[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 12.458513] audit: type=1400 audit(1514562584.923:6): avc: denied { map } for pid=3130 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. syzkaller login: [ 103.375501] audit: type=1400 audit(1514562675.840:7): avc: denied { map } for pid=3149 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/29 15:51:15 parsed 1 programs 2017/12/29 15:51:15 executed programs: 0 [ 103.479556] audit: type=1400 audit(1514562675.944:8): avc: denied { map } for pid=3149 comm="syz-execprog" path="/root/syzkaller-shm433476041" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 103.544633] audit: type=1400 audit(1514562676.009:9): avc: denied { map } for pid=3172 comm="syz-executor0" path="/dev/binder0" dev="devtmpfs" ino=1077 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 103.546439] binder: send failed reply for transaction 2 to 3172:3173 [ 103.575096] binder: send failed reply for transaction 4 to 3172:3174 [ 103.575995] binder: undelivered TRANSACTION_COMPLETE [ 103.576034] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.576039] binder: undelivered TRANSACTION_COMPLETE [ 103.576043] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.579584] binder: send failed reply for transaction 6 to 3175:3176 [ 103.586822] binder: send failed reply for transaction 8 to 3175:3177 [ 103.587504] binder: undelivered TRANSACTION_COMPLETE [ 103.587509] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.587515] binder: undelivered TRANSACTION_COMPLETE [ 103.587518] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.591161] binder: send failed reply for transaction 10 to 3178:3179 [ 103.597257] binder: send failed reply for transaction 12 to 3178:3180 [ 103.598034] binder: undelivered TRANSACTION_COMPLETE [ 103.598039] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.598044] binder: undelivered TRANSACTION_COMPLETE [ 103.598048] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.602307] binder: send failed reply for transaction 14 to 3181:3182 [ 103.607874] binder: send failed reply for transaction 16 to 3181:3183 [ 103.609928] binder: undelivered TRANSACTION_COMPLETE [ 103.609934] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.609939] binder: undelivered TRANSACTION_COMPLETE [ 103.609943] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.615026] binder: send failed reply for transaction 18 to 3184:3185 [ 103.620695] binder: send failed reply for transaction 20 to 3184:3186 [ 103.621477] binder: undelivered TRANSACTION_COMPLETE [ 103.621482] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.621487] binder: undelivered TRANSACTION_COMPLETE [ 103.621491] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.625692] binder: send failed reply for transaction 22 to 3187:3188 [ 103.631190] binder: send failed reply for transaction 24 to 3187:3189 [ 103.632032] binder: undelivered TRANSACTION_COMPLETE [ 103.632037] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.632042] binder: undelivered TRANSACTION_COMPLETE [ 103.632046] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.635760] binder: send failed reply for transaction 26 to 3190:3191 [ 103.641667] binder: send failed reply for transaction 28 to 3190:3192 [ 103.643995] binder: undelivered TRANSACTION_COMPLETE [ 103.644000] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.644034] binder: undelivered TRANSACTION_COMPLETE [ 103.644037] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.647348] binder: send failed reply for transaction 30 to 3193:3194 [ 103.654762] binder: send failed reply for transaction 32 to 3193:3195 [ 103.655630] binder: undelivered TRANSACTION_COMPLETE [ 103.655635] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.655641] binder: undelivered TRANSACTION_COMPLETE [ 103.655644] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.659591] binder: send failed reply for transaction 34 to 3196:3197 [ 103.665339] binder: send failed reply for transaction 36 to 3196:3198 [ 103.666615] binder: undelivered TRANSACTION_COMPLETE [ 103.666620] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.666625] binder: undelivered TRANSACTION_COMPLETE [ 103.666628] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.669912] binder: send failed reply for transaction 38 to 3199:3200 [ 103.676333] binder: send failed reply for transaction 40 to 3199:3201 [ 103.678599] binder: undelivered TRANSACTION_COMPLETE [ 103.678604] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.678610] binder: undelivered TRANSACTION_COMPLETE [ 103.678613] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.911842] audit: type=1400 audit(1514562676.009:10): avc: denied { set_context_mgr } for pid=3172 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 103.935039] audit: type=1400 audit(1514562676.009:11): avc: denied { call } for pid=3172 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 103.982441] binder: send failed reply for transaction 42 to 3202:3203 [ 103.992496] binder: send failed reply for transaction 44 to 