[....] Starting enhanced syslogd: rsyslogd[ 11.443229] audit: type=1400 audit(1514230272.974:5): avc: denied { syslog } for pid=2993 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.394262] audit: type=1400 audit(1514230277.925:6): avc: denied { map } for pid=3132 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-1,10.128.0.4' (ECDSA) to the list of known hosts. executing program [ 23.121442] audit: type=1400 audit(1514230284.652:7): avc: denied { map } for pid=3146 comm="syzkaller250869" path="/root/syzkaller250869911" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 23.153295] ================================================================== [ 23.160693] BUG: KASAN: wild-memory-access in scatterwalk_copychunks+0x206/0x480 [ 23.168198] Write of size 16 at addr 00050800c7c5a698 by task syzkaller250869/3146 [ 23.175871] [ 23.177473] CPU: 1 PID: 3146 Comm: syzkaller250869 Not tainted 4.15.0-rc5+ #237 [ 23.184896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.194220] Call Trace: [ 23.196780] dump_stack+0x194/0x257 [ 23.200379] ? arch_local_irq_restore+0x53/0x53 [ 23.205038] ? scatterwalk_copychunks+0x206/0x480 [ 23.209854] kasan_report+0x13b/0x340 [ 23.213627] check_memory_region+0x137/0x190 [ 23.218006] memcpy+0x37/0x50 [ 23.221100] scatterwalk_copychunks+0x206/0x480 [ 23.225752] blkcipher_walk_done+0xa4b/0xde0 [ 23.230140] glue_ctr_crypt_128bit+0x597/0xc20 [ 23.234702] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 23.239428] ? sha512_base_init+0x220/0x220 [ 23.244365] ctr_crypt+0x34/0x40 [ 23.247697] ? ctr_crypt+0x34/0x40 [ 23.251205] ? twofish_enc_blk_3way+0x30/0x30 [ 23.255667] __ablk_encrypt+0x1d1/0x2d0 [ 23.259612] ? ablk_set_key+0x1a0/0x1a0 [ 23.263561] ? shash_async_update+0x20/0x20 [ 23.267851] ? kfree+0xf0/0x260 [ 23.271110] ? __ablk_encrypt+0x2d0/0x2d0 [ 23.275226] ablk_encrypt+0x23e/0x2c0 [ 23.278994] ? __ablk_encrypt+0x2d0/0x2d0 [ 23.283112] skcipher_decrypt_ablkcipher+0x312/0x420 [ 23.288182] ? scatterwalk_ffwd+0xbf/0x370 [ 23.292396] poly_tail_continue+0x42a/0x6b0 [ 23.296691] poly_tail+0x40f/0x520 [ 23.300204] poly_cipherpad+0x33e/0x470 [ 23.304150] poly_cipher+0x303/0x440 [ 23.307836] poly_adpad+0x347/0x480 [ 23.311435] poly_ad+0x25c/0x300 [ 23.314773] poly_setkey+0x2fc/0x3e0 [ 23.318462] poly_init+0x16c/0x1d0 [ 23.321981] poly_genkey+0x422/0x590 [ 23.325669] chachapoly_decrypt+0x73/0x90 [ 23.329791] aead_recvmsg+0x154a/0x1cf0 [ 23.333758] ? aead_release+0x50/0x50 [ 23.337535] ? selinux_socket_recvmsg+0x36/0x40 [ 23.342175] ? security_socket_recvmsg+0x91/0xc0 [ 23.346901] ? aead_release+0x50/0x50 [ 23.350672] sock_recvmsg+0xc9/0x110 [ 23.354352] ? __sock_recv_wifi_status+0x210/0x210 [ 23.359258] ___sys_recvmsg+0x2a4/0x640 [ 23.363209] ? ___sys_sendmsg+0x8b0/0x8b0 [ 23.367331] ? __do_page_fault+0x5f7/0xc90 [ 23.371540] ? lock_downgrade+0x980/0x980 [ 23.375681] ? __fget_light+0x297/0x380 [ 23.379626] ? fget_raw+0x20/0x20 [ 23.383054] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 23.387606] ? vmacache_find+0x5f/0x280 [ 23.391559] ? up_read+0x1a/0x40 [ 23.394897] ? __do_page_fault+0x3d6/0xc90 [ 23.399100] ? SYSC_accept4+0x4ff/0x870 [ 23.403060] ? __fdget+0x18/0x20 [ 23.406402] __sys_recvmsg+0xe2/0x210 [ 23.410172] ? __sys_recvmsg+0xe2/0x210 [ 23.414114] ? SyS_sendmmsg+0x60/0x60 [ 23.417887] ? __do_page_fault+0xc90/0xc90 [ 23.422100] ? SyS_setsockopt+0x215/0x360 [ 23.426226] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.431220] SyS_recvmsg+0x2d/0x50 [ 23.434734] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 23.439473] RIP: 0033:0x43fef9 [ 23.442632] RSP: 002b:00007ffe46e63528 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 23.450310] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 23.457554] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 23.464802] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 23.472053] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 