[   15.560694] random: sshd: uninitialized urandom read (32 bytes read, 31 bits of entropy available)
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   20.363430] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available)
[   20.679310] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available)
[   21.436392] random: sshd: uninitialized urandom read (32 bytes read, 90 bits of entropy available)
[   21.600196] random: sshd: uninitialized urandom read (32 bytes read, 93 bits of entropy available)
Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts.
[   26.950905] random: sshd: uninitialized urandom read (32 bytes read, 98 bits of entropy available)
2018/01/03 05:17:51 parsed 1 programs
2018/01/03 05:17:51 executed programs: 0
[   27.197733] IPVS: Creating netns size=2552 id=1
[   27.234266] IPVS: Creating netns size=2552 id=2
[   27.260857] IPVS: Creating netns size=2552 id=3
[   27.269872] binder: 3341:3342 ioctl 40046205 81 returned -22
[   27.277170] audit: type=1400 audit(1514956671.815:5): avc:  denied  { set_context_mgr } for  pid=3341 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[   27.300869] binder: 3344:3345 ioctl 40046205 81 returned -22
[   27.301747] binder: 3341:3342 ERROR: BC_REGISTER_LOOPER called without request
[   27.302339] audit: type=1400 audit(1514956671.845:6): avc:  denied  { call } for  pid=3341 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[   27.306427] binder: send failed reply for transaction 2 to 3341:3342
[   27.309183] binder: 3341:3342 ioctl 40046205 81 returned -22
[   27.314251] binder: 3341:3342 ERROR: BC_REGISTER_LOOPER called without request
[   27.326308] binder: send failed reply for transaction 4 to 3341:3346
[   27.336790] binder: undelivered TRANSACTION_COMPLETE
[   27.336804] binder: undelivered TRANSACTION_ERROR: 29189
[   27.336818] binder: undelivered TRANSACTION_COMPLETE
[   27.336831] binder: undelivered TRANSACTION_ERROR: 29189
[   27.341027] binder: 3348:3349 ioctl 40046205 81 returned -22
[   27.341722] binder: 3348:3349 ERROR: BC_REGISTER_LOOPER called without request
[   27.343739] binder: 3344:3347 ERROR: BC_REGISTER_LOOPER called without request
[   27.344798] binder: send failed reply for transaction 7 to 3348:3349
[   27.351421] binder: 3348:3349 ioctl 40046205 81 returned -22
[   27.357618] binder: 3348:3349 ERROR: BC_REGISTER_LOOPER called without request
[   27.375042] binder: send failed reply for transaction 10 to 3348:3350
[   27.378504] binder: undelivered TRANSACTION_COMPLETE
[   27.378518] binder: undelivered TRANSACTION_ERROR: 29189
[   27.378532] binder: undelivered TRANSACTION_COMPLETE
[   27.378544] binder: undelivered TRANSACTION_ERROR: 29189
[   27.390160] binder: 3351:3353 ioctl 40046205 81 returned -22
[   27.390793] binder: 3351:3353 ERROR: BC_REGISTER_LOOPER called without request
[   27.392163] binder: 3344:3347 ioctl 40046205 3 returned -22
[   27.393242] binder: 3344:3347 ioctl 40046205 81 returned -22
[   27.394294] binder: 3354:3356 ioctl 40046205 81 returned -22
[   27.394820] binder: 3354:3356 ERROR: BC_REGISTER_LOOPER called without request
[   27.395411] binder: BINDER_SET_CONTEXT_MGR already set
[   27.395416] binder: 3344:3347 ioctl 40046207 0 returned -16
[   27.397037] binder: send failed reply for transaction 12 to 3351:3353
[   27.412099] binder: 3351:3353 ioctl 40046205 81 returned -22
