INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-1,10.128.0.20' (ECDSA) to the list of known hosts. 2017/12/02 02:25:05 parsed 1 programs 2017/12/02 02:25:05 executed programs: 0 syzkaller login: [ 41.173944] binder: 3102:3111 got new transaction with bad transaction stack, transaction 2 has target 3102:0 [ 41.174266] binder: 3116:3120 got new transaction with bad transaction stack, transaction 7 has target 3116:0 [ 41.174275] binder: 3116:3120 transaction failed 29201/-71, size 0-0 line 2859 [ 41.177978] binder: 3102:3111 transaction failed 29201/-71, size 0-0 line 2859 [ 41.179289] binder: 3101:3108 got new transaction with bad transaction stack, transaction 4 has target 3101:0 [ 41.179297] binder: 3101:3108 transaction failed 29201/-71, size 0-0 line 2859 [ 41.184576] binder: send failed reply for transaction 7 to 3116:3120 [ 41.186650] binder: 3117:3118 got new transaction with bad transaction stack, transaction 11 has target 3117:0 [ 41.186657] binder: 3117:3118 transaction failed 29201/-71, size 0-0 line 2859 [ 41.189274] binder: 3106:3114 got new transaction with bad transaction stack, transaction 14 has target 3106:0 [ 41.189281] binder: 3106:3114 transaction failed 29201/-71, size 0-0 line 2859 [ 41.189619] binder: 3116:3120 got new transaction with bad transaction stack, transaction 17 has target 3116:0 [ 41.189628] binder: 3116:3120 transaction failed 29201/-71, size 0-0 line 2859 [ 41.193314] binder: release 3116:3120 transaction 17 out, still active [ 41.193932] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.194004] binder: send failed reply for transaction 17, target dead [ 41.194443] binder: 3103:3107 got new transaction with bad transaction stack, transaction 20 has target 3103:0 [ 41.194451] binder: 3103:3107 transaction failed 29201/-71, size 0-0 line 2859 [ 41.200959] binder: 3102:3122 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 41.204498] binder: send failed reply for transaction 14 to 3106:3114 [ 41.211838] binder: 3104:3112 got new transaction with bad transaction stack, transaction 23 has target 3104:0 [ 41.211846] binder: 3104:3112 transaction failed 29201/-71, size 0-0 line 2859 [ 41.226381] binder: send failed reply for transaction 11 to 3117:3118 [ 41.233520] binder: send failed reply for transaction 20 to 3103:3107 [ 41.241598] binder: 3119:3121 got new transaction with bad transaction stack, transaction 31 has target 3119:0 [ 41.241606] binder: 3119:3121 transaction failed 29201/-71, size 0-0 line 2859 [ 41.242985] binder: send failed reply for transaction 23 to 3104:3112 [ 41.243077] binder: send failed reply for transaction 4 to 3101:3108 [ 41.254029] binder: send failed reply for transaction 26 to 3106:3114 [ 41.254037] binder: send failed reply for transaction 27 to 3106:3131 [ 41.259579] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.259593] binder: undelivered TRANSACTION_COMPLETE [ 41.259597] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.259603] binder: undelivered TRANSACTION_COMPLETE [ 41.259606] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.261889] binder: 3156:3157 got new transaction with bad transaction stack, transaction 44 has target 3156:0 [ 41.261897] binder: 3156:3157 transaction failed 29201/-71, size 0-0 line 2859 [ 41.266844] binder: send failed reply for transaction 35 to 3103:3127 [ 41.266853] binder: send failed reply for transaction 36 to 3103:3107 [ 41.266855] ------------[ cut here ]------------ [ 41.266857] Unexpected reply error: 29189 [ 41.266960] WARNING: CPU: 1 PID: 17 at drivers/android/binder.c:1985 binder_send_failed_reply+0x13b/0x390 [ 41.266964] Kernel panic - not syncing: panic_on_warn set ... [ 41.266964] [ 41.266969] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 4.15.0-rc1-mm1+ #29 [ 41.266972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.266977] Workqueue: events binder_deferred_func [ 41.266981] Call Trace: [ 41.266993] dump_stack+0x194/0x257 [ 