INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-next-kasan-gce-6,10.128.0.59' (ECDSA) to the list of known hosts.
2017/09/20 18:48:29 parsed 1 programs
2017/09/20 18:48:29 executed programs: 0
syzkaller login: [   27.756850] ==================================================================
[   27.764286] BUG: KASAN: use-after-free in packet_getsockopt+0xc72/0xe00
[   27.771008] Read of size 8 at addr ffff8801ce43b258 by task syz-executor0/3009
[   27.778334] 
[   27.779936] CPU: 0 PID: 3009 Comm: syz-executor0 Not tainted 4.14.0-rc1-next-20170920+ #26
[   27.788306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   27.797630] Call Trace:
[   27.800201]  dump_stack+0x194/0x257
[   27.803803]  ? arch_local_irq_restore+0x53/0x53
[   27.808443]  ? show_regs_print_info+0x65/0x65
[   27.812908]  ? lock_release+0xd70/0xd70
[   27.816860]  ? packet_getsockopt+0xc72/0xe00
[   27.821241]  print_address_description+0x73/0x250
[   27.826057]  ? packet_getsockopt+0xc72/0xe00
[   27.830437]  kasan_report+0x24e/0x340
[   27.834224]  __asan_report_load8_noabort+0x14/0x20
[   27.839126]  packet_getsockopt+0xc72/0xe00
[   27.843335]  ? packet_notifier+0x950/0x950
[   27.847539]  ? iput+0x540/0xaf0
[   27.850793]  ? __fget_light+0x29d/0x390
[   27.854739]  ? sock_has_perm+0x29c/0x400
[   27.858772]  ? selinux_tun_dev_create+0xc0/0xc0
[   27.863410]  ? free_modinfo_version+0x70/0x70
[   27.867876]  ? __sk_free+0x5c/0x230
[   27.871477]  ? exit_to_usermode_loop+0x98/0x300
[   27.876129]  ? trace_hardirqs_off+0xd/0x10
[   27.880337]  ? exit_to_usermode_loop+0x1a8/0x300
[   27.885069]  ? selinux_socket_getsockopt+0x36/0x40
[   27.889969]  ? security_socket_getsockopt+0x89/0xb0
[   27.894962]  SyS_getsockopt+0x178/0x340
[   27.898913]  ? SyS_setsockopt+0x360/0x360
[   27.903036]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   27.907855]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   27.912849]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   27.917597]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   27.922335] RIP: 0033:0x4520a9
[   27.925499] RSP: 002b:00007fd587bd2c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
[   27.933192] RAX: ffffffffffffffda RBX: 00000000007180b0 RCX: 00000000004520a9
[   27.940443] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 000000000000000c
[   27.947683] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   27.954926] R10: 0000000020ec8000 R11: 0000000000000216 R12: 00000000004bb9a3
[   27.962168] R13: 00000000ffffffff R14: 000000000000000a R15: 0000000000000001
[   27.969429] 
[   27.971027] Allocated by task 3008:
[   27.974627]  save_stack_trace+0x16/0x20
[   27.978574]  save_stack+0x43/0xd0
[   27.981999]  kasan_kmalloc+0xad/0xe0
[   27.985695]  kmem_cache_alloc_trace+0x136/0x750
[   27.990333]  fanout_add+0x345/0x1190
[   27.994016]  packet_setsockopt+0xfdc/0x1e80
[   27.998307]  SyS_setsockopt+0x189/0x360
[   28.002252]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   28.006975] 
[   28.008572] Freed by task 3008:
[   28.011819]  save_stack_trace+0x16/0x20
[   28.015761]  save_stack+0x43/0xd0
[   28.019184]  kasan_slab_free+0x71/0xc0
[   28.023041]  kfree+0xca/0x250
[   28.026115]  fanout_add+0x2d0/0x1190
[   28.029797]  packet_setsockopt+0xfdc/0x1e80
[   28.034089]  SyS_setsockopt+0x189/0x360
[   28.038033]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   28.042755] 
[   28.044352] The buggy address belongs to the object at ffff8801ce43b240
[   28.044352]  which belongs to the cache kmalloc-128 of size 128
[   28.056975] The buggy address is located 24 bytes inside of
[   28.056975]  128-byte region [ffff8801ce43b240, ffff8801ce43b2c0)
[   28.068728] The buggy address belongs to the page:
[   28.073627] page:ffffea0007390ec0 count:1 mapcount:0 mapping:ffff8801ce43b000 index:0x0
[   28.081743] flags: 0x200000000000100(slab)
[   28.085951] raw: 0200000000000100 ffff8801ce43b000 0000000000000000 0000000100000015
[   28.093802] raw: ffffea00073ac1a0 ffffea0007394a60 ffff8801dac00640 0000000000000000
[   28.101667] page dumped because: kasan: bad access detected
[   28.107347] 
[   28.108944] Memory state around the buggy address:
[   28.113844]  ffff8801ce43b100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   28.121171]  ffff8801ce43b180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   28.128499] >ffff8801ce43b200: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[   28.135835]                                                     ^
[   28.142034]  ffff8801ce43b280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   28.149362]  ffff8801ce43b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   28.156688] ==================================================================
[   28.164014] Disabling lock debugging due to kernel taint
[   28.169498] Kernel panic - not syncing: panic_on_warn set ...
