[....] Starting enhanced syslogd: rsyslogd[   12.789780] audit: type=1400 audit(1520317736.910:4): avc:  denied  { syslog } for  pid=3566 comm="rsyslogd" capability=34  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts.
syzkaller login: [  109.463014] audit: type=1400 audit(1520317833.590:5): avc:  denied  { set_context_mgr } for  pid=3777 comm="syzkaller633709" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  109.484467] binder: 3777:3779 ERROR: BC_REGISTER_LOOPER called without request
[  109.494463] audit: type=1400 audit(1520317833.620:6): avc:  denied  { call } for  pid=3777 comm="syzkaller633709" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  109.518085] binder: release 3777:3778 transaction 3 out, still active
[  109.524703] binder: undelivered TRANSACTION_COMPLETE
[  109.584291] binder: release 3777:3779 transaction 1 out, still active
[  109.590982] binder: undelivered TRANSACTION_COMPLETE
[  109.594806] binder: 3781:3782 ERROR: BC_REGISTER_LOOPER called without request
[  109.603438] binder: release 3777:3780 transaction 4 out, still active
[  109.609984] binder: undelivered TRANSACTION_COMPLETE
[  109.615184] binder: send failed reply for transaction 1, target dead
[  109.615743] binder: release 3781:3782 transaction 7 out, still active
[  109.615746] binder: release 3781:3782 transaction 6 in, still active
[  109.615748] binder: undelivered TRANSACTION_COMPLETE
[  109.640217] binder: send failed reply for transaction 3, target dead
[  109.646706] binder: send failed reply for transaction 4, target dead
[  109.651834] binder: BINDER_SET_CONTEXT_MGR already set
[  109.651839] binder: 3784:3785 ioctl 40046207 0 returned -16
[  109.652412] binder: 3784:3785 ERROR: BC_REGISTER_LOOPER called without request
[  109.671778] binder: release 3781:3783 transaction 8 in, still active
[  109.673139] binder: 3784:3786 transaction failed 29189/-22, size 0-0 line 3004
[  109.675355] binder: undelivered TRANSACTION_ERROR: 29189
[  109.691037] binder: send failed reply for transaction 8 to 3781:3783
[  109.697581] ==================================================================
[  109.699955] binder: 3784:3787 transaction failed 29189/-22, size 0-0 line 3004
[  109.712245] BUG: KASAN: use-after-free in __list_del_entry+0x196/0x1d0
[  109.714184] binder: 3788:3789 ERROR: BC_REGISTER_LOOPER called without request
[  109.726219] Read of size 8 at addr ffff8801ce78fc10 by task kworker/0:1/25
[  109.733198] 
[  109.734797] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 4.9.86-gb324a70 #50
[  109.735020] binder: release 3788:3789 transaction 13 out, still active
[  109.735023] binder: release 3788:3789 transaction 12 in, still active
[  109.735025] binder: undelivered TRANSACTION_COMPLETE
[  109.760187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  109.769515] Workqueue: events binder_deferred_func[  109.771036] binder: BINDER_SET_CONTEXT_MGR already set
[  109.771041] binder: 3791:3792 ioctl 40046207 0 returned -16
[  109.771616] binder: 3791:3792 ERROR: BC_REGISTER_LOOPER called without request
[  109.792364] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.792376] binder: 3791:3793 transaction failed 29189/-3, size 0-0 line 3127
[  109.794591] binder: undelivered TRANSACTION_ERROR: 29189
[  109.810564]  ffff8801d951fa50 ffffffff81d956f9 ffffea000739e3c0 ffff8801ce78fc10
[  109.818532]  0000000000000000[  109.819215] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.819227] binder: 3791:3794 transaction failed 29189/-3, size 0-0 line 3127
[  109.833872] binder: BINDER_SET_CONTEXT_MGR already set
[  109.833877] binder: 3795:3796 ioctl 40046207 0 returned -16
[  109.834449] binder: 3795:3796 ERROR: BC_REGISTER_LOOPER called without request
[  109.852318]  ffff8801ce78fc10[  109.855198] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.855210] binder: 3795:3797 transaction failed 29189/-3, size 0-0 line 3127
[  109.857434] binder: undelivered TRANSACTION_ERROR: 29189
[  109.873308]  ffffed0038a21949 ffff8801d951fa88
[  109.878109]  ffffffff8153e083 ffff8801ce78fc10[  109.882078] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.882090] binder: 3795:3798 transaction failed 29189/-3, size 0-0 line 3127
[  109.895251]  0000000000000008[  109.895707] binder: BINDER_SET_CONTEXT_MGR already set
