[....] Starting enhanced syslogd: rsyslogd[ 10.934263] audit: type=1400 audit(1515821337.581:4): avc: denied { syslog } for pid=3173 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.248' (ECDSA) to the list of known hosts. 2018/01/13 05:29:14 parsed 1 programs 2018/01/13 05:29:14 executed programs: 0 syzkaller login: [ 28.230536] audit: type=1400 audit(1515821354.871:5): avc: denied { sys_admin } for pid=3335 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.251472] IPVS: Creating netns size=2536 id=1 [ 28.273064] IPVS: Creating netns size=2536 id=2 [ 28.284299] IPVS: Creating netns size=2536 id=3 [ 28.305688] IPVS: Creating netns size=2536 id=4 [ 28.312127] audit: type=1400 audit(1515821354.961:6): avc: denied { sys_chroot } for pid=3339 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.344355] audit: type=1400 audit(1515821355.001:7): avc: denied { set_context_mgr } for pid=3362 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 28.346610] audit: type=1400 audit(1515821355.001:8): avc: denied { call } for pid=3364 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 28.353734] binder: send failed reply for transaction 4 to 3363:3366 [ 28.367996] IPVS: Creating netns size=2536 id=5 [ 28.381090] binder: BINDER_SET_CONTEXT_MGR already set [ 28.381095] binder: 3364:3369 ioctl 40046207 0 returned -16 [ 28.381761] binder: send failed reply for transaction 2 to 3364:3368 [ 28.394315] binder: 3364:3368 transaction failed 29189/-22, size 0-0 line 3004 [ 28.396830] binder: undelivered TRANSACTION_COMPLETE [ 28.396835] binder: undelivered TRANSACTION_ERROR: 29189 [ 28.396837] binder: undelivered TRANSACTION_ERROR: 29189 [ 28.398078] audit: type=1400 audit(1515821355.041:9): avc: denied { dac_override } for pid=3339 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.404313] binder: send failed reply for transaction 6 to 3371:3372 [ 28.413053] binder: send failed reply for transaction 10 to 3377:3378 [ 28.426232] IPVS: Creating netns size=2536 id=6 [ 28.432961] binder: send failed reply for transaction 14 to 3371:3372 [ 28.433148] binder: undelivered TRANSACTION_COMPLETE [ 28.433153] binder: undelivered TRANSACTION_ERROR: 29189 [ 28.433164] binder: undelivered TRANSACTION_COMPLETE [ 28.433168] binder: undelivered TRANSACTION_ERROR: 29189 [ 28.435346] binder: send failed reply for transaction 12 to 3363:3366 [ 28.435348] ------------[ cut here ]------------ [ 28.435363] WARNING: CPU: 1 PID: 24 at drivers/android/binder.c:2151 binder_send_failed_reply+0x147/0x3a0 [ 28.435365] Unexpected reply error: 29189 [ 28.435368] Kernel panic - not syncing: panic_on_warn set ... [ 28.435368] [ 28.435373] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.9.76-g8e170a5 #21 [ 28.435375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.435383] Workqueue: events binder_deferred_func [ 28.435390] ffff8801d9967910 ffffffff81d93149 ffffffff83a47180 ffff8801d99679e8 [ 28.435395] ffffffff83eab900 ffffffff82d61b17 0000000000000009 ffff8801d99679d8 [ 28.435400] ffffffff8142e371 0000000041b58ab3 ffffffff84189678 ffffffff8142e1b5 [ 28.435401] Call Trace: [ 28.435410] [] dump_stack+0xc1/0x128 [ 28.435415] [] ? binder_send_failed_reply+0x147/0x3a0 [ 28.435423] [] panic+0x1bc/0x3a8 [ 28.435428] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 28.435435] [] ? vprintk_emit+0x3ad/0x750 [ 28.435441] [] ? __warn+0x1a9/0x1e0 [ 28.435445] [] ? binder_send_failed_reply+0x147/0x3a0 [ 28.435449] [] __warn+0x1c4/0x1e0 [ 28.435453] [] warn_slowpath_fmt+0xc4/0x110 [ 28.435456] [] ? __warn+0x1e0/0x1e0 [ 28.435461] [] ? _binder_inner_proc_lock+0x2c/0x50 [ 28.435466] [] binder_send_failed_reply+0x147/0x3a0 [ 28.435470] [] binder_cleanup_transaction+0xd2/0x140 [ 28.435474] [] binder_release_work+0x1b0/0x260 [ 28.435483] [] ? _raw_spin_unlock+0x2c/0x50 [ 28.435487] [] binder_deferred_func+0x9a2/0xd10 [ 28.435493] [] ? __lock_is_held+0xa1/0xf0 [ 28.435501] [] process_one_work+0x7e0/0x1610 [ 28.435505] [] ? process_one_work+0x72c/0x1610 [ 28.435509] [] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 28.435514] [] worker_thread+0xe0/0x10d0 [ 28.435518] [] ? __schedule+0x683/0x1ba0 [ 28.435522] [] kthread+0x26d/0x300 [ 28.435526] [] ? process_one_work+0x1610/0x1610 [ 28.435529] [] ? kthread_park+0xa0/0xa0 [ 28.435533] [] ? kthread_park+0xa0/0xa0 [ 28.435537] [] ? kthread_park+0xa0/0xa0 [ 28.435540] [] ret_from_fork+0x46/0x60 [ 28.436140] Dumping ftrace buffer: [ 28.436165] (ftrace buffer empty) [ 28.436167] Kernel Offset: disabled [ 28.778372] Rebooting in 86400 seconds..