INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-5,10.128.15.202' (ECDSA) to the list of known hosts. 2017/12/07 01:11:41 parsed 1 programs 2017/12/07 01:11:41 executed programs: 0 syzkaller login: [ 42.778139] binder: send failed reply for transaction 2 to 3101:3102 [ 42.802555] binder: release 3101:3102 transaction 4 out, still active [ 42.809203] binder: undelivered TRANSACTION_COMPLETE [ 42.809507] binder: BINDER_SET_CONTEXT_MGR already set [ 42.809516] binder: 3104:3105 ioctl 40046207 0 returned -16 [ 42.809667] binder_alloc: 3101: binder_alloc_buf, no vma [ 42.809689] binder: 3104:3105 transaction failed 29189/-3, size 0-0 line 2890 [ 42.823477] binder: BINDER_SET_CONTEXT_MGR already set [ 42.823485] binder: 3104:3105 ioctl 40046207 0 returned -16 [ 42.849171] binder: BINDER_SET_CONTEXT_MGR already set [ 42.849177] binder: 3110:3111 ioctl 40046207 0 returned -16 [ 42.849298] binder_alloc: 3101: binder_alloc_buf, no vma [ 42.849311] binder: 3110:3111 transaction failed 29189/-3, size 0-0 line 2890 [ 42.853468] binder: BINDER_SET_CONTEXT_MGR already set [ 42.853475] binder: 3107:3108 ioctl 40046207 0 returned -16 [ 42.856346] binder: 3107:3108 got new transaction with bad transaction stack, transaction 7 has target 3107:0 [ 42.856357] binder: 3107:3108 transaction failed 29201/-71, size 0-0 line 2802 [ 42.864148] binder: BINDER_SET_CONTEXT_MGR already set [ 42.864154] binder: 3110:3111 ioctl 40046207 0 returned -16 [ 42.874678] binder: BINDER_SET_CONTEXT_MGR already set [ 42.874684] binder: 3113:3114 ioctl 40046207 0 returned -16 [ 42.874808] binder_alloc: 3107: binder_alloc_buf, no vma [ 42.874821] binder: 3113:3114 transaction failed 29189/-3, size 0-0 line 2890 [ 42.886310] binder: BINDER_SET_CONTEXT_MGR already set [ 42.886316] binder: 3116:3117 ioctl 40046207 0 returned -16 [ 42.886474] binder_alloc: 3101: binder_alloc_buf, no vma [ 42.886486] binder: 3116:3117 transaction failed 29189/-3, size 0-0 line 2890 [ 42.890736] binder: BINDER_SET_CONTEXT_MGR already set [ 42.890742] binder: 3113:3114 ioctl 40046207 0 returned -16 [ 42.900488] binder: BINDER_SET_CONTEXT_MGR already set [ 42.900495] binder: 3116:3117 ioctl 40046207 0 returned -16 [ 42.910886] binder: BINDER_SET_CONTEXT_MGR already set [ 42.910892] binder: 3119:3120 ioctl 40046207 0 returned -16 [ 42.911038] binder_alloc: 3107: binder_alloc_buf, no vma [ 42.911050] binder: 3119:3120 transaction failed 29189/-3, size 0-0 line 2890 [ 42.919870] binder: BINDER_SET_CONTEXT_MGR already set [ 42.919876] binder: 3122:3123 ioctl 40046207 0 returned -16 [ 42.920178] binder_alloc: 3101: binder_alloc_buf, no vma [ 42.920192] binder: 3122:3123 transaction failed 29189/-3, size 0-0 line 2890 [ 42.942486] binder: BINDER_SET_CONTEXT_MGR already set [ 42.942492] binder: 3119:3120 ioctl 40046207 0 returned -16 [ 42.949123] binder: BINDER_SET_CONTEXT_MGR already set [ 42.949129] binder: 3122:3123 ioctl 40046207 0 returned -16 [ 42.961283] binder: BINDER_SET_CONTEXT_MGR already set [ 42.961289] binder: 3125:3126 ioctl 40046207 0 returned -16 [ 42.961407] binder_alloc: 3101: binder_alloc_buf, no vma [ 42.961420] binder: 3125:3126 transaction failed 