[....] Starting enhanced syslogd: rsyslogd[ 13.382821] audit: type=1400 audit(1515740650.449:4): avc: denied { syslog } for pid=3190 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.232' (ECDSA) to the list of known hosts. 2018/01/12 07:05:46 parsed 1 programs 2018/01/12 07:05:46 executed programs: 0 syzkaller login: [ 109.876410] IPVS: Creating netns size=2536 id=1 [ 109.889330] audit: type=1400 audit(1515740746.949:5): avc: denied { set_context_mgr } for pid=3422 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 109.913548] audit: type=1400 audit(1515740746.979:6): avc: denied { call } for pid=3422 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 109.923336] IPVS: Creating netns size=2536 id=2 [ 109.931315] binder: 3427:3428 BC_FREE_BUFFER u0000000020000000 no match [ 109.932444] binder: release 3427:3428 transaction 4 out, still active [ 109.932469] binder: undelivered TRANSACTION_COMPLETE [ 109.932506] binder: send failed reply for transaction 4, target dead [ 109.932511] binder: send failed reply for transaction 5 to 3427:3428 [ 109.948264] binder: release 3427:3428 transaction 7 out, still active [ 109.948267] binder: undelivered TRANSACTION_COMPLETE [ 109.948282] binder: send failed reply for transaction 7, target dead [ 109.948449] binder: undelivered TRANSACTION_COMPLETE [ 109.948452] binder: undelivered TRANSACTION_ERROR: 29189 [ 109.948655] binder: 3422:3425 BC_FREE_BUFFER u0000000020000000 no match [ 109.951202] binder: 3432:3433 BC_FREE_BUFFER u0000000020000000 no match [ 109.952027] binder: release 3432:3433 transaction 10 out, still active [ 109.952030] binder: undelivered TRANSACTION_COMPLETE [ 109.952041] binder: send failed reply for transaction 10, target dead [ 109.952046] binder: send failed reply for transaction 11 to 3432:3433 [ 109.967903] IPVS: Creating netns size=2536 id=3 [ 109.975766] binder: 3435:3436 BC_FREE_BUFFER u0000000020000000 no match [ 109.976714] binder: release 3435:3436 transaction 15 out, still active [ 109.976717] binder: undelivered TRANSACTION_COMPLETE [ 109.976730] binder: send failed reply for transaction 15, target dead [ 109.976734] binder: send failed reply for transaction 16 to 3435:3436 [ 109.979119] binder: release 3432:3433 transaction 13 out, still active [ 109.979122] binder: undelivered TRANSACTION_COMPLETE [ 109.979137] binder: send failed reply for transaction 13, target dead [ 109.984611] binder: undelivered TRANSACTION_COMPLETE [ 109.984615] binder: undelivered TRANSACTION_ERROR: 29189 [ 109.985571] binder: BINDER_SET_CONTEXT_MGR already set [ 109.985576] binder: 3422:3438 ioctl 40046207 0 returned -16 [ 109.986963] binder: 3441:3442 BC_FREE_BUFFER u0000000020000000 no match [ 109.987838] binder: release 3441:3442 transaction 19 out, still active [ 109.987840] binder: undelivered TRANSACTION_COMPLETE [ 109.987851] binder: send failed reply for transaction 19, target dead [ 109.987856] binder: send failed reply for transaction 20 to 3441:3442 [ 109.998376] IPVS: Creating netns size=2536 id=4 [ 109.999348] binder_alloc: 3422: binder_alloc_buf, no vma [ 109.999363] binder: 3422:3425 transaction failed 29189/-3, size 0-0 line 3127 [ 110.003015] binder: release 3435:3436 transaction 21 out, still active [ 110.003017] binder: undelivered TRANSACTION_COMPLETE [ 110.003033] binder: send failed reply for transaction 21, target dead [ 110.003075] binder: undelivered TRANSACTION_COMPLETE [ 110.003078] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.005522] binder: 3444:3445 BC_FREE_BUFFER u0000000020000000 no match [ 110.006525] binder: release 3444:3445 transaction 25 out, still active [ 110.006528] binder: undelivered TRANSACTION_COMPLETE [ 110.006539] binder: send failed reply for transaction 25, target dead [ 110.006543] binder: send failed reply for transaction 26 to 3444:3445 [ 110.011530] binder: release 