41.267004] ? arch_local_irq_restore+0x53/0x53 [ 41.267016] ? vsnprintf+0x1ed/0x1900 [ 41.267028] panic+0x1e4/0x41c [ 41.267034] ? refcount_error_report+0x214/0x214 [ 41.267041] ? show_regs_print_info+0x65/0x65 [ 41.267054] ? __warn+0x1c1/0x200 [ 41.267064] ? binder_send_failed_reply+0x13b/0x390 [ 41.267068] __warn+0x1dc/0x200 [ 41.267074] ? binder_send_failed_reply+0x13b/0x390 [ 41.267082] report_bug+0x211/0x2d0 [ 41.267096] fixup_bug.part.11+0x37/0x80 [ 41.267103] do_error_trap+0x2d7/0x3e0 [ 41.267107] ? __down_trylock_console_sem+0x10d/0x1e0 [ 41.267117] ? math_error+0x400/0x400 [ 41.267122] ? vprintk_emit+0x3ea/0x590 [ 41.267130] ? vprintk_emit+0x3ea/0x590 [ 41.267145] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.267158] do_invalid_op+0x1b/0x20 [ 41.267164] invalid_op+0x22/0x40 [ 41.267169] RIP: 0010:binder_send_failed_reply+0x13b/0x390 [ 41.267172] RSP: 0018:ffff8801da3ef0c8 EFLAGS: 00010286 [ 41.267176] RAX: dffffc0000000008 RBX: ffff8801d78aee00 RCX: ffffffff815a035e [ 41.267179] RDX: 0000000000000000 RSI: 1ffff1003b47adb1 RDI: 0000000000000293 [ 41.267182] RBP: ffff8801da3ef0f0 R08: 1ffff1003b47ddac R09: 0000000000000000 [ 41.267184] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cbf5b080 [ 41.267187] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c1f [ 41.267202] ? vprintk_func+0x5e/0xc0 [ 41.267213] ? binder_send_failed_reply+0x13b/0x390 [ 41.267223] binder_cleanup_transaction+0xd2/0x140 [ 41.267231] binder_release_work+0x340/0x490 [ 41.267242] ? kzalloc.constprop.53+0x20/0x20 [ 41.267255] ? do_raw_spin_trylock+0x190/0x190 [ 41.267265] ? kfree+0xe4/0x250 [ 41.267269] ? binder_deferred_func+0xe8a/0x12f0 [ 41.267280] ? _raw_spin_unlock+0x22/0x30 [ 41.267290] binder_deferred_func+0xdf5/0x12f0 [ 41.267312] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 41.267321] ? mntput_no_expire+0x15e/0xa90 [ 41.267331] ? find_held_lock+0x39/0x1d0 [ 41.267342] ? check_noncircular+0x20/0x20 [ 41.267358] ? lock_acquire+0x1d5/0x580 [ 41.267365] ? process_one_work+0xb2f/0x1bc0 [ 41.267384] ? __lock_is_held+0xbc/0x140 [ 41.267406] process_one_work+0xbfd/0x1bc0 [ 41.267427] ? pwq_dec_nr_in_flight+0x450/0x450 [ 41.267431] ? finish_task_switch+0x1d3/0x740 [ 41.267457] ? perf_trace_lock_acquire+0xe3/0x980 [ 41.267462] ? find_held_lock+0x39/0x1d0 [ 41.267475] ? perf_trace_lock+0x900/0x900 [ 41.267479] ? __sched_text_start+0x8/0x8 [ 41.267487] ? lock_downgrade+0x980/0x980 [ 41.267494] ? __wake_up_common_lock+0x190/0x310 [ 41.267513] ? find_held_lock+0x39/0x1d0 [ 41.267533] ? lock_acquire+0x1d5/0x580 [ 41.267538] ? worker_thread+0x4a3/0x1990 [ 41.267552] ? lock_release+0xda0/0xda0 [ 41.267558] ? retint_kernel+0x10/0x10 [ 41.267566] ? do_raw_spin_trylock+0x190/0x190 [ 41.267587] worker_thread+0x223/0x1990 [ 41.267616] ? process_one_work+0x1bc0/0x1bc0 [ 41.267626] ? _raw_spin_unlock_irq+0x27/0x70 [ 41.267634] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.267640] ? trace_hardirqs_on+0xd/0x10 [ 41.267647] ? mmdrop+0x18/0x30 [ 41.267652] ? finish_task_switch+0x1f6/0x740 [ 41.267662] ? copy_overflow+0x20/0x20 [ 41.267681] ? __schedule+0x8f3/0x2060 [ 41.267685] ? check_noncircular+0x20/0x20 [ 41.267707] ? find_held_lock+0x39/0x1d0 [ 41.267721] ? find_held_lock+0x39/0x1d0 [ 41.267739] ? lock_downgrade+0x980/0x980 [ 41.267747] ? default_wake_function+0x30/0x50 [ 41.267762] ? __schedule+0x2060/0x2060 [ 41.267766] ? do_wait_intr+0x3e0/0x3e0 [ 41.267775] ? do_raw_spin_trylock+0x190/0x190 [ 41.267783] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 41.267791] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.267797] ? trace_hardirqs_on+0xd/0x10 [ 41.267803] ? __kthread_parkme+0x175/0x240 [ 41.267813] kthread+0x37a/0x440 [ 41.267818] ? process_one_work+0x1bc0/0x1bc0 [ 41.267821] ? kthread_stop+0x7b0/0x7b0 [ 41.267830] ret_from_fork+0x24/0x30 [ 41.268451] Dumping ftrace buffer: [ 41.268485] (ftrace buffer empty) [ 41.268487] Kernel Offset: disabled [ 41.886957] Rebooting in 86400 seconds..