[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 11.662507] audit: type=1400 audit(1514295404.520:6): avc: denied { map } for pid=3133 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-2,10.128.0.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.597779] audit: type=1400 audit(1514295417.455:7): avc: denied { map } for pid=3149 comm="syzkaller885739" path="/root/syzkaller885739186" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.626109] ================================================================== [ 24.633508] BUG: KASAN: wild-memory-access in scatterwalk_copychunks+0x206/0x480 [ 24.641031] Write of size 16 at addr 00050800c862cd58 by task syzkaller885739/3149 [ 24.648703] [ 24.650302] CPU: 1 PID: 3149 Comm: syzkaller885739 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 24.658840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.668165] Call Trace: [ 24.670724] dump_stack+0x194/0x257 [ 24.674320] ? arch_local_irq_restore+0x53/0x53 [ 24.678969] ? scatterwalk_copychunks+0x206/0x480 [ 24.683780] kasan_report+0x13b/0x340 [ 24.687551] check_memory_region+0x137/0x190 [ 24.691927] memcpy+0x37/0x50 [ 24.695004] scatterwalk_copychunks+0x206/0x480 [ 24.699650] blkcipher_walk_done+0xa4b/0xde0 [ 24.704034] glue_ctr_crypt_128bit+0x597/0xc20 [ 24.708592] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 24.713317] ? sha512_base_init+0x220/0x220 [ 24.717642] ctr_crypt+0x34/0x40 [ 24.720977] ? ctr_crypt+0x34/0x40 [ 24.724485] ? twofish_enc_blk_3way+0x30/0x30 [ 24.728956] __ablk_encrypt+0x1d1/0x2d0 [ 24.732903] ? ablk_set_key+0x1a0/0x1a0 [ 24.736859] ? shash_async_update+0x20/0x20 [ 24.741146] ? kfree+0xf0/0x260 [ 24.744400] ? __ablk_encrypt+0x2d0/0x2d0 [ 24.748520] ablk_encrypt+0x23e/0x2c0 [ 24.752286] ? __ablk_encrypt+0x2d0/0x2d0 [ 24.756402] skcipher_decrypt_ablkcipher+0x312/0x420 [ 24.761469] ? scatterwalk_ffwd+0xbf/0x370 [ 24.765676] poly_tail_continue+0x42a/0x6b0 [ 24.769970] poly_tail+0x40f/0x520 [ 24.773480] poly_cipherpad+0x33e/0x470 [ 24.777432] poly_cipher+0x303/0x440 [ 24.781115] poly_adpad+0x347/0x480 [ 24.784711] poly_ad+0x25c/0x300 [ 24.788045] poly_setkey+0x2fc/0x3e0 [ 24.791727] poly_init+0x16c/0x1d0 [ 24.795233] poly_genkey+0x422/0x590 [ 24.798916] chachapoly_decrypt+0x73/0x90 [ 24.803032] aead_recvmsg+0x154a/0x1cf0 [ 24.806989] ? aead_release+0x50/0x50 [ 24.810764] ? selinux_socket_recvmsg+0x36/0x40 [ 24.815400] ? security_socket_recvmsg+0x91/0xc0 [ 24.820124] ? aead_release+0x50/0x50 [ 24.823892] sock_recvmsg+0xc9/0x110 [ 24.827572] ? __sock_recv_wifi_status+0x210/0x210 [ 24.832470] ___sys_recvmsg+0x2a4/0x640 [ 24.836421] ? ___sys_sendmsg+0x8b0/0x8b0 [ 24.840539] ? __do_page_fault+0x5f7/0xc90 [ 24.844741] ? lock_downgrade+0x980/0x980 [ 24.848882] ? __fget_light+0x297/0x380 [ 24.852832] ? fget_raw+0x20/0x20 [ 24.856262] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 24.860807] ? vmacache_find+0x5f/0x280 [ 24.864754] ? up_read+0x1a/0x40 [ 24.868087] ? __do_page_fault+0x3d6/0xc90 [ 24.872295] ? SYSC_accept4+0x4ff/0x870 [ 24.876251] ? __fdget+0x18/0x20 [ 24.879598] __sys_recvmsg+0xe2/0x210 [ 24.883371] ? __sys_recvmsg+0xe2/0x210 [ 24.887315] ? SyS_sendmmsg+0x60/0x60 [ 24.891085] ? __do_page_fault+0xc90/0xc90 [ 24.895307] ? SyS_setsockopt+0x215/0x360 [ 24.899434] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.904422] SyS_recvmsg+0x2d/0x50 [ 24.907936] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 24.912656] RIP: 0033:0x43fef9 [ 24.915814] RSP: 002b:00007ffd52670598 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 24.923488] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 24.930835] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 24.938071] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 24.945310] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 24.952546] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 