Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. syzkaller login: [ 88.972931] audit: type=1400 audit(1596869424.502:8): avc: denied { execmem } for pid=6356 comm="syz-executor774" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 88.995125] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program [ 90.094539] list_del corruption, ffff88809b5268a8->next is LIST_POISON1 (dead000000000100) [ 90.106773] ------------[ cut here ]------------ [ 90.111519] kernel BUG at lib/list_debug.c:45! [ 90.116138] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 90.121490] Modules linked in: [ 90.124755] CPU: 0 PID: 6384 Comm: kworker/u5:2 Not tainted 4.14.193-syzkaller #0 [ 90.132349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.141695] Workqueue: hci0 hci_rx_work [ 90.145652] task: ffff88809ebf0580 task.stack: ffff888097ba0000 [ 90.151691] RIP: 0010:__list_del_entry_valid.cold+0x23/0x55 [ 90.157395] RSP: 0018:ffff888097ba79b8 EFLAGS: 00010282 [ 90.162733] RAX: 000000000000004e RBX: ffff8880870600c0 RCX: 0000000000000000 [ 90.170025] RDX: 0000000000000000 RSI: ffffffff86ac0dc0 RDI: ffffed1012f74f2d [ 90.177271] RBP: ffff88809b5268a8 R08: 000000000000004e R09: 0000000000000000 [ 90.184524] R10: 0000000000000000 R11: 0000000000000000 R12: dead000000000200 [ 90.192145] R13: dead000000000100 R14: ffff88809b526440 R15: ffff88808cce8c40 [ 90.199581] FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 90.207793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.213677] CR2: 0000561ddc1090ba CR3: 0000000099c68000 CR4: 00000000001406f0 [ 90.220939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.228299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.236143] Call Trace: [ 90.238834] l2cap_chan_put+0x50/0x1b0 [ 90.242717] l2cap_recv_frame+0xb9a/0x95c0 [ 90.246957] ? trace_hardirqs_on+0x10/0x10 [ 90.251177] ? __lock_acquire+0x5fc/0x3f20 [ 90.255432] ? __lock_acquire+0x5fc/0x3f20 [ 90.259650] ? l2cap_ertm_init+0xb70/0xb70 [ 90.263883] ? lock_acquire+0x170/0x3f0 [ 90.267920] ? hci_rx_work+0x278/0x970 [ 90.271782] ? trace_hardirqs_on+0x10/0x10 [ 90.276004] ? hci_rx_work+0x278/0x970 [ 90.279865] ? hci_rx_work+0x3a2/0x970 [ 90.283728] ? lock_downgrade+0x740/0x740 [ 90.287853] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 90.293307] ? __mutex_unlock_slowpath+0x75/0x770 [ 90.298259] l2cap_recv_acldata+0x7a6/0x8b0 [ 90.302559] hci_rx_work+0x3d1/0x970 [ 90.306252] process_one_work+0x793/0x14a0 [ 90.310463] ? work_busy+0x320/0x320 [ 90.314150] ? worker_thread+0x158/0xff0 [ 90.318203] ? _raw_spin_unlock_irq+0x24/0x80 [ 90.324091] worker_thread+0x5cc/0xff0 [ 90.328144] ? rescuer_thread+0xc80/0xc80 [ 90.332270] kthread+0x30d/0x420 [ 90.335643] ? kthread_create_on_node+0xd0/0xd0 [ 90.340289] ret_from_fork+0x24/0x30 [ 90.343982] Code: e6 e8 a8 ae 44 fe 0f 0b 48 89 ee 48 c7 c7 60 5e e4 86 e8 97 ae 44 fe 0f 0b 4c 89 ea 48 89 ee 48 c7 c7 a0 5d e4 86 e8 83 ae 44 fe <0f> 0b 4c 89 e2 48 89 ee 48 c7 c7 00 5e e4 86 e8 6f ae 44 fe 0f [ 90.363163] RIP: __list_del_entry_valid.cold+0x23/0x55 RSP: ffff888097ba79b8 [ 90.370367] ---[ end trace 080e6e2953b0c5f9 ]--- [ 90.375097] Kernel panic - not syncing: Fatal exception [ 90.381695] Kernel Offset: disabled [ 90.385509] Rebooting in 86400 seconds..