[....] Starting enhanced syslogd: rsyslogd[ 10.735607] audit: type=1400 audit(1514278383.984:4): avc: denied { syslog } for pid=3178 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-4,10.128.15.223' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 17.966745] ================================================================== [ 17.967876] BUG: KASAN: stack-out-of-bounds in strlcpy+0x101/0x120 [ 17.968723] Read of size 1 at addr ffff8801bfdc7b4c by task syzkaller008034/3326 [ 17.969706] [ 17.969937] CPU: 1 PID: 3326 Comm: syzkaller008034 Not tainted 4.9.71-g2506378 #9 [ 17.970952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 17.972259] ffff8801bfdc7a28 ffffffff81d922b9 ffffea0006ff71c0 ffff8801bfdc7b4c [ 17.973495] 0000000000000000 ffff8801bfdc7b4c ffff8801bfdc7c30 ffff8801bfdc7a60 [ 17.974639] ffffffff8153bab3 ffff8801bfdc7b4c 0000000000000001 0000000000000000 [ 17.975810] Call Trace: [ 17.976168] [] dump_stack+0xc1/0x128 [ 17.976928] [] print_address_description+0x73/0x280 [ 17.977821] [] kasan_report+0x275/0x360 [ 17.978563] [] ? strlcpy+0x101/0x120 [ 17.979289] [] __asan_report_load1_noabort+0x14/0x20 [ 17.980174] [] strlcpy+0x101/0x120 [ 17.980869] [] xt_copy_counters_from_user+0x163/0x2e0 [ 17.981783] [] ? xt_hook_ops_alloc+0x290/0x290 [ 17.982604] [] do_add_counters+0x96/0x590 [ 17.983368] [] ? __do_replace+0x670/0x670 [ 17.984133] [] ? security_capable+0x8e/0xc0 [ 17.984941] [] ? ns_capable_common+0xcf/0x160 [ 17.985767] [] compat_do_ip6t_set_ctl+0xbf/0x150 [ 17.986610] [] compat_nf_setsockopt+0x88/0x130 [ 17.991173] [] ? compat_do_replace.isra.14+0x3b0/0x3b0 [ 17.998075] [] compat_ipv6_setsockopt+0x13a/0x1e0 [ 18.004535] [] inet_csk_compat_setsockopt+0x95/0x120 [ 18.011257] [] ? ipv6_setsockopt+0x150/0x150 [ 18.017280] [] compat_tcp_setsockopt+0x3d/0x70 [ 18.023478] [] compat_sock_common_setsockopt+0xb2/0x140 [ 18.030482] [] ? tcp_setsockopt+0xd0/0xd0 [ 18.036261] [] compat_SyS_setsockopt+0x149/0x290 [ 18.042634] [] ? sock_common_setsockopt+0xd0/0xd0 [ 18.049090] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 18.055641] [] ? do_fast_syscall_32+0xcf/0x890 [ 18.061842] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 18.068389] [] do_fast_syscall_32+0x2f7/0x890 [ 18.074499] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 18.081134] [] entry_SYSENTER_compat+0x51/0x60 [ 18.087329] [ 18.088923] The buggy address belongs to the page: [ 18.093818] page:ffffea0006ff71c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 18.102038] flags: 0x8000000000000000() [ 18.105982] page dumped because: kasan: bad access detected [ 18.111653] [ 18.113244] Memory state around the buggy address: [ 18.118137] ffff8801bfdc7a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 18.125460] ffff8801bfdc7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 18.132784] >ffff8801bfdc7b00: 00 f1 f1 f1 f1 00 00 00 00 04 f2 f2 f2 00 00 00 [ 18.140112] ^ [ 18.145785] ffff8801bfdc7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 18.153107] ffff8801bfdc7c00: 00 00 f1 f1 f1 f1 00 00 00 00 00 f2 f2 f2 00 00 [ 18.160436] ================================================================== [ 18.167756] Disabling lock debugging due to kernel taint [ 18.173582] Kernel panic - not syncing: panic_on_warn set ... [ 18.173582] [ 18.180936] CPU: 1 PID: 3326 Comm: syzkaller008034 Tainted: G B 4.9.71-g2506378 #9 [ 18.189742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 18.199063] ffff8801bfdc7980 ffffffff81d922b9 ffffffff84194b3f ffff8801bfdc7a58 [ 18.207052] 0000000000000000 ffff8801bfdc7b4c ffff8801bfdc7c30 ffff8801bfdc7a48 [ 18.215016] ffffffff8142d741 0000000041b58ab3 ffffffff84188580 ffffffff8142d585 [ 18.222961] Call Trace: [ 18.225518] [] dump_stack+0xc1/0x128 [ 18.230850] [] panic+0x1bc/0x3a8 [ 18.235840] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 18.244034] [] ? preempt_schedule+0x25/0x30 [ 18.249971] [] ? ___preempt_schedule+0x16/0x18 [ 18.256177] [] kasan_end_report+0x50/0x50 [ 18.261939] [] kasan_report+0x167/0x360 [ 18.267528] [] ? strlcpy+0x101/0x120 [ 18.272854] [] __asan_report_load1_noabort+0x14/0x20 [ 18.279571] [] strlcpy+0x101/0x120 [ 18.284726] [] xt_copy_counters_from_user+0x163/0x2e0 [ 18.291530] [] ? xt_hook_ops_alloc+0x290/0x290 [ 18.297726] [] do_add_counters+0x96/0x590 [ 18.303487] [] ? __do_replace+0x670/0x670 [ 18.309259] [] ? security_capable+0x8e/0xc0 [ 18.315195] [] ? ns_capable_common+0xcf/0x160 [ 18.321304] [] compat_do_ip6t_set_ctl+0xbf/0x150 [ 18.327677] [] compat_nf_setsockopt+0x88/0x130 [ 18.333880] [] ? compat_do_replace.isra.14+0x3b0/0x3b0 [ 18.340773] [] compat_ipv6_setsockopt+0x13a/0x1e0 [ 18.347233] [] inet_csk_compat_setsockopt+0x95/0x120 [ 18.353950] [] ? ipv6_setsockopt+0x150/0x150 [ 18.359972] [] compat_tcp_setsockopt+0x3d/0x70 [ 18.366178] [] compat_sock_common_setsockopt+0xb2/0x140 [ 18.373156] [] ? tcp_setsockopt+0xd0/0xd0 [ 18.378918] [] compat_SyS_setsockopt+0x149/0x290 [ 18.385831] [] ? sock_common_setsockopt+0xd0/0xd0 [ 18.392306] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 18.398861] [] ? do_fast_syscall_32+0xcf/0x890 [ 18.405058] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 18.411605] [] do_fast_syscall_32+0x2f7/0x890 [ 18.417714] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 18.424348] [] entry_SYSENTER_compat+0x51/0x60 [ 18.430996] Dumping ftrace buffer: [ 18.434508] (ftrace buffer empty) [ 18.438193] Kernel Offset: disabled [ 18.441786] Rebooting in 86400 seconds..