[  109.895712] binder: 3799:3800 ioctl 40046207 0 returned -16
[  109.896279] binder: 3799:3800 ERROR: BC_REGISTER_LOOPER called without request
[  109.916404]  0000000000000000[  109.917031] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.917043] binder: 3799:3801 transaction failed 29189/-3, size 0-0 line 3127
[  109.919259] binder: undelivered TRANSACTION_ERROR: 29189
[  109.937385] Call Trace:
[  109.939943]  [<ffffffff81d956f9>] dump_stack+0xc1/0x128
[  109.943881] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.943893] binder: 3799:3802 transaction failed 29189/-3, size 0-0 line 3127
[  109.957484] binder: BINDER_SET_CONTEXT_MGR already set
[  109.957488] binder: 3803:3804 ioctl 40046207 0 returned -16
[  109.958059] binder: 3803:3804 ERROR: BC_REGISTER_LOOPER called without request
[  109.976175]  [<ffffffff8153e083>] print_address_description+0x73/0x280
[  109.978784] binder_alloc: 3788: binder_alloc_buf, no vma
[  109.978794] binder: 3803:3805 transaction failed 29189/-3, size 0-0 line 3127
[  109.981007] binder: undelivered TRANSACTION_ERROR: 29189
[  110.000901]  [<ffffffff8153e5a5>] kasan_report+0x275/0x360
[  110.005700] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.005712] binder: 3803:3806 transaction failed 29189/-3, size 0-0 line 3127
[  110.019142]  [<ffffffff81dfd0b6>] ? __list_del_entry+0x196/0x1d0
[  110.019300] binder: BINDER_SET_CONTEXT_MGR already set
[  110.019305] binder: 3807:3808 ioctl 40046207 0 returned -16
[  110.019873] binder: 3807:3808 ERROR: BC_REGISTER_LOOPER called without request
[  110.040632] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.040643] binder: 3807:3809 transaction failed 29189/-3, size 0-0 line 3127
[  110.042863] binder: undelivered TRANSACTION_ERROR: 29189
[  110.061570]  [<ffffffff8153e704>] __asan_report_load8_noabort+0x14/0x20
[  110.067610] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.067620] binder: 3807:3810 transaction failed 29189/-3, size 0-0 line 3127
[  110.080939]  [<ffffffff81dfd0b6>] __list_del_entry+0x196/0x1d0
[  110.081167] binder: BINDER_SET_CONTEXT_MGR already set
[  110.081172] binder: 3811:3812 ioctl 40046207 0 returned -16
[  110.081736] binder: 3811:3812 ERROR: BC_REGISTER_LOOPER called without request
[  110.102471] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.102481] binder: 3811:3813 transaction failed 29189/-3, size 0-0 line 3127
[  110.104698] binder: undelivered TRANSACTION_ERROR: 29189
[  110.123194]  [<ffffffff82d64cbc>] binder_release_work+0x8c/0x260
[  110.129309]  [<ffffffff82d648da>] ? binder_send_failed_reply+0x18a/0x3a0
[  110.129323] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.129335] binder: 3811:3814 transaction failed 29189/-3, size 0-0 line 3127
[  110.142986] binder: BINDER_SET_CONTEXT_MGR already set
[  110.142991] binder: 3815:3816 ioctl 40046207 0 returned -16
[  110.143574] binder: 3815:3816 ERROR: BC_REGISTER_LOOPER called without request
[  110.164327] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.164339] binder: 3815:3817 transaction failed 29189/-3, size 0-0 line 3127
[  110.166556] binder: undelivered TRANSACTION_ERROR: 29189
[  110.185076]  [<ffffffff82d652b8>] binder_thread_release+0x428/0x600
[  110.191189] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.191202] binder: 3815:3818 transaction failed 29189/-3, size 0-0 line 3127
[  110.204110]  [<ffffffff82d658cf>] binder_deferred_func+0x43f/0xd10
[  110.204952] binder: BINDER_SET_CONTEXT_MGR already set
[  110.204956] binder: 3819:3820 ioctl 40046207 0 returned -16
[  110.205522] binder: 3819:3820 ERROR: BC_REGISTER_LOOPER called without request
[  110.226260] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.226272] binder: 3819:3821 transaction failed 29189/-3, size 0-0 line 3127
[  110.228491] binder: undelivered TRANSACTION_ERROR: 29189
[  110.246698]  [<ffffffff81234d01>] ? __lock_is_held+0xa1/0xf0
[  110.252468]  [<ffffffff811898a0>] process_one_work+0x7e0/0x1610
[  110.253112] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.253124] binder: 3819:3822 transaction failed 29189/-3, size 0-0 line 3127
[  110.266718] binder: BINDER_SET_CONTEXT_MGR already set
[  110.266723] binder: 3823:3824 ioctl 40046207 0 returned -16
[  110.267290] binder: 3823:3824 ERROR: BC_REGISTER_LOOPER called without request