3202:3203 [ 103.999099] ------------[ cut here ]------------ [ 104.001164] binder: BINDER_SET_CONTEXT_MGR already set [ 104.001173] binder: 3205:3206 ioctl 40046207 0 returned -16 [ 104.001238] binder_alloc: 3205: binder_alloc_buf, no vma [ 104.001259] binder: 3205:3207 transaction failed 29189/-3, size 0-0 line 2890 [ 104.027613] Unexpected reply error: 29189 [ 104.031859] WARNING: CPU: 0 PID: 24 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 104.041531] Kernel panic - not syncing: panic_on_warn set ... [ 104.041531] [ 104.048867] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.15.0-rc5+ #240 [ 104.055756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.065089] Workqueue: events binder_deferred_func [ 104.069983] Call Trace: [ 104.072542] dump_stack+0x194/0x257 [ 104.076138] ? arch_local_irq_restore+0x53/0x53 [ 104.080783] ? vsnprintf+0x1ed/0x1900 [ 104.084556] panic+0x1e4/0x41c [ 104.087721] ? refcount_error_report+0x214/0x214 [ 104.092453] ? show_regs_print_info+0x18/0x18 [ 104.096931] ? __warn+0x1c1/0x200 [ 104.100354] ? binder_send_failed_reply+0x13b/0x350 [ 104.105335] __warn+0x1dc/0x200 [ 104.108583] ? console_unlock+0x983/0xd80 [ 104.112697] ? binder_send_failed_reply+0x13b/0x350 [ 104.117686] report_bug+0x211/0x2d0 [ 104.121286] fixup_bug.part.11+0x37/0x80 [ 104.125326] do_error_trap+0x2d7/0x3e0 [ 104.129180] ? __down_trylock_console_sem+0x10d/0x1e0 [ 104.134341] ? math_error+0x400/0x400 [ 104.138115] ? vprintk_emit+0x3ea/0x590 [ 104.142058] ? vprintk_emit+0x3ea/0x590 [ 104.146008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.150823] do_invalid_op+0x1b/0x20 [ 104.154503] invalid_op+0x22/0x40 [ 104.157923] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 104.163510] RSP: 0018:ffff8801d9cc7128 EFLAGS: 00010286 [ 104.168842] RAX: dffffc0000000008 RBX: ffff8801d6899d00 RCX: ffffffff8159b57e [ 104.176080] RDX: 0000000000000000 RSI: 1ffff1003b398de0 RDI: ffff8801d9cc6e30 [ 104.183326] RBP: ffff8801d9cc7150 R08: 1ffff1003b398da2 R09: 0000000000000000 [ 104.190564] R10: ffff8801d9cc6fa0 R11: 0000000000000000 R12: ffff8801cc51e000 [ 104.197800] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c82 [ 104.205056] ? vprintk_func+0x5e/0xc0 [ 104.208831] ? binder_send_failed_reply+0x13b/0x350 [ 104.213824] binder_cleanup_transaction+0xd2/0x140 [ 104.218734] binder_release_work+0x340/0x490 [ 104.223110] ? lock_downgrade+0x980/0x980 [ 104.227229] ? kzalloc.constprop.53+0x20/0x20 [ 104.231696] ? do_raw_spin_trylock+0x190/0x190 [ 104.236255] ? kfree+0xf0/0x260 [ 104.239502] ? binder_deferred_func+0xe8a/0x12f0 [ 104.244229] ? _raw_spin_unlock+0x22/0x30 [ 104.248347] binder_deferred_func+0xdf5/0x12f0 [ 104.252910] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 104.258068] ? debug_object_deactivate+0x364/0x560 [ 104.262964] ? lock_downgrade+0x980/0x980 [ 104.267080] ? lock_release+0xa40/0xa40 [ 104.271025] ? check_noncircular+0x20/0x20 [ 104.275236] ? lock_acquire+0x1d5/0x580 [ 104.279174] ? lock_acquire+0x1d5/0x580 [ 104.283131] ? process_one_work+0xb01/0x1b10 [ 104.287516] ? __lock_is_held+0xb6/0x140 [ 104.291555] process_one_work+0xbbf/0x1b10 [ 104.295755] ? trace_hardirqs_on+0xd/0x10 [ 104.299879] ? pwq_dec_nr_in_flight+0x450/0x450 [ 104.304521] ? __schedule+0x8f3/0x2060 [ 104.308372] ? update_curr+0x2e3/0xa60 [ 104.312233] ? check_noncircular+0x20/0x20 [ 104.316434] ? __lock_is_held+0xb6/0x140 [ 104.320492] ? lock_acquire+0x1d5/0x580 [ 104.324432] ? lock_acquire+0x1d5/0x580 [ 104.328370] ? worker_thread+0x4a3/0x1990 [ 104.332485] ? lock_downgrade+0x980/0x980 [ 104.336605] ? lock_release+0xa40/0xa40 [ 104.340554] ? worker_pool_assign_id+0x1b0/0x1b0 [ 104.345278] ? do_raw_spin_trylock+0x190/0x190 [ 104.349837] worker_thread+0x223/0x1990 [ 104.353794] ? process_one_work+0x1b10/0x1b10 [ 104.358257] ? _raw_spin_unlock_irq+0x27/0x70 [ 104.362724] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 104.367710] ? trace_hardirqs_on+0xd/0x10 [ 104.371825] ? _raw_spin_unlock_irq+0x27/0x70 [ 104.376285] ? finish_task_switch+0x1d3/0x740 [ 104.380748] ? finish_task_switch+0x1aa/0x740 [ 104.385212] ? copy_overflow+0x20/0x20 [ 104.389078] ? __schedule+0x8f3/0x2060 [ 104.392951] ? find_held_lock+0x35/0x1d0 [ 104.396985] ? find_held_lock+0x35/0x1d0 [ 104.401019] ? complete+0x62/0x80 [ 104.404446] ? __schedule+0x2060/0x2060 [ 104.408401] ? do_wait_intr_irq+0x3e0/0x3e0 [ 104.412689] ? __lockdep_init_map+0xe4/0x650 [ 104.417071] ? do_raw_spin_trylock+0x190/0x190 [ 104.421625] ? lockdep_init_map+0x9/0x10 [ 104.425666] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 104.430736] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 104.436213] ? trace_hardirqs_on+0xd/0x10 [ 104.440332] ? __kthread_parkme+0x175/0x240 [ 104.444632] kthread+0x33c/0x400 [ 104.447970] ? process_one_work+0x1b10/0x1b10 [ 104.452435] ? kthread_stop+0x7a0/0x7a0 [ 104.456387] ret_from_fork+0x24/0x30 [ 104.460607] Dumping ftrace buffer: [ 104.464160] (ftrace buffer empty) [ 104.467845] Kernel Offset: disabled [ 104.471446] Rebooting in 86400 seconds..