[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. syzkaller login: [ 70.573643][ T27] audit: type=1400 audit(1598543736.332:8): avc: denied { execmem } for pid=6855 comm="syz-executor518" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 71.665750][ T6856] IPVS: ftp: loaded support on port[0] = 21 executing program [ 71.743903][ T6856] INFO: trying to register non-static key. [ 71.749742][ T6856] the code is fine but needs lockdep annotation. [ 71.756406][ T6856] turning off the locking correctness validator. [ 71.762735][ T6856] CPU: 1 PID: 6856 Comm: syz-executor518 Not tainted 5.9.0-rc2-syzkaller #0 [ 71.771412][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.784181][ T6856] Call Trace: [ 71.787476][ T6856] dump_stack+0x18f/0x20d [ 71.791811][ T6856] register_lock_class+0x157d/0x1630 [ 71.797100][ T6856] ? lock_is_held_type+0xbb/0xf0 [ 71.802044][ T6856] ? is_dynamic_key+0x1a0/0x1a0 [ 71.807080][ T6856] ? find_held_lock+0x2d/0x110 [ 71.811854][ T6856] ? try_to_wake_up+0x57e/0x12b0 [ 71.816773][ T6856] __lock_acquire+0xf9/0x5640 [ 71.821434][ T6856] ? lockdep_hardirqs_off+0x89/0xc0 [ 71.826613][ T6856] ? trace_hardirqs_off+0x27/0x210 [ 71.831707][ T6856] ? __queue_work+0x61a/0xf20 [ 71.836368][ T6856] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 71.842540][ T6856] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 71.848531][ T6856] ? find_held_lock+0x2d/0x110 [ 71.853422][ T6856] ? __queue_work+0x61a/0xf20 [ 71.858101][ T6856] lock_acquire+0x1f1/0xad0 [ 71.862609][ T6856] ? skb_dequeue+0x1c/0x180 [ 71.867090][ T6856] ? lock_release+0x8e0/0x8e0 [ 71.873403][ T6856] ? mark_lock+0xbc/0x1710 [ 71.877914][ T6856] ? __queue_work+0x63c/0xf20 [ 71.882570][ T6856] ? mark_held_locks+0x9f/0xe0 [ 71.889676][ T6856] _raw_spin_lock_irqsave+0x8c/0xc0 [ 71.894859][ T6856] ? skb_dequeue+0x1c/0x180 [ 71.899662][ T6856] skb_dequeue+0x1c/0x180 [ 71.904149][ T6856] skb_queue_purge+0x21/0x30 [ 71.908751][ T6856] l2cap_chan_del+0x61d/0x1300 [ 71.913583][ T6856] l2cap_conn_del+0x46a/0x9e0 [ 71.918240][ T6856] ? l2cap_conn_del+0x9e0/0x9e0 [ 71.923087][ T6856] l2cap_disconn_cfm+0x85/0xa0 [ 71.927882][ T6856] hci_conn_hash_flush+0x114/0x220 [ 71.932989][ T6856] hci_dev_do_close+0x5c6/0x1080 [ 71.937906][ T6856] ? hci_dev_open+0x350/0x350 [ 71.942589][ T6856] ? do_raw_read_unlock+0x70/0x70 [ 71.947612][ T6856] ? try_to_grab_pending.part.0+0x7d0/0x7d0 [ 71.953499][ T6856] hci_unregister_dev+0x1bd/0xe30 [ 71.958522][ T6856] ? fcntl_setlk+0xf60/0xf60 [ 71.963104][ T6856] ? lock_is_held_type+0xbb/0xf0 [ 71.968048][ T6856] vhci_release+0x70/0xe0 [ 71.972387][ T6856] __fput+0x285/0x920 [ 71.977924][ T6856] ? vhci_close_dev+0x50/0x50 [ 71.982595][ T6856] task_work_run+0xdd/0x190 [ 71.987353][ T6856] do_exit+0xb7d/0x29f0 [ 71.993503][ T6856] ? mm_update_next_owner+0x7a0/0x7a0 [ 71.999071][ T6856] ? __sb_end_write+0xf8/0x1d0 [ 72.003816][ T6856] ? vfs_write+0x1b0/0x730 [ 72.008227][ T6856] ? lock_is_held_type+0xbb/0xf0 [ 72.013145][ T6856] do_group_exit+0x125/0x310 [ 72.017887][ T6856] __x64_sys_exit_group+0x3a/0x50 [ 72.022919][ T6856] do_syscall_64+0x2d/0x70 [ 72.027322][ T6856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.033195][ T6856] RIP: 0033:0x445068 [ 72.037076][ T6856] Code: Bad RIP value. [ 72.041137][ T6856] RSP: 002b:00007ffcf8c9ef58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 72.049635][ T6856] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000445068 [ 72.057603][ T6856] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 72.065573][ T6856] RBP: 00000000004cce30 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 72.073540][ T6856] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 72.081738][ T6856] R13: 00000000006e0200 R14: 0000000000000000 R15: 0000000000000000 [ 72.091591][ T259] tipc: TX() has been p