netlink: 15 bytes leftover after parsing attributes in process `syz-executor7'.
binder: 20062:20065 BC_DEAD_BINDER_DONE 0000000000000000 not found
binder: 20065 RLIMIT_NICE not set
device eql entered promiscuous mode
BUG: unable to handle kernel NULL pointer dereference at 0000000000000690
IP: __read_once_size include/linux/compiler.h:183 [inline]
IP: task_sid security/selinux/hooks.c:222 [inline]
IP: selinux_binder_transaction+0x7e/0x370 security/selinux/hooks.c:2130
PGD 1faf5c067 P4D 1faf5c067 PUD 1f8b2c067 PMD 0 
Oops: 0000 [#1] SMP
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 20075 Comm: syz-executor0 Not tainted 4.15.0-rc3-next-20171214+ #67
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:task_sid security/selinux/hooks.c:222 [inline]
RIP: 0010:selinux_binder_transaction+0x7e/0x370 security/selinux/hooks.c:2130
RSP: 0018:ffffc90002c4fb50 EFLAGS: 00010216
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816557de
RDX: 00000000000000c7 RSI: ffffc90003d7e000 RDI: 0000000000000286
RBP: ffffc90002c4fb68 R08: 0000000000000001 R09: 0000000000000002
R10: ffffc90002c4fad8 R11: 0000000000000002 R12: 00000000000000d8
R13: 0000000000000000 R14: ffff8801fa60cc00 R15: ffff8801fa60cc00
FS:  00007f7f32b0b700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000690 CR3: 00000001fdb38006 CR4: 00000000001606e0
Call Trace:
 security_binder_transaction+0x49/0x70 security/security.c:232
 binder_transaction+0x170/0x32c0 drivers/android/binder.c:2836
 binder_thread_write+0x62c/0x1960 drivers/android/binder.c:3497
 binder_ioctl_write_read.isra.41+0xf3/0x4a0 drivers/android/binder.c:4412
 binder_ioctl+0x67b/0x9f3 drivers/android/binder.c:4552
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf/0x840 fs/ioctl.c:686
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452a09
RSP: 002b:00007f7f32b0ac58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f7f32b0b700 RCX: 0000000000452a09
RDX: 0000000020007000 RSI: 00000000c0306201 RDI: 0000000000000013
RBP: 0000000000a2f880 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a2f7ff R14: 00007f7f32b0b9c0 R15: 0000000000000010
Code: c7 40 07 08 83 e8 73 0c bd ff e8 fe 7b bf ff 85 c0 59 74 12 e8 74 4b c6 ff 80 3d df e6 b5 01 00 0f 84 cc 01 00 00 e8 62 4b c6 ff <48> 8b 9b 90 06 00 00 e8 d6 7b bf ff 85 c0 74 12 e8 4d 4b c6 ff 
RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffffc90002c4fb50
RIP: task_sid security/selinux/hooks.c:222 [inline] RSP: ffffc90002c4fb50
RIP: selinux_binder_transaction+0x7e/0x370 security/selinux/hooks.c:2130 RSP: ffffc90002c4fb50
CR2: 0000000000000690
---[ end trace b4109f0eb5bef833 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..