[....] Starting enhanced syslogd: rsyslogd[ 12.789780] audit: type=1400 audit(1520317736.910:4): avc: denied { syslog } for pid=3566 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Starting mcstransd:
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts.
syzkaller login: [ 109.463014] audit: type=1400 audit(1520317833.590:5): avc: denied { set_context_mgr } for pid=3777 comm="syzkaller633709" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 109.484467] binder: 3777:3779 ERROR: BC_REGISTER_LOOPER called without request
[ 109.494463] audit: type=1400 audit(1520317833.620:6): avc: denied { call } for pid=3777 comm="syzkaller633709" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 109.518085] binder: release 3777:3778 transaction 3 out, still active
[ 109.524703] binder: undelivered TRANSACTION_COMPLETE
[ 109.584291] binder: release 3777:3779 transaction 1 out, still active
[ 109.590982] binder: undelivered TRANSACTION_COMPLETE
[ 109.594806] binder: 3781:3782 ERROR: BC_REGISTER_LOOPER called without request
[ 109.603438] binder: release 3777:3780 transaction 4 out, still active
[ 109.609984] binder: undelivered TRANSACTION_COMPLETE
[ 109.615184] binder: send failed reply for transaction 1, target dead
[ 109.615743] binder: release 3781:3782 transaction 7 out, still active
[ 109.615746] binder: release 3781:3782 transaction 6 in, still active
[ 109.615748] binder: undelivered TRANSACTION_COMPLETE
[ 109.640217] binder: send failed reply for transaction 3, target dead
[ 109.646706] binder: send failed reply for transaction 4, target dead
[ 109.651834] binder: BINDER_SET_CONTEXT_MGR already set
[ 109.651839] binder: 3784:3785 ioctl 40046207 0 returned -16
[ 109.652412] binder: 3784:3785 ERROR: BC_REGISTER_LOOPER called without request
[ 109.671778] binder: release 3781:3783 transaction 8 in, still active
[ 109.673139] binder: 3784:3786 transaction failed 29189/-22, size 0-0 line 3004
[ 109.675355] binder: undelivered TRANSACTION_ERROR: 29189
[ 109.691037] binder: send failed reply for transaction 8 to 3781:3783
[ 109.697581] ==================================================================
[ 109.699955] binder: 3784:3787 transaction failed 29189/-22, size 0-0 line 3004
[ 109.712245] BUG: KASAN: use-after-free in __list_del_entry+0x196/0x1d0
[ 109.714184] binder: 3788:3789 ERROR: BC_REGISTER_LOOPER called without request
[ 109.726219] Read of size 8 at addr ffff8801ce78fc10 by task kworker/0:1/25
[ 109.733198]
[ 109.734797] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 4.9.86-gb324a70 #50
[ 109.735020] binder: release 3788:3789 transaction 13 out, still active
[ 109.735023] binder: release 3788:3789 transaction 12 in, still active
[ 109.735025] binder: undelivered TRANSACTION_COMPLETE
[ 109.760187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 109.769515] Workqueue: events binder_deferred_func[ 109.771036] binder: BINDER_SET_CONTEXT_MGR already set
[ 109.771041] binder: 3791:3792 ioctl 40046207 0 returned -16
[ 109.771616] binder: 3791:3792 ERROR: BC_REGISTER_LOOPER called without request
[ 109.792364] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.792376] binder: 3791:3793 transaction failed 29189/-3, size 0-0 line 3127
[ 109.794591] binder: undelivered TRANSACTION_ERROR: 29189
[ 109.810564] ffff8801d951fa50 ffffffff81d956f9 ffffea000739e3c0 ffff8801ce78fc10
[ 109.818532] 0000000000000000[ 109.819215] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.819227] binder: 3791:3794 transaction failed 29189/-3, size 0-0 line 3127
[ 109.833872] binder: BINDER_SET_CONTEXT_MGR already set
[ 109.833877] binder: 3795:3796 ioctl 40046207 0 returned -16
[ 109.834449] binder: 3795:3796 ERROR: BC_REGISTER_LOOPER called without request
[ 109.852318] ffff8801ce78fc10[ 109.855198] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.855210] binder: 3795:3797 transaction failed 29189/-3, size 0-0 line 3127
[ 109.857434] binder: undelivered TRANSACTION_ERROR: 29189
[ 109.873308] ffffed0038a21949 ffff8801d951fa88
[ 109.878109] ffffffff8153e083 ffff8801ce78fc10[ 109.882078] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.882090] binder: 3795:3798 transaction failed 29189/-3, size 0-0 line 3127
[ 109.895251] 0000000000000008[ 109.895707] binder: BINDER_SET_CONTEXT_MGR already set