[   27.413913] binder: 3344:3347 ERROR: BC_REGISTER_LOOPER called without request
[   27.414057] binder_alloc: 3344: binder_alloc_buf, no vma
[   27.414097] binder: 3344:3352 transaction failed 29189/-3, size 0-0 line 3128
[   27.414418] binder: send failed reply for transaction 14 to 3354:3356
[   27.419095] binder: 3351:3353 ERROR: BC_REGISTER_LOOPER called without request
[   27.419374] binder: 3354:3356 ioctl 40046205 81 returned -22
[   27.424539] binder: 3354:3356 ERROR: BC_REGISTER_LOOPER called without request
[   27.432628] binder: send failed reply for transaction 17 to 3351:3355
[   27.436619] binder: undelivered TRANSACTION_COMPLETE
[   27.436691] binder: undelivered TRANSACTION_ERROR: 29189
[   27.436706] binder: undelivered TRANSACTION_COMPLETE
[   27.436755] binder: undelivered TRANSACTION_ERROR: 29189
[   27.437115] binder: send failed reply for transaction 19 to 3354:3357
[   27.442783] binder: undelivered TRANSACTION_COMPLETE
[   27.442797] binder: undelivered TRANSACTION_ERROR: 29189
[   27.442812] binder: undelivered TRANSACTION_COMPLETE
[   27.442824] binder: undelivered TRANSACTION_ERROR: 29189
[   27.444980] binder: 3358:3360 ioctl 40046205 81 returned -22
[   27.445519] binder: 3358:3360 ERROR: BC_REGISTER_LOOPER called without request
[   27.447016] binder: 3359:3361 ioctl 40046205 81 returned -22
[   27.447630] binder: 3359:3361 ERROR: BC_REGISTER_LOOPER called without request
[   27.450906] binder: send failed reply for transaction 21 to 3358:3360
[   27.451687] binder: send failed reply for transaction 23 to 3359:3361
[   27.458705] binder: 3358:3360 ioctl 40046205 81 returned -22
[   27.460164] binder: 3359:3361 ioctl 40046205 81 returned -22
[   27.464148] binder: 3358:3360 ERROR: BC_REGISTER_LOOPER called without request
[   27.465632] binder: 3359:3361 ERROR: BC_REGISTER_LOOPER called without request
[   27.475898] binder: send failed reply for transaction 26 to 3358:3362
[   27.476358] binder: undelivered TRANSACTION_COMPLETE
[   27.476372] binder: undelivered TRANSACTION_ERROR: 29189
[   27.476386] binder: undelivered TRANSACTION_COMPLETE
[   27.476398] binder: undelivered TRANSACTION_ERROR: 29189
[   27.479389] binder: send failed reply for transaction 27 to 3359:3363
[   27.481981] binder: undelivered TRANSACTION_COMPLETE
[   27.481996] binder: undelivered TRANSACTION_ERROR: 29189
[   27.482009] binder: undelivered TRANSACTION_COMPLETE
[   27.482022] binder: undelivered TRANSACTION_ERROR: 29189
[   27.485386] binder: 3364:3365 ioctl 40046205 81 returned -22
[   27.486015] binder: 3364:3365 ERROR: BC_REGISTER_LOOPER called without request
[   27.488049] binder: 3366:3368 ioctl 40046205 81 returned -22
[   27.488760] binder: 3366:3368 ERROR: BC_REGISTER_LOOPER called without request
[   27.489490] binder: send failed reply for transaction 29 to 3364:3365
[   27.496980] binder: 3364:3365 ioctl 40046205 81 returned -22
[   27.497308] binder: send failed reply for transaction 31 to 3366:3368
[   27.502955] binder: 3366:3368 ioctl 40046205 81 returned -22
[   27.504072] binder: 3364:3365 ERROR: BC_REGISTER_LOOPER called without request
[   27.508121] binder: 3366:3368 ERROR: BC_REGISTER_LOOPER called without request
[   27.517500] binder: send failed reply for transaction 33 to 3364:3367
[   27.519996] binder: undelivered TRANSACTION_COMPLETE
[   27.520009] binder: undelivered TRANSACTION_ERROR: 29189
