INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-386-2,10.128.0.37' (ECDSA) to the list of known hosts. 2017/12/04 12:58:10 parsed 1 programs 2017/12/04 12:58:10 executed programs: 0 syzkaller login: [ 33.719097] binder: 3099:3101 ioctl 40286608 5 returned -22 [ 33.721611] binder: 3104:3108 ioctl 40286608 5 returned -22 [ 33.723586] binder: 3105:3110 ioctl 40286608 5 returned -22 [ 33.728668] binder: 3111:3119 ioctl 40286608 5 returned -22 [ 33.729093] binder: 3106:3115 ioctl 40286608 5 returned -22 [ 33.730546] binder: 3113:3121 ioctl 40286608 5 returned -22 [ 33.732621] binder: 3124:3126 ioctl 40286608 5 returned -22 [ 33.733765] binder: send failed reply for transaction 2 to 3099:3101 [ 33.733935] binder: send failed reply for transaction 4 to 3105:3110 [ 33.735223] binder: 3099:3101 ioctl 40286608 5 returned -22 [ 33.735332] binder: 3105:3110 ioctl 40286608 5 returned -22 [ 33.735523] binder: 3122:3128 ioctl 40286608 5 returned -22 [ 33.736720] binder: send failed reply for transaction 8 to 3106:3115 [ 33.737921] binder: 3106:3115 ioctl 40286608 5 returned -22 [ 33.738356] binder: send failed reply for transaction 6 to 3104:3108 [ 33.740813] binder: send failed reply for transaction 10 to 3113:3121 [ 33.747615] binder: 3113:3121 ioctl 40286608 5 returned -22 [ 33.751417] binder: send failed reply for transaction 14 to 3122:3128 [ 33.752042] binder: send failed reply for transaction 12 to 3124:3126 [ 33.752817] binder: 3124:3126 ioctl 40286608 5 returned -22 [ 33.754307] binder: 3122:3128 ioctl 40286608 5 returned -22 [ 33.760724] binder: send failed reply for transaction 17 to 3099:3101 [ 33.760727] ------------[ cut here ]------------ [ 33.760729] Unexpected reply error: 29189 [ 33.760832] WARNING: CPU: 0 PID: 23 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 33.760835] Kernel panic - not syncing: panic_on_warn set ... [ 33.760835] [ 33.760841] CPU: 0 PID: 23 Comm: kworker/0:1 Not tainted 4.15.0-rc2+ #116 [ 33.760843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.760848] Workqueue: events binder_deferred_func [ 33.760852] Call Trace: [ 33.760859] dump_stack+0x194/0x257 [ 33.760867] ? arch_local_irq_restore+0x53/0x53 [ 33.760877] ? vsnprintf+0x1ed/0x1900 [ 33.760888] panic+0x1e4/0x41c [ 33.760893] ? refcount_error_report+0x214/0x214 [ 33.760899] ? show_regs_print_info+0x65/0x65 [ 33.760911] ? __warn+0x1c1/0x200 [ 33.760919] ? binder_send_failed_reply+0x13b/0x350 [ 33.760924] __warn+0x1dc/0x200 [ 33.760929] ? binder_send_failed_reply+0x13b/0x350 [ 33.760938] report_bug+0x211/0x2d0 [ 33.760951] fixup_bug.part.11+0x37/0x80 [ 33.760957] do_error_trap+0x2d7/0x3e0 [ 33.760961] ? __down_trylock_console_sem+0x10d/0x1e0 [ 33.760970] ? math_error+0x400/0x400 [ 33.760975] ? vprintk_emit+0x3ea/0x590 [ 33.760982] ? vprintk_emit+0x3ea/0x590 [ 33.760996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.761010] do_invalid_op+0x1b/0x20 [ 33.761016] invalid_op+0x18/0x20 [ 33.761020] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 33.761023] RSP: 0018:ffff8801d9d070f8 