[ 109.895712] binder: 3799:3800 ioctl 40046207 0 returned -16
[ 109.896279] binder: 3799:3800 ERROR: BC_REGISTER_LOOPER called without request
[ 109.916404] 0000000000000000[ 109.917031] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.917043] binder: 3799:3801 transaction failed 29189/-3, size 0-0 line 3127
[ 109.919259] binder: undelivered TRANSACTION_ERROR: 29189
[ 109.937385] Call Trace:
[ 109.939943] [<ffffffff81d956f9>] dump_stack+0xc1/0x128
[ 109.943881] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.943893] binder: 3799:3802 transaction failed 29189/-3, size 0-0 line 3127
[ 109.957484] binder: BINDER_SET_CONTEXT_MGR already set
[ 109.957488] binder: 3803:3804 ioctl 40046207 0 returned -16
[ 109.958059] binder: 3803:3804 ERROR: BC_REGISTER_LOOPER called without request
[ 109.976175] [<ffffffff8153e083>] print_address_description+0x73/0x280
[ 109.978784] binder_alloc: 3788: binder_alloc_buf, no vma
[ 109.978794] binder: 3803:3805 transaction failed 29189/-3, size 0-0 line 3127
[ 109.981007] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.000901] [<ffffffff8153e5a5>] kasan_report+0x275/0x360
[ 110.005700] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.005712] binder: 3803:3806 transaction failed 29189/-3, size 0-0 line 3127
[ 110.019142] [<ffffffff81dfd0b6>] ? __list_del_entry+0x196/0x1d0
[ 110.019300] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.019305] binder: 3807:3808 ioctl 40046207 0 returned -16
[ 110.019873] binder: 3807:3808 ERROR: BC_REGISTER_LOOPER called without request
[ 110.040632] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.040643] binder: 3807:3809 transaction failed 29189/-3, size 0-0 line 3127
[ 110.042863] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.061570] [<ffffffff8153e704>] __asan_report_load8_noabort+0x14/0x20
[ 110.067610] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.067620] binder: 3807:3810 transaction failed 29189/-3, size 0-0 line 3127
[ 110.080939] [<ffffffff81dfd0b6>] __list_del_entry+0x196/0x1d0
[ 110.081167] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.081172] binder: 3811:3812 ioctl 40046207 0 returned -16
[ 110.081736] binder: 3811:3812 ERROR: BC_REGISTER_LOOPER called without request
[ 110.102471] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.102481] binder: 3811:3813 transaction failed 29189/-3, size 0-0 line 3127
[ 110.104698] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.123194] [<ffffffff82d64cbc>] binder_release_work+0x8c/0x260
[ 110.129309] [<ffffffff82d648da>] ? binder_send_failed_reply+0x18a/0x3a0
[ 110.129323] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.129335] binder: 3811:3814 transaction failed 29189/-3, size 0-0 line 3127
[ 110.142986] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.142991] binder: 3815:3816 ioctl 40046207 0 returned -16
[ 110.143574] binder: 3815:3816 ERROR: BC_REGISTER_LOOPER called without request
[ 110.164327] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.164339] binder: 3815:3817 transaction failed 29189/-3, size 0-0 line 3127
[ 110.166556] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.185076] [<ffffffff82d652b8>] binder_thread_release+0x428/0x600
[ 110.191189] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.191202] binder: 3815:3818 transaction failed 29189/-3, size 0-0 line 3127
[ 110.204110] [<ffffffff82d658cf>] binder_deferred_func+0x43f/0xd10
[ 110.204952] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.204956] binder: 3819:3820 ioctl 40046207 0 returned -16
[ 110.205522] binder: 3819:3820 ERROR: BC_REGISTER_LOOPER called without request
[ 110.226260] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.226272] binder: 3819:3821 transaction failed 29189/-3, size 0-0 line 3127
[ 110.228491] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.246698] [<ffffffff81234d01>] ? __lock_is_held+0xa1/0xf0
[ 110.252468] [<ffffffff811898a0>] process_one_work+0x7e0/0x1610
[ 110.253112] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.253124] binder: 3819:3822 transaction failed 29189/-3, size 0-0 line 3127
[ 110.266718] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.266723] binder: 3823:3824 ioctl 40046207 0 returned -16
[ 110.267290] binder: 3823:3824 ERROR: BC_REGISTER_LOOPER called without request
