400 seconds..