[   28.169498] 
[   28.176834] CPU: 0 PID: 3009 Comm: syz-executor0 Tainted: G    B           4.14.0-rc1-next-20170920+ #26
[   28.186415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   28.195734] Call Trace:
[   28.198291]  dump_stack+0x194/0x257
[   28.201884]  ? arch_local_irq_restore+0x53/0x53
[   28.206519]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   28.211244]  ? packet_getsockopt+0xc30/0xe00
[   28.215621]  panic+0x1e4/0x417
[   28.218782]  ? __warn+0x1d9/0x1d9
[   28.222209]  ? packet_getsockopt+0xc72/0xe00
[   28.226584]  kasan_end_report+0x50/0x50
[   28.230522]  kasan_report+0x137/0x340
[   28.234289]  __asan_report_load8_noabort+0x14/0x20
[   28.239181]  packet_getsockopt+0xc72/0xe00
[   28.243382]  ? packet_notifier+0x950/0x950
[   28.247581]  ? iput+0x540/0xaf0
[   28.250825]  ? __fget_light+0x29d/0x390
[   28.254765]  ? sock_has_perm+0x29c/0x400
[   28.258792]  ? selinux_tun_dev_create+0xc0/0xc0
[   28.263426]  ? free_modinfo_version+0x70/0x70
[   28.267886]  ? __sk_free+0x5c/0x230
[   28.271478]  ? exit_to_usermode_loop+0x98/0x300
[   28.276116]  ? trace_hardirqs_off+0xd/0x10
[   28.280313]  ? exit_to_usermode_loop+0x1a8/0x300
[   28.285039]  ? selinux_socket_getsockopt+0x36/0x40
[   28.289934]  ? security_socket_getsockopt+0x89/0xb0
[   28.294916]  SyS_getsockopt+0x178/0x340
[   28.298858]  ? SyS_setsockopt+0x360/0x360
[   28.302973]  ? entry_SYSCALL_64_fastpath+0x5/0xbe
[   28.307791]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   28.312772]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   28.317497]  entry_SYSCALL_64_fastpath+0x1f/0xbe
[   28.322218] RIP: 0033:0x4520a9
[   28.325372] RSP: 002b:00007fd587bd2c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
[   28.333045] RAX: ffffffffffffffda RBX: 00000000007180b0 RCX: 00000000004520a9
[   28.340281] RDX: 0000000000000015 RSI: 0000000000000107 RDI: 000000000000000c
[   28.347518] RBP: 0000000000000082 R08: 00000000208a5000 R09: 0000000000000000
[   28.354752] R10: 0000000020ec8000 R11: 0000000000000216 R12: 00000000004bb9a3
[   28.361987] R13: 00000000ffffffff R14: 000000000000000a R15: 0000000000000001
[   28.369267] Dumping ftrace buffer:
[   28.372775]    (ftrace buffer empty)
[   28.376452] Kernel Offset: disabled
[   28.380047] Rebooting in 86400 seconds..