[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 11.425690] audit: type=1400 audit(1514169224.975:6): avc: denied { map } for pid=3128 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-3,10.128.0.4' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.835661] audit: type=1400 audit(1514169254.385:7): avc: denied { map } for pid=3147 comm="syzkaller310808" path="/root/syzkaller310808029" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.879844] ================================================================== [ 40.887223] BUG: KASAN: wild-memory-access in scatterwalk_copychunks+0x206/0x480 [ 40.894722] Write of size 16 at addr 00050800c8d578d8 by task syzkaller310808/3147 [ 40.902390] [ 40.903986] CPU: 0 PID: 3147 Comm: syzkaller310808 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 40.912526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.921844] Call Trace: [ 40.924398] dump_stack+0x194/0x257 [ 40.927993] ? arch_local_irq_restore+0x53/0x53 [ 40.932632] ? scatterwalk_copychunks+0x206/0x480 [ 40.937442] kasan_report+0x13b/0x340 [ 40.941212] check_memory_region+0x137/0x190 [ 40.945588] memcpy+0x37/0x50 [ 40.948661] scatterwalk_copychunks+0x206/0x480 [ 40.953308] blkcipher_walk_done+0xa4b/0xde0 [ 40.957690] glue_ctr_crypt_128bit+0x597/0xc20 [ 40.962250] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 40.966975] ? memset+0x31/0x40 [ 40.970321] ? memzero_explicit+0xe/0x10 [ 40.974349] ? wp384_final+0xa6/0xf0 [ 40.978029] ? wp256_final+0xf0/0xf0 [ 40.981706] ? sock_kfree_s+0x29/0x60 [ 40.985500] ctr_crypt+0x34/0x40 [ 40.988830] ? ctr_crypt+0x34/0x40 [ 40.992337] ? lrw_encrypt+0x430/0x430 [ 40.996189] __ablk_encrypt+0x1d1/0x2d0 [ 41.000132] ? ablk_set_key+0x1a0/0x1a0 [ 41.004084] ? shash_async_update+0x20/0x20 [ 41.008369] ? kfree+0xf0/0x260 [ 41.011621] ? __ablk_encrypt+0x2d0/0x2d0 [ 41.015734] ablk_encrypt+0x23e/0x2c0 [ 41.019500] ? __ablk_encrypt+0x2d0/0x2d0 [ 41.023612] skcipher_decrypt_ablkcipher+0x312/0x420 [ 41.028677] ? scatterwalk_ffwd+0xbf/0x370 [ 41.032880] poly_tail_continue+0x42a/0x6b0 [ 41.037172] poly_tail+0x40f/0x520 [ 41.040681] poly_cipherpad+0x33e/0x470 [ 41.044625] poly_cipher+0x303/0x440 [ 41.048308] poly_adpad+0x347/0x480 [ 41.051904] poly_ad+0x25c/0x300 [ 41.055249] poly_setkey+0x2fc/0x3e0 [ 41.058934] poly_init+0x16c/0x1d0 [ 41.062440] poly_genkey+0x422/0x590 [ 41.066124] chachapoly_decrypt+0x73/0x90 [ 41.070245] aead_recvmsg+0x154a/0x1cf0 [ 41.074205] ? aead_release+0x50/0x50 [ 41.077977] ? selinux_socket_recvmsg+0x36/0x40 [ 41.082615] ? security_socket_recvmsg+0x91/0xc0 [ 41.087338] ? aead_release+0x50/0x50 [ 41.091103] sock_recvmsg+0xc9/0x110 [ 41.094783] ? __sock_recv_wifi_status+0x210/0x210 [ 41.099679] ___sys_recvmsg+0x2a4/0x640 [ 41.103632] ? ___sys_sendmsg+0x8b0/0x8b0 [ 41.107753] ? __do_page_fault+0x5f7/0xc90 [ 41.111954] ? lock_downgrade+0x980/0x980 [ 41.116083] ? __fget_light+0x297/0x380 [ 41.120034] ? fget_raw+0x20/0x20 [ 41.123456] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 41.128002] ? vmacache_find+0x5f/0x280 [ 41.131947] ? up_read+0x1a/0x40 [ 41.135285] ? __do_page_fault+0x3d6/0xc90 [ 41.139488] ? SYSC_accept4+0x4ff/0x870 [ 41.143432] ? __fdget+0x18/0x20 [ 41.146769] __sys_recvmsg+0xe2/0x210 [ 41.150536] ? __sys_recvmsg+0xe2/0x210 [ 41.154482] ? SyS_sendmmsg+0x60/0x60 [ 41.158253] ? __do_page_fault+0xc90/0xc90 [ 41.162458] ? SyS_setsockopt+0x215/0x360 [ 41.166586] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.171575] SyS_recvmsg+0x2d/0x50 [ 41.175083] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 41.179805] RIP: 0033:0x43fef9 [ 41.182958] RSP: 002b:00007ffd3134f8f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 41.190637] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 41.197873] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 41.205107] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 41.212341] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 41.219585] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 