29189/-3, size 0-0 line 2890 [ 42.970387] binder: BINDER_SET_CONTEXT_MGR already set [ 42.970394] binder: 3127:3128 ioctl 40046207 0 returned -16 [ 42.971295] binder_alloc: 3107: binder_alloc_buf, no vma [ 42.971308] binder: 3127:3128 transaction failed 29189/-3, size 0-0 line 2890 [ 42.974155] binder: BINDER_SET_CONTEXT_MGR already set [ 42.974161] binder: 3125:3126 ioctl 40046207 0 returned -16 [ 42.984056] binder: BINDER_SET_CONTEXT_MGR already set [ 42.984063] binder: 3127:3128 ioctl 40046207 0 returned -16 [ 42.992698] binder: BINDER_SET_CONTEXT_MGR already set [ 42.992705] binder: 3131:3132 ioctl 40046207 0 returned -16 [ 42.992830] binder_alloc: 3107: binder_alloc_buf, no vma [ 42.992844] binder: 3131:3132 transaction failed 29189/-3, size 0-0 line 2890 [ 43.005600] binder: BINDER_SET_CONTEXT_MGR already set [ 43.005607] binder: 3131:3132 ioctl 40046207 0 returned -16 [ 43.157965] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.163589] binder: undelivered TRANSACTION_COMPLETE [ 43.169171] binder: send failed reply for transaction 7 to 3107:3108 [ 43.175778] binder: send failed reply for transaction 4, target dead [ 43.183386] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.188870] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.199118] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.204643] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.210283] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.215792] binder: send failed reply for transaction 18 to 3134:3135 [ 43.222415] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.227893] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.233366] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.238852] binder: send failed reply for transaction 20 to 3134:3135 [ 43.245422] ------------[ cut here ]------------ [ 43.250180] Unexpected reply error: 29189 [ 43.254425] WARNING: CPU: 1 PID: 23 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 43.264099] Kernel panic - not syncing: panic_on_warn set ... [ 43.264099] [ 43.271430] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 4.15.0-rc2+ #210 [ 43.278320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.287646] Workqueue: events binder_deferred_func [ 43.292545] Call Trace: [ 43.295100] dump_stack+0x194/0x257 [ 43.298701] ? arch_local_irq_restore+0x53/0x53 [ 43.303353] ? vsnprintf+0x1ed/0x1900 [ 43.307125] panic+0x1e4/0x41c [ 43.310285] ? refcount_error_report+0x214/0x214 [ 43.315006] ? show_regs_print_info+0x18/0x18 [ 43.319477] ? __warn+0x1c1/0x200 [ 43.322902] ? binder_send_failed_reply+0x13b/0x350 [ 43.327887] __warn+0x1dc/0x200 [ 43.331133] ? console_unlock+0x983/0xd80 [ 43.335247] ? binder_send_failed_reply+0x13b/0x350 [ 43.340233] report_bug+0x211/0x2d0 [ 43.343834] fixup_bug.part.11+0x37/0x80 [ 43.347874] do_error_trap+0x2d7/0x3e0 [ 43.351729] ? __down_trylock_console_sem+0x10d/0x1e0 [ 43.356890] ? math_error+0x400/0x400 [ 43.360657] ? vprintk_emit+0x3ea/0x590 [ 43.364599] ? vprintk_emit+0x3ea/0x590 [ 43.368549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.373364] do_invalid_op+0x1b/0x20 [ 43.377045] invalid_op+0x18/0x20 [ 43.380465] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 