EFLAGS: 00010286 [ 33.761027] RAX: dffffc0000000008 RBX: ffff8801d4979100 RCX: ffffffff8159c48e [ 33.761030] RDX: 0000000000000000 RSI: 1ffff1003b39e129 RDI: 0000000000000293 [ 33.761032] RBP: ffff8801d9d07120 R08: 1ffff1003b3a0db2 R09: 0000000000000000 [ 33.761035] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cbac87c0 [ 33.761037] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c1b [ 33.761051] ? vprintk_func+0x5e/0xc0 [ 33.761061] ? binder_send_failed_reply+0x13b/0x350 [ 33.761070] binder_release_work+0x3d9/0x580 [ 33.761079] ? kzalloc.constprop.53+0x20/0x20 [ 33.761090] ? do_raw_spin_trylock+0x190/0x190 [ 33.761100] ? kfree+0xe4/0x250 [ 33.761105] ? binder_deferred_func+0xe8a/0x12f0 [ 33.761114] ? _raw_spin_unlock+0x22/0x30 [ 33.761123] binder_deferred_func+0xdf5/0x12f0 [ 33.761141] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 33.761149] ? mntput_no_expire+0x15e/0xa90 [ 33.761158] ? find_held_lock+0x39/0x1d0 [ 33.761167] ? check_noncircular+0x20/0x20 [ 33.761181] ? lock_acquire+0x1d5/0x580 [ 33.761187] ? process_one_work+0xb2f/0x1be0 [ 33.761203] ? __lock_is_held+0xbc/0x140 [ 33.761222] process_one_work+0xbfd/0x1be0 [ 33.761239] ? pwq_dec_nr_in_flight+0x450/0x450 [ 33.761245] ? finish_task_switch+0x1d3/0x740 [ 33.761280] ? __sched_text_start+0x8/0x8 [ 33.761291] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 33.761300] ? select_task_rq_fair+0x2770/0x2770 [ 33.761304] ? check_noncircular+0x20/0x20 [ 33.761315] ? find_held_lock+0x39/0x1d0 [ 33.761332] ? lock_acquire+0x1d5/0x580 [ 33.761336] ? worker_thread+0x4a3/0x1990 [ 33.761348] ? lock_release+0xda0/0xda0 [ 33.761354] ? retint_kernel+0x10/0x10 [ 33.761362] ? do_raw_spin_trylock+0x190/0x190 [ 33.761381] worker_thread+0x223/0x1990 [ 33.761405] ? process_one_work+0x1be0/0x1be0 [ 33.761414] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.761421] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.761432] ? trace_hardirqs_on+0xd/0x10 [ 33.761437] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.761443] ? finish_task_switch+0x1d3/0x740 [ 33.761447] ? finish_task_switch+0x1aa/0x740 [ 33.761457] ? copy_overflow+0x20/0x20 [ 33.761472] ? __schedule+0x8f3/0x2060 [ 33.761476] ? check_noncircular+0x20/0x20 [ 33.761489] ? find_held_lock+0x39/0x1d0 [ 33.761507] ? find_held_lock+0x39/0x1d0 [ 33.761523] ? lock_downgrade+0x980/0x980 [ 33.761530] ? default_wake_function+0x30/0x50 [ 33.761543] ? __schedule+0x2060/0x2060 [ 33.761549] ? do_wait_intr+0x3e0/0x3e0 [ 33.761557] ? do_raw_spin_trylock+0x190/0x190 [ 33.761564] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 33.761572] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.761578] ? trace_hardirqs_on+0xd/0x10 [ 33.761583] ? __kthread_parkme+0x175/0x240 [ 33.761592] kthread+0x37a/0x440 [ 33.761596] ? process_one_work+0x1be0/0x1be0 [ 33.761600] ? kthread_stop+0x7b0/0x7b0 [ 33.761607] ret_from_fork+0x24/0x30 [ 33.768236] Dumping ftrace buffer: [ 33.768292] (ftrace buffer empty) [ 33.768294] Kernel Offset: disabled [ 34.227828] Rebooting in 86400 seconds..