[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 11.753325] audit: type=1400 audit(1514130661.787:6): avc: denied { map } for pid=3131 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-2,10.128.15.197' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 21.832100] audit: type=1400 audit(1514130671.866:7): avc: denied { map } for pid=3146 comm="syzkaller231610" path="/root/syzkaller231610456" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 21.878473] ================================================================== [ 21.885886] BUG: KASAN: wild-memory-access in scatterwalk_copychunks+0x206/0x480 [ 21.893387] Write of size 16 at addr 0005080000000000 by task syzkaller231610/3146 [ 21.901057] [ 21.902654] CPU: 0 PID: 3146 Comm: syzkaller231610 Not tainted 4.15.0-rc4-mm1+ #49 [ 21.910325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.919647] Call Trace: [ 21.922206] dump_stack+0x194/0x257 [ 21.925804] ? arch_local_irq_restore+0x53/0x53 [ 21.930448] ? scatterwalk_copychunks+0x206/0x480 [ 21.935261] kasan_report+0x13f/0x360 [ 21.939037] check_memory_region+0x137/0x190 [ 21.943413] memcpy+0x37/0x50 [ 21.946490] scatterwalk_copychunks+0x206/0x480 [ 21.951169] blkcipher_walk_done+0xa4b/0xde0 [ 21.955557] glue_ctr_crypt_128bit+0x597/0xc20 [ 21.960122] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 21.964872] ? memset+0x31/0x40 [ 21.968124] ? memzero_explicit+0xe/0x10 [ 21.972160] ? wp384_final+0xa6/0xf0 [ 21.975842] ? wp256_final+0xf0/0xf0 [ 21.979526] ? sock_kfree_s+0x29/0x60 [ 21.983320] ctr_crypt+0x34/0x40 [ 21.986654] ? ctr_crypt+0x34/0x40 [ 21.990163] ? lrw_encrypt+0x430/0x430 [ 21.994024] __ablk_encrypt+0x1d1/0x2d0 [ 21.997986] ? ablk_set_key+0x1a0/0x1a0 [ 22.001943] ? shash_async_update+0x20/0x20 [ 22.006232] ? kfree+0xf0/0x260 [ 22.009487] ? __ablk_encrypt+0x2d0/0x2d0 [ 22.013603] ablk_encrypt+0x23e/0x2c0 [ 22.017371] ? __ablk_encrypt+0x2d0/0x2d0 [ 22.021489] skcipher_decrypt_ablkcipher+0x312/0x420 [ 22.026561] ? scatterwalk_ffwd+0xbf/0x370 [ 22.030769] poly_tail_continue+0x42a/0x6b0 [ 22.035064] poly_tail+0x40f/0x520 [ 22.038575] poly_cipherpad+0x33e/0x470 [ 22.042522] poly_cipher+0x303/0x440 [ 22.046209] poly_adpad+0x347/0x480 [ 22.049806] poly_ad+0x25c/0x300 [ 22.053145] poly_setkey+0x2fc/0x3e0 [ 22.056845] poly_init+0x16c/0x1d0 [ 22.060359] poly_genkey+0x422/0x590 [ 22.064046] chachapoly_decrypt+0x73/0x90 [ 22.068165] aead_recvmsg+0x154a/0x1cf0 [ 22.072136] ? aead_release+0x50/0x50 [ 22.075908] ? selinux_socket_recvmsg+0x36/0x40 [ 22.080548] ? security_socket_recvmsg+0x91/0xc0 [ 22.085284] ? aead_release+0x50/0x50 [ 22.089054] sock_recvmsg+0xc9/0x110 [ 22.092735] ? __sock_recv_wifi_status+0x210/0x210 [ 22.097635] ___sys_recvmsg+0x2a4/0x640 [ 22.101589] ? ___sys_sendmsg+0x8b0/0x8b0 [ 22.105712] ? __do_page_fault+0x5f7/0xc90 [ 22.109916] ? lock_downgrade+0x980/0x980 [ 22.114052] ? __fget_light+0x297/0x380 [ 22.117997] ? fget_raw+0x20/0x20 [ 22.121425] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 22.125973] ? vmacache_find+0x5f/0x280 [ 22.129924] ? up_read+0x1a/0x40 [ 22.133260] ? __do_page_fault+0x3d6/0xc90 [ 22.137474] ? SYSC_accept4+0x4ff/0x870 [ 22.141422] ? __fdget+0x18/0x20 [ 22.144772] __sys_recvmsg+0xe2/0x210 [ 22.148547] ? __sys_recvmsg+0xe2/0x210 [ 22.152490] ? SyS_sendmmsg+0x60/0x60 [ 22.156261] ? __do_page_fault+0xc90/0xc90 [ 22.160470] ? SyS_setsockopt+0x215/0x360 [ 22.164598] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.169586] SyS_recvmsg+0x2d/0x50 [ 22.173103] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 22.177831] RIP: 0033:0x43fef9 [ 22.180990] RSP: 002b:00007ffd489600b8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 22.188667] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 22.195905] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 22.203143] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 22.210380] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 22.217616] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 