INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-mmots-kasan-gce-9,10.128.0.24' (ECDSA) to the list of known hosts.
2017/09/29 08:28:31 parsed 1 programs
2017/09/29 08:28:31 executed programs: 0
syzkaller login: [   41.441942] ==================================================================
[   41.449365] BUG: KASAN: use-after-free in __do_page_fault+0xc03/0xd60
[   41.455915] Read of size 8 at addr ffff8801cd808680 by task syz-executor3/3059
[   41.463241] 
[   41.464842] CPU: 1 PID: 3059 Comm: syz-executor3 Not tainted 4.14.0-rc2-mm1+ #10
[   41.472344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   41.481669] Call Trace:
[   41.484232]  dump_stack+0x194/0x257
[   41.487837]  ? arch_local_irq_restore+0x53/0x53
[   41.492481]  ? show_regs_print_info+0x65/0x65
[   41.496957]  ? __do_page_fault+0xc03/0xd60
[   41.501165]  print_address_description+0x73/0x250
[   41.505977]  ? __do_page_fault+0xc03/0xd60
[   41.510181]  kasan_report+0x25b/0x340
[   41.513960]  __asan_report_load8_noabort+0x14/0x20
[   41.518860]  __do_page_fault+0xc03/0xd60
[   41.522901]  ? mm_fault_error+0x2c0/0x2c0
[   41.527021]  ? free_pidmap.isra.0+0x70/0x70
[   41.531321]  do_page_fault+0xee/0x720
[   41.535094]  ? __do_page_fault+0xd60/0xd60
[   41.539306]  ? SyS_futex+0x269/0x390
[   41.542996]  ? do_futex+0x20d0/0x20d0
[   41.546765]  ? __task_pid_nr_ns+0x2c7/0x540
[   41.551055]  ? entry_SYSCALL_64_fastpath+0x4b/0xbe
[   41.555960]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   41.560781]  page_fault+0x22/0x30
[   41.564203] RIP: 0033:0x44bcf0
[   41.567365] RSP: 002b:00007f913a03c758 EFLAGS: 00010202
[   41.572701] RAX: 00007f913a03c800 RBX: 0000000000718000 RCX: 000000000000000e
[   41.579942] RDX: 0000000000000400 RSI: 0000000020012fe0 RDI: 00007f913a03c800
[   41.587184] RBP: 0000000000005e10 R08: 0000000000000400 R09: 0000000000000000
[   41.594424] R10: 00000000000f4245 R11: 0000000000000246 R12: 00000000004bbc27
[   41.601663] R13: 00000000ffffffff R14: 0000000020012fee R15: 0000000000000000
[   41.608920] 
[   41.610516] Allocated by task 3059:
[   41.614112]  save_stack_trace+0x16/0x20
[   41.618054]  save_stack+0x43/0xd0
[   41.621478]  kasan_kmalloc+0xad/0xe0
[   41.625159]  kasan_slab_alloc+0x12/0x20
[   41.629112]  kmem_cache_alloc+0x12e/0x760
[   41.633229]  mmap_region+0x7ee/0x15a0
[   41.636998]  do_mmap+0x6a1/0xd50
[   41.640335]  vm_mmap_pgoff+0x1de/0x280
[   41.644193]  SyS_mmap_pgoff+0x23b/0x5f0
[   41.648155]  SyS_mmap+0x16/0x20
[   41.651405]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   41.656128] 
[   41.657726] Freed by task 3070:
[   41.660972]  save_stack_trace+0x16/0x20
[   41.664912]  save_stack+0x43/0xd0
[   41.668331]  kasan_slab_free+0x71/0xc0
[   41.672184]  kmem_cache_free+0x77/0x280
[   41.676124]  remove_vma+0x162/0x1b0
[   41.679720]  do_munmap+0x82a/0xdf0
[   41.683227]  mmap_region+0x59e/0x15a0
[   41.687002]  do_mmap+0x6a1/0xd50
[   41.690337]  vm_mmap_pgoff+0x1de/0x280
[   41.694192]  SyS_mmap_pgoff+0x23b/0x5f0
[   41.698149]  SyS_mmap+0x16/0x20
[   41.701396]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   41.706117] 
[   41.707716] The buggy address belongs to the object at ffff8801cd808630