[  110.288023] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.288035] binder: 3823:3825 transaction failed 29189/-3, size 0-0 line 3127
[  110.290265] binder: undelivered TRANSACTION_ERROR: 29189
[  110.307438]  [<ffffffff811897ec>] ? process_one_work+0x72c/0x1610
[  110.313636]  [<ffffffff811890c0>] ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[  110.314863] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.314874] binder: 3823:3826 transaction failed 29189/-3, size 0-0 line 3127
[  110.328481] binder: BINDER_SET_CONTEXT_MGR already set
[  110.328486] binder: 3827:3828 ioctl 40046207 0 returned -16
[  110.329046] binder: 3827:3828 ERROR: BC_REGISTER_LOOPER called without request
[  110.349768] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.349779] binder: 3827:3829 transaction failed 29189/-3, size 0-0 line 3127
[  110.351990] binder: undelivered TRANSACTION_ERROR: 29189
[  110.369055]  [<ffffffff8118a7b0>] worker_thread+0xe0/0x10d0
[  110.374737]  [<ffffffff838a4583>] ? __schedule+0x683/0x1ba0
[  110.376626] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.376639] binder: 3827:3830 transaction failed 29189/-3, size 0-0 line 3127
[  110.390189] binder: BINDER_SET_CONTEXT_MGR already set
[  110.390193] binder: 3831:3832 ioctl 40046207 0 returned -16
[  110.390773] binder: 3831:3832 ERROR: BC_REGISTER_LOOPER called without request
[  110.411308]  [<ffffffff8119a7bd>] kthread+0x26d/0x300
[  110.411487] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.411498] binder: 3831:3833 transaction failed 29189/-3, size 0-0 line 3127
[  110.413710] binder: undelivered TRANSACTION_ERROR: 29189
[  110.434529]  [<ffffffff8118a6d0>] ? process_one_work+0x1610/0x1610
[  110.438308] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.438324] binder: 3831:3834 transaction failed 29189/-3, size 0-0 line 3127
[  110.451909] binder: BINDER_SET_CONTEXT_MGR already set
[  110.451914] binder: 3835:3836 ioctl 40046207 0 returned -16
[  110.452471] binder: 3835:3836 ERROR: BC_REGISTER_LOOPER called without request
[  110.471695]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  110.473189] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.473200] binder: 3835:3837 transaction failed 29189/-3, size 0-0 line 3127
[  110.475417] binder: undelivered TRANSACTION_ERROR: 29189
[  110.495351]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  110.499987] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.499997] binder: 3835:3838 transaction failed 29189/-3, size 0-0 line 3127
[  110.513506] binder: BINDER_SET_CONTEXT_MGR already set
[  110.513510] binder: 3839:3840 ioctl 40046207 0 returned -16
[  110.514062] binder: 3839:3840 ERROR: BC_REGISTER_LOOPER called without request
[  110.531834]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  110.534819] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.534831] binder: 3839:3841 transaction failed 29189/-3, size 0-0 line 3127
[  110.537043] binder: undelivered TRANSACTION_ERROR: 29189
[  110.555491]  [<ffffffff838b57ac>] ret_from_fork+0x5c/0x70
[  110.560997] 
[  110.561641] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.561651] binder: 3839:3842 transaction failed 29189/-3, size 0-0 line 3127
[  110.575243] Allocated by task 3783:
[  110.575440] binder: BINDER_SET_CONTEXT_MGR already set
[  110.575444] binder: 3843:3844 ioctl 40046207 0 returned -16
[  110.576008] binder: 3843:3844 ERROR: BC_REGISTER_LOOPER called without request
[  110.596783] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.596794] binder: 3843:3845 transaction failed 29189/-3, size 0-0 line 3127
[  110.599017] binder: undelivered TRANSACTION_ERROR: 29189
[  110.615145]  save_stack_trace+0x16/0x20
[  110.619089]  save_stack+0x43/0xd0
[  110.622510]  kasan_kmalloc+0xad/0xe0
[  110.623681] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.623691] binder: 3843:3846 transaction failed 29189/-3, size 0-0 line 3127
[  110.637205] binder: BINDER_SET_CONTEXT_MGR already set
[  110.637210] binder: 3847:3848 ioctl 40046207 0 returned -16
[  110.637768] binder: 3847:3848 ERROR: BC_REGISTER_LOOPER called without request
[  110.657073]  kmem_cache_alloc_trace+0xfb/0x2a0
[  110.658487] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.658498] binder: 3847:3849 transaction failed 29189/-3, size 0-0 line 3127