[ 110.288023] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.288035] binder: 3823:3825 transaction failed 29189/-3, size 0-0 line 3127
[ 110.290265] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.307438] [<ffffffff811897ec>] ? process_one_work+0x72c/0x1610
[ 110.313636] [<ffffffff811890c0>] ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 110.314863] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.314874] binder: 3823:3826 transaction failed 29189/-3, size 0-0 line 3127
[ 110.328481] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.328486] binder: 3827:3828 ioctl 40046207 0 returned -16
[ 110.329046] binder: 3827:3828 ERROR: BC_REGISTER_LOOPER called without request
[ 110.349768] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.349779] binder: 3827:3829 transaction failed 29189/-3, size 0-0 line 3127
[ 110.351990] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.369055] [<ffffffff8118a7b0>] worker_thread+0xe0/0x10d0
[ 110.374737] [<ffffffff838a4583>] ? __schedule+0x683/0x1ba0
[ 110.376626] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.376639] binder: 3827:3830 transaction failed 29189/-3, size 0-0 line 3127
[ 110.390189] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.390193] binder: 3831:3832 ioctl 40046207 0 returned -16
[ 110.390773] binder: 3831:3832 ERROR: BC_REGISTER_LOOPER called without request
[ 110.411308] [<ffffffff8119a7bd>] kthread+0x26d/0x300
[ 110.411487] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.411498] binder: 3831:3833 transaction failed 29189/-3, size 0-0 line 3127
[ 110.413710] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.434529] [<ffffffff8118a6d0>] ? process_one_work+0x1610/0x1610
[ 110.438308] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.438324] binder: 3831:3834 transaction failed 29189/-3, size 0-0 line 3127
[ 110.451909] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.451914] binder: 3835:3836 ioctl 40046207 0 returned -16
[ 110.452471] binder: 3835:3836 ERROR: BC_REGISTER_LOOPER called without request
[ 110.471695] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 110.473189] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.473200] binder: 3835:3837 transaction failed 29189/-3, size 0-0 line 3127
[ 110.475417] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.495351] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 110.499987] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.499997] binder: 3835:3838 transaction failed 29189/-3, size 0-0 line 3127
[ 110.513506] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.513510] binder: 3839:3840 ioctl 40046207 0 returned -16
[ 110.514062] binder: 3839:3840 ERROR: BC_REGISTER_LOOPER called without request
[ 110.531834] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 110.534819] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.534831] binder: 3839:3841 transaction failed 29189/-3, size 0-0 line 3127
[ 110.537043] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.555491] [<ffffffff838b57ac>] ret_from_fork+0x5c/0x70
[ 110.560997]
[ 110.561641] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.561651] binder: 3839:3842 transaction failed 29189/-3, size 0-0 line 3127
[ 110.575243] Allocated by task 3783:
[ 110.575440] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.575444] binder: 3843:3844 ioctl 40046207 0 returned -16
[ 110.576008] binder: 3843:3844 ERROR: BC_REGISTER_LOOPER called without request
[ 110.596783] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.596794] binder: 3843:3845 transaction failed 29189/-3, size 0-0 line 3127
[ 110.599017] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.615145] save_stack_trace+0x16/0x20
[ 110.619089] save_stack+0x43/0xd0
[ 110.622510] kasan_kmalloc+0xad/0xe0
[ 110.623681] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.623691] binder: 3843:3846 transaction failed 29189/-3, size 0-0 line 3127
[ 110.637205] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.637210] binder: 3847:3848 ioctl 40046207 0 returned -16
[ 110.637768] binder: 3847:3848 ERROR: BC_REGISTER_LOOPER called without request
[ 110.657073] kmem_cache_alloc_trace+0xfb/0x2a0
[ 110.658487] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.658498] binder: 3847:3849 transaction failed 29189/-3, size 0-0 line 3127
