[....] Starting enhanced syslogd: rsyslogd[ 10.173909] audit: type=1400 audit(1513754124.933:4): avc: denied { syslog } for pid=3173 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-9,10.128.15.229' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 executing program syzkaller login: [ 19.455637] IPVS: Creating netns size=2536 id=1 [ 19.504661] sg_write: data in/out 36090/16 bytes for SCSI command 0x67-- guessing data in; [ 19.504661] program syzkaller974908 not setting count and/or reply_len properly [ 19.507746] ================================================================== [ 19.507760] BUG: KASAN: wild-memory-access in sg_read+0x1296/0x1440 [ 19.507765] Read of size 26 at addr ffe708746dee7000 by task syzkaller974908/3346 [ 19.507766] [ 19.507773] CPU: 1 PID: 3346 Comm: syzkaller974908 Not tainted 4.9.70-gc14c7b3 #110 [ 19.507776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.507787] ffff8801c8917a38 ffffffff81d90c49 ffe708746dee7000 000000000000001a [ 19.507795] 0000000000000000 ffff8801da35cc60 ffff8801c9388140 ffff8801c8917a80 [ 19.507803] ffffffff8153aafe ffffffff82662d46 0000000000000282 486fcccf563ea3fd [ 19.507805] Call Trace: [ 19.507813] [] dump_stack+0xc1/0x128 [ 19.507821] [] kasan_report+0x15e/0x360 [ 19.507828] [] ? sg_read+0x1296/0x1440 [ 19.507835] [] check_memory_region+0x137/0x190 [ 19.507841] [] kasan_check_read+0x11/0x20 [ 19.507847] [] sg_read+0x1296/0x1440 [ 19.507854] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.507863] [] ? fsnotify+0xf30/0xf30 [ 19.507871] [] ? avc_policy_seqno+0x9/0x20 [ 19.507878] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 19.507887] [] ? security_file_permission+0x89/0x1e0 [ 19.507893] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.507900] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.507906] [] do_readv_writev+0x520/0x750 [ 19.507912] [] ? vfs_write+0x530/0x530 [ 19.507919] [] ? __fget+0x201/0x3a0 [ 19.507924] [] ? __fget+0x228/0x3a0 [ 19.507929] [] ? __fget+0x47/0x3a0 [ 19.507935] [] vfs_readv+0x84/0xc0 [ 19.507941] [] do_readv+0xe6/0x250 [ 19.507947] [] ? vfs_readv+0xc0/0xc0 [ 19.507961] [] ? entry_SYSCALL_64_fastpath+0x5/0xc6 [ 19.507970] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 19.507977] [] SyS_readv+0x27/0x30 [ 19.507984] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 19.507987] ================================================================== [ 19.507988] Disabling lock debugging due to kernel taint [ 19.507992] Kernel panic - not syncing: panic_on_warn set ... [ 19.507992] [ 19.507998] CPU: 1 PID: 3346 Comm: syzkaller974908 Tainted: G B 4.9.70-gc14c7b3 #110 [ 19.508001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.508009] ffff8801c8917958 ffffffff81d90c49 ffffffff84193817 ffff8801c8917a30 [ 19.508018] 0000000000000000 ffff8801da35cc60 ffff8801c9388140 ffff8801c8917a20 [ 19.508026] ffffffff8142c481 0000000041b58ab3 ffffffff84187288 ffffffff8142c2c5 [ 19.508027] Call Trace: [ 19.508032] [] dump_stack+0xc1/0x128 [ 19.508040] [] panic+0x1bc/0x3a8 [ 19.508048] [] ? percpu_up_read_preempt_enable.constprop.54+0xd7/0xd7 [ 19.508055] [] kasan_end_report+0x50/0x50 [ 19.508061] [] kasan_report+0x167/0x360 [ 19.508067] [] ? sg_read+0x1296/0x1440 [ 19.508073] [] check_memory_region+0x137/0x190 [ 19.508079] [] kasan_check_read+0x11/0x20 [ 19.508085] [] sg_read+0x1296/0x1440 [ 19.508092] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.508098] [] ? fsnotify+0xf30/0xf30 [ 19.508104] [] ? avc_policy_seqno+0x9/0x20 [ 19.508111] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 19.508118] [] ? security_file_permission+0x89/0x1e0 [ 19.508125] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.508132] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 19.508137] [] do_readv_writev+0x520/0x750 [ 19.508143] [] ? vfs_write+0x530/0x530 [ 19.508149] [] ? __fget+0x201/0x3a0 [ 19.508155] [] ? __fget+0x228/0x3a0 [ 19.508160] [] ? __fget+0x47/0x3a0 [ 19.508166] [] vfs_readv+0x84/0xc0 [ 19.508171] [] do_readv+0xe6/0x250 [ 19.508177] [] ? vfs_readv+0xc0/0xc0 [ 19.508184] [] ? entry_SYSCALL_64_fastpath+0x5/0xc6 [ 19.508191] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 19.508197] [] SyS_readv+0x27/0x30 [ 19.508204] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 19.521039] Dumping ftrace buffer: [ 19.521043] (ftrace buffer empty) [ 19.521045] Kernel Offset: disabled [ 19.971488] Rebooting in 86400 seconds..