[   27.520023] binder: undelivered TRANSACTION_COMPLETE
[   27.520036] binder: undelivered TRANSACTION_ERROR: 29189
[   27.521311] binder: send failed reply for transaction 35 to 3366:3369
[   27.525541] binder: undelivered TRANSACTION_COMPLETE
[   27.525554] binder: undelivered TRANSACTION_ERROR: 29189
[   27.525568] binder: undelivered TRANSACTION_COMPLETE
[   27.525580] binder: undelivered TRANSACTION_ERROR: 29189
[   27.528801] binder: 3370:3371 ioctl 40046205 81 returned -22
[   27.529438] binder: 3370:3371 ERROR: BC_REGISTER_LOOPER called without request
[   27.531485] binder: 3372:3374 ioctl 40046205 81 returned -22
[   27.532201] binder: 3372:3374 ERROR: BC_REGISTER_LOOPER called without request
[   27.532916] binder: send failed reply for transaction 37 to 3370:3371
[   27.541668] binder: 3370:3371 ioctl 40046205 81 returned -22
[   27.541993] binder: send failed reply for transaction 39 to 3372:3374
[   27.549278] binder: 3372:3374 ioctl 40046205 81 returned -22
[   27.550433] binder: 3370:3371 ERROR: BC_REGISTER_LOOPER called without request
[   27.555100] binder: 3372:3374 ERROR: BC_REGISTER_LOOPER called without request
[   27.563907] binder: send failed reply for transaction 41 to 3370:3373
[   27.566402] binder: undelivered TRANSACTION_COMPLETE
[   27.566415] binder: undelivered TRANSACTION_ERROR: 29189
[   27.566430] binder: undelivered TRANSACTION_COMPLETE
[   27.566442] binder: undelivered TRANSACTION_ERROR: 29189
[   27.567676] binder: send failed reply for transaction 43 to 3372:3375
[   27.571468] binder: undelivered TRANSACTION_COMPLETE
[   27.571481] binder: undelivered TRANSACTION_ERROR: 29189
[   27.571496] binder: undelivered TRANSACTION_COMPLETE
[   27.571508] binder: undelivered TRANSACTION_ERROR: 29189
[   27.574433] binder: 3376:3377 ioctl 40046205 81 returned -22
[   27.575047] binder: 3376:3377 ERROR: BC_REGISTER_LOOPER called without request
[   27.578031] binder: send failed reply for transaction 45 to 3376:3377
[   27.584241] binder: 3376:3377 ioctl 40046205 81 returned -22
[   27.589270] binder: 3376:3377 ERROR: BC_REGISTER_LOOPER called without request
[   27.600915] binder: send failed reply for transaction 47 to 3376:3378
[   27.604505] binder: undelivered TRANSACTION_COMPLETE
[   27.604519] binder: undelivered TRANSACTION_ERROR: 29189
[   27.604533] binder: undelivered TRANSACTION_COMPLETE
[   27.604545] binder: undelivered TRANSACTION_ERROR: 29189
[   28.038139] binder: send failed reply for transaction 8 to 3344:3347
[   28.044762] binder: undelivered TRANSACTION_COMPLETE
[   28.047422] IPVS: Creating netns size=2552 id=4
[   28.055588] binder: undelivered TRANSACTION_ERROR: 29189
[   28.061081] binder: undelivered TRANSACTION_ERROR: 29189
[   28.070732] IPVS: Creating netns size=2552 id=5
[   28.096593] IPVS: Creating netns size=2552 id=6
[   28.115483] binder: 3384:3385 ioctl 40046205 81 returned -22
[   28.121730] binder: 3384:3385 ERROR: BC_REGISTER_LOOPER called without request
[   28.131601] binder: 3388:3389 ioctl 40046205 81 returned -22
[   28.133496] binder: send failed reply for transaction 49 to 3384:3385
[   28.138758] binder: 3384:3385 ioctl 40046205 81 returned -22
[   28.143534] binder: 3384:3385 ERROR: BC_REGISTER_LOOPER called without request
[   28.155092] binder: send failed reply for transaction 51 to 3384:3387
[   28.157483] binder: undelivered TRANSACTION_COMPLETE
