INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-386-2,10.128.0.13' (ECDSA) to the list of known hosts. 2017/12/04 07:07:36 parsed 1 programs 2017/12/04 07:07:36 executed programs: 0 syzkaller login: [ 27.856137] binder: 3102:3104 ioctl 40046205 400000 returned -22 [ 27.857834] binder: 3100:3108 ioctl 40046205 400000 returned -22 [ 27.858513] binder: 3112:3113 ioctl 40046205 400000 returned -22 [ 27.861214] binder: 3099:3110 ioctl 40046205 400000 returned -22 [ 27.862274] binder: 3111:3115 ioctl 40046205 400000 returned -22 [ 27.872483] binder: 3114:3118 ioctl 40046205 400000 returned -22 [ 27.872933] binder: send failed reply for transaction 7 to 3099:3110 [ 27.873859] binder: send failed reply for transaction 6 to 3112:3113 [ 27.877224] binder: send failed reply for transaction 8 to 3100:3108 [ 27.877447] binder: 3116:3122 ioctl 40046205 400000 returned -22 [ 27.877922] binder: send failed reply for transaction 5 to 3111:3115 [ 27.881125] binder: 3099:3121 ioctl 40046205 400000 returned -22 [ 27.883893] binder: 3112:3119 ioctl 40046205 400000 returned -22 [ 27.886865] binder: send failed reply for transaction 12 to 3116:3122 [ 27.894978] binder: 3111:3120 ioctl 40046205 400000 returned -22 [ 27.895145] binder: send failed reply for transaction 10 to 3114:3118 [ 27.900484] binder: 3100:3123 ioctl 40046205 400000 returned -22 [ 27.903177] binder: 3124:3125 ioctl 40046205 400000 returned -22 [ 27.906608] binder: 3116:3129 ioctl 40046205 400000 returned -22 [ 27.912548] binder: send failed reply for transaction 16 to 3112:3113 [ 27.912550] ------------[ cut here ]------------ [ 27.912553] Unexpected reply error: 29189 [ 27.912652] WARNING: CPU: 0 PID: 1405 at drivers/android/binder.c:1924 binder_send_failed_reply+0x13b/0x350 [ 27.912656] Kernel panic - not syncing: panic_on_warn set ... [ 27.912656] [ 27.912661] CPU: 0 PID: 1405 Comm: kworker/0:2 Not tainted 4.15.0-rc2+ #116 [ 27.912664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.912669] Workqueue: events binder_deferred_func [ 27.912672] Call Trace: [ 27.912679] dump_stack+0x194/0x257 [ 27.912688] ? arch_local_irq_restore+0x53/0x53 [ 27.912698] ? vsnprintf+0x1ed/0x1900 [ 27.912708] panic+0x1e4/0x41c [ 27.912714] ? refcount_error_report+0x214/0x214 [ 27.912720] ? show_regs_print_info+0x65/0x65 [ 27.912731] ? __warn+0x1c1/0x200 [ 27.912740] ? binder_send_failed_reply+0x13b/0x350 [ 27.912744] __warn+0x1dc/0x200 [ 27.912749] ? binder_send_failed_reply+0x13b/0x350 [ 27.912759] report_bug+0x211/0x2d0 [ 27.912772] fixup_bug.part.11+0x37/0x80 [ 27.912779] do_error_trap+0x2d7/0x3e0 [ 27.912783] ? __down_trylock_console_sem+0x10d/0x1e0 [ 27.912792] ? math_error+0x400/0x400 [ 27.912797] ? vprintk_emit+0x3ea/0x590 [ 27.912804] ? vprintk_emit+0x3ea/0x590 [ 27.912817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.912828] do_invalid_op+0x1b/0x20 [ 27.912834] invalid_op+0x18/0x20 [ 27.912838] RIP: 0010:binder_send_failed_reply+0x13b/0x350 [ 27.912841] RSP: 0018:ffff8801d2b270f8 EFLAGS: 00010286 [ 