43.386053] RSP: 0018:ffff8801d9cf70c8 EFLAGS: 00010286 [ 43.391385] RAX: dffffc0000000008 RBX: ffff8801d402c600 RCX: ffffffff8159c43e [ 43.398623] RDX: 0000000000000000 RSI: 1ffff1003b39edd4 RDI: ffff8801db516f18 [ 43.405863] RBP: ffff8801d9cf70f0 R08: 1ffff1003b39ed96 R09: 0000000000000000 [ 43.413102] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ceecfa00 [ 43.420340] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c3e [ 43.427588] ? vprintk_func+0x5e/0xc0 [ 43.431361] ? binder_send_failed_reply+0x13b/0x350 [ 43.436349] binder_cleanup_transaction+0xd2/0x140 [ 43.441249] binder_release_work+0x340/0x490 [ 43.445629] ? kzalloc.constprop.53+0x20/0x20 [ 43.450100] ? do_raw_spin_trylock+0x190/0x190 [ 43.454656] ? kfree+0xe4/0x250 [ 43.457905] ? binder_deferred_func+0xe8a/0x12f0 [ 43.462632] ? _raw_spin_unlock+0x22/0x30 [ 43.466752] binder_deferred_func+0xdf5/0x12f0 [ 43.471316] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 43.476474] ? mntput_no_expire+0x15e/0xa90 [ 43.480770] ? find_held_lock+0x39/0x1d0 [ 43.484805] ? check_noncircular+0x20/0x20 [ 43.489027] ? lock_acquire+0x1d5/0x580 [ 43.492969] ? process_one_work+0xb2f/0x1be0 [ 43.497356] ? __lock_is_held+0xbc/0x140 [ 43.501399] process_one_work+0xbfd/0x1be0 [ 43.505613] ? pwq_dec_nr_in_flight+0x450/0x450 [ 43.510252] ? finish_task_switch+0x1d3/0x740 [ 43.514748] ? __sched_text_start+0x8/0x8 [ 43.518870] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 43.524032] ? select_task_rq_fair+0x2770/0x2770 [ 43.528755] ? check_noncircular+0x20/0x20 [ 43.532971] ? find_held_lock+0x39/0x1d0 [ 43.537012] ? lock_acquire+0x1d5/0x580 [ 43.540952] ? worker_thread+0x4a3/0x1990 [ 43.545074] ? lock_release+0xda0/0xda0 [ 43.549016] ? worker_pool_assign_id+0x1b0/0x1b0 [ 43.553742] ? do_raw_spin_trylock+0x190/0x190 [ 43.558306] worker_thread+0x223/0x1990 [ 43.562267] ? process_one_work+0x1be0/0x1be0 [ 43.566847] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.571315] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.576299] ? trace_hardirqs_on+0xd/0x10 [ 43.580416] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.584881] ? finish_task_switch+0x1d3/0x740 [ 43.589342] ? finish_task_switch+0x1aa/0x740 [ 43.593810] ? copy_overflow+0x20/0x20 [ 43.597679] ? __schedule+0x8f3/0x2060 [ 43.601534] ? check_noncircular+0x20/0x20 [ 43.605751] ? find_held_lock+0x39/0x1d0 [ 43.609793] ? find_held_lock+0x39/0x1d0 [ 43.613831] ? lock_downgrade+0x980/0x980 [ 43.617946] ? default_wake_function+0x30/0x50 [ 43.622504] ? __schedule+0x2060/0x2060 [ 43.626443] ? do_wait_intr+0x3e0/0x3e0 [ 43.630388] ? do_raw_spin_trylock+0x190/0x190 [ 43.634937] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 43.640009] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.644995] ? trace_hardirqs_on+0xd/0x10 [ 43.649111] ? __kthread_parkme+0x175/0x240 [ 43.653405] kthread+0x37a/0x440 [ 43.656741] ? process_one_work+0x1be0/0x1be0 [ 43.661206] ? kthread_stop+0x7b0/0x7b0 [ 43.665152] ret_from_fork+0x24/0x30 [ 43.668993] Dumping ftrace buffer: [ 43.672549] (ftrace buffer empty) [ 43.676226] Kernel Offset: disabled [ 43.679822] Rebooting in 86400 seconds..