[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.591008] kasan: CONFIG_KASAN_INLINE enabled [ 29.596782] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.604676] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.610927] Modules linked in: [ 29.614191] CPU: 1 PID: 7986 Comm: syz-executor734 Not tainted 4.14.231-syzkaller #0 [ 29.622620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.632847] task: ffff8880b39b4680 task.stack: ffff88809bbc0000 [ 29.639155] RIP: 0010:rb_erase+0x29/0x1290 [ 29.643525] RSP: 0018:ffff88809bbc7a68 EFLAGS: 00010292 [ 29.648937] RAX: dffffc0000000000 RBX: ffff88808e819630 RCX: 1ffff11013778f27 [ 29.657566] RDX: 0000000000000001 RSI: ffffffff8bf99ea0 RDI: 0000000000000008 [ 29.664920] RBP: 0000000000000000 R08: ffffffff8ba2d02c R09: 0000000000001bf0 [ 29.672531] R10: 0000000000000001 R11: ffff8880b39b4680 R12: 0000000000000000 [ 29.679896] R13: dffffc0000000000 R14: ffff88808df5b7f8 R15: ffffffff8bf99ea0 [ 29.687162] FS: 000000000108b300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 29.696536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.702607] CR2: 0000000020002000 CR3: 000000009779c000 CR4: 00000000001406e0 [ 29.712169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.720650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.728092] Call Trace: [ 29.730681] integrity_inode_free+0x119/0x300 [ 29.735173] security_inode_free+0x14/0x80 [ 29.739624] __destroy_inode+0x1e8/0x4d0 [ 29.743689] destroy_inode+0x49/0x110 [ 29.747478] iput+0x458/0x7e0 [ 29.750572] ? ext4_mark_dquot_dirty+0x190/0x190 [ 29.755324] ext4_ioctl+0x16c5/0x3870 [ 29.759131] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.764315] ? putname+0xcd/0x110 [ 29.768026] ? do_sys_open+0x203/0x410 [ 29.771899] ? do_syscall_64+0x1d5/0x640 [ 29.776034] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.781393] ? path_lookupat+0x780/0x780 [ 29.785439] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.790499] ? lock_acquire+0x170/0x3f0 [ 29.794711] ? lock_downgrade+0x740/0x740 [ 29.798872] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 29.804000] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.809054] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.814349] do_vfs_ioctl+0x75a/0xff0 [ 29.818145] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.823608] ? ioctl_preallocate+0x1a0/0x1a0 [ 29.828004] ? kmem_cache_free+0x23a/0x2b0 [ 29.832229] ? putname+0xcd/0x110 [ 29.835682] ? do_sys_open+0x208/0x410 [ 29.839738] ? filp_open+0x60/0x60 [ 29.843282] ? security_file_ioctl+0x83/0xb0 [ 29.847679] SyS_ioctl+0x7f/0xb0 [ 29.851062] ? do_vfs_ioctl+0xff0/0xff0 [ 29.855035] do_syscall_64+0x1d5/0x640 [ 29.858919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.865075] RIP: 0033:0x43ee79 [ 29.868350] RSP: 002b:00007ffe1bc77148 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.876075] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043ee79 [ 29.883593] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 29.890858] RBP: 0000000000402e60 R08: 0000000000000000 R09: 0000000000400488 [ 29.898197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402ef0 [ 29.905640] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 29.912916] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 29.932335] RIP: rb_erase+0x29/0x1290 RSP: ffff88809bbc7a68 [ 29.938146] ---[ end trace dc39a47eac5a2846 ]--- [ 29.942942] Kernel panic - not syncing: Fatal exception [ 29.948741] Kernel Offset: disabled [ 29.952381] Rebooting in 86400 seconds..