[....] Starting enhanced syslogd: rsyslogd[ 10.746209] audit: type=1400 audit(1514869531.008:4): avc: denied { syslog } for pid=3167 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.225' (ECDSA) to the list of known hosts. 2018/01/02 05:05:39 parsed 1 programs 2018/01/02 05:05:39 executed programs: 0 syzkaller login: [ 19.209944] IPVS: Creating netns size=2536 id=1 [ 19.219376] audit: type=1400 audit(1514869539.478:5): avc: denied { set_context_mgr } for pid=3341 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 19.222859] audit: type=1400 audit(1514869539.498:6): avc: denied { call } for pid=3341 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 19.226099] binder: 3341:3343 ioctl c0306201 2000efd0 returned -14 [ 19.233431] binder: send failed reply for transaction 2 to 3341:3343 [ 19.240624] IPVS: Creating netns size=2536 id=2 [ 19.248791] binder: BINDER_SET_CONTEXT_MGR already set [ 19.254851] binder: 3347:3348 ioctl 40046207 0 returned -16 [ 19.254885] binder: release 3341:3345 transaction 4 out, still active [ 19.254888] binder: undelivered TRANSACTION_COMPLETE [ 19.254908] binder: undelivered TRANSACTION_COMPLETE [ 19.254914] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.254964] binder: send failed reply for transaction 4, target dead [ 19.263809] binder: 3349:3350 ioctl c0306201 2000efd0 returned -14 [ 19.270123] binder: send failed reply for transaction 6 to 3349:3350 [ 19.276785] binder: 3347:3354 transaction failed 29189/-22, size 0-0 line 3004 [ 19.278089] binder: 3347:3354 ioctl c0306201 2000efd0 returned -14 [ 19.280239] IPVS: Creating netns size=2536 id=3 [ 19.288091] binder: undelivered TRANSACTION_COMPLETE [ 19.288097] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.288107] binder: release 3349:3352 transaction 9 out, still active [ 19.288110] binder: undelivered TRANSACTION_COMPLETE [ 19.288180] binder: send failed reply for transaction 9, target dead [ 19.307214] IPVS: Creating netns size=2536 id=4 [ 19.307979] binder: 3355:3357 ioctl c0306201 2000efd0 returned -14 [ 19.311091] binder: 3358:3362 ioctl c0306201 2000efd0 returned -14 [ 19.317353] binder: send failed reply for transaction 11 to 3355:3357 [ 19.333913] IPVS: Creating netns size=2536 id=5 [ 19.343003] binder: send failed reply for transaction 13 to 3358:3362 [ 19.344806] binder: 3365:3366 ioctl c0306201 2000efd0 returned -14 [ 19.347597] binder: undelivered TRANSACTION_COMPLETE [ 19.347605] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.347615] binder: release 3355:3361 transaction 19 out, still active [ 19.347618] binder: undelivered TRANSACTION_COMPLETE [ 19.347650] binder: send failed reply for transaction 19, target dead [ 19.352527] IPVS: Creating netns size=2536 id=6 [ 19.358989] binder: 3371:3374 ioctl c0306201 2000efd0 returned -14 [ 19.362556] binder: 3370:3373 ioctl c0306201 2000efd0 returned -14 [ 19.363665] binder: send failed reply for transaction 23 to 3358:3363 [ 19.365745] binder: undelivered TRANSACTION_COMPLETE [ 19.365751] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.365757] binder: undelivered TRANSACTION_COMPLETE [ 19.365763] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.368573] binder: send failed reply for transaction 15 to 3365:3366 [ 19.375297] binder: 3378:3381 ioctl c0306201 2000efd0 returned -14 [ 19.377832] binder: send failed reply for transaction 25 to 3370:3373 [ 19.382363] binder: undelivered TRANSACTION_COMPLETE [ 19.382370] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.382380] binder: release 3365:3369 transaction 29 