3441:3442 transaction 27 out, still active [ 110.011532] binder: undelivered TRANSACTION_COMPLETE [ 110.011546] binder: send failed reply for transaction 27, target dead [ 110.015204] binder: undelivered TRANSACTION_COMPLETE [ 110.015208] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.018419] binder: 3447:3449 BC_FREE_BUFFER u0000000020000000 no match [ 110.019297] binder: release 3447:3449 transaction 29 out, still active [ 110.019299] binder: undelivered TRANSACTION_COMPLETE [ 110.019310] binder: send failed reply for transaction 29, target dead [ 110.019314] binder: send failed reply for transaction 30 to 3447:3449 [ 110.025881] binder: 3451:3452 BC_FREE_BUFFER u0000000020000000 no match [ 110.026747] binder: release 3451:3452 transaction 32 out, still active [ 110.026749] binder: undelivered TRANSACTION_COMPLETE [ 110.026760] binder: send failed reply for transaction 32, target dead [ 110.026764] binder: send failed reply for transaction 33 to 3451:3452 [ 110.030400] IPVS: Creating netns size=2536 id=5 [ 110.043326] binder: release 3444:3445 transaction 37 out, still active [ 110.043329] binder: undelivered TRANSACTION_COMPLETE [ 110.043346] binder: send failed reply for transaction 37, target dead [ 110.043385] binder: undelivered TRANSACTION_COMPLETE [ 110.043388] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.045465] binder: release 3447:3449 transaction 38 out, still active [ 110.045467] binder: undelivered TRANSACTION_COMPLETE [ 110.045482] binder: send failed reply for transaction 38, target dead [ 110.050669] binder: undelivered TRANSACTION_COMPLETE [ 110.050673] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.052518] binder: release 3451:3452 transaction 39 out, still active [ 110.052520] binder: undelivered TRANSACTION_COMPLETE [ 110.052534] binder: send failed reply for transaction 39, target dead [ 110.052573] binder: undelivered TRANSACTION_COMPLETE [ 110.052577] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.052710] binder: 3456:3457 BC_FREE_BUFFER u0000000020000000 no match [ 110.054369] binder: release 3456:3457 transaction 41 out, still active [ 110.054372] binder: undelivered TRANSACTION_COMPLETE [ 110.054383] binder: send failed reply for transaction 41, target dead [ 110.054389] binder: send failed reply for transaction 42 to 3456:3457 [ 110.055319] binder: 3458:3461 BC_FREE_BUFFER u0000000020000000 no match [ 110.056221] binder: release 3458:3461 transaction 44 out, still active [ 110.056223] binder: undelivered TRANSACTION_COMPLETE [ 110.056234] binder: send failed reply for transaction 44, target dead [ 110.056239] binder: send failed reply for transaction 45 to 3458:3461 [ 110.065323] binder: 3462:3466 BC_FREE_BUFFER u0000000020000000 no match [ 110.066201] binder: release 3462:3466 transaction 48 out, still active [ 110.066203] binder: undelivered TRANSACTION_COMPLETE [ 110.066213] binder: send failed reply for transaction 48, target dead [ 110.066218] binder: send failed reply for transaction 49 to 3462:3466 [ 110.068256] IPVS: Creating netns size=2536 id=6 [ 110.079490] binder: 3467:3469 BC_FREE_BUFFER u0000000020000000 no match [ 110.080558] binder: release 3467:3469 transaction 54 out, still active [ 110.080561] binder: undelivered TRANSACTION_COMPLETE [ 110.080574] binder: send failed reply for transaction 54, target dead [ 110.080579] binder: send failed reply for transaction 55 to 3467:3469 [ 110.085755] binder: release 3456:3457 transaction 51 out, still active [ 110.085758] binder: undelivered TRANSACTION_COMPLETE [ 110.085778] binder: send failed reply for transaction 51, target dead [ 110.085812] binder: undelivered TRANSACTION_COMPLETE [ 110.085816] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.087013] binder: release 3462:3466 transaction 57 out, still active [ 110.087016] binder: undelivered TRANSACTION_COMPLETE [ 