INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-9,10.128.15.214' (ECDSA) to the list of known hosts. 2017/12/06 11:45:40 parsed 1 programs 2017/12/06 11:45:40 executed programs: 0 syzkaller login: [ 50.804197] binder: send failed reply for transaction 2 to 3109:3110 [ 50.812994] binder: undelivered TRANSACTION_COMPLETE [ 50.813803] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.821650] binder: send failed reply for transaction 5 to 3112:3113 [ 50.835336] binder: undelivered TRANSACTION_COMPLETE [ 50.841280] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.847214] binder: send failed reply for transaction 10 to 3118:3119 [ 50.854930] binder: BINDER_SET_CONTEXT_MGR already set [ 50.860391] binder: 3115:3117 ioctl 40046207 0 returned -16 [ 50.860519] binder: send failed reply for transaction 8 to 3115:3116 [ 50.867163] binder: undelivered TRANSACTION_COMPLETE [ 50.867169] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.875173] binder: send failed reply for transaction 13 to 3121:3122 [ 50.886103] binder: 3121:3123 ERROR: BC_REGISTER_LOOPER called without request [ 50.888656] binder: undelivered TRANSACTION_COMPLETE [ 50.888662] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.894615] binder: send failed reply for transaction 16 to 3125:3126 [ 50.907215] binder: 3125:3127 ERROR: BC_REGISTER_LOOPER called without request [ 50.909631] binder: undelivered TRANSACTION_COMPLETE [ 50.909638] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.917626] binder: send failed reply for transaction 19 to 3128:3129 [ 50.939127] binder: undelivered TRANSACTION_COMPLETE [ 50.939134] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.942530] binder: send failed reply for transaction 22 to 3132:3133 [ 50.951461] binder: send failed reply for transaction 25 to 3135:3136 [ 50.959252] binder: undelivered TRANSACTION_COMPLETE [ 50.959258] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.961983] binder: send failed reply for transaction 27 to 3138:3139 [ 50.971120] binder: undelivered TRANSACTION_COMPLETE [ 50.971127] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.977476] binder: send failed reply for transaction 31 to 3141:3142 [ 50.985111] binder: undelivered TRANSACTION_COMPLETE [ 50.985117] binder: undelivered TRANSACTION_ERROR: 29189 [ 50.987959] binder: 3141:3143 ERROR: BC_REGISTER_LOOPER called without request [ 50.990274] binder: undelivered TRANSACTION_COMPLETE [ 50.990279] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.033375] binder: undelivered TRANSACTION_COMPLETE [ 51.038510] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.076495] binder: send failed reply for transaction 34 to 3144:3145 [ 51.089853] binder: undelivered TRANSACTION_COMPLETE [ 51.095044] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.101663] binder: send failed reply for transaction 37 to 3149:3153 [ 51.108436] binder: send failed reply for transaction 41 to 3150:3155 [ 51.115082] binder: send failed reply for transaction 39 to 3151:3152 [ 51.124976] binder: 3150:3158 ERROR: BC_REGISTER_LOOPER called without request [ 51.125409] binder: 3149:3154 ERROR: BC_REGISTER_LOOPER called without request [ 51.149685] binder: send failed reply for transaction 45 to 3148:3156 [ 51.156421] binder: send failed reply for transaction 43 to 3151:3152 [ 51.163018] ------------[ cut here ]------------ [ 51.167770] Unexpected reply error: 29189 [ 51.172036] WARNING: CPU: 0 PID: 1406 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 51.181888] Kernel panic - not syncing: panic_on_warn set ... [ 51.181888] [ 51.189225] CPU: 0 PID: 1406 Comm: kworker/0:2 Not tainted 4.15.0-rc2+ #209 [ 51.196291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.205626] Workqueue: events binder_deferred_func [ 51.210524] Call Trace: [ 51.213088] dump_stack+0x194/0x257 [ 51.216687] ? arch_local_irq_restore+0x53/0x53 [ 51.221331] ? vsnprintf+0x1ed/0x1900 [ 51.225109] panic+0x1e4/0x41c [ 51.228271] ? refcount_error_report+0x214/0x214 [ 51.232995] ? show_regs_print_info+0x18/0x18 [ 51.237464] ? __warn+0x1c1/0x200 [ 51.240895] ? binder_send_failed_reply+0x13b/0x350 [ 51.245888] __warn+0x1dc/0x200 [ 51.249138] ? console_unlock+0x983/0xd80 [ 51.253254] ? binder_send_failed_reply+0x13b/0x350 [ 51.258241] report_bug+0x211/0x2d0 [ 51.261845] fixup_bug.part.11+0x37/0x80 [ 51.265879] do_error_trap+0x2d7/0x3e0 [ 51.269737] ? __down_trylock_console_sem+0x10d/0x1e0 [ 51.274898] ? math_error+0x400/0x400 [ 51.278668] ? vprintk_emit+0x3ea/0x590 [ 51.282612] ? vprintk_emit+0x3ea/0x590 [ 51.286568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.291390] do_invalid_op+0x1b/0x20 [ 51.295073] invalid_op+0x18/0x20 [ 51.298501] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 51.304089] RSP: 0018:ffff8801d2b570c8 EFLAGS: 00010286 [ 51.309422] RAX: dffffc0000000008 RBX: ffff8801d3b10100 RCX: ffffffff8159c43e [ 51.316662] RDX: 0000000000000000 RSI: 1ffff1003a56add4 RDI: ffff8801d2b56dd0 [ 51.323901] RBP: ffff8801d2b570f0 R08: 1ffff1003a56ad96 R09: 0000000000000000 [ 51.331138] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ce478d00 [ 51.338375] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c4f [ 51.345629] ? vprintk_func+0x5e/0xc0 [ 51.349405] ? binder_send_failed_reply+0x13b/0x350 [ 51.354392] binder_cleanup_transaction+0xd2/0x140 [ 51.359292] binder_release_work+0x340/0x490 [ 51.363676] ? kzalloc.constprop.53+0x20/0x20 [ 51.368153] ? do_raw_spin_trylock+0x190/0x190 [ 51.372711] ? kfree+0xe4/0x250 [ 51.375960] ? binder_deferred_func+0xe8a/0x12f0 [ 51.380689] ? _raw_spin_unlock+0x22/0x30 [ 51.384808] binder_deferred_func+0xdf5/0x12f0 [ 51.389358] ? find_held_lock+0x39/0x1d0 [ 51.393398] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 51.398565] ? find_held_lock+0x39/0x1d0 [ 51.402599] ? check_noncircular+0x20/0x20 [ 51.406812] ? lock_acquire+0x1d5/0x580 [ 51.410763] ? process_one_work+0xb2f/0x1be0 [ 51.415151] ? __lock_is_held+0xbc/0x140 [ 51.419193] process_one_work+0xbfd/0x1be0 [ 51.423408] ? pwq_dec_nr_in_flight+0x450/0x450 [ 51.428044] ? finish_task_switch+0x1d3/0x740 [ 51.432511] ? finish_task_switch+0x1aa/0x740 [ 51.437009] ? __sched_text_start+0x8/0x8 [ 51.441137] ? check_noncircular+0x20/0x20 [ 51.445342] ? check_noncircular+0x20/0x20 [ 51.449549] ? find_held_lock+0x39/0x1d0 [ 51.453591] ? lock_acquire+0x1d5/0x580 [ 51.457534] ? worker_thread+0x4a3/0x1990 [ 51.461659] ? lock_release+0xda0/0xda0 [ 51.465605] ? retint_kernel+0x10/0x10 [ 51.469464] ? do_raw_spin_trylock+0x190/0x190 [ 51.474028] worker_thread+0x223/0x1990 [ 51.477973] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 51.483058] ? process_one_work+0x1be0/0x1be0 [ 51.487524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 51.492516] ? account_kernel_stack+0x155/0x1f0 [ 51.497158] ? put_task_stack+0x116/0x270 [ 51.501288] ? finish_task_switch+0x4cc/0x740 [ 51.505755] ? copy_overflow+0x20/0x20 [ 51.509621] ? __schedule+0x8f3/0x2060 [ 51.513477] ? check_noncircular+0x20/0x20 [ 51.517693] ? find_held_lock+0x39/0x1d0 [ 51.521728] ? find_held_lock+0x39/0x1d0 [ 51.525769] ? lock_downgrade+0x980/0x980 [ 51.529887] ? default_wake_function+0x30/0x50 [ 51.534449] ? __schedule+0x2060/0x2060 [ 51.538389] ? do_wait_intr+0x3e0/0x3e0 [ 51.542332] ? do_raw_spin_trylock+0x190/0x190 [ 51.546883] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 51.551957] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 51.556942] ? trace_hardirqs_on+0xd/0x10 [ 51.561056] ? __kthread_parkme+0x175/0x240 [ 51.565350] kthread+0x37a/0x440 [ 51.568700] ? process_one_work+0x1be0/0x1be0 [ 51.573162] ? kthread_stop+0x7b0/0x7b0 [ 51.577108] ret_from_fork+0x24/0x30 [ 51.580994] Dumping ftrace buffer: [ 51.584576] (ftrace buffer empty) [ 51.588255] Kernel Offset: disabled [ 51.591855] Rebooting in 86400 seconds..