[....] Starting enhanced syslogd: rsyslogd[ 13.351915] audit: type=1400 audit(1514911718.946:4): avc: denied { syslog } for pid=3179 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.247' (ECDSA) to the list of known hosts. 2018/01/02 16:48:52 parsed 1 programs 2018/01/02 16:48:52 executed programs: 0 syzkaller login: [ 26.746307] IPVS: Creating netns size=2536 id=1 [ 26.759296] binder: 3361:3362 ioctl 40046205 81 returned -22 [ 26.765967] audit: type=1400 audit(1514911732.356:5): avc: denied { set_context_mgr } for pid=3361 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 26.790161] IPVS: Creating netns size=2536 id=2 [ 26.798848] binder: 3361:3362 ERROR: BC_REGISTER_LOOPER called without request [ 26.808640] audit: type=1400 audit(1514911732.406:6): avc: denied { call } for pid=3361 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 26.810933] binder: 3366:3368 ioctl 40046205 81 returned -22 [ 26.811305] binder: 3366:3368 ERROR: BC_REGISTER_LOOPER called without request [ 26.814955] binder: send failed reply for transaction 4 to 3366:3368 [ 26.833281] binder: 3366:3368 ioctl 40046205 81 returned -22 [ 26.838090] binder: 3366:3368 ERROR: BC_REGISTER_LOOPER called without request [ 26.852592] binder: send failed reply for transaction 6 to 3366:3369 [ 26.856817] binder: undelivered TRANSACTION_COMPLETE [ 26.856824] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.856832] binder: undelivered TRANSACTION_COMPLETE [ 26.856837] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.865361] IPVS: Creating netns size=2536 id=3 [ 26.876898] binder: 3374:3375 ioctl 40046205 81 returned -22 [ 26.877281] binder: 3374:3375 ERROR: BC_REGISTER_LOOPER called without request [ 26.879071] binder: 3372:3373 ioctl 40046205 81 returned -22 [ 26.879193] binder: 3361:3364 ioctl 40046205 81 returned -22 [ 26.879659] binder: 3372:3373 ERROR: BC_REGISTER_LOOPER called without request [ 26.880446] binder: BINDER_SET_CONTEXT_MGR already set [ 26.880452] binder: 3361:3364 ioctl 40046207 0 returned -16 [ 26.889254] binder: send failed reply for transaction 8 to 3374:3375 [ 26.897161] binder: 3361:3364 ERROR: BC_REGISTER_LOOPER called without request [ 26.897219] binder: 3374:3375 ioctl 40046205 81 returned -22 [ 26.897350] binder_alloc: 3361: binder_alloc_buf, no vma [ 26.897366] binder: 3361:3371 transaction failed 29189/-3, size 0-0 line 3127 [ 26.899639] binder: send failed reply for transaction 10 to 3372:3373 [ 26.901856] binder: 3372:3373 ioctl 40046205 81 returned -22 [ 26.902052] binder: 3374:3375 ERROR: BC_REGISTER_LOOPER called without request [ 26.906601] binder: 3372:3373 ERROR: BC_REGISTER_LOOPER called without request [ 26.913087] binder: send failed reply for transaction 13 to 3374:3376 [ 26.922901] binder: send failed reply for transaction 15 to 3372:3378 [ 26.924615] binder: undelivered TRANSACTION_COMPLETE [ 26.924622] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.924628] binder: undelivered TRANSACTION_COMPLETE [ 26.924633] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.924651] binder: undelivered TRANSACTION_COMPLETE [ 26.924656] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.924662] binder: undelivered TRANSACTION_COMPLETE [ 26.924666] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.925055] IPVS: Creating netns size=2536 id=4 [ 26.930361] binder: 3381:3383 ioctl 40046205 81 returned -22 [ 26.930743] binder: 3381:3383 ERROR: BC_REGISTER_LOOPER called without request [ 26.933591] binder: send failed reply for transaction 17 to 3381:3383 [ 26.941873] binder: 3381:3383 ioctl 40046205 81 returned -22 [ 26.941969] binder: 3387:3388 ioctl 40046205 81 returned -22 [ 26.942330] binder: 3387:3388 ERROR: BC_REGISTER_LOOPER called without request [ 26.946628] binder: 3381:3383 ERROR: BC_REGISTER_LOOPER called without request [ 26.946733] binder: 3380:3382 ioctl 40046205 81 returned -22 [ 26.947141] binder: 3380:3382 ERROR: BC_REGISTER_LOOPER called without request [ 26.949956] binder: send failed reply for transaction 23 to 3380:3382 [ 26.952351] IPVS: Creating netns size=2536 id=5 [ 26.959389] binder: send failed reply for transaction 21 to 3381:3384 [ 26.965479] binder: undelivered TRANSACTION_COMPLETE [ 26.965486] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.965494] binder: undelivered TRANSACTION_COMPLETE [ 26.965499] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.966689] binder: send failed reply for transaction 19 to 3387:3388 [ 26.967235] binder: 3391:3392 ioctl 40046205 81 returned -22 [ 26.967638] binder: 3391:3392 ERROR: BC_REGISTER_LOOPER called without request [ 26.968954] binder: 3380:3382 ioctl 40046205 81 returned -22 [ 26.969110] binder: 3387:3388 ioctl 40046205 81 returned -22 [ 26.973990] binder: 3387:3388 ERROR: BC_REGISTER_LOOPER called without request [ 26.974010] binder: 3380:3382 ERROR: BC_REGISTER_LOOPER called without request [ 26.976959] binder: 3391:3392 ioctl 40046205 81 returned -22 [ 26.978680] binder: BINDER_SET_CONTEXT_MGR already set [ 26.978686] binder: 3391:3392 ioctl 40046207 0 returned -16 [ 26.981426] IPVS: Creating netns size=2536 id=6 [ 26.982386] binder_alloc: 3391: binder_alloc_buf, no vma [ 26.982401] binder: 3391:3393 transaction failed 29189/-3, size 0-0 line 3127 [ 26.982436] binder: 3391:3392 ERROR: BC_REGISTER_LOOPER called without request [ 26.985130] binder: send failed reply for transaction 28 to 3387:3389 [ 26.985196] binder: undelivered TRANSACTION_COMPLETE [ 26.985202] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.985210] binder: undelivered TRANSACTION_COMPLETE [ 26.985216] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.988018] binder: send failed reply for transaction 29 to 3380:3390 [ 26.988078] binder: undelivered TRANSACTION_COMPLETE [ 26.988084] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.988091] binder: undelivered TRANSACTION_COMPLETE [ 26.988096] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.991173] binder: 3394:3402 ioctl 40046205 81 returned -22 [ 26.991746] binder: 3394:3402 ERROR: BC_REGISTER_LOOPER called without request [ 26.994280] binder: send failed reply for transaction 25 to 3391:3392 [ 26.998979] binder: undelivered TRANSACTION_COMPLETE [ 26.999023] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.999031] binder: undelivered TRANSACTION_ERROR: 29189 [ 26.999859] binder: 3398:3401 ioctl 40046205 81 returned -22 [ 26.999913] binder: 3399:3405 ioctl 40046205 81 returned -22 [ 27.000349] binder: 3399:3405 ERROR: BC_REGISTER_LOOPER called without request [ 27.000355] binder: 3398:3401 ERROR: BC_REGISTER_LOOPER called without request [ 27.002017] binder: 3408:3411 ioctl 40046205 81 returned -22 [ 27.002149] IPVS: Creating netns size=2536 id=7 [ 27.002838] binder: 3408:3411 ERROR: BC_REGISTER_LOOPER called without request [ 27.004957] binder: 3399:3405 ioctl 40046205 3 returned -22 [ 27.005712] binder: send failed reply for transaction 38 to 3408:3411 [ 27.006135] binder: 3399:3405 ioctl 40046205 81 returned -22 [ 27.007298] binder: BINDER_SET_CONTEXT_MGR already set [ 27.007304] binder: 3399:3405 ioctl 40046207 0 returned -16 [ 27.008136] binder: 3408:3411 ioctl 40046205 81 returned -22 [ 27.008359] binder: 3404:3406 ioctl 40046205 81 returned -22 [ 27.009778] binder: 3404:3406 ERROR: BC_REGISTER_LOOPER called without request [ 27.012696] binder_alloc: 3399: binder_alloc_buf, no vma [ 27.012727] binder: 3399:3409 