[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 11.533265] audit: type=1400 audit(1514324770.356:6): avc: denied { map } for pid=3130 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-7,10.128.0.63' (ECDSA) to the list of known hosts. syzkaller login: [ 17.626527] audit: type=1400 audit(1514324776.449:7): avc: denied { map } for pid=3144 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/26 21:46:16 parsed 1 programs 2017/12/26 21:46:16 executed programs: 0 [ 17.743151] audit: type=1400 audit(1514324776.565:8): avc: denied { map } for pid=3144 comm="syz-execprog" path="/root/syzkaller-shm342647278" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 17.769184] audit: type=1400 audit(1514324776.573:9): avc: denied { sys_admin } for pid=3149 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 17.852406] audit: type=1400 audit(1514324776.675:10): avc: denied { sys_chroot } for pid=3151 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 17.859810] binder: send failed reply for transaction 2 to 3152:3153 [ 17.883425] audit: type=1400 audit(1514324776.678:11): avc: denied { map } for pid=3152 comm="syz-executor0" path="/dev/binder0" dev="devtmpfs" ino=1064 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 17.893133] binder: send failed reply for transaction 4 to 3152:3153 [ 17.893137] ------------[ cut here ]------------ [ 17.893140] Unexpected reply error: 29189 [ 17.893273] WARNING: CPU: 0 PID: 1405 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 17.893277] Kernel panic - not syncing: panic_on_warn set ... [ 17.893277] [ 17.893285] CPU: 0 PID: 1405 Comm: kworker/0:2 Not tainted 4.15.0-rc5+ #237 [ 17.893288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 17.893296] Workqueue: events binder_deferred_func [ 17.893304] Call Trace: [ 17.893314] dump_stack+0x194/0x257 [ 17.893326] ? arch_local_irq_restore+0x53/0x53 [ 17.893341] ? vsnprintf+0x1ed/0x1900 [ 17.893356] panic+0x1e4/0x41c [ 17.893364] ? refcount_error_report+0x214/0x214 [ 17.893373] ? show_regs_print_info+0x18/0x18 [ 17.893391] ? __warn+0x1c1/0x200 [ 17.893404] ? binder_send_failed_reply+0x13b/0x350 [ 17.893410] __warn+0x1dc/0x200 [ 17.893419] ? binder_send_failed_reply+0x13b/0x350 [ 17.893430] report_bug+0x211/0x2d0 [ 17.893449] fixup_bug.part.11+0x37/0x80 [ 17.893459] do_error_trap+0x2d7/0x3e0 [ 17.893466] ? __down_trylock_console_sem+0x10d/0x1e0 [ 17.893479] ? math_error+0x400/0x400 [ 17.893486] ? vprintk_emit+0x3ea/0x590 [ 17.893497] ? vprintk_emit+0x3ea/0x590 [ 17.893515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 17.893533] do_invalid_op+0x1b/0x20 [ 17.893541] invalid_op+0x22/0x40 [ 17.893547] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 17.893551] RSP: 0018:ffff8801d43ff128 EFLAGS: 00010286 [ 17.893558] RAX: dffffc0000000008 RBX: ffff8801d54b6c00 RCX: ffffffff8159b57e [ 17.893562] RDX: 0000000000000000 RSI: 1ffff1003a7819ed RDI: 0000000000000293 [ 17.893566] RBP: ffff8801d43ff150 R08: 1ffff1003a87fdb8 R09: 0000000000000000 [ 17.893570] R10: ffff8801d43fefa0 R11: 0000000000000000 R12: ffff8801cab480c0 [ 17.893574] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c50 [ 17.893594] ? vprintk_func+0x5e/0xc0 [ 17.893610] ? binder_send_failed_reply+0x13b/0x350 [ 17.893623] binder_cleanup_transaction+0xd2/0x140 [ 17.893635] binder_release_work+0x340/0x490 [ 17.893642] ? lock_downgrade+0x980/0x980 [ 17.893655] ? kzalloc.constprop.53+0x20/0x20 [ 17.893671] ? do_raw_spin_trylock+0x190/0x190 [ 17.893682] ? kfree+0xf0/0x260 [ 17.893690] ? binder_deferred_func+0xe8a/0x12f0 [ 17.893704] ? _raw_spin_unlock+0x22/0x30 [ 17.893717] binder_deferred_func+0xdf5/0x12f0 [ 17.893745] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 17.893755] ? debug_object_deactivate+0x364/0x560 [ 17.893765] ? lock_downgrade+0x980/0x980 [ 17.893777] ? lock_release+0xa40/0xa40 [ 17.893791] ? check_noncircular+0x20/0x20 [ 17.893810] ? lock_acquire+0x1d5/0x580 [ 17.893815] ? lock_acquire+0x1d5/0x580 [ 17.893823] ? process_one_work+0xb01/0x1b10 [ 17.893848] ? __lock_is_held+0xb6/0x140 [ 17.893875] process_one_work+0xbbf/0x1b10 [ 17.893883] ? put_task_stack+0x116/0x270 [ 17.893907] ? pwq_dec_nr_in_flight+0x450/0x450 [ 17.893929] ? __schedule+0x8f3/0x2060 [ 17.893935] ? update_curr+0x47b/0xa60 [ 17.893956] ? check_noncircular+0x20/0x20 [ 17.893970] ? __lock_is_held+0xb6/0x140 [ 17.894018] ? lock_acquire+0x1d5/0x580 [ 17.894025] ? lock_acquire+0x1d5/0x580 [ 17.894032] ? worker_thread+0x4a3/0x1990 [ 17.894041] ? lock_downgrade+0x980/0x980 [ 17.894054] ? lock_release+0xa40/0xa40 [ 17.894064] ? retint_kernel+0x10/0x10 [ 17.894075] ? do_raw_spin_trylock+0x190/0x190 [ 17.894102] worker_thread+0x223/0x1990 [ 17.894140] ? process_one_work+0x1b10/0x1b10 [ 17.894153] ? _raw_spin_unlock_irq+0x27/0x70 [ 17.894164] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 17.894174] ? trace_hardirqs_on+0xd/0x10 [ 17.894181] ? _raw_spin_unlock_irq+0x27/0x70 [ 17.894189] ? finish_task_switch+0x1d3/0x740 [ 17.894194] ? finish_task_switch+0x1aa/0x740 [ 17.894207] ? copy_overflow+0x20/0x20 [ 17.894232] ? __schedule+0x8f3/0x2060 [ 17.894263] ? find_held_lock+0x35/0x1d0 [ 17.894283] ? cache_grow_end.part.35+0x84/0x180 [ 17.894298] ? find_held_lock+0x35/0x1d0 [ 17.894318] ? complete+0x62/0x80 [ 17.894338] ? __schedule+0x2060/0x2060 [ 17.894345] ? do_wait_intr_irq+0x3e0/0x3e0 [ 17.894351] ? __lockdep_init_map+0xe4/0x650 [ 17.894362] ? do_raw_spin_trylock+0x190/0x190 [ 17.894369] ? lockdep_init_map+0x9/0x10 [ 17.894377] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 17.894388] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 17.894397] ? trace_hardirqs_on+0xd/0x10 [ 17.894405] ? __kthread_parkme+0x175/0x240 [ 17.894418] kthread+0x33c/0x400 [ 17.894426] ? process_one_work+0x1b10/0x1b10 [ 17.894431] ? kthread_stop+0x7a0/0x7a0 [ 17.894443] ret_from_fork+0x24/0x30 [ 17.908501] Dumping ftrace buffer: [ 17.908536] (ftrace buffer empty) [ 17.908539] Kernel Offset: disabled [ 18.361607] Rebooting in 86400 seconds..