22.224872] ================================================================== [ 22.232205] Disabling lock debugging due to kernel taint [ 22.237676] Kernel panic - not syncing: panic_on_warn set ... [ 22.237676] [ 22.245022] CPU: 0 PID: 3146 Comm: syzkaller231610 Tainted: G B 4.15.0-rc4-mm1+ #49 [ 22.253996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.263327] Call Trace: [ 22.265885] dump_stack+0x194/0x257 [ 22.269480] ? arch_local_irq_restore+0x53/0x53 [ 22.274127] ? kasan_end_report+0x32/0x50 [ 22.278253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.282976] ? vsnprintf+0x1ed/0x1900 [ 22.286745] ? scatterwalk_copychunks+0x1f0/0x480 [ 22.291554] panic+0x1e4/0x41c [ 22.294711] ? refcount_error_report+0x214/0x214 [ 22.299434] ? add_taint+0x1c/0x50 [ 22.302942] ? add_taint+0x1c/0x50 [ 22.306451] ? scatterwalk_copychunks+0x206/0x480 [ 22.311259] kasan_end_report+0x50/0x50 [ 22.315201] kasan_report+0x148/0x360 [ 22.318969] check_memory_region+0x137/0x190 [ 22.323344] memcpy+0x37/0x50 [ 22.326424] scatterwalk_copychunks+0x206/0x480 [ 22.331064] blkcipher_walk_done+0xa4b/0xde0 [ 22.335443] glue_ctr_crypt_128bit+0x597/0xc20 [ 22.339999] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 22.344727] ? memset+0x31/0x40 [ 22.347974] ? memzero_explicit+0xe/0x10 [ 22.352006] ? wp384_final+0xa6/0xf0 [ 22.355690] ? wp256_final+0xf0/0xf0 [ 22.359373] ? sock_kfree_s+0x29/0x60 [ 22.363153] ctr_crypt+0x34/0x40 [ 22.366488] ? ctr_crypt+0x34/0x40 [ 22.369997] ? lrw_encrypt+0x430/0x430 [ 22.373860] __ablk_encrypt+0x1d1/0x2d0 [ 22.377802] ? ablk_set_key+0x1a0/0x1a0 [ 22.381748] ? shash_async_update+0x20/0x20 [ 22.386041] ? kfree+0xf0/0x260 [ 22.389292] ? __ablk_encrypt+0x2d0/0x2d0 [ 22.393408] ablk_encrypt+0x23e/0x2c0 [ 22.397175] ? __ablk_encrypt+0x2d0/0x2d0 [ 22.401291] skcipher_decrypt_ablkcipher+0x312/0x420 [ 22.406360] ? scatterwalk_ffwd+0xbf/0x370 [ 22.410575] poly_tail_continue+0x42a/0x6b0 [ 22.414882] poly_tail+0x40f/0x520 [ 22.418394] poly_cipherpad+0x33e/0x470 [ 22.422335] poly_cipher+0x303/0x440 [ 22.426022] poly_adpad+0x347/0x480 [ 22.429631] poly_ad+0x25c/0x300 [ 22.432975] poly_setkey+0x2fc/0x3e0 [ 22.436656] poly_init+0x16c/0x1d0 [ 22.440165] poly_genkey+0x422/0x590 [ 22.443858] chachapoly_decrypt+0x73/0x90 [ 22.447977] aead_recvmsg+0x154a/0x1cf0 [ 22.451927] ? aead_release+0x50/0x50 [ 22.455696] ? selinux_socket_recvmsg+0x36/0x40 [ 22.460342] ? security_socket_recvmsg+0x91/0xc0 [ 22.465065] ? aead_release+0x50/0x50 [ 22.468838] sock_recvmsg+0xc9/0x110 [ 22.472520] ? __sock_recv_wifi_status+0x210/0x210 [ 22.477429] ___sys_recvmsg+0x2a4/0x640 [ 22.481376] ? ___sys_sendmsg+0x8b0/0x8b0 [ 22.485495] ? __do_page_fault+0x5f7/0xc90 [ 22.489709] ? lock_downgrade+0x980/0x980 [ 22.493829] ? __fget_light+0x297/0x380 [ 22.497771] ? fget_raw+0x20/0x20 [ 22.501193] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 22.505741] ? vmacache_find+0x5f/0x280 [ 22.509686] ? up_read+0x1a/0x40 [ 22.513029] ? __do_page_fault+0x3d6/0xc90 [ 22.517256] ? SYSC_accept4+0x4ff/0x870 [ 22.521203] ? __fdget+0x18/0x20 [ 22.524538] __sys_recvmsg+0xe2/0x210 [ 22.528304] ? __sys_recvmsg+0xe2/0x210 [ 22.532245] ? SyS_sendmmsg+0x60/0x60 [ 22.536028] ? __do_page_fault+0xc90/0xc90 [ 22.540236] ? SyS_setsockopt+0x215/0x360 [ 22.544365] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.549351] SyS_recvmsg+0x2d/0x50 [ 22.552863] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 22.557585] RIP: 0033:0x43fef9 [ 22.560742] RSP: 002b:00007ffd489600b8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 22.568424] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 22.575669] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 22.582905] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 22.590140] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 22.597384] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 22.605069] Dumping ftrace buffer: [ 22.608577] (ftrace buffer empty) [ 22.612251] Kernel Offset: disabled [ 22.615845] Rebooting in 86400 seconds..