[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.581358] audit: type=1800 audit(1617240130.439:2): pid=7954 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor406" name="bus" dev="sda1" ino=13860 res=0 [ 29.582505] kasan: CONFIG_KASAN_INLINE enabled [ 29.604351] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.611764] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.617983] Modules linked in: [ 29.621184] CPU: 1 PID: 7954 Comm: syz-executor406 Not tainted 4.14.228-syzkaller #0 [ 29.629038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.638382] task: ffff8880b2fd46c0 task.stack: ffff8880b3b80000 [ 29.644426] RIP: 0010:rb_erase+0x29/0x1290 [ 29.648632] RSP: 0018:ffff8880b3b87a68 EFLAGS: 00010292 [ 29.653970] RAX: dffffc0000000000 RBX: ffff88808dee5730 RCX: 1ffff11016770f27 [ 29.661212] RDX: 0000000000000001 RSI: ffffffff8bf97ea0 RDI: 0000000000000008 [ 29.668454] RBP: 0000000000000000 R08: ffffffff8ba2aedc R09: 0000000000001ca6 [ 29.675710] R10: 0000000000000001 R11: ffff8880b2fd46c0 R12: 0000000000000000 [ 29.682954] R13: dffffc0000000000 R14: ffff88808dee67f8 R15: ffffffff8bf97ea0 [ 29.690284] FS: 0000000001902300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 29.698481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.704334] CR2: 00000000200001c0 CR3: 0000000098ca9000 CR4: 00000000001406e0 [ 29.711605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.718847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.726101] Call Trace: [ 29.728676] integrity_inode_free+0x119/0x300 [ 29.733158] security_inode_free+0x14/0x80 [ 29.737375] __destroy_inode+0x1e8/0x4d0 [ 29.741413] destroy_inode+0x49/0x110 [ 29.745186] iput+0x458/0x7e0 [ 29.748266] ? ext4_mark_dquot_dirty+0x190/0x190 [ 29.753010] ext4_ioctl+0x16c5/0x3870 [ 29.756872] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.762035] ? putname+0xcd/0x110 [ 29.765473] ? do_sys_open+0x203/0x410 [ 29.769332] ? do_syscall_64+0x1d5/0x640 [ 29.773365] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.778703] ? path_lookupat+0x780/0x780 [ 29.782739] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.787733] ? lock_acquire+0x170/0x3f0 [ 29.791697] ? lock_downgrade+0x740/0x740 [ 29.795819] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 29.800895] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.805887] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.811053] do_vfs_ioctl+0x75a/0xff0 [ 29.814841] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.820263] ? ioctl_preallocate+0x1a0/0x1a0 [ 29.824642] ? kmem_cache_free+0x23a/0x2b0 [ 29.828849] ? putname+0xcd/0x110 [ 29.832275] ? do_sys_open+0x208/0x410 [ 29.836134] ? filp_open+0x60/0x60 [ 29.839651] ? security_file_ioctl+0x83/0xb0 [ 29.844032] SyS_ioctl+0x7f/0xb0 [ 29.847392] ? do_vfs_ioctl+0xff0/0xff0 [ 29.851344] do_syscall_64+0x1d5/0x640 [ 29.855215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.860380] RIP: 0033:0x43ee39 [ 29.863550] RSP: 002b:00007ffda29b1dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.871244] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043ee39 [ 29.878485] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 29.885727] RBP: 0000000000402e20 R08: 0000000000000000 R09: 0000000000400488 [ 29.892969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402eb0 [ 29.900214] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 29.907458] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 29.926705] RIP: rb_erase+0x29/0x1290 RSP: ffff8880b3b87a68 [ 29.932537] ---[ end trace bef6de59e1df576b ]--- [ 29.937284] Kernel panic - not syncing: Fatal exception [ 29.943371] Kernel Offset: disabled [ 29.946981] Rebooting in 86400 seconds..