41.226835] ================================================================== [ 41.234155] Disabling lock debugging due to kernel taint [ 41.239716] Kernel panic - not syncing: panic_on_warn set ... [ 41.239716] [ 41.247048] CPU: 0 PID: 3147 Comm: syzkaller310808 Tainted: G B 4.15.0-rc4-next-20171221+ #78 [ 41.256886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.266208] Call Trace: [ 41.268772] dump_stack+0x194/0x257 [ 41.272363] ? arch_local_irq_restore+0x53/0x53 [ 41.276995] ? kasan_end_report+0x32/0x50 [ 41.281107] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.285828] ? vsnprintf+0x1ed/0x1900 [ 41.290036] ? scatterwalk_copychunks+0x170/0x480 [ 41.294848] panic+0x1e4/0x41c [ 41.298008] ? refcount_error_report+0x214/0x214 [ 41.302734] ? add_taint+0x1c/0x50 [ 41.306359] ? add_taint+0x1c/0x50 [ 41.309863] ? scatterwalk_copychunks+0x206/0x480 [ 41.314669] kasan_end_report+0x50/0x50 [ 41.318606] kasan_report+0x144/0x340 [ 41.322376] check_memory_region+0x137/0x190 [ 41.326750] memcpy+0x37/0x50 [ 41.329825] scatterwalk_copychunks+0x206/0x480 [ 41.334469] blkcipher_walk_done+0xa4b/0xde0 [ 41.338846] glue_ctr_crypt_128bit+0x597/0xc20 [ 41.343397] ? glue_ecb_crypt_128bit+0x5c0/0x5c0 [ 41.348119] ? memset+0x31/0x40 [ 41.351364] ? memzero_explicit+0xe/0x10 [ 41.355393] ? wp384_final+0xa6/0xf0 [ 41.359070] ? wp256_final+0xf0/0xf0 [ 41.362757] ? sock_kfree_s+0x29/0x60 [ 41.366537] ctr_crypt+0x34/0x40 [ 41.369884] ? ctr_crypt+0x34/0x40 [ 41.373387] ? lrw_encrypt+0x430/0x430 [ 41.377250] __ablk_encrypt+0x1d1/0x2d0 [ 41.381188] ? ablk_set_key+0x1a0/0x1a0 [ 41.385127] ? shash_async_update+0x20/0x20 [ 41.389413] ? kfree+0xf0/0x260 [ 41.392662] ? __ablk_encrypt+0x2d0/0x2d0 [ 41.396773] ablk_encrypt+0x23e/0x2c0 [ 41.400536] ? __ablk_encrypt+0x2d0/0x2d0 [ 41.404647] skcipher_decrypt_ablkcipher+0x312/0x420 [ 41.409711] ? scatterwalk_ffwd+0xbf/0x370 [ 41.413914] poly_tail_continue+0x42a/0x6b0 [ 41.418201] poly_tail+0x40f/0x520 [ 41.421709] poly_cipherpad+0x33e/0x470 [ 41.425649] poly_cipher+0x303/0x440 [ 41.429329] poly_adpad+0x347/0x480 [ 41.432923] poly_ad+0x25c/0x300 [ 41.436255] poly_setkey+0x2fc/0x3e0 [ 41.439934] poly_init+0x16c/0x1d0 [ 41.443441] poly_genkey+0x422/0x590 [ 41.447121] chachapoly_decrypt+0x73/0x90 [ 41.451238] aead_recvmsg+0x154a/0x1cf0 [ 41.455186] ? aead_release+0x50/0x50 [ 41.458954] ? selinux_socket_recvmsg+0x36/0x40 [ 41.463587] ? security_socket_recvmsg+0x91/0xc0 [ 41.468306] ? aead_release+0x50/0x50 [ 41.472069] sock_recvmsg+0xc9/0x110 [ 41.475749] ? __sock_recv_wifi_status+0x210/0x210 [ 41.480645] ___sys_recvmsg+0x2a4/0x640 [ 41.484586] ? ___sys_sendmsg+0x8b0/0x8b0 [ 41.488701] ? __do_page_fault+0x5f7/0xc90 [ 41.492900] ? lock_downgrade+0x980/0x980 [ 41.497015] ? __fget_light+0x297/0x380 [ 41.500960] ? fget_raw+0x20/0x20 [ 41.504380] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 41.508928] ? vmacache_find+0x5f/0x280 [ 41.512869] ? up_read+0x1a/0x40 [ 41.516204] ? __do_page_fault+0x3d6/0xc90 [ 41.520402] ? SYSC_accept4+0x4ff/0x870 [ 41.524344] ? __fdget+0x18/0x20 [ 41.527679] __sys_recvmsg+0xe2/0x210 [ 41.531443] ? __sys_recvmsg+0xe2/0x210 [ 41.535380] ? SyS_sendmmsg+0x60/0x60 [ 41.539149] ? __do_page_fault+0xc90/0xc90 [ 41.543350] ? SyS_setsockopt+0x215/0x360 [ 41.547468] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.552460] SyS_recvmsg+0x2d/0x50 [ 41.555969] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 41.560695] RIP: 0033:0x43fef9 [ 41.563859] RSP: 002b:00007ffd3134f8f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 41.571533] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fef9 [ 41.578784] RDX: 0000000000000000 RSI: 000000002022efc8 RDI: 0000000000000004 [ 41.586025] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 41.593261] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401860 [ 41.600495] R13: 00000000004018f0 R14: 0000000000000000 R15: 0000000000000000 [ 41.607770] Dumping ftrace buffer: [ 41.611276] (ftrace buffer empty) [ 41.614952] Kernel Offset: disabled [ 41.618552] Rebooting in 86400 seconds..