[  110.660710] binder: undelivered TRANSACTION_ERROR: 29189
[  110.679683]  binder_transaction+0x103c/0x7040
[  110.684144]  binder_thread_write+0x8d4/0x31f0
[  110.685350] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.685361] binder: 3847:3850 transaction failed 29189/-3, size 0-0 line 3127
[  110.699468] binder: BINDER_SET_CONTEXT_MGR already set
[  110.699472] binder: 3851:3852 ioctl 40046207 0 returned -16
[  110.700036] binder: 3851:3852 ERROR: BC_REGISTER_LOOPER called without request
[  110.719501]  binder_ioctl_write_read.isra.55+0x1ed/0x9a0
[  110.720742] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.720753] binder: 3851:3853 transaction failed 29189/-3, size 0-0 line 3127
[  110.722977] binder: undelivered TRANSACTION_ERROR: 29189
[  110.743003]  binder_ioctl+0xaea/0x11b0
[  110.746862]  do_vfs_ioctl+0x1aa/0x1140
[  110.747569] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.747579] binder: 3851:3854 transaction failed 29189/-3, size 0-0 line 3127
[  110.761412] binder: BINDER_SET_CONTEXT_MGR already set
[  110.761417] binder: 3855:3856 ioctl 40046207 0 returned -16
[  110.761946] binder: 3855:3856 ERROR: BC_REGISTER_LOOPER called without request
[  110.781605]  SyS_ioctl+0x8f/0xc0
[  110.782728] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.782739] binder: 3855:3857 transaction failed 29189/-3, size 0-0 line 3127
[  110.784954] binder: undelivered TRANSACTION_ERROR: 29189
[  110.802997]  do_syscall_64+0x1a4/0x490
[  110.806857]  entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  110.809579] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.809590] binder: 3855:3858 transaction failed 29189/-3, size 0-0 line 3127
[  110.824159] binder: BINDER_SET_CONTEXT_MGR already set
[  110.824164] binder: 3859:3860 ioctl 40046207 0 returned -16
[  110.824733] binder: 3859:3860 ERROR: BC_REGISTER_LOOPER called without request
[  110.842801] 
[  110.844396] Freed by task 25:
[  110.845474] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.845484] binder: 3859:3861 transaction failed 29189/-3, size 0-0 line 3127
[  110.847707] binder: undelivered TRANSACTION_ERROR: 29189
[  110.865541]  save_stack_trace+0x16/0x20
[  110.869485]  save_stack+0x43/0xd0
[  110.872330] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.872341] binder: 3859:3862 transaction failed 29189/-3, size 0-0 line 3127
[  110.885554]  kasan_slab_free+0x72/0xc0
[  110.885967] binder: BINDER_SET_CONTEXT_MGR already set
[  110.885972] binder: 3863:3864 ioctl 40046207 0 returned -16
[  110.886536] binder: 3863:3864 ERROR: BC_REGISTER_LOOPER called without request
[  110.907288] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.907299] binder: 3863:3865 transaction failed 29189/-3, size 0-0 line 3127
[  110.909513] binder: undelivered TRANSACTION_ERROR: 29189
[  110.925706]  kfree+0x103/0x300
[  110.928871]  binder_free_transaction+0x6a/0x90
[  110.933423]  binder_send_failed_reply+0x185/0x3a0
[  110.934144] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.934155] binder: 3863:3866 transaction failed 29189/-3, size 0-0 line 3127
[  110.947769] binder: BINDER_SET_CONTEXT_MGR already set
[  110.947774] binder: 3867:3868 ioctl 40046207 0 returned -16
[  110.948346] binder: 3867:3868 ERROR: BC_REGISTER_LOOPER called without request
[  110.969090] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.969102] binder: 3867:3869 transaction failed 29189/-3, size 0-0 line 3127
[  110.971324] binder: undelivered TRANSACTION_ERROR: 29189
[  110.987194]  binder_thread_release+0x416/0x600
[  110.991745]  binder_deferred_func+0x43f/0xd10
[  110.995938] binder_alloc: 3788: binder_alloc_buf, no vma
[  110.995949] binder: 3867:3870 transaction failed 29189/-3, size 0-0 line 3127
[  111.008868]  process_one_work+0x7e0/0x1610
[  111.009544] binder: BINDER_SET_CONTEXT_MGR already set
[  111.009549] binder: 3871:3872 ioctl 40046207 0 returned -16
[  111.010107] binder: 3871:3872 ERROR: BC_REGISTER_LOOPER called without request
[  111.030854] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.030865] binder: 3871:3873 transaction failed 29189/-3, size 0-0 line 3127
[  111.033089] binder: undelivered TRANSACTION_ERROR: 29189
[  111.049375]  worker_thread+0xe0/0x10d0
[  111.053232]  kthread+0x26d/0x300
[  111.056568]  ret_from_fork+0x5c/0x70
