INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-kasan-gce-4,10.128.0.54' (ECDSA) to the list of known hosts.
2017/10/18 20:13:50 parsed 1 programs
2017/10/18 20:13:50 executed programs: 0
syzkaller login: [   49.833334] ==================================================================
[   49.834504] BUG: KASAN: use-after-free in packet_getsockopt+0xc72/0xe00
[   49.835395] Read of size 8 at addr ffff8801cd5c0198 by task syz-executor7/3539
[   49.836359] 
[   49.836593] CPU: 1 PID: 3539 Comm: syz-executor7 Not tainted 4.14.0-rc5+ #137
[   49.837548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   49.838769] Call Trace:
[   49.839156]  dump_stack+0x194/0x257
[   49.839654]  ? arch_local_irq_restore+0x53/0x53
[   49.840282]  ? show_regs_print_info+0x65/0x65
[   49.840882]  ? lock_release+0xa40/0xa40
[   49.841464]  ? packet_getsockopt+0xc72/0xe00
[   49.842057]  print_address_description+0x73/0x250
[   49.842705]  ? packet_getsockopt+0xc72/0xe00
[   49.843377]  kasan_report+0x25b/0x340
[   49.843915]  __asan_report_load8_noabort+0x14/0x20
[   49.844572]  packet_getsockopt+0xc72/0xe00
[   49.845148]  ? packet_notifier+0x950/0x950
[   49.845716]  ? SYSC_perf_event_open+0x4c3/0x2e00
[   49.846372]  ? __fget_light+0x297/0x380
[   49.846921]  ? sock_has_perm+0x29c/0x400
[   49.847473]  ? selinux_tun_dev_create+0xc0/0xc0
[   49.848106]  ? perf_event_set_output+0x5a0/0x5a0
[   49.848757]  ? sk_free+0x2f/0x40
[   49.849245]  ? selinux_socket_getsockopt+0x36/0x40
[   49.849937]  ? security_socket_getsockopt+0x89/0xb0
[   49.850618]  SyS_getsockopt+0x178/0x340
[   49.851165]  ? SyS_setsockopt+0x360/0x360
[   49.851739]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   49.852445]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   49.853130]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   49.855950]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   49.860678] RIP: 0033:0x452719
[   49.863839] RSP: 002b:00007fe95135ebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[   49.871516] RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452719
[   49.878754] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 0000000000000011
[   49.885991] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   49.893230] R10: 0000000020ec8000 R11: 0000000000000212 R12: 00000000006f3cf8
[   49.900467] R13: 00000000ffffffff R14: 00007fe95135f6d4 R15: 0000000000000002
[   49.907740] 
[   49.909338] Allocated by task 3533:
[   49.912935]  save_stack_trace+0x16/0x20
[   49.916878]  save_stack+0x43/0xd0
[   49.920299]  kasan_kmalloc+0xad/0xe0
[   49.923979]  kmem_cache_alloc_trace+0x136/0x750
[   49.928617]  fanout_add+0x27e/0x1480
[   49.932296]  packet_setsockopt+0xfdc/0x1e80
[   49.936585]  SyS_setsockopt+0x189/0x360
[   49.940527]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   49.945245] 
[   49.946840] Freed by task 3533:
[   49.950102]  save_stack_trace+0x16/0x20
[   49.954055]  save_stack+0x43/0xd0
[   49.957478]  kasan_slab_free+0x71/0xc0
[   49.961334]  kfree+0xca/0x250
[   49.964409]  fanout_add+0x432/0x1480
[   49.968095]  packet_setsockopt+0xfdc/0x1e80
[   49.972393]  SyS_setsockopt+0x189/0x360
[   49.976345]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   49.981157] 
[   49.982761] The buggy address belongs to the object at ffff8801cd5c0180
[   49.982761]  which belongs to the cache kmalloc-128 of size 128
[   49.995397] The buggy address is located 24 bytes inside of
[   49.995397]  128-byte region [ffff8801cd5c0180, ffff8801cd5c0200)
[   50.007174] The buggy address belongs to the page:
[   50.012088] page:ffffea0007357000 count:1 mapcount:0 mapping:ffff8801cd5c0000 index:0x0
[   50.020207] flags: 0x200000000000100(slab)
[   50.024421] raw: 0200000000000100 ffff8801cd5c0000 0000000000000000 0000000100000015
[   50.032275] raw: ffffea0007368de0 ffffea000738ede0 ffff8801dac00640 0000000000000000
[   50.040132] page dumped because: kasan: bad access detected
[   50.045815] 
[   50.047417] Memory state around the buggy address:
[   50.052325]  ffff8801cd5c0080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[   50.059653]  ffff8801cd5c0100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   50.066981] >ffff8801cd5c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.074308]                             ^
[   50.078431]  ffff8801cd5c0200: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[   50.085767]  ffff8801cd5c0280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   50.093095] ==================================================================
[   50.100420] Disabling lock debugging due to kernel taint
[   50.105934] Kernel panic - not syncing: panic_on_warn set ...
[   50.105934] 
[   50.113283] CPU: 1 PID: 3539 Comm: syz-executor7 Tainted: G    B           4.14.0-rc5+ #137
[   50.121747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   50.131075] Call Trace:
[   50.133636]  dump_stack+0x194/0x257
[   50.137246]  ? arch_local_irq_restore+0x53/0x53
[   50.141890]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   50.146640]  ? packet_getsockopt+0xbf0/0xe00
[   50.151041]  panic+0x1e4/0x417
[   50.154217]  ? __warn+0x1d9/0x1d9
[   50.157667]  ? packet_getsockopt+0xc72/0xe00
[   50.162050]  kasan_end_report+0x50/0x50
[   50.166003]  kasan_report+0x144/0x340
[   50.169788]  __asan_report_load8_noabort+0x14/0x20
[   50.174686]  packet_getsockopt+0xc72/0xe00
[   50.178907]  ? packet_notifier+0x950/0x950
[   50.183113]  ? SYSC_perf_event_open+0x4c3/0x2e00
[   50.187845]  ? __fget_light+0x297/0x380
[   50.191791]  ? sock_has_perm+0x29c/0x400
[   50.195833]  ? selinux_tun_dev_create+0xc0/0xc0
[   50.200472]  ? perf_event_set_output+0x5a0/0x5a0
[   50.205199]  ? sk_free+0x2f/0x40
[   50.208558]  ? selinux_socket_getsockopt+0x36/0x40
[   50.213459]  ? security_socket_getsockopt+0x89/0xb0
[   50.218452]  SyS_getsockopt+0x178/0x340
[   50.222405]  ? SyS_setsockopt+0x360/0x360
[   50.226525]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   50.231340]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   50.236328]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   50.241064]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   50.245786] RIP: 0033:0x452719
[   50.248947] RSP: 002b:00007fe95135ebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[   50.256623] RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452719
[   50.263860] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 0000000000000011
[   50.271099] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   50.278336] R10: 0000000020ec8000 R11: 0000000000000212 R12: 00000000006f3cf8
[   50.285576] R13: 00000000ffffffff R14: 00007fe95135f6d4 R15: 0000000000000002
[   50.293265] Dumping ftrace buffer:
[   50.296815]    (ftrace buffer empty)
[   50.300493] Kernel Offset: disabled
[   50.304098] Rebooting in 86400 seconds..