[ 110.660710] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.679683] binder_transaction+0x103c/0x7040
[ 110.684144] binder_thread_write+0x8d4/0x31f0
[ 110.685350] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.685361] binder: 3847:3850 transaction failed 29189/-3, size 0-0 line 3127
[ 110.699468] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.699472] binder: 3851:3852 ioctl 40046207 0 returned -16
[ 110.700036] binder: 3851:3852 ERROR: BC_REGISTER_LOOPER called without request
[ 110.719501] binder_ioctl_write_read.isra.55+0x1ed/0x9a0
[ 110.720742] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.720753] binder: 3851:3853 transaction failed 29189/-3, size 0-0 line 3127
[ 110.722977] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.743003] binder_ioctl+0xaea/0x11b0
[ 110.746862] do_vfs_ioctl+0x1aa/0x1140
[ 110.747569] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.747579] binder: 3851:3854 transaction failed 29189/-3, size 0-0 line 3127
[ 110.761412] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.761417] binder: 3855:3856 ioctl 40046207 0 returned -16
[ 110.761946] binder: 3855:3856 ERROR: BC_REGISTER_LOOPER called without request
[ 110.781605] SyS_ioctl+0x8f/0xc0
[ 110.782728] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.782739] binder: 3855:3857 transaction failed 29189/-3, size 0-0 line 3127
[ 110.784954] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.802997] do_syscall_64+0x1a4/0x490
[ 110.806857] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[ 110.809579] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.809590] binder: 3855:3858 transaction failed 29189/-3, size 0-0 line 3127
[ 110.824159] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.824164] binder: 3859:3860 ioctl 40046207 0 returned -16
[ 110.824733] binder: 3859:3860 ERROR: BC_REGISTER_LOOPER called without request
[ 110.842801]
[ 110.844396] Freed by task 25:
[ 110.845474] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.845484] binder: 3859:3861 transaction failed 29189/-3, size 0-0 line 3127
[ 110.847707] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.865541] save_stack_trace+0x16/0x20
[ 110.869485] save_stack+0x43/0xd0
[ 110.872330] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.872341] binder: 3859:3862 transaction failed 29189/-3, size 0-0 line 3127
[ 110.885554] kasan_slab_free+0x72/0xc0
[ 110.885967] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.885972] binder: 3863:3864 ioctl 40046207 0 returned -16
[ 110.886536] binder: 3863:3864 ERROR: BC_REGISTER_LOOPER called without request
[ 110.907288] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.907299] binder: 3863:3865 transaction failed 29189/-3, size 0-0 line 3127
[ 110.909513] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.925706] kfree+0x103/0x300
[ 110.928871] binder_free_transaction+0x6a/0x90
[ 110.933423] binder_send_failed_reply+0x185/0x3a0
[ 110.934144] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.934155] binder: 3863:3866 transaction failed 29189/-3, size 0-0 line 3127
[ 110.947769] binder: BINDER_SET_CONTEXT_MGR already set
[ 110.947774] binder: 3867:3868 ioctl 40046207 0 returned -16
[ 110.948346] binder: 3867:3868 ERROR: BC_REGISTER_LOOPER called without request
[ 110.969090] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.969102] binder: 3867:3869 transaction failed 29189/-3, size 0-0 line 3127
[ 110.971324] binder: undelivered TRANSACTION_ERROR: 29189
[ 110.987194] binder_thread_release+0x416/0x600
[ 110.991745] binder_deferred_func+0x43f/0xd10
[ 110.995938] binder_alloc: 3788: binder_alloc_buf, no vma
[ 110.995949] binder: 3867:3870 transaction failed 29189/-3, size 0-0 line 3127
[ 111.008868] process_one_work+0x7e0/0x1610
[ 111.009544] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.009549] binder: 3871:3872 ioctl 40046207 0 returned -16
[ 111.010107] binder: 3871:3872 ERROR: BC_REGISTER_LOOPER called without request
[ 111.030854] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.030865] binder: 3871:3873 transaction failed 29189/-3, size 0-0 line 3127
[ 111.033089] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.049375] worker_thread+0xe0/0x10d0
[ 111.053232] kthread+0x26d/0x300
[ 111.056568] ret_from_fork+0x5c/0x70
