[....] Starting enhanced syslogd: rsyslogd[ 12.334093] audit: type=1400 audit(1514304538.842:4): avc: denied { syslog } for pid=3171 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-1,10.128.0.56' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.024914] ================================================================== [ 24.032306] BUG: KASAN: stack-out-of-bounds in strlcpy+0x101/0x120 [ 24.038595] Read of size 1 at addr ffff8801c9e4fadc by task syzkaller460565/3327 [ 24.046095] [ 24.047695] CPU: 1 PID: 3327 Comm: syzkaller460565 Not tainted 4.9.71-g2506378 #9 [ 24.055285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.064611] ffff8801c9e4f9b8 ffffffff81d922b9 ffffea00072793c0 ffff8801c9e4fadc [ 24.072630] 0000000000000000 ffff8801c9e4fadc ffff8801c9e4fbc0 ffff8801c9e4f9f0 [ 24.080650] ffffffff8153bab3 ffff8801c9e4fadc 0000000000000001 0000000000000000 [ 24.088646] Call Trace: [ 24.091204] [] dump_stack+0xc1/0x128 [ 24.098838] [] print_address_description+0x73/0x280 [ 24.108251] [] kasan_report+0x275/0x360 [ 24.115668] [] ? strlcpy+0x101/0x120 [ 24.121703] [] __asan_report_load1_noabort+0x14/0x20 [ 24.128434] [] strlcpy+0x101/0x120 [ 24.133595] [] xt_copy_counters_from_user+0x163/0x2e0 [ 24.140405] [] ? xt_hook_ops_alloc+0x290/0x290 [ 24.146606] [] do_add_counters+0x96/0x590 [ 24.152371] [] ? __do_replace+0x670/0x670 [ 24.158134] [] ? security_capable+0x8e/0xc0 [ 24.164072] [] ? ns_capable_common+0xcf/0x160 [ 24.170182] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 24.176469] [] compat_nf_setsockopt+0x88/0x130 [ 24.182674] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 24.189568] [] compat_ip_setsockopt+0x9d/0xf0 [ 24.195677] [] compat_udp_setsockopt+0x45/0x80 [ 24.201875] [] ? udp_lib_setsockopt+0x560/0x560 [ 24.208160] [] compat_ipv6_setsockopt+0xb2/0x1e0 [ 24.214533] [] inet_csk_compat_setsockopt+0x95/0x120 [ 24.221251] [] ? ipv6_setsockopt+0x150/0x150 [ 24.227275] [] compat_tcp_setsockopt+0x3d/0x70 [ 24.233473] [] compat_sock_common_setsockopt+0xb2/0x140 [ 24.240454] [] ? tcp_setsockopt+0xd0/0xd0 [ 24.246218] [] compat_SyS_setsockopt+0x149/0x290 [ 24.252589] [] ? sock_common_setsockopt+0xd0/0xd0 [ 24.259049] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.266121] [] ? do_fast_syscall_32+0xcf/0x890 [ 24.272321] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.278867] [] do_fast_syscall_32+0x2f7/0x890 [ 24.284987] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.292230] [] entry_SYSENTER_compat+0x51/0x60 [ 24.298687] [ 24.300280] The buggy address belongs to the page: [ 24.305173] page:ffffea00072793c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 24.313391] flags: 0x8000000000000000() [ 24.317342] page dumped because: kasan: bad access detected [ 24.323035] [ 24.324626] Memory state around the buggy address: [ 24.329791] ffff8801c9e4f980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.337116] ffff8801c9e4fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.344438] >ffff8801c9e4fa80: 00 00 00 f1 f1 f1 f1 00 00 00 00 04 f2 f2 f2 00 [ 24.351762] ^ [ 24.357959] ffff8801c9e4fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.365283] ffff8801c9e4fb80: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 f2 f2 f2 [ 24.372616] ================================================================== [ 24.379937] Disabling lock debugging due to kernel taint [ 24.385667] Kernel panic - not syncing: panic_on_warn set ... [ 24.385667] [ 24.393003] CPU: 1 PID: 3327 Comm: syzkaller460565 Tainted: G B 4.9.71-g2506378 #9 [ 24.401808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.411132] ffff8801c9e4f910 ffffffff81d922b9 ffffffff84194b3f ffff8801c9e4f9e8 [ 24.419089] 0000000000000000 ffff8801c9e4fadc ffff8801c9e4fbc0 ffff8801c9e4f9d8 [ 24.427041] ffffffff8142d741 0000000041b58ab3 ffffffff84188580 ffffffff8142d585 [ 24.434989] Call Trace: [ 24.437544] [] dump_stack+0xc1/0x128 [ 24.442875] [] panic+0x1bc/0x3a8 [ 24.447858] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 24.456055] [] ? preempt_schedule+0x25/0x30 [ 24.461994] [] ? ___preempt_schedule+0x16/0x18 [ 24.468193] [] kasan_end_report+0x50/0x50 [ 24.473956] [] kasan_report+0x167/0x360 [ 24.479546] [] ? strlcpy+0x101/0x120 [ 24.484874] [] __asan_report_load1_noabort+0x14/0x20 [ 24.491593] [] strlcpy+0x101/0x120 [ 24.496752] [] xt_copy_counters_from_user+0x163/0x2e0 [ 24.503559] [] ? xt_hook_ops_alloc+0x290/0x290 [ 24.511322] [] do_add_counters+0x96/0x590 [ 24.518564] [] ? __do_replace+0x670/0x670 [ 24.524333] [] ? security_capable+0x8e/0xc0 [ 24.530271] [] ? ns_capable_common+0xcf/0x160 [ 24.536383] [] compat_do_ipt_set_ctl+0xbf/0x150 [ 24.542669] [] compat_nf_setsockopt+0x88/0x130 [ 24.548867] [] ? compat_do_replace.isra.15+0x3a0/0x3a0 [ 24.555760] [] compat_ip_setsockopt+0x9d/0xf0 [ 24.561875] [] compat_udp_setsockopt+0x45/0x80 [ 24.568071] [] ? udp_lib_setsockopt+0x560/0x560 [ 24.574357] [] compat_ipv6_setsockopt+0xb2/0x1e0 [ 24.580730] [] inet_csk_compat_setsockopt+0x95/0x120 [ 24.587451] [] ? ipv6_setsockopt+0x150/0x150 [ 24.594787] [] compat_tcp_setsockopt+0x3d/0x70 [ 24.602113] [] compat_sock_common_setsockopt+0xb2/0x140 [ 24.609103] [] ? tcp_setsockopt+0xd0/0xd0 [ 24.614867] [] compat_SyS_setsockopt+0x149/0x290 [ 24.621239] [] ? sock_common_setsockopt+0xd0/0xd0 [ 24.627698] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.634591] [] ? do_fast_syscall_32+0xcf/0x890 [ 24.641222] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 24.647768] [] do_fast_syscall_32+0x2f7/0x890 [ 24.653878] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.660511] [] entry_SYSENTER_compat+0x51/0x60 [ 24.666747] Dumping ftrace buffer: [ 24.670254] (ftrace buffer empty) [ 24.673931] Kernel Offset: disabled [ 24.677526] Rebooting in 86400 seconds..