[....] Starting enhanced syslogd: rsyslogd[ 11.047505] audit: type=1400 audit(1515251595.793:4): avc: denied { syslog } for pid=3170 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.222' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 19.952893] ================================================================== [ 19.954064] BUG: KASAN: stack-out-of-bounds in strlcpy+0x101/0x120 [ 19.954967] Read of size 1 at addr ffff8801ca397b4c by task syzkaller680216/3319 [ 19.955950] [ 19.956193] CPU: 1 PID: 3319 Comm: syzkaller680216 Not tainted 4.9.75-g06fe41f #16 [ 19.957217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.958497] ffff8801ca397a28 ffffffff81d93049 ffffea000728e5c0 ffff8801ca397b4c [ 19.959641] 0000000000000000 ffff8801ca397b4c ffff8801ca397c30 ffff8801ca397a60 [ 19.960806] ffffffff8153ca53 ffff8801ca397b4c 0000000000000001 0000000000000000 [ 19.961961] Call Trace: [ 19.962336] [] dump_stack+0xc1/0x128 [ 19.963058] [] print_address_description+0x73/0x280 [ 19.963952] [] kasan_report+0x275/0x360 [ 19.964694] [] ? strlcpy+0x101/0x120 [ 19.965418] [] __asan_report_load1_noabort+0x14/0x20 [ 19.966340] [] strlcpy+0x101/0x120 [ 19.967028] [] xt_copy_counters_from_user+0x163/0x2e0 [ 19.967970] [] ? xt_hook_ops_alloc+0x290/0x290 [ 19.968844] [] do_add_counters+0x96/0x590 [ 19.969630] [] ? __do_replace+0x670/0x670 [ 19.970406] [] ? security_capable+0x8e/0xc0 [ 19.971206] [] ? ns_capable_common+0xcf/0x160 [ 19.972013] [] compat_do_ip6t_set_ctl+0xbf/0x150 [ 19.972868] [] compat_nf_setsockopt+0x88/0x130 [ 19.978180] [] ? compat_do_replace.isra.14+0x3b0/0x3b0 [ 19.985071] [] compat_ipv6_setsockopt+0x13a/0x1e0 [ 19.991529] [] inet_csk_compat_setsockopt+0x95/0x120 [ 19.998268] [] ? ipv6_setsockopt+0x150/0x150 [ 20.004293] [] compat_tcp_setsockopt+0x3d/0x70 [ 20.010491] [] compat_sock_common_setsockopt+0xb2/0x140 [ 20.017468] [] ? tcp_setsockopt+0xd0/0xd0 [ 20.023242] [] compat_SyS_setsockopt+0x149/0x290 [ 20.029612] [] ? sock_common_setsockopt+0xd0/0xd0 [ 20.036069] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 20.042615] [] ? do_fast_syscall_32+0xcf/0x890 [ 20.048825] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 20.055373] [] do_fast_syscall_32+0x2f7/0x890 [ 20.061483] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 20.068117] [] entry_SYSENTER_compat+0x74/0x83 [ 20.074310] [ 20.075900] The buggy address belongs to the page: [ 20.080794] page:ffffea000728e5c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 20.089017] flags: 0x8000000000000000() [ 20.092953] page dumped because: kasan: bad access detected [ 20.098625] [ 20.100218] Memory state around the buggy address: [ 20.105110] ffff8801ca397a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 20.112439] ffff8801ca397a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 20.119768] >ffff8801ca397b00: 00 f1 f1 f1 f1 00 00 00 00 04 f2 f2 f2 00 00 00 [ 20.127093] ^ [ 20.132769] ffff8801ca397b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 20.140094] ffff8801ca397c00: 00 00 f1 f1 f1 f1 00 00 00 00 00 f2 f2 f2 00 00 [ 20.147416] ================================================================== [ 20.154736] Disabling lock debugging due to kernel taint [ 20.160231] Kernel panic - not syncing: panic_on_warn set ... [ 20.160231] [ 20.167593] CPU: 1 PID: 3319 Comm: syzkaller680216 Tainted: G B 4.9.75-g06fe41f #16 [ 20.176482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.185803] ffff8801ca397980 ffffffff81d93049 ffffffff84195be7 ffff8801ca397a58 [ 20.193753] 0000000000000000 ffff8801ca397b4c ffff8801ca397c30 ffff8801ca397a48 [ 20.201707] ffffffff8142e281 0000000041b58ab3 ffffffff84189648 ffffffff8142e0c5 [ 20.209668] Call Trace: [ 20.212248] [] dump_stack+0xc1/0x128 [ 20.217578] [] panic+0x1bc/0x3a8 [ 20.222559] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 20.230753] [] ? preempt_schedule+0x25/0x30 [ 20.236689] [] ? ___preempt_schedule+0x16/0x18 [ 20.242886] [] kasan_end_report+0x50/0x50 [ 20.248651] [] kasan_report+0x167/0x360 [ 20.254250] [] ? strlcpy+0x101/0x120 [ 20.259579] [] __asan_report_load1_noabort+0x14/0x20 [ 20.266296] [] strlcpy+0x101/0x120 [ 20.271452] [] xt_copy_counters_from_user+0x163/0x2e0 [ 20.278256] [] ? xt_hook_ops_alloc+0x290/0x290 [ 20.284454] [] do_add_counters+0x96/0x590 [ 20.290215] [] ? __do_replace+0x670/0x670 [ 20.295978] [] ? security_capable+0x8e/0xc0 [ 20.301925] [] ? ns_capable_common+0xcf/0x160 [ 20.308038] [] compat_do_ip6t_set_ctl+0xbf/0x150 [ 20.314410] [] compat_nf_setsockopt+0x88/0x130 [ 20.320615] [] ? compat_do_replace.isra.14+0x3b0/0x3b0 [ 20.327508] [] compat_ipv6_setsockopt+0x13a/0x1e0 [ 20.333964] [] inet_csk_compat_setsockopt+0x95/0x120 [ 20.340681] [] ? ipv6_setsockopt+0x150/0x150 [ 20.346704] [] compat_tcp_setsockopt+0x3d/0x70 [ 20.352902] [] compat_sock_common_setsockopt+0xb2/0x140 [ 20.359883] [] ? tcp_setsockopt+0xd0/0xd0 [ 20.365648] [] compat_SyS_setsockopt+0x149/0x290 [ 20.372017] [] ? sock_common_setsockopt+0xd0/0xd0 [ 20.378476] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 20.385023] [] ? do_fast_syscall_32+0xcf/0x890 [ 20.391221] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 20.397770] [] do_fast_syscall_32+0x2f7/0x890 [ 20.403879] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 20.410510] [] entry_SYSENTER_compat+0x74/0x83 [ 20.417167] Dumping ftrace buffer: [ 20.420680] (ftrace buffer empty) [ 20.424355] Kernel Offset: disabled [ 20.427945] Rebooting in 86400 seconds..