[....] Starting enhanced syslogd: rsyslogd[ 12.582325] audit: type=1400 audit(1512730968.375:5): avc: denied { syslog } for pid=2994 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.873184] audit: type=1400 audit(1512730992.666:6): avc: denied { map } for pid=3139 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-next-kasan-gce-3,10.128.0.27' (ECDSA) to the list of known hosts. [ 42.916220] audit: type=1400 audit(1512730998.709:7): avc: denied { map } for pid=3151 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/08 11:03:19 parsed 1 programs 2017/12/08 11:03:19 executed programs: 0 [ 43.377210] audit: type=1400 audit(1512730999.170:8): avc: denied { map } for pid=3151 comm="syz-execprog" path="/root/syzkaller-shm913431313" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.402829] audit: type=1400 audit(1512730999.177:9): avc: denied { sys_admin } for pid=3156 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 43.429524] audit: type=1400 audit(1512730999.222:10): avc: denied { sys_chroot } for pid=3158 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 43.441872] binder: send failed reply for transaction 2 to 3159:3160 [ 43.460447] audit: type=1400 audit(1512730999.227:11): avc: denied { map } for pid=3159 comm="syz-executor0" path="/dev/binder0" dev="devtmpfs" ino=8859 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 43.480810] binder: send failed reply for transaction 4 to 3159:3160 [ 43.480814] ------------[ cut here ]------------ [ 43.480818] Unexpected reply error: 29189 [ 43.480917] WARNING: CPU: 1 PID: 1403 at drivers/android/binder.c:1985 binder_send_failed_reply+0x13b/0x390 [ 43.480921] Kernel panic - not syncing: panic_on_warn set ... [ 43.480921] [ 43.480928] CPU: 1 PID: 1403 Comm: kworker/1:2 Not tainted 4.15.0-rc2-next-20171208+ #63 [ 43.480932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.480938] Workqueue: events binder_deferred_func [ 43.480943] Call Trace: [ 43.480953] dump_stack+0x194/0x257 [ 43.480963] ? arch_local_irq_restore+0x53/0x53 [ 43.480975] ? vsnprintf+0x1ed/0x1900 [ 43.480986] panic+0x1e4/0x41c [ 43.480993] ? refcount_error_report+0x214/0x214 [ 43.480999] ? show_regs_print_info+0x18/0x18 [ 43.481016] ? __warn+0x1c1/0x200 [ 43.481026] ? binder_send_failed_reply+0x13b/0x390 [ 43.481031] __warn+0x1dc/0x200 [ 43.481037] ? binder_send_failed_reply+0x13b/0x390 [ 43.481046] report_bug+0x211/0x2d0 [ 43.481061] fixup_bug.part.11+0x37/0x80 [ 43.481068] do_error_trap+0x2d7/0x3e0 [ 43.481073] ? __down_trylock_console_sem+0x10d/0x1e0 [ 43.481083] ? math_error+0x400/0x400 [ 43.481089] ? vprintk_emit+0x3ea/0x590 [ 43.481097] ? vprintk_emit+0x3ea/0x590 [ 43.481111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.481127] do_invalid_op+0x1b/0x20 [ 43.481134] invalid_op+0x22/0x40 [ 43.481140] RIP: 0010:binder_send_failed_reply+0x13b/0x390 [ 43.481144] RSP: 0018:ffff8801d275f0c8 EFLAGS: 00010286 [ 43.481150] RAX: dffffc0000000008 RBX: ffff8801d72a9500 RCX: ffffffff815a060e [ 43.481154] RDX: 0000000000000000 RSI: 1ffff1003a4ea929 RDI: 0000000000000293 [ 43.481158] RBP: ffff8801d275f0f0 R08: 1ffff1003a4ebdac R09: 0000000000000000 [ 43.481161] R10: 000000000000000b R11: 0000000000000000 R12: ffff8801c58820c0 [ 43.481165] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c57 [ 43.481179] ? vprintk_func+0x5e/0xc0 [ 43.481190] ? binder_send_failed_reply+0x13b/0x390 [ 43.481200] binder_cleanup_transaction+0xd2/0x140 [ 43.481209] binder_release_work+0x340/0x490 [ 43.481219] ? kzalloc.constprop.53+0x20/0x20 [ 43.481233] ? do_raw_spin_trylock+0x190/0x190 [ 43.481245] ? kfree+0xe4/0x250 [ 43.481251] ? binder_deferred_func+0xe8a/0x12f0 [ 43.481261] ? _raw_spin_unlock+0x22/0x30 [ 43.481271] binder_deferred_func+0xdf5/0x12f0 [ 43.481290] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 43.481299] ? mntput_no_expire+0x15e/0xa90 [ 43.481309] ? find_held_lock+0x39/0x1d0 [ 43.481319] ? check_noncircular+0x20/0x20 [ 43.481333] ? lock_acquire+0x1d5/0x580 [ 43.481340] ? process_one_work+0xb2f/0x1bc0 [ 43.481357] ? __lock_is_held+0xbc/0x140 [ 43.481376] process_one_work+0xbfd/0x1bc0 [ 43.481394] ? pwq_dec_nr_in_flight+0x450/0x450 [ 43.481401] ? finish_task_switch+0x1f6/0x740 [ 43.481433] ? __sched_text_start+0x8/0x8 [ 43.481444] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 43.481455] ? check_noncircular+0x20/0x20 [ 43.481466] ? find_held_lock+0x39/0x1d0 [ 43.481484] ? lock_acquire+0x1d5/0x580 [ 43.481489] ? worker_thread+0x4a3/0x1990 [ 43.481502] ? lock_release+0xda0/0xda0 [ 43.481513] ? do_raw_spin_trylock+0x190/0x190 [ 43.481531] worker_thread+0x223/0x1990 [ 43.481556] ? process_one_work+0x1bc0/0x1bc0 [ 43.481566] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.481574] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.481581] ? trace_hardirqs_on+0xd/0x10 [ 43.481589] ? mmdrop+0x18/0x30 [ 43.481596] ? finish_task_switch+0x1f6/0x740 [ 43.481606] ? copy_overflow+0x20/0x20 [ 43.481622] ? __schedule+0x8f3/0x2060 [ 43.481627] ? check_noncircular+0x20/0x20 [ 43.481641] ? find_held_lock+0x39/0x1d0 [ 43.481659] ? find_held_lock+0x39/0x1d0 [ 43.481675] ? lock_downgrade+0x980/0x980 [ 43.481683] ? default_wake_function+0x30/0x50 [ 43.481696] ? __schedule+0x2060/0x2060 [ 43.481702] ? do_wait_intr_irq+0x3e0/0x3e0 [ 43.481711] ? do_raw_spin_trylock+0x190/0x190 [ 43.481719] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 43.481727] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.481734] ? trace_hardirqs_on+0xd/0x10 [ 43.481741] ? __kthread_parkme+0x175/0x240 [ 43.481750] kthread+0x37a/0x440 [ 43.481756] ? process_one_work+0x1bc0/0x1bc0 [ 43.481760] ? kthread_stop+0x7b0/0x7b0 [ 43.481769] ret_from_fork+0x24/0x30 [ 43.485471] Dumping ftrace buffer: [ 43.485498] (ftrace buffer empty) [ 43.485501] Kernel Offset: disabled [ 43.907730] Rebooting in 86400 seconds..