110.087030] binder: send failed reply for transaction 57, target dead [ 110.091017] binder: undelivered TRANSACTION_COMPLETE [ 110.091021] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.092312] binder: 3459:3464 BC_FREE_BUFFER u0000000020000000 no match [ 110.094210] binder: release 3459:3464 transaction 58 out, still active [ 110.094212] binder: undelivered TRANSACTION_COMPLETE [ 110.094224] binder: send failed reply for transaction 58, target dead [ 110.094229] binder: send failed reply for transaction 59 to 3459:3464 [ 110.100082] binder: release 3458:3461 transaction 60 out, still active [ 110.100084] binder: undelivered TRANSACTION_COMPLETE [ 110.100098] binder: send failed reply for transaction 60, target dead [ 110.106092] binder: undelivered TRANSACTION_COMPLETE [ 110.106095] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.108844] binder: 3472:3474 BC_FREE_BUFFER u0000000020000000 no match [ 110.109716] binder: release 3472:3474 transaction 64 out, still active [ 110.109718] binder: undelivered TRANSACTION_COMPLETE [ 110.109729] binder: send failed reply for transaction 64, target dead [ 110.109734] binder: send failed reply for transaction 65 to 3472:3474 [ 110.116919] binder: release 3467:3469 transaction 66 out, still active [ 110.116922] binder: undelivered TRANSACTION_COMPLETE [ 110.116935] binder: send failed reply for transaction 66, target dead [ 110.119291] binder: undelivered TRANSACTION_COMPLETE [ 110.119294] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.119918] IPVS: Creating netns size=2536 id=7 [ 110.124300] binder: send failed reply for transaction 68 to 3459:3464 [ 110.124302] ------------[ cut here ]------------ [ 110.124313] WARNING: CPU: 0 PID: 24 at drivers/android/binder.c:2151 binder_send_failed_reply+0x147/0x3a0 [ 110.124314] Unexpected reply error: 29189 [ 110.124317] Kernel panic - not syncing: panic_on_warn set ... [ 110.124317] [ 110.124323] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.9.76-g9154940 #20 [ 110.124325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.124333] Workqueue: events binder_deferred_func [ 110.124339] ffff8801d9977910 ffffffff81d93149 ffffffff83a47180 ffff8801d99779e8 [ 110.124345] ffffffff83eab900 ffffffff82d61b17 0000000000000009 ffff8801d99779d8 [ 110.124350] ffffffff8142e371 0000000041b58ab3 ffffffff84189678 ffffffff8142e1b5 [ 110.124351] Call Trace: [ 110.124358] [] dump_stack+0xc1/0x128 [ 110.124362] [] ? binder_send_failed_reply+0x147/0x3a0 [ 110.124369] [] panic+0x1bc/0x3a8 [ 110.124374] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 110.124380] [] ? vprintk_emit+0x3ad/0x750 [ 110.124385] [] ? __warn+0x1a9/0x1e0 [ 110.124390] [] ? binder_send_failed_reply+0x147/0x3a0 [ 110.124393] [] __warn+0x1c4/0x1e0 [ 110.124397] [] warn_slowpath_fmt+0xc4/0x110 [ 110.124400] [] ? __warn+0x1e0/0x1e0 [ 110.124405] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 110.124409] [] binder_send_failed_reply+0x147/0x3a0 [ 110.124413] [] binder_cleanup_transaction+0xd2/0x140 [ 110.124418] [] binder_release_work+0x1b0/0x260 [ 110.124425] [] ? _raw_spin_unlock+0x2c/0x50 [ 110.124429] [] binder_deferred_func+0x9a2/0xd10 [ 110.124435] [] ? __lock_is_held+0xa1/0xf0 [ 110.124442] [] process_one_work+0x7e0/0x1610 [ 110.124446] [] ? process_one_work+0x72c/0x1610 [ 110.124450] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 110.124454] [] worker_thread+0xe0/0x10d0 [ 110.124458] [] ? __schedule+0x683/0x1ba0 [ 110.124462] [] kthread+0x26d/0x300 [ 110.124466] [] ? process_one_work+0x1610/0x1610 [ 110.124469] [] ? kthread_park+0xa0/0xa0 [ 110.124474] [] ? kthread_park+0xa0/0xa0 [ 110.124477] [] ? kthread_park+0xa0/0xa0 [ 110.124480] [] ret_from_fork+0x46/0x60 [ 110.124961] Dumping ftrace buffer: [ 110.124980] (ftrace buffer empty) [ 110.124982] Kernel Offset: disabled [ 111.014258] Rebooting in 86400 seconds..