out, still active [ 19.382383] binder: undelivered TRANSACTION_COMPLETE [ 19.382413] binder: send failed reply for transaction 29, target dead [ 19.387083] binder: 3379:3382 ioctl c0306201 2000efd0 returned -14 [ 19.388814] IPVS: Creating netns size=2536 id=7 [ 19.391040] binder: send failed reply for transaction 33 to 3370:3376 [ 19.391100] binder: undelivered TRANSACTION_COMPLETE [ 19.391105] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.391111] binder: undelivered TRANSACTION_COMPLETE [ 19.391116] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.392655] binder: 3385:3386 ioctl c0306201 2000efd0 returned -14 [ 19.393485] binder: send failed reply for transaction 21 to 3371:3374 [ 19.393906] binder: send failed reply for transaction 31 to 3379:3382 [ 19.395678] binder: 3387:3389 ioctl c0306201 2000efd0 returned -14 [ 19.398023] binder: send failed reply for transaction 27 to 3378:3381 [ 19.402488] binder: release 3371:3375 transaction 40 out, still active [ 19.402492] binder: undelivered TRANSACTION_COMPLETE [ 19.402513] binder: undelivered TRANSACTION_COMPLETE [ 19.402518] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.402546] binder: send failed reply for transaction 40, target dead [ 19.409318] binder: undelivered TRANSACTION_COMPLETE [ 19.409325] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.409336] binder: release 3379:3384 transaction 41 out, still active [ 19.409339] binder: undelivered TRANSACTION_COMPLETE [ 19.409372] binder: send failed reply for transaction 41, target dead [ 19.409623] binder: 3391:3393 ioctl c0306201 2000efd0 returned -14 [ 19.411905] binder: send failed reply for transaction 37 to 3387:3389 [ 19.415587] binder: send failed reply for transaction 35 to 3385:3386 [ 19.416935] binder: 3394:3398 ioctl c0306201 2000efd0 returned -14 [ 19.419791] binder: undelivered TRANSACTION_COMPLETE [ 19.419798] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.419808] binder: release 3378:3383 transaction 47 out, still active [ 19.419810] binder: undelivered TRANSACTION_COMPLETE [ 19.419839] binder: send failed reply for transaction 47, target dead [ 19.423092] IPVS: Creating netns size=2536 id=8 [ 19.431669] binder: send failed reply for transaction 43 to 3391:3393 [ 19.437284] binder: undelivered TRANSACTION_COMPLETE [ 19.437291] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.437303] binder: release 3387:3390 transaction 49 out, still active [ 19.437305] binder: undelivered TRANSACTION_COMPLETE [ 19.437335] binder: send failed reply for transaction 49, target dead [ 19.441659] binder: 3395:3399 ioctl c0306201 2000efd0 returned -14 [ 19.444722] binder: undelivered TRANSACTION_COMPLETE [ 19.444729] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.444740] binder: release 3385:3388 transaction 54 out, still active [ 19.444742] binder: undelivered TRANSACTION_COMPLETE [ 19.445063] binder: send failed reply for transaction 55 to 3391:3397 [ 19.452775] binder: 3402:3405 ioctl c0306201 2000efd0 returned -14 [ 19.454161] binder: 3401:3403 ioctl c0306201 2000efd0 returned -14 [ 19.454680] binder: send failed reply for transaction 46 to 3394:3398 [ 19.454754] binder: send failed reply for transaction 54, target dead [ 19.454798] binder: undelivered TRANSACTION_COMPLETE [ 19.454803] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.454810] binder: undelivered TRANSACTION_COMPLETE [ 19.454815] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.456821] binder: send failed reply for transaction 52 to 3395:3399 [ 19.461197] binder: 3410:3411 ioctl