[ 111.057732] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.057743] binder: 3871:3874 transaction failed 29189/-3, size 0-0 line 3127
[ 111.071367] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.071372] binder: 3875:3876 ioctl 40046207 0 returned -16
[ 111.071947] binder: 3875:3876 ERROR: BC_REGISTER_LOOPER called without request
[ 111.091125]
[ 111.092666] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.092677] binder: 3875:3877 transaction failed 29189/-3, size 0-0 line 3127
[ 111.094892] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.110781] The buggy address belongs to the object at ffff8801ce78fc00
[ 111.110781] which belongs to the cache kmalloc-192 of size 192
[ 111.119513] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.119524] binder: 3875:3878 transaction failed 29189/-3, size 0-0 line 3127
[ 111.133142] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.133146] binder: 3879:3880 ioctl 40046207 0 returned -16
[ 111.133708] binder: 3879:3880 ERROR: BC_REGISTER_LOOPER called without request
[ 111.154284] The buggy address is located 16 bytes inside of
[ 111.154284] 192-byte region [ffff8801ce78fc00, ffff8801ce78fcc0)
[ 111.154440] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.154451] binder: 3879:3881 transaction failed 29189/-3, size 0-0 line 3127
[ 111.156663] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.181318] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.181329] binder: 3879:3882 transaction failed 29189/-3, size 0-0 line 3127
[ 111.195188] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.195193] binder: 3883:3884 ioctl 40046207 0 returned -16
[ 111.195764] binder: 3883:3884 ERROR: BC_REGISTER_LOOPER called without request
[ 111.216478] The buggy address belongs to the page:
[ 111.216509] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.216521] binder: 3883:3885 transaction failed 29189/-3, size 0-0 line 3127
[ 111.218739] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.239454] page:ffffea000739e3c0 count:1 mapcount:0 mapping: (null) index:0x0[ 111.243387] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.243398] binder: 3883:3886 transaction failed 29189/-3, size 0-0 line 3127
[ 111.256981] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.256985] binder: 3887:3888 ioctl 40046207 0 returned -16
[ 111.257546] binder: 3887:3888 ERROR: BC_REGISTER_LOOPER called without request
[ 111.278290] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.278301] binder: 3887:3889 transaction failed 29189/-3, size 0-0 line 3127
[ 111.280515] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.296368] flags: 0x8000000000000080(slab)
[ 111.300654] page dumped because: kasan: bad access detected
[ 111.305106] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.305116] binder: 3887:3890 transaction failed 29189/-3, size 0-0 line 3127
[ 111.318640] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.318645] binder: 3891:3892 ioctl 40046207 0 returned -16
[ 111.319212] binder: 3891:3892 ERROR: BC_REGISTER_LOOPER called without request
[ 111.337229]
[ 111.338824] Memory state around the buggy address:
[ 111.339959] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.339971] binder: 3891:3893 transaction failed 29189/-3, size 0-0 line 3127
[ 111.342197] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.361783] ffff8801ce78fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.366803] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.366815] binder: 3891:3894 transaction failed 29189/-3, size 0-0 line 3127
[ 111.380480] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.380485] binder: 3895:3896 ioctl 40046207 0 returned -16
[ 111.381064] binder: 3895:3896 ERROR: BC_REGISTER_LOOPER called without request
[ 111.399991] ffff8801ce78fb80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 111.401784] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.401795] binder: 3895:3897 transaction failed 29189/-3, size 0-0 line 3127
[ 111.404010] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.425380] >ffff8801ce78fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 111.428599] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.428610] binder: 3895:3898 transaction failed 29189/-3, size 0-0 line 3127