[  111.057732] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.057743] binder: 3871:3874 transaction failed 29189/-3, size 0-0 line 3127
[  111.071367] binder: BINDER_SET_CONTEXT_MGR already set
[  111.071372] binder: 3875:3876 ioctl 40046207 0 returned -16
[  111.071947] binder: 3875:3876 ERROR: BC_REGISTER_LOOPER called without request
[  111.091125] 
[  111.092666] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.092677] binder: 3875:3877 transaction failed 29189/-3, size 0-0 line 3127
[  111.094892] binder: undelivered TRANSACTION_ERROR: 29189
[  111.110781] The buggy address belongs to the object at ffff8801ce78fc00
[  111.110781]  which belongs to the cache kmalloc-192 of size 192
[  111.119513] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.119524] binder: 3875:3878 transaction failed 29189/-3, size 0-0 line 3127
[  111.133142] binder: BINDER_SET_CONTEXT_MGR already set
[  111.133146] binder: 3879:3880 ioctl 40046207 0 returned -16
[  111.133708] binder: 3879:3880 ERROR: BC_REGISTER_LOOPER called without request
[  111.154284] The buggy address is located 16 bytes inside of
[  111.154284]  192-byte region [ffff8801ce78fc00, ffff8801ce78fcc0)
[  111.154440] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.154451] binder: 3879:3881 transaction failed 29189/-3, size 0-0 line 3127
[  111.156663] binder: undelivered TRANSACTION_ERROR: 29189
[  111.181318] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.181329] binder: 3879:3882 transaction failed 29189/-3, size 0-0 line 3127
[  111.195188] binder: BINDER_SET_CONTEXT_MGR already set
[  111.195193] binder: 3883:3884 ioctl 40046207 0 returned -16
[  111.195764] binder: 3883:3884 ERROR: BC_REGISTER_LOOPER called without request
[  111.216478] The buggy address belongs to the page:
[  111.216509] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.216521] binder: 3883:3885 transaction failed 29189/-3, size 0-0 line 3127
[  111.218739] binder: undelivered TRANSACTION_ERROR: 29189
[  111.239454] page:ffffea000739e3c0 count:1 mapcount:0 mapping:          (null) index:0x0[  111.243387] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.243398] binder: 3883:3886 transaction failed 29189/-3, size 0-0 line 3127
[  111.256981] binder: BINDER_SET_CONTEXT_MGR already set
[  111.256985] binder: 3887:3888 ioctl 40046207 0 returned -16
[  111.257546] binder: 3887:3888 ERROR: BC_REGISTER_LOOPER called without request
[  111.278290] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.278301] binder: 3887:3889 transaction failed 29189/-3, size 0-0 line 3127
[  111.280515] binder: undelivered TRANSACTION_ERROR: 29189
[  111.296368] flags: 0x8000000000000080(slab)
[  111.300654] page dumped because: kasan: bad access detected
[  111.305106] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.305116] binder: 3887:3890 transaction failed 29189/-3, size 0-0 line 3127
[  111.318640] binder: BINDER_SET_CONTEXT_MGR already set
[  111.318645] binder: 3891:3892 ioctl 40046207 0 returned -16
[  111.319212] binder: 3891:3892 ERROR: BC_REGISTER_LOOPER called without request
[  111.337229] 
[  111.338824] Memory state around the buggy address:
[  111.339959] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.339971] binder: 3891:3893 transaction failed 29189/-3, size 0-0 line 3127
[  111.342197] binder: undelivered TRANSACTION_ERROR: 29189
[  111.361783]  ffff8801ce78fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  111.366803] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.366815] binder: 3891:3894 transaction failed 29189/-3, size 0-0 line 3127
[  111.380480] binder: BINDER_SET_CONTEXT_MGR already set
[  111.380485] binder: 3895:3896 ioctl 40046207 0 returned -16
[  111.381064] binder: 3895:3896 ERROR: BC_REGISTER_LOOPER called without request
[  111.399991]  ffff8801ce78fb80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  111.401784] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.401795] binder: 3895:3897 transaction failed 29189/-3, size 0-0 line 3127
[  111.404010] binder: undelivered TRANSACTION_ERROR: 29189
[  111.425380] >ffff8801ce78fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  111.428599] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.428610] binder: 3895:3898 transaction failed 29189/-3, size 0-0 line 3127
[  111.442282] binder: BINDER_SET_CONTEXT_MGR already set