transaction failed 29189/-3, size 0-0 line 3127 [ 27.012755] binder: 3399:3405 ERROR: BC_REGISTER_LOOPER called without request [ 27.013116] binder: send failed reply for transaction 36 to 3398:3401 [ 27.018482] binder: 3408:3411 ERROR: BC_REGISTER_LOOPER called without request [ 27.019496] binder: 3415:3416 ioctl 40046205 81 returned -22 [ 27.019822] binder: 3398:3401 ioctl 40046205 81 returned -22 [ 27.019996] binder: 3415:3416 ERROR: BC_REGISTER_LOOPER called without request [ 27.022857] binder: send failed reply for transaction 45 to 3415:3416 [ 27.023411] binder: send failed reply for transaction 32 to 3394:3402 [ 27.023545] binder: send failed reply for transaction 40 to 3404:3406 [ 27.025840] binder: send failed reply for transaction 35 to 3399:3405 [ 27.031418] binder: 3398:3401 ERROR: BC_REGISTER_LOOPER called without request [ 27.033685] binder: send failed reply for transaction 43 to 3408:3412 [ 27.038845] binder: 3404:3406 ioctl 40046205 81 returned -22 [ 27.039021] binder: 3394:3402 ioctl 40046205 81 returned -22 [ 27.039629] IPVS: Creating netns size=2536 id=8 [ 27.047267] binder: 3419:3420 ioctl 40046205 81 returned -22 [ 27.047893] binder: 3419:3420 ERROR: BC_REGISTER_LOOPER called without request [ 27.049587] binder: 3415:3416 ioctl 40046205 81 returned -22 [ 27.050586] binder: send failed reply for transaction 47 to 3398:3410 [ 27.055332] binder: 3415:3416 ERROR: BC_REGISTER_LOOPER called without request [ 27.057378] binder: send failed reply for transaction 53 to 3415:3416 [ 27.057382] ------------[ cut here ]------------ [ 27.057399] WARNING: CPU: 1 PID: 24 at drivers/android/binder.c:2151 binder_send_failed_reply+0x147/0x3a0 [ 27.057402] Unexpected reply error: 29189 [ 27.057406] Kernel panic - not syncing: panic_on_warn set ... [ 27.057406] [ 27.057414] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.9.73-gf3f3457 #11 [ 27.057417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.057428] Workqueue: events binder_deferred_func [ 27.057438] ffff8801d985f910 ffffffff81d922b9 ffffffff83a46d00 ffff8801d985f9e8 [ 27.057446] ffffffff83eab500 ffffffff82d60a57 0000000000000009 ffff8801d985f9d8 [ 27.057454] ffffffff8142d741 0000000041b58ab3 ffffffff84189000 ffffffff8142d585 [ 27.057456] Call Trace: [ 27.057467] [] dump_stack+0xc1/0x128 [ 27.057474] [] ? binder_send_failed_reply+0x147/0x3a0 [ 27.057484] [] panic+0x1bc/0x3a8 [ 27.057491] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 27.057499] [] ? vprintk_emit+0x3ad/0x750 [ 27.057509] [] ? __warn+0x1a9/0x1e0 [ 27.057516] [] ? binder_send_failed_reply+0x147/0x3a0 [ 27.057522] [] __warn+0x1c4/0x1e0 [ 27.057528] [] warn_slowpath_fmt+0xc4/0x110 [ 27.057534] [] ? __warn+0x1e0/0x1e0 [ 27.057541] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 27.057549] [] binder_send_failed_reply+0x147/0x3a0 [ 27.057556] [] binder_cleanup_transaction+0xd2/0x140 [ 27.057563] [] binder_release_work+0x1b0/0x260 [ 27.057571] [] ? _raw_spin_unlock+0x2c/0x50 [ 27.057578] [] binder_deferred_func+0x9a2/0xd10 [ 27.057585] [] ? __lock_is_held+0xa1/0xf0 [ 27.057594] [] process_one_work+0x7e0/0x1610 [ 27.057600] [] ? process_one_work+0x72c/0x1610 [ 27.057607] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 27.057614] [] worker_thread+0xe0/0x10d0 [ 27.057621] [] ? __schedule+0x683/0x1ba0 [ 27.057627] [] kthread+0x26d/0x300 [ 27.057633] [] ? process_one_work+0x1610/0x1610 [ 27.057639] [] ? kthread_park+0xa0/0xa0 [ 27.057646] [] ? kthread_park+0xa0/0xa0 [ 27.057651] [] ? kthread_park+0xa0/0xa0 [ 27.057657] [] ret_from_fork+0x2a/0x40 [ 27.060771] Dumping ftrace buffer: [ 27.060801] (ftrace buffer empty) [ 27.060804] Kernel Offset: disabled [ 27.867943] Rebooting in 86400 seconds..