[   41.707716]  which belongs to the cache vm_area_struct of size 200
[   41.720601] The buggy address is located 80 bytes inside of
[   41.720601]  200-byte region [ffff8801cd808630, ffff8801cd8086f8)
[   41.732355] The buggy address belongs to the page:
[   41.737252] page:ffffea0007360200 count:1 mapcount:0 mapping:ffff8801cd808000 index:0x0
[   41.745367] flags: 0x200000000000100(slab)
[   41.749572] raw: 0200000000000100 ffff8801cd808000 0000000000000000 000000010000000f
[   41.757429] raw: ffffea000739be20 ffffea000738cb60 ffff8801dae049c0 0000000000000000
[   41.765275] page dumped because: kasan: bad access detected
[   41.770953] 
[   41.772547] Memory state around the buggy address:
[   41.777442]  ffff8801cd808580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[   41.784768]  ffff8801cd808600: fc fc fc fc fc fc fb fb fb fb fb fb fb fb fb fb
[   41.792096] >ffff8801cd808680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[   41.799422]                    ^
[   41.802758]  ffff8801cd808700: fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00
[   41.810086]  ffff8801cd808780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   41.817413] ==================================================================
[   41.824736] Disabling lock debugging due to kernel taint
[   41.830247] Kernel panic - not syncing: panic_on_warn set ...
[   41.830247] 
[   41.837583] CPU: 1 PID: 3059 Comm: syz-executor3 Tainted: G    B           4.14.0-rc2-mm1+ #10
[   41.846300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   41.855618] Call Trace:
[   41.858172]  dump_stack+0x194/0x257
[   41.861765]  ? arch_local_irq_restore+0x53/0x53
[   41.866405]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   41.871126]  ? __do_page_fault+0xb90/0xd60
[   41.875328]  panic+0x1e4/0x417
[   41.878483]  ? __warn+0x1d9/0x1d9
[   41.881908]  ? __do_page_fault+0xc03/0xd60
[   41.886110]  kasan_end_report+0x50/0x50
[   41.890054]  kasan_report+0x144/0x340
[   41.893820]  __asan_report_load8_noabort+0x14/0x20
[   41.898714]  __do_page_fault+0xc03/0xd60
[   41.902751]  ? mm_fault_error+0x2c0/0x2c0
[   41.906864]  ? free_pidmap.isra.0+0x70/0x70
[   41.911153]  do_page_fault+0xee/0x720
[   41.914929]  ? __do_page_fault+0xd60/0xd60
[   41.919137]  ? SyS_futex+0x269/0x390
[   41.922835]  ? do_futex+0x20d0/0x20d0
[   41.926598]  ? __task_pid_nr_ns+0x2c7/0x540
[   41.930886]  ? entry_SYSCALL_64_fastpath+0x4b/0xbe
[   41.935782]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   41.940593]  page_fault+0x22/0x30
[   41.944019] RIP: 0033:0x44bcf0
[   41.947174] RSP: 002b:00007f913a03c758 EFLAGS: 00010202
[   41.952501] RAX: 00007f913a03c800 RBX: 0000000000718000 RCX: 000000000000000e
[   41.959734] RDX: 0000000000000400 RSI: 0000000020012fe0 RDI: 00007f913a03c800
[   41.966970] RBP: 0000000000005e10 R08: 0000000000000400 R09: 0000000000000000
[   41.974207] R10: 00000000000f4245 R11: 0000000000000246 R12: 00000000004bbc27
[   41.981442] R13: 00000000ffffffff R14: 0000000020012fee R15: 0000000000000000
[   41.988727] Dumping ftrace buffer:
[   41.992230]    (ftrace buffer empty)
[   41.995906] Kernel Offset: disabled
[   41.999500] Rebooting in 86400 seconds..