INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-9,10.128.15.216' (ECDSA) to the list of known hosts. 2017/12/04 12:26:43 parsed 1 programs 2017/12/04 12:26:43 executed programs: 0 syzkaller login: [ 46.478101] binder: 3298:3304 ioctl 40286608 5 returned -22 [ 46.479235] binder: 3299:3306 ioctl 40286608 5 returned -22 [ 46.479268] binder: 3299:3306 ioctl 40046205 3 returned -22 [ 46.479445] binder: 3303:3311 ioctl 40286608 5 returned -22 [ 46.479474] binder: 3303:3311 ioctl 40046205 3 returned -22 [ 46.479853] binder: 3303:3311 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.479857] binder: 3303:3311 BC_INCREFS_DONE node 3 has no pending increfs request [ 46.479975] binder: 3299:3306 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.479980] binder: 3299:3306 BC_INCREFS_DONE node 1 has no pending increfs request [ 46.480747] binder: 3295:3308 ioctl 40286608 5 returned -22 [ 46.480772] binder: 3295:3308 ioctl 40046205 3 returned -22 [ 46.480803] binder: 3309:3314 ioctl 40286608 5 returned -22 [ 46.480831] binder: 3309:3314 ioctl 40046205 3 returned -22 [ 46.481125] binder: 3309:3314 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.481172] binder: 3309:3314 BC_INCREFS_DONE node 5 has no pending increfs request [ 46.482247] binder: 3295:3308 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.482252] binder: 3295:3308 BC_INCREFS_DONE node 7 has no pending increfs request [ 46.482960] binder: 3313:3316 ioctl 40286608 5 returned -22 [ 46.482992] binder: 3313:3316 ioctl 40046205 3 returned -22 [ 46.483567] binder: 3313:3316 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.483571] binder: 3313:3316 BC_INCREFS_DONE node 9 has no pending increfs request [ 46.484524] binder: 3315:3323 ioctl 40286608 5 returned -22 [ 46.484548] binder: 3315:3323 ioctl 40046205 3 returned -22 [ 46.485117] binder: 3315:3323 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.485121] binder: 3315:3323 BC_INCREFS_DONE node 11 has no pending increfs request [ 46.489158] binder: send failed reply for transaction 4 to 3303:3311 [ 46.490374] binder: 3310:3319 ioctl 40286608 5 returned -22 [ 46.490403] binder: 3310:3319 ioctl 40046205 3 returned -22 [ 46.490728] binder: 3310:3319 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.490732] binder: 3310:3319 BC_INCREFS_DONE node 13 has no pending increfs request [ 46.491410] binder: send failed reply for transaction 10 to 3313:3316 [ 46.491686] binder: send failed reply for transaction 2 to 3299:3306 [ 46.492877] binder: 3303:3317 ioctl 40046205 3 returned -22 [ 46.492894] binder: 3303:3311 ioctl 40286608 5 returned -22 [ 46.493451] binder: send failed reply for transaction 8 to 3295:3308 [ 46.494307] binder: send failed reply for transaction 12 to 3315:3323 [ 46.495446] binder: 3313:3316 ioctl 40286608 5 returned -22 [ 46.495462] binder: 3313:3322 ioctl 40046205 3 returned -22 [ 46.495666] binder: send failed reply for transaction 6 to 3309:3314 [ 46.498877] binder: 3295:3308 ioctl 40286608 5 returned -22 [ 46.498891] binder: 3315:3323 ioctl 40286608 5 returned -22 [ 46.498966] binder: 3295:3321 ioctl 40046205 3 returned -22 [ 46.498997] binder: 3315:3324 ioctl 40046205 3 returned -22 [ 46.500171] binder: send failed reply for transaction 14 to 3310:3319 [ 46.504835] binder: 3313:3316 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.504840] binder: 3313:3316 BC_INCREFS_DONE node 17 has no pending increfs request [ 46.506931] binder: release 3313:3316 transaction 19 out, still active [ 46.506933] binder: undelivered TRANSACTION_COMPLETE [ 46.506937] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.506938] binder: undelivered TRANSACTION_COMPLETE [ 46.506959] binder: send failed reply for transaction 19, target dead [ 46.511911] binder: 3309:3314 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 46.511916] binder: 3309:3314 BC_INCREFS_DONE node 21 has no pending increfs request [ 46.512561] binder: send failed reply for transaction 22 to 3309:3314 [ 46.512562] ------------[ cut here ]------------ [ 46.512574] WARNING: CPU: 1 PID: 1548 at drivers/android/binder.c:2154 binder_send_failed_reply+0x147/0x3a0 [ 46.512576] Unexpected reply error: 29189 [ 46.512579] Kernel panic - not syncing: panic_on_warn set ... [ 46.512579] [ 46.512584] CPU: 1 PID: 1548 Comm: kworker/1:2 Not tainted 4.9.66-gb763480 #103 [ 46.512586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.512593] Workqueue: events binder_deferred_func [ 46.512599] ffff8801d090f910 ffffffff81d90749 ffffffff83a46d00 ffff8801d090f9e8 [ 46.512604] ffffffff83eaa700 ffffffff82d5a837 0000000000000009 ffff8801d090f9d8 [ 46.512608] ffffffff8142c411 0000000041b58ab3 ffffffff84186e58 ffffffff8142c255 [ 46.512609] Call Trace: [ 46.512616] [] dump_stack+0xc1/0x128 [ 46.512620] [] ? binder_send_failed_reply+0x147/0x3a0 [ 46.512626] [] panic+0x1bc/0x3a8 [ 46.512630] [] ? percpu_up_read_preempt_enable.constprop.54+0xd7/0xd7 [ 46.512635] [] ? vprintk_emit+0x3ad/0x750 [ 46.512639] [] ? binder_send_failed_reply+0x147/0x3a0 [ 46.512643] [] __warn+0x1c4/0x1e0 [ 46.512647] [] warn_slowpath_fmt+0xc4/0x110 [ 46.512650] [] ? __warn+0x1e0/0x1e0 [ 46.512654] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 46.512658] [] binder_send_failed_reply+0x147/0x3a0 [ 46.512662] [] binder_cleanup_transaction+0xd2/0x140 [ 46.512666] [] binder_release_work+0x1b0/0x260 [ 46.512672] [] ? _raw_spin_unlock+0x2c/0x50 [ 46.512675] [] binder_deferred_func+0x9a2/0xd10 [ 46.512680] [] ? __lock_is_held+0xa1/0xf0 [ 46.512687] [] process_one_work+0x78f/0x15f0 [ 46.512690] [] ? process_one_work+0x6db/0x15f0 [ 46.512694] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 46.512698] [] worker_thread+0xe0/0x10d0 [ 46.512702] [] ? __schedule+0x683/0x1ba0 [ 46.512705] [] kthread+0x26d/0x300 [ 46.512708] [] ? process_one_work+0x15f0/0x15f0 [ 46.512711] [] ? kthread_park+0xa0/0xa0 [ 46.512715] [] ? kthread_park+0xa0/0xa0 [ 46.512718] [] ? kthread_park+0xa0/0xa0 [ 46.512722] [] ret_from_fork+0x2a/0x40 [ 46.513175] Dumping ftrace buffer: [ 46.513193] (ftrace buffer empty) [ 46.513194] Kernel Offset: disabled [ 46.976297] Rebooting in 86400 seconds..