27.912845] RAX: dffffc0000000008 RBX: ffff8801d8f9ca00 RCX: ffffffff8159c48e [ 27.912848] RDX: 0000000000000000 RSI: 1ffff1003a563939 RDI: 0000000000000293 [ 27.912851] RBP: ffff8801d2b27120 R08: 1ffff1003a564db2 R09: 0000000000000000 [ 27.912853] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cba08300 [ 27.912856] R13: 0000000000007205 R14: 0000000000007205 R15: 0000000000000c28 [ 27.912869] ? vprintk_func+0x5e/0xc0 [ 27.912879] ? binder_send_failed_reply+0x13b/0x350 [ 27.912888] binder_release_work+0x3d9/0x580 [ 27.912897] ? kzalloc.constprop.53+0x20/0x20 [ 27.912908] ? do_raw_spin_trylock+0x190/0x190 [ 27.912918] ? kfree+0xe4/0x250 [ 27.912923] ? binder_deferred_func+0xe8a/0x12f0 [ 27.912931] ? _raw_spin_unlock+0x22/0x30 [ 27.912940] binder_deferred_func+0xdf5/0x12f0 [ 27.912944] ? find_held_lock+0x39/0x1d0 [ 27.912961] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 27.912973] ? find_held_lock+0x39/0x1d0 [ 27.912983] ? check_noncircular+0x20/0x20 [ 27.912996] ? lock_acquire+0x1d5/0x580 [ 27.913004] ? process_one_work+0xb2f/0x1be0 [ 27.913020] ? __lock_is_held+0xbc/0x140 [ 27.913038] process_one_work+0xbfd/0x1be0 [ 27.913055] ? pwq_dec_nr_in_flight+0x450/0x450 [ 27.913061] ? finish_task_switch+0x1d3/0x740 [ 27.913065] ? finish_task_switch+0x1aa/0x740 [ 27.913097] ? __sched_text_start+0x8/0x8 [ 27.913107] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 27.913117] ? check_noncircular+0x20/0x20 [ 27.913127] ? find_held_lock+0x39/0x1d0 [ 27.913144] ? lock_acquire+0x1d5/0x580 [ 27.913149] ? worker_thread+0x4a3/0x1990 [ 27.913160] ? lock_release+0xda0/0xda0 [ 27.913166] ? retint_kernel+0x10/0x10 [ 27.913173] ? do_raw_spin_trylock+0x190/0x190 [ 27.913191] worker_thread+0x223/0x1990 [ 27.913215] ? process_one_work+0x1be0/0x1be0 [ 27.913223] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.913231] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.913237] ? trace_hardirqs_on+0xd/0x10 [ 27.913241] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.913247] ? finish_task_switch+0x1d3/0x740 [ 27.913256] ? finish_task_switch+0x1aa/0x740 [ 27.913266] ? copy_overflow+0x20/0x20 [ 27.913282] ? __schedule+0x8f3/0x2060 [ 27.913285] ? check_noncircular+0x20/0x20 [ 27.913303] ? find_held_lock+0x39/0x1d0 [ 27.913316] ? find_held_lock+0x39/0x1d0 [ 27.913331] ? lock_downgrade+0x980/0x980 [ 27.913338] ? default_wake_function+0x30/0x50 [ 27.913356] ? __schedule+0x2060/0x2060 [ 27.913362] ? do_wait_intr+0x3e0/0x3e0 [ 27.913370] ? do_raw_spin_trylock+0x190/0x190 [ 27.913377] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 27.913384] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.913390] ? trace_hardirqs_on+0xd/0x10 [ 27.913396] ? __kthread_parkme+0x175/0x240 [ 27.913407] kthread+0x37a/0x440 [ 27.913414] ? process_one_work+0x1be0/0x1be0 [ 27.913417] ? kthread_stop+0x7b0/0x7b0 [ 27.913427] ret_from_fork+0x24/0x30 [ 27.914530] Dumping ftrace buffer: [ 27.914571] (ftrace buffer empty) [ 27.914573] Kernel Offset: disabled [ 28.388765] Rebooting in 86400 seconds..