[....] Starting enhanced syslogd: rsyslogd[ 10.838142] audit: type=1400 audit(1514303869.908:4): avc: denied { syslog } for pid=3179 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-2,10.128.0.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 22.989989] ================================================================== [ 22.991088] BUG: KASAN: stack-out-of-bounds in strlcpy+0x101/0x120 [ 22.991920] Read of size 1 at addr ffff8801c8dafadc by task syzkaller346683/3335 [ 22.992903] [ 22.993134] CPU: 1 PID: 3335 Comm: syzkaller346683 Not tainted 4.9.71-g2506378 #9 [ 22.994131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.995402] ffff8801c8daf9b8 ffffffff81d922b9 ffffea0007236bc0 ffff8801c8dafadc [ 22.996552] 0000000000000000 ffff8801c8dafadc ffff8801c8dafbc0 ffff8801c8daf9f0 [ 22.997700] ffffffff8153bab3 ffff8801c8dafadc 0000000000000001 0000000000000000 [ 22.998915] Call Trace: [ 22.999290] [] dump_stack+0xc1/0x128 [ 23.000001] [] print_address_description+0x73/0x280 [ 23.000992] [] kasan_report+0x275/0x360 [ 23.001747] [] ? strlcpy+0x101/0x120 [ 23.002467] [] __asan_report_load1_noabort+0x14/0x20 [ 23.003405] [] strlcpy+0x101/0x120 [ 23.004095] [] xt_copy_counters_from_user+0x163/0x2e0 [ 23.004994] [] ? xt_hook_ops_alloc+0x290/0x290 [ 23.005815] [] do_add_counters+0x96/0x590 [ 23.006621] [] ? __do_replace+0x670/0x670 [ 23.007410] [] ? security_capable+0x8e/0xc0 [ 23.008233] [] ? ns_capable_common+0xcf/0x160 [ 23.009086] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 23.009920] [] compat_nf_setsockopt+0x88/0x130 [ 23.015012] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 23.021907] [] compat_ip_setsockopt+0x9d/0xf0 [ 23.028018] [] compat_udp_setsockopt+0x45/0x80 [ 23.034231] [] ? udp_lib_setsockopt+0x560/0x560 [ 23.040523] [] compat_ipv6_setsockopt+0xb2/0x1e0 [ 23.046895] [] inet_csk_compat_setsockopt+0x95/0x120 [ 23.053613] [] ? ipv6_setsockopt+0x150/0x150 [ 23.059636] [] compat_tcp_setsockopt+0x3d/0x70 [ 23.065835] [] compat_sock_common_setsockopt+0xb2/0x140 [ 23.072812] [] ? tcp_setsockopt+0xd0/0xd0 [ 23.078577] [] compat_SyS_setsockopt+0x149/0x290 [ 23.086063] [] ? sock_common_setsockopt+0xd0/0xd0 [ 23.092537] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 23.099087] [] ? do_fast_syscall_32+0xcf/0x890 [ 23.105288] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 23.111837] [] do_fast_syscall_32+0x2f7/0x890 [ 23.117950] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 23.124584] [] entry_SYSENTER_compat+0x51/0x60 [ 23.130780] [ 23.132376] The buggy address belongs to the page: [ 23.137276] page:ffffea0007236bc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 23.145508] flags: 0x8000000000000000() [ 23.149442] page dumped because: kasan: bad access detected [ 23.155119] [ 23.156711] Memory state around the buggy address: [ 23.161615] ffff8801c8daf980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.168940] ffff8801c8dafa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.176268] >ffff8801c8dafa80: 00 00 00 f1 f1 f1 f1 00 00 00 00 04 f2 f2 f2 00 [ 23.183591] ^ [ 23.189789] ffff8801c8dafb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.197113] ffff8801c8dafb80: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 f2 f2 f2 [ 23.204434] ================================================================== [ 23.211758] Disabling lock debugging due to kernel taint [ 23.217453] Kernel panic - not syncing: panic_on_warn set ... [ 23.217453] [ 23.224786] CPU: 1 PID: 3335 Comm: syzkaller346683 Tainted: G B 4.9.71-g2506378 #9 [ 23.233588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.242912] ffff8801c8daf910 ffffffff81d922b9 ffffffff84194b3f ffff8801c8daf9e8 [ 23.250869] 0000000000000000 ffff8801c8dafadc ffff8801c8dafbc0 ffff8801c8daf9d8 [ 23.258837] ffffffff8142d741 0000000041b58ab3 ffffffff84188580 ffffffff8142d585 [ 23.266793] Call Trace: [ 23.269350] [] dump_stack+0xc1/0x128 [ 23.274681] [] panic+0x1bc/0x3a8 [ 23.279664] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 23.287867] [] ? preempt_schedule+0x25/0x30 [ 23.293806] [] ? ___preempt_schedule+0x16/0x18 [ 23.300007] [] kasan_end_report+0x50/0x50 [ 23.305770] [] kasan_report+0x167/0x360 [ 23.311376] [] ? strlcpy+0x101/0x120 [ 23.316715] [] __asan_report_load1_noabort+0x14/0x20 [ 23.323432] [] strlcpy+0x101/0x120 [ 23.328593] [] xt_copy_counters_from_user+0x163/0x2e0 [ 23.335400] [] ? xt_hook_ops_alloc+0x290/0x290 [ 23.341599] [] do_add_counters+0x96/0x590 [ 23.347360] [] ? __do_replace+0x670/0x670 [ 23.353125] [] ? security_capable+0x8e/0xc0 [ 23.359064] [] ? ns_capable_common+0xcf/0x160 [ 23.365176] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 23.371466] [] compat_nf_setsockopt+0x88/0x130 [ 23.377663] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 23.384554] [] compat_ip_setsockopt+0x9d/0xf0 [ 23.390665] [] compat_udp_setsockopt+0x45/0x80 [ 23.396869] [] ? udp_lib_setsockopt+0x560/0x560 [ 23.403156] [] compat_ipv6_setsockopt+0xb2/0x1e0 [ 23.409528] [] inet_csk_compat_setsockopt+0x95/0x120 [ 23.416248] [] ? ipv6_setsockopt+0x150/0x150 [ 23.422273] [] compat_tcp_setsockopt+0x3d/0x70 [ 23.428471] [] compat_sock_common_setsockopt+0xb2/0x140 [ 23.435461] [] ? tcp_setsockopt+0xd0/0xd0 [ 23.441227] [] compat_SyS_setsockopt+0x149/0x290 [ 23.447596] [] ? sock_common_setsockopt+0xd0/0xd0 [ 23.454055] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 23.460598] [] ? do_fast_syscall_32+0xcf/0x890 [ 23.466795] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 23.473338] [] do_fast_syscall_32+0x2f7/0x890 [ 23.479448] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 23.486086] [] entry_SYSENTER_compat+0x51/0x60 [ 23.493274] Dumping ftrace buffer: [ 23.496781] (ftrace buffer empty) [ 23.500460] Kernel Offset: disabled [ 23.504057] Rebooting in 86400 seconds..