[  111.442287] binder: 3899:3900 ioctl 40046207 0 returned -16
[  111.442856] binder: 3899:3900 ERROR: BC_REGISTER_LOOPER called without request
[  111.463617]                          ^
[  111.463640] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.463651] binder: 3899:3901 transaction failed 29189/-3, size 0-0 line 3127
[  111.465890] binder: undelivered TRANSACTION_ERROR: 29189
[  111.485531]  ffff8801ce78fc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  111.490488] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.490499] binder: 3899:3902 transaction failed 29189/-3, size 0-0 line 3127
[  111.505168] binder: BINDER_SET_CONTEXT_MGR already set
[  111.505173] binder: 3903:3904 ioctl 40046207 0 returned -16
[  111.505747] binder: 3903:3904 ERROR: BC_REGISTER_LOOPER called without request
[  111.523747]  ffff8801ce78fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  111.526488] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.526499] binder: 3903:3905 transaction failed 29189/-3, size 0-0 line 3127
[  111.528722] binder: undelivered TRANSACTION_ERROR: 29189
[  111.549140] ==================================================================
[  111.553348] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.553360] binder: 3903:3906 transaction failed 29189/-3, size 0-0 line 3127
[  111.566978] binder: BINDER_SET_CONTEXT_MGR already set
[  111.566983] binder: 3907:3908 ioctl 40046207 0 returned -16
[  111.567558] binder: 3907:3908 ERROR: BC_REGISTER_LOOPER called without request
[  111.587354] Disabling lock debugging due to kernel taint
[  111.588277] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.588286] binder: 3907:3909 transaction failed 29189/-3, size 0-0 line 3127
[  111.590477] binder: undelivered TRANSACTION_ERROR: 29189
[  111.610891] Kernel panic - not syncing: panic_on_warn set ...
[  111.610891] 
[  111.618225] CPU: 0 PID: 25 Comm: kworker/0:1 Tainted: G    B           4.9.86-gb324a70 #50
[  111.618531] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.618540] binder: 3907:3910 transaction failed 29189/-3, size 0-0 line 3127
[  111.632342] binder: BINDER_SET_CONTEXT_MGR already set
[  111.632346] binder: 3911:3912 ioctl 40046207 0 returned -16
[  111.632819] binder: 3911:3912 ERROR: BC_REGISTER_LOOPER called without request
[  111.653608] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.653618] binder: 3911:3913 transaction failed 29189/-3, size 0-0 line 3127
[  111.655791] binder: undelivered TRANSACTION_ERROR: 29189
[  111.676146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  111.680327] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.680337] binder: 3911:3914 transaction failed 29189/-3, size 0-0 line 3127
[  111.693342] binder: BINDER_SET_CONTEXT_MGR already set
[  111.693347] binder: 3915:3916 ioctl 40046207 0 returned -16
[  111.693821] binder: 3915:3916 ERROR: BC_REGISTER_LOOPER called without request
[  111.714605] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.714615] binder: 3915:3917 transaction failed 29189/-3, size 0-0 line 3127
[  111.716789] binder: undelivered TRANSACTION_ERROR: 29189
[  111.734439] Workqueue: events binder_deferred_func
[  111.739458]  ffff8801d951f9a8[  111.741287] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.741295] binder: 3915:3918 transaction failed 29189/-3, size 0-0 line 3127
[  111.754364] binder: BINDER_SET_CONTEXT_MGR already set
[  111.754369] binder: 3919:3920 ioctl 40046207 0 returned -16
[  111.754828] binder: 3919:3920 ERROR: BC_REGISTER_LOOPER called without request
[  111.773249]  ffffffff81d956f9[  111.775645] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.775655] binder: 3919:3921 transaction failed 29189/-3, size 0-0 line 3127
[  111.777837] binder: undelivered TRANSACTION_ERROR: 29189
[  111.794229]  ffffffff841979cf ffff8801d951fa80
[  111.799014]  0000000000000000 ffff8801ce78fc10[  111.802392] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.802402] binder: 3919:3922 transaction failed 29189/-3, size 0-0 line 3127
[  111.815498] binder: BINDER_SET_CONTEXT_MGR already set
[  111.815503] binder: 3923:3924 ioctl 40046207 0 returned -16
[  111.815965] binder: 3923:3924 ERROR: BC_REGISTER_LOOPER called without request
[  111.834432]  ffffed0038a21949[  111.836752] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.836762] binder: 3923:3925 transaction failed 29189/-3, size 0-0 line 3127
