INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-next-kasan-gce-3,10.128.15.222' (ECDSA) to the list of known hosts.
2017/10/20 12:55:44 parsed 1 programs
2017/10/20 12:55:44 executed programs: 0
2017/10/20 12:55:49 executed programs: 59
syzkaller login: [   40.021906] ==================================================================
[   40.022987] BUG: KASAN: use-after-free in packet_getsockopt+0xc72/0xe00
[   40.023874] Read of size 8 at addr ffff8801d0195918 by task syz-executor0/3312
[   40.024846] 
[   40.025078] CPU: 1 PID: 3312 Comm: syz-executor0 Not tainted 4.14.0-rc5-next-20171018+ #36
[   40.026176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   40.027394] Call Trace:
[   40.027751]  dump_stack+0x194/0x257
[   40.028245]  ? arch_local_irq_restore+0x53/0x53
[   40.028871]  ? show_regs_print_info+0x65/0x65
[   40.029468]  ? lock_release+0xa40/0xa40
[   40.030005]  ? packet_getsockopt+0xc72/0xe00
[   40.030598]  print_address_description+0x73/0x250
[   40.031246]  ? packet_getsockopt+0xc72/0xe00
[   40.031836]  kasan_report+0x25b/0x340
[   40.032350]  __asan_report_load8_noabort+0x14/0x20
[   40.033004]  packet_getsockopt+0xc72/0xe00
[   40.033573]  ? packet_notifier+0x950/0x950
[   40.034143]  ? SYSC_perf_event_open+0x4c3/0x2e00
[   40.034781]  ? __fget_light+0x297/0x380
[   40.035314]  ? sock_has_perm+0x29c/0x400
[   40.035860]  ? selinux_secmark_relabel_packet+0xc0/0xc0
[   40.036575]  ? perf_event_set_output+0x5a0/0x5a0
[   40.037218]  ? putname+0xee/0x130
[   40.037692]  ? selinux_socket_getsockopt+0x36/0x40
[   40.039419]  ? security_socket_getsockopt+0x89/0xb0
[   40.040119]  SyS_getsockopt+0x178/0x340
[   40.040671]  ? SyS_setsockopt+0x360/0x360
[   40.041245]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   40.041892]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   40.043791]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   40.048520]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   40.053242] RIP: 0033:0x452719
[   40.056397] RSP: 002b:00007f67101c8be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[   40.064071] RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452719
[   40.071307] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 0000000000000010
[   40.078541] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   40.085777] R10: 0000000020ec8000 R11: 0000000000000212 R12: 0000000000000000
[   40.093010] R13: 00007ffeda2b4d4f R14: 00007f67101c99c0 R15: 0000000000000004
[   40.100261] 
[   40.101855] Allocated by task 3311:
[   40.105448]  save_stack+0x43/0xd0
[   40.108864]  kasan_kmalloc+0xad/0xe0
[   40.112543]  kmem_cache_alloc_trace+0x136/0x750
[   40.117174]  fanout_add+0x27e/0x1480
[   40.120851]  packet_setsockopt+0xfdc/0x1e80
[   40.125136]  SyS_setsockopt+0x189/0x360
[   40.129076]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   40.133793] 
[   40.135385] Freed by task 3311:
[   40.138629]  save_stack+0x43/0xd0
[   40.142045]  kasan_slab_free+0x71/0xc0
[   40.145894]  kfree+0xca/0x250
[   40.148965]  fanout_add+0x432/0x1480
[   40.152644]  packet_setsockopt+0xfdc/0x1e80
[   40.156930]  SyS_setsockopt+0x189/0x360
[   40.160871]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   40.165589] 
[   40.167183] The buggy address belongs to the object at ffff8801d0195900
[   40.167183]  which belongs to the cache kmalloc-128 of size 128
[   40.179802] The buggy address is located 24 bytes inside of
[   40.179802]  128-byte region [ffff8801d0195900, ffff8801d0195980)
[   40.191550] The buggy address belongs to the page:
[   40.196443] page:ffffea0007406540 count:1 mapcount:0 mapping:ffff8801d0195000 index:0x0
[   40.204551] flags: 0x200000000000100(slab)
[   40.208752] raw: 0200000000000100 ffff8801d0195000 0000000000000000 0000000100000015
[   40.216600] raw: ffffea00075500a0 ffffea000740b860 ffff8801dac00640 0000000000000000
[   40.224441] page dumped because: kasan: bad access detected
[   40.230111] 
[   40.231702] Memory state around the buggy address:
[   40.236594]  ffff8801d0195800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   40.243925]  ffff8801d0195880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   40.251247] >ffff8801d0195900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   40.258566]                             ^
[   40.262677]  ffff8801d0195980: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[   40.270001]  ffff8801d0195a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   40.277324] ==================================================================
[   40.284647] Disabling lock debugging due to kernel taint
[   40.290129] Kernel panic - not syncing: panic_on_warn set ...
[   40.290129] 
[   40.297460] CPU: 1 PID: 3312 Comm: syz-executor0 Tainted: G    B            4.14.0-rc5-next-20171018+ #36
[   40.307125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   40.316448] Call Trace:
[   40.319002]  dump_stack+0x194/0x257
[   40.322593]  ? arch_local_irq_restore+0x53/0x53
[   40.327228]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   40.331950]  ? vsnprintf+0x1ed/0x1900
[   40.335724]  ? packet_getsockopt+0xbf0/0xe00
[   40.340097]  panic+0x1e4/0x41c
[   40.343255]  ? refcount_error_report+0x214/0x214
[   40.347976]  ? add_taint+0x1c/0x50
[   40.351483]  ? add_taint+0x1c/0x50
[   40.354990]  ? packet_getsockopt+0xc72/0xe00
[   40.359363]  kasan_end_report+0x50/0x50
[   40.363304]  kasan_report+0x144/0x340
[   40.367071]  __asan_report_load8_noabort+0x14/0x20
[   40.371964]  packet_getsockopt+0xc72/0xe00
[   40.376165]  ? packet_notifier+0x950/0x950
[   40.380366]  ? SYSC_perf_event_open+0x4c3/0x2e00
[   40.385089]  ? __fget_light+0x297/0x380
[   40.389028]  ? sock_has_perm+0x29c/0x400
[   40.393054]  ? selinux_secmark_relabel_packet+0xc0/0xc0
[   40.398384]  ? perf_event_set_output+0x5a0/0x5a0
[   40.403107]  ? putname+0xee/0x130
[   40.406526]  ? selinux_socket_getsockopt+0x36/0x40
[   40.411418]  ? security_socket_getsockopt+0x89/0xb0
[   40.416401]  SyS_getsockopt+0x178/0x340
[   40.420344]  ? SyS_setsockopt+0x360/0x360
[   40.424457]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   40.429264]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   40.434244]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   40.438966]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   40.443683] RIP: 0033:0x452719
[   40.446836] RSP: 002b:00007f67101c8be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[   40.454507] RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452719
[   40.461740] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 0000000000000010
[   40.468975] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   40.476208] R10: 0000000020ec8000 R11: 0000000000000212 R12: 0000000000000000
[   40.483442] R13: 00007ffeda2b4d4f R14: 00007f67101c99c0 R15: 0000000000000004
[   40.490716] Dumping ftrace buffer:
[   40.494219]    (ftrace buffer empty)
[   40.497895] Kernel Offset: disabled
[   40.501486] Rebooting in 86400 seconds..