kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: binder: 13097:13099 tried to acquire reference to desc 0, got 1 instead (ftrace buffer empty) Modules linked in: CPU: 0 PID: 13092 Comm: syz-executor2 Not tainted 4.9.67-gf26d3c7 #106 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801c72c0000 task.stack: ffff8801d8ec0000 RIP: 0010:[] [] sidtab_search_core+0x6a/0x320 security/selinux/ss/sidtab.c:94 RSP: 0018:ffff8801d8ec7a18 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000008 RCX: ffffc90003b03000 RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffffff8593e620 RBP: ffff8801d8ec7a48 R08: ffffffff85393040 R09: ffffffff83a5e040 R10: 0000000000000001 R11: ffff8801c72c0000 R12: 0000000000000001 device ±BÞÓ*mqÐx”o‡3{© entered promiscuous mode binder: 13097:13099 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 binder: 13097:13098 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 binder: undelivered death notification, 0000000000000000 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801d861b900 FS: 00007f708f249700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002fff CR3: 00000001d6275000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000001 ffffffff8593e620 0000000000000001 0000000000000001 0000000000000001 ffff8801d861b900 ffff8801d8ec7a68 ffffffff81c0582f dffffc0000000000 ffff8801d861b904 ffff8801d8ec7b90 ffffffff81c23952 Call Trace: [] sidtab_search+0x1f/0x30 security/selinux/ss/sidtab.c:117 [] security_bounded_transition+0xb2/0x3a0 security/selinux/ss/services.c:860 [] selinux_setprocattr+0x8b0/0xa80 security/selinux/hooks.c:5941 [] security_setprocattr+0x8d/0xc0 security/security.c:1177 [] proc_pid_attr_write+0x1bd/0x270 fs/proc/base.c:2510 [] __vfs_write+0x103/0x680 fs/read_write.c:510 [] vfs_write+0x189/0x530 fs/read_write.c:560 [] SYSC_write fs/read_write.c:607 [inline] [] SyS_write+0xd9/0x1b0 fs/read_write.c:599 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Code: ea 03 41 83 e4 7f 80 3c 02 00 0f 85 7d 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 33 4d 63 e4 4b 8d 1c e6 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 41 02 00 00 48 8b 1b 48 85 db 0f 84 8b 00 00 RIP [] sidtab_search_core+0x6a/0x320 security/selinux/ss/sidtab.c:94 RSP ---[ end trace b15feb08ea9639cb ]---