[ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. syzkaller login: [ 29.220942] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 29.274836] kasan: CONFIG_KASAN_INLINE enabled [ 29.279851] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.287262] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.293470] Modules linked in: [ 29.296663] CPU: 0 PID: 7987 Comm: syz-executor693 Not tainted 4.14.232-syzkaller #0 [ 29.304533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.313869] task: ffff8880b3c8a440 task.stack: ffff88809af88000 [ 29.319930] RIP: 0010:rb_erase+0x29/0x1290 [ 29.324137] RSP: 0018:ffff88809af8fa68 EFLAGS: 00010292 [ 29.329485] RAX: dffffc0000000000 RBX: ffff88808e4001f0 RCX: 1ffff110135f1f27 [ 29.336741] RDX: 0000000000000001 RSI: ffffffff8bf99ea0 RDI: 0000000000000008 [ 29.343987] RBP: 0000000000000000 R08: ffffffff8ba2d2cc R09: 0000000000001c00 [ 29.351232] R10: 0000000000000001 R11: ffff8880b3c8a440 R12: 0000000000000000 [ 29.358499] R13: dffffc0000000000 R14: ffff88808df89878 R15: ffffffff8bf99ea0 [ 29.365749] FS: 00007fca67a45700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 29.373953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.379813] CR2: 00007fca67a44e40 CR3: 000000009ba4a000 CR4: 00000000001406f0 [ 29.387139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.394414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.401662] Call Trace: [ 29.404247] integrity_inode_free+0x119/0x300 [ 29.408735] security_inode_free+0x14/0x80 [ 29.412970] __destroy_inode+0x1e8/0x4d0 [ 29.417021] destroy_inode+0x49/0x110 [ 29.420795] iput+0x458/0x7e0 [ 29.423880] ? ext4_mark_dquot_dirty+0x190/0x190 [ 29.428621] ext4_ioctl+0x16c5/0x3870 [ 29.432404] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.437589] ? __lock_acquire+0x5fc/0x3f20 [ 29.441810] ? lock_acquire+0x170/0x3f0 [ 29.445767] ? lock_downgrade+0x740/0x740 [ 29.449905] ? trace_hardirqs_on+0x10/0x10 [ 29.454136] ? futex_exit_release+0x220/0x220 [ 29.458636] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 29.463811] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.468816] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.473991] do_vfs_ioctl+0x75a/0xff0 [ 29.477811] ? ioctl_preallocate+0x1a0/0x1a0 [ 29.482204] ? lock_downgrade+0x740/0x740 [ 29.486340] ? __fget+0x225/0x360 [ 29.489778] ? do_vfs_ioctl+0xff0/0xff0 [ 29.493753] ? security_file_ioctl+0x83/0xb0 [ 29.498144] SyS_ioctl+0x7f/0xb0 [ 29.501493] ? do_vfs_ioctl+0xff0/0xff0 [ 29.505464] do_syscall_64+0x1d5/0x640 [ 29.509347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.514531] RIP: 0033:0x445c19 [ 29.517708] RSP: 002b:00007fca67a45208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.525409] RAX: ffffffffffffffda RBX: 00000000004cb418 RCX: 0000000000445c19 [ 29.532664] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 29.539916] RBP: 00000000004cb410 R08: 0000000000000000 R09: 0000000000000000 [ 29.547183] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004cb41c [ 29.554451] R13: 00007ffe9cb2148f R14: 00007fca67a45300 R15: 0000000000022000 [ 29.561812] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 29.580967] RIP: rb_erase+0x29/0x1290 RSP: ffff88809af8fa68 [ 29.586719] ---[ end trace 69921a73d3f972b6 ]--- [ 29.586723] Kernel panic - not syncing: Fatal exception [ 29.587373] Kernel Offset: disabled [ 29.601091] Rebooting in 86400 seconds..