[ 111.442282] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.442287] binder: 3899:3900 ioctl 40046207 0 returned -16
[ 111.442856] binder: 3899:3900 ERROR: BC_REGISTER_LOOPER called without request
[ 111.463617] ^
[ 111.463640] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.463651] binder: 3899:3901 transaction failed 29189/-3, size 0-0 line 3127
[ 111.465890] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.485531] ffff8801ce78fc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 111.490488] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.490499] binder: 3899:3902 transaction failed 29189/-3, size 0-0 line 3127
[ 111.505168] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.505173] binder: 3903:3904 ioctl 40046207 0 returned -16
[ 111.505747] binder: 3903:3904 ERROR: BC_REGISTER_LOOPER called without request
[ 111.523747] ffff8801ce78fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.526488] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.526499] binder: 3903:3905 transaction failed 29189/-3, size 0-0 line 3127
[ 111.528722] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.549140] ==================================================================
[ 111.553348] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.553360] binder: 3903:3906 transaction failed 29189/-3, size 0-0 line 3127
[ 111.566978] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.566983] binder: 3907:3908 ioctl 40046207 0 returned -16
[ 111.567558] binder: 3907:3908 ERROR: BC_REGISTER_LOOPER called without request
[ 111.587354] Disabling lock debugging due to kernel taint
[ 111.588277] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.588286] binder: 3907:3909 transaction failed 29189/-3, size 0-0 line 3127
[ 111.590477] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.610891] Kernel panic - not syncing: panic_on_warn set ...
[ 111.610891]
[ 111.618225] CPU: 0 PID: 25 Comm: kworker/0:1 Tainted: G B 4.9.86-gb324a70 #50
[ 111.618531] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.618540] binder: 3907:3910 transaction failed 29189/-3, size 0-0 line 3127
[ 111.632342] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.632346] binder: 3911:3912 ioctl 40046207 0 returned -16
[ 111.632819] binder: 3911:3912 ERROR: BC_REGISTER_LOOPER called without request
[ 111.653608] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.653618] binder: 3911:3913 transaction failed 29189/-3, size 0-0 line 3127
[ 111.655791] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.676146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 111.680327] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.680337] binder: 3911:3914 transaction failed 29189/-3, size 0-0 line 3127
[ 111.693342] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.693347] binder: 3915:3916 ioctl 40046207 0 returned -16
[ 111.693821] binder: 3915:3916 ERROR: BC_REGISTER_LOOPER called without request
[ 111.714605] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.714615] binder: 3915:3917 transaction failed 29189/-3, size 0-0 line 3127
[ 111.716789] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.734439] Workqueue: events binder_deferred_func
[ 111.739458] ffff8801d951f9a8[ 111.741287] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.741295] binder: 3915:3918 transaction failed 29189/-3, size 0-0 line 3127
[ 111.754364] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.754369] binder: 3919:3920 ioctl 40046207 0 returned -16
[ 111.754828] binder: 3919:3920 ERROR: BC_REGISTER_LOOPER called without request
[ 111.773249] ffffffff81d956f9[ 111.775645] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.775655] binder: 3919:3921 transaction failed 29189/-3, size 0-0 line 3127
[ 111.777837] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.794229] ffffffff841979cf ffff8801d951fa80
[ 111.799014] 0000000000000000 ffff8801ce78fc10[ 111.802392] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.802402] binder: 3919:3922 transaction failed 29189/-3, size 0-0 line 3127
[ 111.815498] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.815503] binder: 3923:3924 ioctl 40046207 0 returned -16
[ 111.815965] binder: 3923:3924 ERROR: BC_REGISTER_LOOPER called without request
[ 111.834432] ffffed0038a21949[ 111.836752] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.836762] binder: 3923:3925 transaction failed 29189/-3, size 0-0 line 3127