[  111.838936] binder: undelivered TRANSACTION_ERROR: 29189
[  111.855414]  ffff8801d951fa70
[  111.858609]  ffffffff8142f531 0000000041b58ab3 ffffffff8418b430[  111.863471] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.863481] binder: 3923:3926 transaction failed 29189/-3, size 0-0 line 3127
[  111.876515] binder: BINDER_SET_CONTEXT_MGR already set
[  111.876519] binder: 3927:3928 ioctl 40046207 0 returned -16
[  111.876979] binder: 3927:3928 ERROR: BC_REGISTER_LOOPER called without request
[  111.895581]  ffffffff8142f375[  111.897783] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.897793] binder: 3927:3929 transaction failed 29189/-3, size 0-0 line 3127
[  111.899968] binder: undelivered TRANSACTION_ERROR: 29189
[  111.916572] Call Trace:
[  111.919130]  [<ffffffff81d956f9>] dump_stack+0xc1/0x128
[  111.924462]  [<ffffffff8142f531>] panic+0x1bc/0x3a8
[  111.924467] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.924476] binder: 3927:3930 transaction failed 29189/-3, size 0-0 line 3127
[  111.937452] binder: BINDER_SET_CONTEXT_MGR already set
[  111.937456] binder: 3931:3932 ioctl 40046207 0 returned -16
[  111.937920] binder: 3931:3932 ERROR: BC_REGISTER_LOOPER called without request
[  111.958754] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.958763] binder: 3931:3933 transaction failed 29189/-3, size 0-0 line 3127
[  111.960940] binder: undelivered TRANSACTION_ERROR: 29189
[  111.978393]  [<ffffffff8142f375>] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7
[  111.985489] binder_alloc: 3788: binder_alloc_buf, no vma
[  111.985499] binder: 3931:3934 transaction failed 29189/-3, size 0-0 line 3127
[  111.998609] binder: BINDER_SET_CONTEXT_MGR already set
[  111.998614] binder: 3935:3936 ioctl 40046207 0 returned -16
[  111.999093] binder: 3935:3936 ERROR: BC_REGISTER_LOOPER called without request
[  112.017476]  [<ffffffff8153dff0>] kasan_end_report+0x50/0x50
[  112.019872] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.019881] binder: 3935:3937 transaction failed 29189/-3, size 0-0 line 3127
[  112.022074] binder: undelivered TRANSACTION_ERROR: 29189
[  112.041308]  [<ffffffff8153e497>] kasan_report+0x167/0x360
[  112.046576] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.046586] binder: 3935:3938 transaction failed 29189/-3, size 0-0 line 3127
[  112.059548]  [<ffffffff81dfd0b6>] ? __list_del_entry+0x196/0x1d0
[  112.059666] binder: BINDER_SET_CONTEXT_MGR already set
[  112.059671] binder: 3939:3940 ioctl 40046207 0 returned -16
[  112.060147] binder: 3939:3940 ERROR: BC_REGISTER_LOOPER called without request
[  112.080927] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.080937] binder: 3939:3941 transaction failed 29189/-3, size 0-0 line 3127
[  112.083113] binder: undelivered TRANSACTION_ERROR: 29189
[  112.102057]  [<ffffffff8153e704>] __asan_report_load8_noabort+0x14/0x20
[  112.107630] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.107640] binder: 3939:3942 transaction failed 29189/-3, size 0-0 line 3127
[  112.120776] binder: BINDER_SET_CONTEXT_MGR already set
[  112.120780] binder: 3943:3944 ioctl 40046207 0 returned -16
[  112.121234] binder: 3943:3944 ERROR: BC_REGISTER_LOOPER called without request
[  112.139668]  [<ffffffff81dfd0b6>] __list_del_entry+0x196/0x1d0
[  112.142055] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.142064] binder: 3943:3945 transaction failed 29189/-3, size 0-0 line 3127
[  112.144241] binder: undelivered TRANSACTION_ERROR: 29189
[  112.163676]  [<ffffffff82d64cbc>] binder_release_work+0x8c/0x260
[  112.168774] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.168786] binder: 3943:3946 transaction failed 29189/-3, size 0-0 line 3127
[  112.181827] binder: BINDER_SET_CONTEXT_MGR already set
[  112.181831] binder: 3947:3948 ioctl 40046207 0 returned -16
[  112.182285] binder: 3947:3948 ERROR: BC_REGISTER_LOOPER called without request
[  112.200732]  [<ffffffff82d648da>] ? binder_send_failed_reply+0x18a/0x3a0
[  112.203135] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.203148] binder: 3947:3949 transaction failed 29189/-3, size 0-0 line 3127
[  112.205350] binder: undelivered TRANSACTION_ERROR: 29189
[  112.225626]  [<ffffffff82d652b8>] binder_thread_release+0x428/0x600
