[....] Starting enhanced syslogd: rsyslogd[ 12.845489] audit: type=1400 audit(1514003374.575:4): avc: denied { syslog } for pid=3180 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-0,10.128.15.232' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.292357] ================================================================== [ 24.299732] BUG: KASAN: stack-out-of-bounds in strlcpy+0x101/0x120 [ 24.306013] Read of size 1 at addr ffff8801c9befb4c by task syzkaller097693/3343 [ 24.313509] [ 24.315103] CPU: 1 PID: 3343 Comm: syzkaller097693 Not tainted 4.9.71-g2506378 #9 [ 24.322684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.332006] ffff8801c9befa28 ffffffff81d922b9 ffffea000726fbc0 ffff8801c9befb4c [ 24.339950] 0000000000000000 ffff8801c9befb4c ffff8801c9befc30 ffff8801c9befa60 [ 24.347902] ffffffff8153bab3 ffff8801c9befb4c 0000000000000001 0000000000000000 [ 24.355869] Call Trace: [ 24.358432] [] dump_stack+0xc1/0x128 [ 24.363774] [] print_address_description+0x73/0x280 [ 24.370410] [] kasan_report+0x275/0x360 [ 24.376005] [] ? strlcpy+0x101/0x120 [ 24.381340] [] __asan_report_load1_noabort+0x14/0x20 [ 24.388060] [] strlcpy+0x101/0x120 [ 24.393215] [] xt_copy_counters_from_user+0x163/0x2e0 [ 24.400027] [] ? xt_hook_ops_alloc+0x290/0x290 [ 24.406231] [] do_add_counters+0x96/0x590 [ 24.412006] [] ? __do_replace+0x670/0x670 [ 24.417777] [] ? security_capable+0x8e/0xc0 [ 24.423715] [] ? ns_capable_common+0xcf/0x160 [ 24.429829] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 24.436117] [] compat_nf_setsockopt+0x88/0x130 [ 24.442322] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 24.449218] [] compat_ip_setsockopt+0x9d/0xf0 [ 24.455333] [] inet_csk_compat_setsockopt+0x95/0x120 [ 24.462061] [] ? ip_setsockopt+0xb0/0xb0 [ 24.467758] [] compat_tcp_setsockopt+0x3d/0x70 [ 24.473959] [] compat_sock_common_setsockopt+0xb2/0x140 [ 24.480934] [] ? tcp_setsockopt+0xd0/0xd0 [ 24.486702] [] compat_SyS_setsockopt+0x149/0x290 [ 24.493069] [] ? sock_common_setsockopt+0xd0/0xd0 [ 24.499529] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.506079] [] ? do_fast_syscall_32+0xcf/0x890 [ 24.512279] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.518918] [] do_fast_syscall_32+0x2f7/0x890 [ 24.525033] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.531670] [] entry_SYSENTER_compat+0x51/0x60 [ 24.537862] [ 24.539455] The buggy address belongs to the page: [ 24.544347] page:ffffea000726fbc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 24.552559] flags: 0x8000000000000000() [ 24.556495] page dumped because: kasan: bad access detected [ 24.562170] [ 24.563763] Memory state around the buggy address: [ 24.568658] ffff8801c9befa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.575987] ffff8801c9befa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.583309] >ffff8801c9befb00: 00 f1 f1 f1 f1 00 00 00 00 04 f2 f2 f2 00 00 00 [ 24.590628] ^ [ 24.596299] ffff8801c9befb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.603620] ffff8801c9befc00: 00 00 f1 f1 f1 f1 00 00 00 00 00 f2 f2 f2 00 00 [ 24.610946] ================================================================== [ 24.618274] Disabling lock debugging due to kernel taint [ 24.623753] Kernel panic - not syncing: panic_on_warn set ... [ 24.623753] [ 24.631092] CPU: 1 PID: 3343 Comm: syzkaller097693 Tainted: G B 4.9.71-g2506378 #9 [ 24.639892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.649214] ffff8801c9bef980 ffffffff81d922b9 ffffffff84194b3f ffff8801c9befa58 [ 24.657152] 0000000000000000 ffff8801c9befb4c ffff8801c9befc30 ffff8801c9befa48 [ 24.665103] ffffffff8142d741 0000000041b58ab3 ffffffff84188580 ffffffff8142d585 [ 24.673062] Call Trace: [ 24.675626] [] dump_stack+0xc1/0x128 [ 24.680959] [] panic+0x1bc/0x3a8 [ 24.685940] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 24.694135] [] ? preempt_schedule+0x25/0x30 [ 24.700072] [] ? ___preempt_schedule+0x16/0x18 [ 24.706266] [] kasan_end_report+0x50/0x50 [ 24.712027] [] kasan_report+0x167/0x360 [ 24.717623] [] ? strlcpy+0x101/0x120 [ 24.722960] [] __asan_report_load1_noabort+0x14/0x20 [ 24.729688] [] strlcpy+0x101/0x120 [ 24.734848] [] xt_copy_counters_from_user+0x163/0x2e0 [ 24.741649] [] ? xt_hook_ops_alloc+0x290/0x290 [ 24.747844] [] do_add_counters+0x96/0x590 [ 24.753604] [] ? __do_replace+0x670/0x670 [ 24.759366] [] ? security_capable+0x8e/0xc0 [ 24.765304] [] ? ns_capable_common+0xcf/0x160 [ 24.771419] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 24.777710] [] compat_nf_setsockopt+0x88/0x130 [ 24.783916] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 24.790818] [] compat_ip_setsockopt+0x9d/0xf0 [ 24.796934] [] inet_csk_compat_setsockopt+0x95/0x120 [ 24.803655] [] ? ip_setsockopt+0xb0/0xb0 [ 24.809332] [] compat_tcp_setsockopt+0x3d/0x70 [ 24.815533] [] compat_sock_common_setsockopt+0xb2/0x140 [ 24.822511] [] ? tcp_setsockopt+0xd0/0xd0 [ 24.828280] [] compat_SyS_setsockopt+0x149/0x290 [ 24.834648] [] ? sock_common_setsockopt+0xd0/0xd0 [ 24.841120] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.847666] [] ? do_fast_syscall_32+0xcf/0x890 [ 24.853863] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.860407] [] do_fast_syscall_32+0x2f7/0x890 [ 24.866515] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.873149] [] entry_SYSENTER_compat+0x51/0x60 [ 24.879747] Dumping ftrace buffer: [ 24.883255] (ftrace buffer empty) [ 24.886934] Kernel Offset: disabled [ 24.890533] Rebooting in 86400 seconds..