[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.794309] audit: type=1400 audit(1598467681.155:8): avc: denied { execmem } for pid=6348 comm="syz-executor659" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.796515] kasan: CONFIG_KASAN_INLINE enabled [ 31.819220] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 31.826615] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 31.832825] Modules linked in: [ 31.835992] CPU: 0 PID: 6348 Comm: syz-executor659 Not tainted 4.14.195-syzkaller #0 [ 31.843880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.853211] task: ffff88809ef20600 task.stack: ffff888098270000 [ 31.859246] RIP: 0010:rb_erase+0x29/0x1290 [ 31.863449] RSP: 0018:ffff888098277a68 EFLAGS: 00010292 [ 31.868789] RAX: dffffc0000000000 RBX: ffff888089abd1f0 RCX: 1ffff1101304ef27 [ 31.876035] RDX: 0000000000000001 RSI: ffffffff8a677fa0 RDI: 0000000000000008 [ 31.883277] RBP: 0000000000000000 R08: ffffffff8a1140fc R09: 0000000000001e68 [ 31.890520] R10: 0000000000000001 R11: ffff88809ef20600 R12: 0000000000000000 [ 31.897761] R13: dffffc0000000000 R14: ffff888089abf3f8 R15: ffffffff8a677fa0 [ 31.905003] FS: 0000000002455880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 31.913201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.919052] CR2: 0000000020000100 CR3: 00000000a785d000 CR4: 00000000001406f0 [ 31.926297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.933537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.940793] Call Trace: [ 31.943358] integrity_inode_free+0x119/0x300 [ 31.947824] security_inode_free+0x14/0x80 [ 31.952031] __destroy_inode+0x1e8/0x4d0 [ 31.956062] destroy_inode+0x49/0x110 [ 31.959829] iput+0x458/0x7e0 [ 31.962907] ? ext4_mark_dquot_dirty+0x190/0x190 [ 31.967736] ext4_ioctl+0x16c5/0x3870 [ 31.971522] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 31.976699] ? putname+0xcd/0x110 [ 31.980132] ? do_sys_open+0x203/0x410 [ 31.983989] ? do_syscall_64+0x1d5/0x640 [ 31.988020] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 31.993356] ? path_lookupat+0x780/0x780 [ 31.997389] ? debug_check_no_obj_freed+0x2c0/0x674 [ 32.002375] ? lock_acquire+0x170/0x3f0 [ 32.006323] ? lock_downgrade+0x740/0x740 [ 32.010441] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 32.015518] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 32.020680] do_vfs_ioctl+0x75a/0xff0 [ 32.024451] ? selinux_inode_setxattr+0x730/0x730 [ 32.029260] ? ioctl_preallocate+0x1a0/0x1a0 [ 32.033641] ? kmem_cache_free+0x23a/0x2b0 [ 32.037847] ? putname+0xcd/0x110 [ 32.041269] ? do_sys_open+0x208/0x410 [ 32.045125] ? security_file_ioctl+0x83/0xb0 [ 32.049610] SyS_ioctl+0x7f/0xb0 [ 32.052961] ? do_vfs_ioctl+0xff0/0xff0 [ 32.056907] do_syscall_64+0x1d5/0x640 [ 32.060768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 32.065925] RIP: 0033:0x440239 [ 32.069084] RSP: 002b:00007ffe8899af48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.076759] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239 [ 32.083998] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 32.091246] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 32.098485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40 [ 32.105730] R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000 [ 32.113012] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 32.132093] RIP: rb_erase+0x29/0x1290 RSP: ffff888098277a68 [ 32.137809] ---[ end trace 2feb962b3695b994 ]--- [ 32.142568] Kernel panic - not syncing: Fatal exception [ 32.149052] Kernel Offset: disabled [ 32.152661] Rebooting in 86400 seconds..