[  112.229937] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.229951] binder: 3947:3950 transaction failed 29189/-3, size 0-0 line 3127
[  112.243846] binder: BINDER_SET_CONTEXT_MGR already set
[  112.243853] binder: 3951:3952 ioctl 40046207 0 returned -16
[  112.244415] binder: 3951:3952 ERROR: BC_REGISTER_LOOPER called without request
[  112.262894]  [<ffffffff82d658cf>] binder_deferred_func+0x43f/0xd10
[  112.265144] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.265158] binder: 3951:3953 transaction failed 29189/-3, size 0-0 line 3127
[  112.267358] binder: undelivered TRANSACTION_ERROR: 29189
[  112.287250]  [<ffffffff81234d01>] ? __lock_is_held+0xa1/0xf0
[  112.291921] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.291933] binder: 3951:3954 transaction failed 29189/-3, size 0-0 line 3127
[  112.305683]  [<ffffffff811898a0>] process_one_work+0x7e0/0x1610
[  112.306667] binder: BINDER_SET_CONTEXT_MGR already set
[  112.306673] binder: 3955:3956 ioctl 40046207 0 returned -16
[  112.307221] binder: 3955:3956 ERROR: BC_REGISTER_LOOPER called without request
[  112.327957] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.327971] binder: 3955:3957 transaction failed 29189/-3, size 0-0 line 3127
[  112.330173] binder: undelivered TRANSACTION_ERROR: 29189
[  112.348033]  [<ffffffff811897ec>] ? process_one_work+0x72c/0x1610
[  112.354248]  [<ffffffff811890c0>] ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[  112.354752] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.354765] binder: 3955:3958 transaction failed 29189/-3, size 0-0 line 3127
[  112.368425] binder: BINDER_SET_CONTEXT_MGR already set
[  112.368431] binder: 3959:3960 ioctl 40046207 0 returned -16
[  112.368990] binder: 3959:3960 ERROR: BC_REGISTER_LOOPER called without request
[  112.389702] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.389715] binder: 3959:3961 transaction failed 29189/-3, size 0-0 line 3127
[  112.391912] binder: undelivered TRANSACTION_ERROR: 29189
[  112.409679]  [<ffffffff8118a7b0>] worker_thread+0xe0/0x10d0
[  112.415369]  [<ffffffff838a4583>] ? __schedule+0x683/0x1ba0
[  112.416459] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.416471] binder: 3959:3962 transaction failed 29189/-3, size 0-0 line 3127
[  112.430124] binder: BINDER_SET_CONTEXT_MGR already set
[  112.430129] binder: 3963:3964 ioctl 40046207 0 returned -16
[  112.430695] binder: 3963:3964 ERROR: BC_REGISTER_LOOPER called without request
[  112.451409] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.451422] binder: 3963:3965 transaction failed 29189/-3, size 0-0 line 3127
[  112.453625] binder: undelivered TRANSACTION_ERROR: 29189
[  112.470016]  [<ffffffff8119a7bd>] kthread+0x26d/0x300
[  112.475177]  [<ffffffff8118a6d0>] ? process_one_work+0x1610/0x1610
[  112.478182] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.478195] binder: 3963:3966 transaction failed 29189/-3, size 0-0 line 3127
[  112.491877] binder: BINDER_SET_CONTEXT_MGR already set
[  112.491883] binder: 3967:3968 ioctl 40046207 0 returned -16
[  112.492440] binder: 3967:3968 ERROR: BC_REGISTER_LOOPER called without request
[  112.512363]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  112.513169] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.513182] binder: 3967:3969 transaction failed 29189/-3, size 0-0 line 3127
[  112.515379] binder: undelivered TRANSACTION_ERROR: 29189
[  112.536039]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  112.539948] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.539961] binder: 3967:3970 transaction failed 29189/-3, size 0-0 line 3127
[  112.554313]  [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[  112.554675] binder: BINDER_SET_CONTEXT_MGR already set
[  112.554681] binder: 3971:3972 ioctl 40046207 0 returned -16
[  112.555240] binder: 3971:3972 ERROR: BC_REGISTER_LOOPER called without request
[  112.575956] binder_alloc: 3788: binder_alloc_buf, no vma
[  112.575968] binder: 3971:3973 transaction failed 29189/-3, size 0-0 line 3127
[  112.578166] binder: undelivered TRANSACTION_ERROR: 29189
[  112.596230]  [<ffffffff838b57ac>] ret_from_fork+0x5c/0x70
[  112.602192] Dumping ftrace buffer:
[  112.605708]    (ftrace buffer empty)
[  112.609388] Kernel Offset: disabled
[  112.613000] Rebooting in 86400 seconds..