c0306201 2000efd0 returned -14 [ 19.464771] binder: send failed reply for transaction 57 to 3402:3405 [ 19.469615] binder: 3406:3409 ioctl c0306201 2000efd0 returned -14 [ 19.472216] binder: undelivered TRANSACTION_COMPLETE [ 19.472223] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.472233] binder: release 3395:3404 transaction 63 out, still active [ 19.472235] binder: undelivered TRANSACTION_COMPLETE [ 19.472267] binder: send failed reply for transaction 63, target dead [ 19.472567] binder: send failed reply for transaction 59 to 3401:3403 [ 19.473617] binder: send failed reply for transaction 61 to 3410:3411 [ 19.481427] binder: undelivered TRANSACTION_COMPLETE [ 19.481433] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.481448] binder: release 3402:3407 transaction 69 out, still active [ 19.481451] binder: undelivered TRANSACTION_COMPLETE [ 19.481480] binder: send failed reply for transaction 69, target dead [ 19.486034] binder: 3401:3403 ioctl c0306201 2000efd0 returned -14 [ 19.487715] binder: send failed reply for transaction 68 to 3394:3400 [ 19.487769] binder: undelivered TRANSACTION_COMPLETE [ 19.487775] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.487782] binder: undelivered TRANSACTION_COMPLETE [ 19.487787] binder: undelivered TRANSACTION_ERROR: 29189 [ 19.487818] binder: send failed reply for transaction 71 to 3401:3403 [ 19.487820] ------------[ cut here ]------------ [ 19.487837] WARNING: CPU: 0 PID: 25 at drivers/android/binder.c:2151 binder_send_failed_reply+0x147/0x3a0 [ 19.487839] Unexpected reply error: 29189 [ 19.487842] Kernel panic - not syncing: panic_on_warn set ... [ 19.487842] [ 19.487848] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 4.9.73-gf3f3457 #11 [ 19.487852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.487861] Workqueue: events binder_deferred_func [ 19.487872] ffff8801d986f910 ffffffff81d922b9 ffffffff83a46d00 ffff8801d986f9e8 [ 19.487879] ffffffff83eab500 ffffffff82d60a57 0000000000000009 ffff8801d986f9d8 [ 19.487887] ffffffff8142d741 0000000041b58ab3 ffffffff84189000 ffffffff8142d585 [ 19.487889] Call Trace: [ 19.487897] [] dump_stack+0xc1/0x128 [ 19.487905] [] ? binder_send_failed_reply+0x147/0x3a0 [ 19.487913] [] panic+0x1bc/0x3a8 [ 19.487921] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 19.487927] [] ? vprintk_emit+0x3ad/0x750 [ 19.487941] [] ? __warn+0x1a9/0x1e0 [ 19.487948] [] ? binder_send_failed_reply+0x147/0x3a0 [ 19.487953] [] __warn+0x1c4/0x1e0 [ 19.487959] [] warn_slowpath_fmt+0xc4/0x110 [ 19.487964] [] ? __warn+0x1e0/0x1e0 [ 19.487971] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 19.487978] [] binder_send_failed_reply+0x147/0x3a0 [ 19.487986] [] binder_cleanup_transaction+0xd2/0x140 [ 19.487993] [] binder_release_work+0x1b0/0x260 [ 19.488002] [] ? _raw_spin_unlock+0x2c/0x50 [ 19.488009] [] binder_deferred_func+0x9a2/0xd10 [ 19.488017] [] ? __lock_is_held+0xa1/0xf0 [ 19.488026] [] process_one_work+0x7e0/0x1610 [ 19.488032] [] ? process_one_work+0x72c/0x1610 [ 19.488039] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 19.488047] [] worker_thread+0xe0/0x10d0 [ 19.488054] [] ? __schedule+0x683/0x1ba0 [ 19.488061] [] kthread+0x26d/0x300 [ 19.488067] [] ? process_one_work+0x1610/0x1610 [ 19.488073] [] ? kthread_park+0xa0/0xa0 [ 19.488079] [] ? kthread_park+0xa0/0xa0 [ 19.488085] [] ? kthread_park+0xa0/0xa0 [ 19.488092] [] ret_from_fork+0x2a/0x40 [ 19.488622] Dumping ftrace buffer: [ 19.488653] (ftrace buffer empty) [ 19.488655] Kernel Offset: disabled [ 20.254363] Rebooting in 86400 seconds..