[   28.157492] binder: undelivered TRANSACTION_ERROR: 29189
[   28.157501] binder: undelivered TRANSACTION_COMPLETE
[   28.157508] binder: undelivered TRANSACTION_ERROR: 29189
[   28.160639] binder: 3392:3393 ioctl 40046205 81 returned -22
[   28.161096] binder: 3392:3393 ERROR: BC_REGISTER_LOOPER called without request
[   28.163877] binder: send failed reply for transaction 54 to 3392:3393
[   28.170233] binder: 3388:3391 ERROR: BC_REGISTER_LOOPER called without request
[   28.171533] binder: 3392:3393 ioctl 40046205 81 returned -22
[   28.176314] binder: 3392:3393 ERROR: BC_REGISTER_LOOPER called without request
[   28.198841] binder: send failed reply for transaction 57 to 3392:3394
[   28.206251] binder: undelivered TRANSACTION_COMPLETE
[   28.206260] binder: undelivered TRANSACTION_ERROR: 29189
[   28.206269] binder: undelivered TRANSACTION_COMPLETE
[   28.206276] binder: undelivered TRANSACTION_ERROR: 29189
[   28.217764] binder: 3396:3397 ioctl 40046205 81 returned -22
[   28.218115] binder: 3396:3397 ERROR: BC_REGISTER_LOOPER called without request
[   28.220062] binder: 3388:3391 ioctl 40046205 3 returned -22
[   28.220806] binder: send failed reply for transaction 59 to 3396:3397
[   28.225205] binder: 3388:3391 ioctl 40046205 81 returned -22
[   28.231653] binder: BINDER_SET_CONTEXT_MGR already set
[   28.231657] binder: 3388:3391 ioctl 40046207 0 returned -16
[   28.236795] binder: 3396:3397 ioctl 40046205 81 returned -22
[   28.239257] binder: 3388:3391 ERROR: BC_REGISTER_LOOPER called without request
[   28.239441] binder_alloc: 3388: binder_alloc_buf, no vma
[   28.239465] binder: 3388:3395 transaction failed 29189/-3, size 0-0 line 3128
[   28.241649] binder: 3396:3397 ERROR: BC_REGISTER_LOOPER called without request
[   28.252692] binder: send failed reply for transaction 62 to 3396:3398
[   28.258529] binder: undelivered TRANSACTION_COMPLETE
[   28.258539] binder: undelivered TRANSACTION_ERROR: 29189
[   28.258548] binder: undelivered TRANSACTION_COMPLETE
[   28.258555] binder: undelivered TRANSACTION_ERROR: 29189
[   28.356345] binder: send failed reply for transaction 55 to 3388:3391
[   28.359823] IPVS: Creating netns size=2552 id=7
[   28.367908] binder: undelivered TRANSACTION_COMPLETE
[   28.373658] binder: undelivered TRANSACTION_ERROR: 29189
[   28.379173] binder: undelivered TRANSACTION_ERROR: 29189
[   28.388050] IPVS: Creating netns size=2552 id=8
[   28.425523] binder: 3401:3402 ioctl 40046205 81 returned -22
[   28.431850] binder: 3401:3402 ERROR: BC_REGISTER_LOOPER called without request
[   28.442538] binder: send failed reply for transaction 64 to 3401:3402
[   28.451530] binder: 3401:3402 ioctl 40046205 81 returned -22
[   28.453806] binder: 3404:3405 ioctl 40046205 81 returned -22
[   28.454224] binder: 3404:3405 ERROR: BC_REGISTER_LOOPER called without request
[   28.457606] binder: send failed reply for transaction 66 to 3404:3405
[   28.470749] binder: 3404:3405 ioctl 40046205 81 returned -22
[   28.471162] binder: 3404:3405 ERROR: BC_REGISTER_LOOPER called without request
[   28.477499] binder: send failed reply for transaction 69 to 3404:3405
[   28.477501] ------------[ cut here ]------------
[   28.477513] WARNING: CPU: 0 PID: 29 at drivers/android/binder.c:2152 binder_send_failed_reply+0x147/0x3a0()
[   28.477515] Unexpected reply error: 29189
[   28.477597] Kernel panic - not syncing: panic_on_warn set ...