[ 111.838936] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.855414] ffff8801d951fa70
[ 111.858609] ffffffff8142f531 0000000041b58ab3 ffffffff8418b430[ 111.863471] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.863481] binder: 3923:3926 transaction failed 29189/-3, size 0-0 line 3127
[ 111.876515] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.876519] binder: 3927:3928 ioctl 40046207 0 returned -16
[ 111.876979] binder: 3927:3928 ERROR: BC_REGISTER_LOOPER called without request
[ 111.895581] ffffffff8142f375[ 111.897783] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.897793] binder: 3927:3929 transaction failed 29189/-3, size 0-0 line 3127
[ 111.899968] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.916572] Call Trace:
[ 111.919130] [<ffffffff81d956f9>] dump_stack+0xc1/0x128
[ 111.924462] [<ffffffff8142f531>] panic+0x1bc/0x3a8
[ 111.924467] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.924476] binder: 3927:3930 transaction failed 29189/-3, size 0-0 line 3127
[ 111.937452] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.937456] binder: 3931:3932 ioctl 40046207 0 returned -16
[ 111.937920] binder: 3931:3932 ERROR: BC_REGISTER_LOOPER called without request
[ 111.958754] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.958763] binder: 3931:3933 transaction failed 29189/-3, size 0-0 line 3127
[ 111.960940] binder: undelivered TRANSACTION_ERROR: 29189
[ 111.978393] [<ffffffff8142f375>] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7
[ 111.985489] binder_alloc: 3788: binder_alloc_buf, no vma
[ 111.985499] binder: 3931:3934 transaction failed 29189/-3, size 0-0 line 3127
[ 111.998609] binder: BINDER_SET_CONTEXT_MGR already set
[ 111.998614] binder: 3935:3936 ioctl 40046207 0 returned -16
[ 111.999093] binder: 3935:3936 ERROR: BC_REGISTER_LOOPER called without request
[ 112.017476] [<ffffffff8153dff0>] kasan_end_report+0x50/0x50
[ 112.019872] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.019881] binder: 3935:3937 transaction failed 29189/-3, size 0-0 line 3127
[ 112.022074] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.041308] [<ffffffff8153e497>] kasan_report+0x167/0x360
[ 112.046576] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.046586] binder: 3935:3938 transaction failed 29189/-3, size 0-0 line 3127
[ 112.059548] [<ffffffff81dfd0b6>] ? __list_del_entry+0x196/0x1d0
[ 112.059666] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.059671] binder: 3939:3940 ioctl 40046207 0 returned -16
[ 112.060147] binder: 3939:3940 ERROR: BC_REGISTER_LOOPER called without request
[ 112.080927] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.080937] binder: 3939:3941 transaction failed 29189/-3, size 0-0 line 3127
[ 112.083113] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.102057] [<ffffffff8153e704>] __asan_report_load8_noabort+0x14/0x20
[ 112.107630] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.107640] binder: 3939:3942 transaction failed 29189/-3, size 0-0 line 3127
[ 112.120776] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.120780] binder: 3943:3944 ioctl 40046207 0 returned -16
[ 112.121234] binder: 3943:3944 ERROR: BC_REGISTER_LOOPER called without request
[ 112.139668] [<ffffffff81dfd0b6>] __list_del_entry+0x196/0x1d0
[ 112.142055] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.142064] binder: 3943:3945 transaction failed 29189/-3, size 0-0 line 3127
[ 112.144241] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.163676] [<ffffffff82d64cbc>] binder_release_work+0x8c/0x260
[ 112.168774] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.168786] binder: 3943:3946 transaction failed 29189/-3, size 0-0 line 3127
[ 112.181827] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.181831] binder: 3947:3948 ioctl 40046207 0 returned -16
[ 112.182285] binder: 3947:3948 ERROR: BC_REGISTER_LOOPER called without request
[ 112.200732] [<ffffffff82d648da>] ? binder_send_failed_reply+0x18a/0x3a0
[ 112.203135] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.203148] binder: 3947:3949 transaction failed 29189/-3, size 0-0 line 3127
[ 112.205350] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.225626] [<ffffffff82d652b8>] binder_thread_release+0x428/0x600