24.959800] ================================================================== [ 24.967121] Disabling lock debugging due to kernel taint [ 24.972604] Kernel panic - not syncing: panic_on_warn set ... [ 24.972604] [ 24.979940] CPU: 1 PID: 3149 Comm: syzkaller885739 Tainted: G B 4.15.0-rc4-next-20171221+ #78 [ 24.989788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.999108] Call Trace: [ 25.001663] dump_stack+0x194/0x257 [ 25.005256] ? arch_local_irq_restore+0x53/0x53 [ 25.009892] ? kasan_end_report+0x32/0x50 [ 25.014007] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.018735] ? vsnprintf+0x1ed/0x1900 [ 25.022502] ? scatterwalk_copychunks+0x170/0x480 [ 25.027311] panic+0x1e4/0x41c [ 25.030471] ? refcount_error_report+0x214/0x214 [ 25.035280] ? add_taint+0x1c/0x50 [ 25.038784] ? add_taint+0x1c/0x50 [ 25.042291] ? scatterwalk_copychunks+0x206/0x480 [ 25.047098] kasan_end_report+0x50/0x50 [ 25.051035] kasan_report+0x144/0x340 [ 25.054803] check_memory_region+0x137/0x190 [ 25.059182] memcpy+0x37/0x50 [ 25.062254] scatterwalk_copychunks+0x206/0x480 [ 25.066892] blkcipher_walk_done+0xa4b/0xde0 [ 25.071269] glue_ctr_crypt_128bit+0x597/0xc20 [ 25.075823] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 25.080546] ? sha512_base_init+0x220/0x220 [ 25.084862] ctr_crypt+0x34/0x40 [ 25.088194] ? ctr_crypt+0x34/0x40 [ 25.091699] ? twofish_enc_blk_3way+0x30/0x30 [ 25.096161] __ablk_encrypt+0x1d1/0x2d0 [ 25.100100] ? ablk_set_key+0x1a0/0x1a0 [ 25.104038] ? shash_async_update+0x20/0x20 [ 25.108323] ? kfree+0xf0/0x260 [ 25.111568] ? __ablk_encrypt+0x2d0/0x2d0 [ 25.115680] ablk_encrypt+0x23e/0x2c0 [ 25.119455] ? __ablk_encrypt+0x2d0/0x2d0 [ 25.123587] skcipher_decrypt_ablkcipher+0x312/0x420 [ 25.128655] ? scatterwalk_ffwd+0xbf/0x370 [ 25.132862] poly_tail_continue+0x42a/0x6b0 [ 25.137156] poly_tail+0x40f/0x520 [ 25.140675] poly_cipherpad+0x33e/0x470 [ 25.144617] poly_cipher+0x303/0x440 [ 25.148297] poly_adpad+0x347/0x480 [ 25.151889] poly_ad+0x25c/0x300 [ 25.155223] poly_setkey+0x2fc/0x3e0 [ 25.158908] poly_init+0x16c/0x1d0 [ 25.162419] poly_genkey+0x422/0x590 [ 25.166105] chachapoly_decrypt+0x73/0x90 [ 25.170221] aead_recvmsg+0x154a/0x1cf0 [ 25.174168] ? aead_release+0x50/0x50 [ 25.177943] ? selinux_socket_recvmsg+0x36/0x40 [ 25.182583] ? security_socket_recvmsg+0x91/0xc0 [ 25.187304] ? aead_release+0x50/0x50 [ 25.191077] sock_recvmsg+0xc9/0x110 [ 25.194758] ? __sock_recv_wifi_status+0x210/0x210 [ 25.199655] ___sys_recvmsg+0x2a4/0x640 [ 25.203597] ? ___sys_sendmsg+0x8b0/0x8b0 [ 25.207714] ? __do_page_fault+0x5f7/0xc90 [ 25.211921] ? lock_downgrade+0x980/0x980 [ 25.216041] ? __fget_light+0x297/0x380 [ 25.220007] ? fget_raw+0x20/0x20 [ 25.223429] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 25.227975] ? vmacache_find+0x5f/0x280 [ 25.231916] ? up_read+0x1a/0x40 [ 25.235250] ? __do_page_fault+0x3d6/0xc90 [ 25.239457] ? SYSC_accept4+0x4ff/0x870 [ 25.243400] ? __fdget+0x18/0x20 [ 25.246734] __sys_recvmsg+0xe2/0x210 [ 25.250497] ? __sys_recvmsg+0xe2/0x210 [ 25.254444] ? SyS_sendmmsg+0x60/0x60 [ 25.258210] ? __do_page_fault+0xc90/0xc90 [ 25.262411] ? SyS_setsockopt+0x215/0x360 [ 25.266528] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.271514] SyS_recvmsg+0x2d/0x50 [ 25.275021] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 25.279746] RIP: 0033:0x43fef9 [ 25.282903] RSP: 002b:00007ffd52670598 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 25.290574] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 25.297810] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 25.305046] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 25.312282] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 25.319517] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 25.326800] Dumping ftrace buffer: [ 25.330307] (ftrace buffer empty) [ 25.333990] Kernel Offset: disabled [ 25.337589] Rebooting in 86400 seconds..