23.479304] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 23.486560] ================================================================== [ 23.493893] Disabling lock debugging due to kernel taint [ 23.499366] Kernel panic - not syncing: panic_on_warn set ... [ 23.499366] [ 23.506711] CPU: 1 PID: 3146 Comm: syzkaller250869 Tainted: G B 4.15.0-rc5+ #237 [ 23.515430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.524750] Call Trace: [ 23.527310] dump_stack+0x194/0x257 [ 23.530905] ? arch_local_irq_restore+0x53/0x53 [ 23.535539] ? kasan_end_report+0x32/0x50 [ 23.539654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.544379] ? vsnprintf+0x1ed/0x1900 [ 23.548148] ? scatterwalk_copychunks+0x120/0x480 [ 23.552963] panic+0x1e4/0x41c [ 23.556121] ? refcount_error_report+0x214/0x214 [ 23.560845] ? add_taint+0x1c/0x50 [ 23.564355] ? add_taint+0x1c/0x50 [ 23.567865] ? scatterwalk_copychunks+0x206/0x480 [ 23.572687] kasan_end_report+0x50/0x50 [ 23.576635] kasan_report+0x144/0x340 [ 23.580403] check_memory_region+0x137/0x190 [ 23.584777] memcpy+0x37/0x50 [ 23.587849] scatterwalk_copychunks+0x206/0x480 [ 23.592496] blkcipher_walk_done+0xa4b/0xde0 [ 23.597608] glue_ctr_crypt_128bit+0x597/0xc20 [ 23.602167] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 23.606894] ? sha512_base_init+0x220/0x220 [ 23.611210] ctr_crypt+0x34/0x40 [ 23.614543] ? ctr_crypt+0x34/0x40 [ 23.618051] ? twofish_enc_blk_3way+0x30/0x30 [ 23.622514] __ablk_encrypt+0x1d1/0x2d0 [ 23.626455] ? ablk_set_key+0x1a0/0x1a0 [ 23.630397] ? shash_async_update+0x20/0x20 [ 23.634683] ? kfree+0xf0/0x260 [ 23.637928] ? __ablk_encrypt+0x2d0/0x2d0 [ 23.642042] ablk_encrypt+0x23e/0x2c0 [ 23.645809] ? __ablk_encrypt+0x2d0/0x2d0 [ 23.649922] skcipher_decrypt_ablkcipher+0x312/0x420 [ 23.654991] ? scatterwalk_ffwd+0xbf/0x370 [ 23.659204] poly_tail_continue+0x42a/0x6b0 [ 23.663495] poly_tail+0x40f/0x520 [ 23.667007] poly_cipherpad+0x33e/0x470 [ 23.670956] poly_cipher+0x303/0x440 [ 23.674637] poly_adpad+0x347/0x480 [ 23.678231] poly_ad+0x25c/0x300 [ 23.681565] poly_setkey+0x2fc/0x3e0 [ 23.685256] poly_init+0x16c/0x1d0 [ 23.688763] poly_genkey+0x422/0x590 [ 23.692466] chachapoly_decrypt+0x73/0x90 [ 23.696590] aead_recvmsg+0x154a/0x1cf0 [ 23.700541] ? aead_release+0x50/0x50 [ 23.704313] ? selinux_socket_recvmsg+0x36/0x40 [ 23.708950] ? security_socket_recvmsg+0x91/0xc0 [ 23.713673] ? aead_release+0x50/0x50 [ 23.718029] sock_recvmsg+0xc9/0x110 [ 23.721725] ? __sock_recv_wifi_status+0x210/0x210 [ 23.726625] ___sys_recvmsg+0x2a4/0x640 [ 23.730581] ? ___sys_sendmsg+0x8b0/0x8b0 [ 23.734698] ? __do_page_fault+0x5f7/0xc90 [ 23.738899] ? lock_downgrade+0x980/0x980 [ 23.743021] ? __fget_light+0x297/0x380 [ 23.746968] ? fget_raw+0x20/0x20 [ 23.750388] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 23.754937] ? vmacache_find+0x5f/0x280 [ 23.758882] ? up_read+0x1a/0x40 [ 23.762216] ? __do_page_fault+0x3d6/0xc90 [ 23.766417] ? SYSC_accept4+0x4ff/0x870 [ 23.770370] ? __fdget+0x18/0x20 [ 23.773705] __sys_recvmsg+0xe2/0x210 [ 23.777481] ? __sys_recvmsg+0xe2/0x210 [ 23.781442] ? SyS_sendmmsg+0x60/0x60 [ 23.785224] ? __do_page_fault+0xc90/0xc90 [ 23.789431] ? SyS_setsockopt+0x215/0x360 [ 23.793555] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.798541] SyS_recvmsg+0x2d/0x50 [ 23.802052] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 23.806771] RIP: 0033:0x43fef9 [ 23.809929] RSP: 002b:00007ffe46e63528 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 23.817608] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 23.824846] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 23.832081] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 23.839316] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 23.846550] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 23.854224] Dumping ftrace buffer: [ 23.857738] (ftrace buffer empty) [ 23.861414] Kernel Offset: disabled [ 23.865007] Rebooting in 86400 seconds..