[   28.477597] 
[   28.477602] CPU: 0 PID: 29 Comm: kworker/u4:2 Not tainted 4.4.107-g610c835 #4
[   28.477604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   28.477611] Workqueue: binder binder_deferred_func
[   28.477617]  0000000000000000 2329b3f464a12848 ffff8801d98ef910 ffffffff81d0457d
[   28.477621]  ffffffff838429a0 ffff8801d98ef9e8 ffffffff83c74a40 0000000000000009
[   28.477625]  0000000000000868 ffff8801d98ef9d8 ffffffff8141774a 0000000041b58ab3
[   28.477626] Call Trace:
[   28.477633]  [<ffffffff81d0457d>] dump_stack+0xc1/0x124
[   28.477639]  [<ffffffff8141774a>] panic+0x1aa/0x388
[   28.477643]  [<ffffffff814175a0>] ? percpu_up_read.constprop.45+0xe1/0xe1
[   28.477648]  [<ffffffff8112ad9a>] ? warn_slowpath_common+0x10a/0x140
[   28.477652]  [<ffffffff8112adb5>] warn_slowpath_common+0x125/0x140
[   28.477655]  [<ffffffff82c77127>] ? binder_send_failed_reply+0x147/0x3a0
[   28.477658]  [<ffffffff8112ae91>] warn_slowpath_fmt+0xc1/0x110
[   28.477662]  [<ffffffff8112add0>] ? warn_slowpath_common+0x140/0x140
[   28.477666]  [<ffffffff82c6e95c>] ? _binder_inner_proc_lock+0x2c/0x50
[   28.477669]  [<ffffffff82c77127>] binder_send_failed_reply+0x147/0x3a0
[   28.477673]  [<ffffffff82c77452>] binder_cleanup_transaction+0xd2/0x140
[   28.477677]  [<ffffffff82c77652>] binder_release_work+0x192/0x260
[   28.477681]  [<ffffffff8377322c>] ? _raw_spin_unlock+0x2c/0x50
[   28.477685]  [<ffffffff82c7cc5a>] binder_deferred_func+0x9aa/0xd10
[   28.477689]  [<ffffffff8122cf91>] ? __lock_is_held+0xa1/0xf0
[   28.477695]  [<ffffffff8117d3f7>] process_one_work+0x7d7/0x16e0
[   28.477698]  [<ffffffff8117d317>] ? process_one_work+0x6f7/0x16e0
[   28.477701]  [<ffffffff8117cc20>] ? pwq_dec_nr_in_flight+0x280/0x280
[   28.477705]  [<ffffffff8117e584>] ? worker_thread+0x284/0xfe0
[   28.477708]  [<ffffffff8117e3df>] worker_thread+0xdf/0xfe0
[   28.477713]  [<ffffffff83764929>] ? __schedule+0xa99/0x1c70
[   28.477717]  [<ffffffff83765b94>] ? preempt_schedule+0x24/0x30
[   28.477721]  [<ffffffff81003058>] ? ___preempt_schedule+0x12/0x14
[   28.477726]  [<ffffffff8118dea8>] kthread+0x268/0x300
[   28.477729]  [<ffffffff8117e300>] ? process_one_work+0x16e0/0x16e0
[   28.477733]  [<ffffffff8118dc40>] ? kthread_create_on_node+0x400/0x400
[   28.477737]  [<ffffffff8118dc40>] ? kthread_create_on_node+0x400/0x400
[   28.477741]  [<ffffffff837740ef>] ret_from_fork+0x3f/0x70
[   28.477745]  [<ffffffff8118dc40>] ? kthread_create_on_node+0x400/0x400
[   28.482930] Dumping ftrace buffer:
[   28.482959]    (ftrace buffer empty)
[   28.482961] Kernel Offset: disabled
[   28.757876] Rebooting in 86400 seconds..