[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.773272] audit: type=1400 audit(1600178065.092:8): avc: denied { execmem } for pid=6368 comm="syz-executor605" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.775344] kasan: CONFIG_KASAN_INLINE enabled [ 32.798695] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.806179] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 32.812494] Modules linked in: [ 32.815734] CPU: 0 PID: 6368 Comm: syz-executor605 Not tainted 4.14.198-syzkaller #0 [ 32.823679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.833401] task: ffff888097864440 task.stack: ffff888097c40000 [ 32.839777] RIP: 0010:rb_erase+0x29/0x1290 [ 32.844432] RSP: 0018:ffff888097c47a68 EFLAGS: 00010292 [ 32.849943] RAX: dffffc0000000000 RBX: ffff88808efde1f0 RCX: 1ffff11012f88f27 [ 32.857203] RDX: 0000000000000001 RSI: ffffffff8a67afa0 RDI: 0000000000000008 [ 32.864637] RBP: 0000000000000000 R08: ffffffff8a1170fc R09: 0000000000001e3c [ 32.872027] R10: 0000000000000001 R11: ffff888097864440 R12: 0000000000000000 [ 32.879378] R13: dffffc0000000000 R14: ffff88808efe73f8 R15: ffffffff8a67afa0 [ 32.886757] FS: 000000000145c880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 32.895057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.900926] CR2: 0000000020000080 CR3: 00000000a15a0000 CR4: 00000000001406f0 [ 32.908662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.916015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.923365] Call Trace: [ 32.926359] integrity_inode_free+0x119/0x300 [ 32.930851] security_inode_free+0x14/0x80 [ 32.935215] __destroy_inode+0x1e8/0x4d0 [ 32.939300] destroy_inode+0x49/0x110 [ 32.943217] iput+0x458/0x7e0 [ 32.946478] ? ext4_mark_dquot_dirty+0x190/0x190 [ 32.951368] ext4_ioctl+0x16c5/0x3870 [ 32.955203] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 32.960890] ? putname+0xcd/0x110 [ 32.964771] ? do_sys_open+0x203/0x410 [ 32.968702] ? do_syscall_64+0x1d5/0x640 [ 32.972759] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 32.978288] ? path_lookupat+0x780/0x780 [ 32.982932] ? debug_check_no_obj_freed+0x2c0/0x674 [ 32.988170] ? lock_acquire+0x170/0x3f0 [ 32.992262] ? lock_downgrade+0x740/0x740 [ 32.996666] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 33.001813] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 33.007139] do_vfs_ioctl+0x75a/0xff0 [ 33.011012] ? selinux_inode_setxattr+0x730/0x730 [ 33.016058] ? ioctl_preallocate+0x1a0/0x1a0 [ 33.020544] ? kmem_cache_free+0x23a/0x2b0 [ 33.024766] ? putname+0xcd/0x110 [ 33.028349] ? do_sys_open+0x208/0x410 [ 33.032477] ? security_file_ioctl+0x83/0xb0 [ 33.037072] SyS_ioctl+0x7f/0xb0 [ 33.040518] ? do_vfs_ioctl+0xff0/0xff0 [ 33.044530] do_syscall_64+0x1d5/0x640 [ 33.048410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 33.053726] RIP: 0033:0x440229 [ 33.057047] RSP: 002b:00007fff8f8218a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.065079] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440229 [ 33.072337] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 33.079594] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 33.086976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a30 [ 33.094532] R13: 0000000000401ac0 R14: 0000000000000000 R15: 0000000000000000 [ 33.101965] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 33.121266] RIP: rb_erase+0x29/0x1290 RSP: ffff888097c47a68 [ 33.127162] ---[ end trace 76a5eb4b516d26e1 ]--- [ 33.131946] Kernel panic - not syncing: Fatal exception [ 33.139122] Kernel Offset: disabled [ 33.143018] Rebooting in 86400 seconds..