[ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.123' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.540835] kasan: CONFIG_KASAN_INLINE enabled [ 29.545715] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.553496] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.561000] Modules linked in: [ 29.564203] CPU: 0 PID: 7976 Comm: syz-executor983 Not tainted 4.14.228-syzkaller #0 [ 29.572339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.582023] task: ffff8880966c8280 task.stack: ffff88809b890000 [ 29.588260] RIP: 0010:rb_erase+0x29/0x1290 [ 29.592728] RSP: 0018:ffff88809b897a68 EFLAGS: 00010292 [ 29.598408] RAX: dffffc0000000000 RBX: ffff8880906df370 RCX: 1ffff11013712f27 [ 29.605816] RDX: 0000000000000001 RSI: ffffffff8bf97ea0 RDI: 0000000000000008 [ 29.613075] RBP: 0000000000000000 R08: ffffffff8ba2b02c R09: 0000000000001c2c [ 29.620852] R10: 0000000000000001 R11: ffff8880966c8280 R12: 0000000000000000 [ 29.628386] R13: dffffc0000000000 R14: ffff8880906c5838 R15: ffffffff8bf97ea0 [ 29.635929] FS: 0000000000517300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 29.644228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.650768] CR2: 00000000200002c4 CR3: 00000000ac1ea000 CR4: 00000000001406f0 [ 29.658165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.665631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.672897] Call Trace: [ 29.675824] integrity_inode_free+0x119/0x300 [ 29.680328] security_inode_free+0x14/0x80 [ 29.684546] __destroy_inode+0x1e8/0x4d0 [ 29.688597] destroy_inode+0x49/0x110 [ 29.692551] iput+0x458/0x7e0 [ 29.696481] ? ext4_mark_dquot_dirty+0x190/0x190 [ 29.701219] ext4_ioctl+0x16c5/0x3870 [ 29.704999] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.710168] ? putname+0xcd/0x110 [ 29.713599] ? do_sys_open+0x203/0x410 [ 29.717636] ? do_syscall_64+0x1d5/0x640 [ 29.721796] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.727156] ? path_lookupat+0x780/0x780 [ 29.731214] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.736246] ? lock_acquire+0x170/0x3f0 [ 29.740214] ? lock_downgrade+0x740/0x740 [ 29.744365] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 29.749469] ? debug_check_no_obj_freed+0x2c0/0x680 [ 29.754745] ? ext4_ioctl_check_immutable+0x1c0/0x1c0 [ 29.759938] do_vfs_ioctl+0x75a/0xff0 [ 29.763741] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.769188] ? ioctl_preallocate+0x1a0/0x1a0 [ 29.773586] ? kmem_cache_free+0x23a/0x2b0 [ 29.777814] ? putname+0xcd/0x110 [ 29.781262] ? do_sys_open+0x208/0x410 [ 29.785274] ? filp_open+0x60/0x60 [ 29.788805] ? security_file_ioctl+0x83/0xb0 [ 29.793214] SyS_ioctl+0x7f/0xb0 [ 29.796587] ? do_vfs_ioctl+0xff0/0xff0 [ 29.800895] do_syscall_64+0x1d5/0x640 [ 29.804863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.810049] RIP: 0033:0x43ee69 [ 29.813221] RSP: 002b:00007ffebf5c06e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.821930] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043ee69 [ 29.829493] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 29.836863] RBP: 0000000000402e50 R08: 0000000000400488 R09: 0000000000400488 [ 29.844226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402ee0 [ 29.851669] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 29.859012] Code: ff ff 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 f7 41 56 41 55 41 54 49 89 fc 48 83 c7 08 48 89 fa 55 48 c1 ea 03 53 48 83 ec 18 <80> 3c 02 00 0f 85 f2 0c 00 00 49 8d 7c 24 10 4d 8b 74 24 08 48 [ 29.878305] RIP: rb_erase+0x29/0x1290 RSP: ffff88809b897a68 [ 29.884880] ---[ end trace ee2b9becb30f8437 ]--- [ 29.889638] Kernel panic - not syncing: Fatal exception [ 29.895484] Kernel Offset: disabled [ 29.899101] Rebooting in 86400 seconds..