[ 112.229937] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.229951] binder: 3947:3950 transaction failed 29189/-3, size 0-0 line 3127
[ 112.243846] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.243853] binder: 3951:3952 ioctl 40046207 0 returned -16
[ 112.244415] binder: 3951:3952 ERROR: BC_REGISTER_LOOPER called without request
[ 112.262894] [<ffffffff82d658cf>] binder_deferred_func+0x43f/0xd10
[ 112.265144] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.265158] binder: 3951:3953 transaction failed 29189/-3, size 0-0 line 3127
[ 112.267358] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.287250] [<ffffffff81234d01>] ? __lock_is_held+0xa1/0xf0
[ 112.291921] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.291933] binder: 3951:3954 transaction failed 29189/-3, size 0-0 line 3127
[ 112.305683] [<ffffffff811898a0>] process_one_work+0x7e0/0x1610
[ 112.306667] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.306673] binder: 3955:3956 ioctl 40046207 0 returned -16
[ 112.307221] binder: 3955:3956 ERROR: BC_REGISTER_LOOPER called without request
[ 112.327957] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.327971] binder: 3955:3957 transaction failed 29189/-3, size 0-0 line 3127
[ 112.330173] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.348033] [<ffffffff811897ec>] ? process_one_work+0x72c/0x1610
[ 112.354248] [<ffffffff811890c0>] ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 112.354752] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.354765] binder: 3955:3958 transaction failed 29189/-3, size 0-0 line 3127
[ 112.368425] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.368431] binder: 3959:3960 ioctl 40046207 0 returned -16
[ 112.368990] binder: 3959:3960 ERROR: BC_REGISTER_LOOPER called without request
[ 112.389702] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.389715] binder: 3959:3961 transaction failed 29189/-3, size 0-0 line 3127
[ 112.391912] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.409679] [<ffffffff8118a7b0>] worker_thread+0xe0/0x10d0
[ 112.415369] [<ffffffff838a4583>] ? __schedule+0x683/0x1ba0
[ 112.416459] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.416471] binder: 3959:3962 transaction failed 29189/-3, size 0-0 line 3127
[ 112.430124] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.430129] binder: 3963:3964 ioctl 40046207 0 returned -16
[ 112.430695] binder: 3963:3964 ERROR: BC_REGISTER_LOOPER called without request
[ 112.451409] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.451422] binder: 3963:3965 transaction failed 29189/-3, size 0-0 line 3127
[ 112.453625] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.470016] [<ffffffff8119a7bd>] kthread+0x26d/0x300
[ 112.475177] [<ffffffff8118a6d0>] ? process_one_work+0x1610/0x1610
[ 112.478182] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.478195] binder: 3963:3966 transaction failed 29189/-3, size 0-0 line 3127
[ 112.491877] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.491883] binder: 3967:3968 ioctl 40046207 0 returned -16
[ 112.492440] binder: 3967:3968 ERROR: BC_REGISTER_LOOPER called without request
[ 112.512363] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 112.513169] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.513182] binder: 3967:3969 transaction failed 29189/-3, size 0-0 line 3127
[ 112.515379] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.536039] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 112.539948] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.539961] binder: 3967:3970 transaction failed 29189/-3, size 0-0 line 3127
[ 112.554313] [<ffffffff8119a550>] ? kthread_park+0xa0/0xa0
[ 112.554675] binder: BINDER_SET_CONTEXT_MGR already set
[ 112.554681] binder: 3971:3972 ioctl 40046207 0 returned -16
[ 112.555240] binder: 3971:3972 ERROR: BC_REGISTER_LOOPER called without request
[ 112.575956] binder_alloc: 3788: binder_alloc_buf, no vma
[ 112.575968] binder: 3971:3973 transaction failed 29189/-3, size 0-0 line 3127
[ 112.578166] binder: undelivered TRANSACTION_ERROR: 29189
[ 112.596230] [<ffffffff838b57ac>] ret_from_fork+0x5c/0x70
[ 112.602192] Dumping ftrace buffer:
[ 112.605708] (ftrace buffer empty)
[ 112.609388] Kernel Offset: disabled
[ 112.613000] Rebooting in 86400 seconds..