[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.049451] audit: type=1800 audit(1546410674.079:25): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 42.080669] audit: type=1800 audit(1546410674.079:26): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.128799] audit: type=1800 audit(1546410674.079:27): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 59.969177] Bluetooth: hci1: Frame reassembly failed (-84) [ 59.975489] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.981413] Bluetooth: hci5: Frame reassembly failed (-84) [ 59.989343] Bluetooth: hci2: Frame reassembly failed (-84) [ 59.996759] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.002870] Bluetooth: hci3: Frame reassembly failed (-84) [ 60.023797] Bluetooth: hci1: sending frame failed (-49) [ 60.030299] Bluetooth: hci0: sending frame failed (-49) [ 60.036279] Bluetooth: hci5: sending frame failed (-49) [ 60.041975] Bluetooth: hci2: sending frame failed (-49) [ 60.047392] Bluetooth: hci4: sending frame failed (-49) [ 60.052866] Bluetooth: hci3: sending frame failed (-49) [ 62.061448] Bluetooth: hci1: command 0x1003 tx timeout [ 62.061456] Bluetooth: hci3: command 0x1003 tx timeout [ 62.061845] Bluetooth: hci4: command 0x1003 tx timeout [ 62.069207] Bluetooth: hci3: sending frame failed (-49) [ 62.072461] Bluetooth: hci2: command 0x1003 tx timeout [ 62.077661] Bluetooth: hci1: sending frame failed (-49) [ 62.083098] Bluetooth: hci5: command 0x1003 tx timeout [ 62.088365] Bluetooth: hci4: sending frame failed (-49) [ 62.094224] Bluetooth: hci0: command 0x1003 tx timeout [ 62.098969] Bluetooth: hci2: sending frame failed (-49) [ 62.104561] Bluetooth: hci5: sending frame failed (-49) [ 62.120589] Bluetooth: hci0: sending frame failed (-49) [ 64.140421] Bluetooth: hci2: command 0x1001 tx timeout [ 64.140484] Bluetooth: hci0: command 0x1001 tx timeout [ 64.145909] Bluetooth: hci1: command 0x1001 tx timeout [ 64.151276] Bluetooth: hci2: sending frame failed (-49) [ 64.157166] Bluetooth: hci1: sending frame failed (-49) [ 64.162046] Bluetooth: hci0: sending frame failed (-49) [ 64.167625] Bluetooth: hci4: command 0x1001 tx timeout [ 64.172805] Bluetooth: hci5: command 0x1001 tx timeout [ 64.178255] Bluetooth: hci3: command 0x1001 tx timeout [ 64.183514] Bluetooth: hci4: sending frame failed (-49) [ 64.189048] Bluetooth: hci3: sending frame failed (-49) [ 64.194359] Bluetooth: hci5: sending frame failed (-49) [ 66.220479] Bluetooth: hci5: command 0x1009 tx timeout [ 66.220524] Bluetooth: hci3: command 0x1009 tx timeout [ 66.225939] Bluetooth: hci4: command 0x1009 tx timeout [ 66.231757] Bluetooth: hci1: command 0x1009 tx timeout [ 66.236630] Bluetooth: hci0: command 0x1009 tx timeout [ 66.247208] Bluetooth: hci2: command 0x1009 tx timeout executing program executing program executing program executing program executing program executing program [ 70.407877] Bluetooth: hci1: Frame reassembly failed (-84) [ 70.415484] BUG: unable to handle kernel paging request at ffffffffffffffd6 [ 70.417674] Bluetooth: hci2: Frame reassembly failed (-84) [ 70.422571] #PF error: [normal kernel read fault] [ 70.422576] PGD 9871067 P4D 9871067 PUD 9873067 PMD 0 [ 70.422591] Oops: 0000 [#1] PREEMPT SMP KASAN [ 70.422600] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.20.0+ #4 [ 70.422604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.422616] Workqueue: events_unbound flush_to_ldisc [ 70.430349] kobject: 'hci3' (00000000720b66d6): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 70.433083] RIP: 0010:h4_recv_buf+0x1ea/0xda0 [ 70.433092] Code: b6 14 10 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 d7 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 45 d0 4c 8d 60 70 <0f> b7 58 2a 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f [ 70.433100] RSP: 0018:ffff8880a944f6c0 EFLAGS: 00010246 [ 70.438470] kobject: 'hci3' (00000000720b66d6): kobject_uevent_env [ 70.442831] RAX: ffffffffffffffac RBX: 0000000000000000 RCX: ffffffffffffffd6 [ 70.442836] RDX: dffffc0000000000 RSI: ffffffff85883972 RDI: 0000000000000005 [ 70.442841] RBP: ffff8880a944f748 R08: ffff8880a94341c0 R09: 0000000000000003 [ 70.442845] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 000000000000001c [ 70.442850] R13: ffff8880a0c91780 R14: ffff8880a895a960 R15: 0000000000000006 [ 70.442856] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 70.442865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.449301] kobject: 'hci3' (00000000720b66d6): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 70.458583] CR2: ffffffffffffffd6 CR3: 00000000954b2000 CR4: 00000000001406f0 [ 70.458592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.458596] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.458599] Call Trace: [ 70.458633] ? __lock_is_held+0xb6/0x140 [ 70.465232] kobject: 'rfkill13' (000000003bc7d03a): kobject_add_internal: parent: 'hci3', set: 'devices' [ 70.473452] h4_recv+0xe4/0x200 [ 70.473462] hci_uart_tty_receive+0x22b/0x530 [ 70.473470] ? hci_uart_write_work+0x710/0x710 [ 70.473484] tty_ldisc_receive_buf+0x164/0x1c0 [ 70.478222] kobject: 'rfkill13' (000000003bc7d03a): kobject_uevent_env [ 70.497007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.497022] tty_port_default_receive_buf+0x114/0x190 [ 70.497035] ? do_raw_spin_unlock+0xa0/0x330 [ 70.502438] kobject: 'rfkill13' (000000003bc7d03a): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill13' [ 70.508680] ? tty_port_lower_dtr_rts+0x90/0x90 [ 70.508691] ? process_one_work+0xbf1/0x1ce0 [ 70.508706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.518046] Bluetooth: hci3: Frame reassembly failed (-84) [ 70.523209] flush_to_ldisc+0x3b2/0x590 [ 70.523221] ? tty_insert_flip_string_flags+0x1b0/0x1b0 [ 70.523232] ? __lock_is_held+0xb6/0x140 [ 70.531546] kobject: 'hci0' (0000000013abdeec): kobject_uevent_env [ 70.537755] process_one_work+0xd0c/0x1ce0 [ 70.537767] ? __switch_to_asm+0x34/0x70 [ 70.545108] kobject: 'hci0' (0000000013abdeec): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 70.553237] ? __switch_to_asm+0x40/0x70 [ 70.553252] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 70.553265] ? __schedule+0x89f/0x1e90 [ 70.560587] kobject: 'rfkill14' (0000000001aff2df): kobject_add_internal: parent: 'hci0', set: 'devices' [ 70.568816] ? pci_mmcfg_check_reserved+0x170/0x170 [ 70.568829] ? worker_thread+0x3b7/0x14a0 [ 70.576381] kobject: 'rfkill14' (0000000001aff2df): kobject_uevent_env [ 70.583449] ? find_held_lock+0x35/0x120 [ 70.583459] ? lock_acquire+0x1db/0x570 [ 70.583471] ? worker_thread+0x3cd/0x14a0 [ 70.590791] kobject: 'rfkill14' (0000000001aff2df): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill14' [ 70.593286] ? kasan_check_read+0x11/0x20 [ 70.593295] ? do_raw_spin_lock+0x156/0x360 [ 70.593312] ? lock_release+0xc40/0xc40 [ 70.599225] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.606947] ? rwlock_bug.part.0+0x90/0x90 [ 70.606957] ? trace_hardirqs_on_caller+0x310/0x310 [ 70.606970] worker_thread+0x143/0x14a0 [ 70.610747] kobject: 'hci4' (00000000daa1c1c7): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 70.614833] ? process_one_work+0x1ce0/0x1ce0 [ 70.614840] ? __kthread_parkme+0xc3/0x1b0 [ 70.614851] ? lock_acquire+0x1db/0x570 [ 70.619542] kobject: 'hci4' (00000000daa1c1c7): kobject_uevent_env [ 70.623992] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 70.624000] ? lockdep_hardirqs_on+0x415/0x5d0 [ 70.624008] ? trace_hardirqs_on+0xbd/0x310 [ 70.624015] ? __kthread_parkme+0xc3/0x1b0 [ 70.624026] ? trace_hardirqs_off_caller+0x300/0x300 [ 70.630746] kobject: 'hci4' (00000000daa1c1c7): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 70.636206] ? do_raw_spin_trylock+0x270/0x270 [ 70.636216] ? schedule+0x108/0x350 [ 70.636227] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 70.642946] kobject: 'rfkill15' (00000000011c369c): kobject_add_internal: parent: 'hci4', set: 'devices' [ 70.645862] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 70.645870] ? __kthread_parkme+0xfb/0x1b0 [ 70.645880] kthread+0x357/0x430 [ 70.656816] kobject: 'rfkill15' (00000000011c369c): kobject_uevent_env [ 70.661293] ? process_one_work+0x1ce0/0x1ce0 [ 70.661300] ? kthread_stop+0x920/0x920 [ 70.661316] ret_from_fork+0x3a/0x50 [ 70.661324] Modules linked in: [ 70.665884] kobject: 'rfkill15' (00000000011c369c): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill15' [ 70.671337] CR2: ffffffffffffffd6 [ 70.671348] ---[ end trace 78a10d42ba93d6f9 ]--- [ 70.671359] RIP: 0010:h4_recv_buf+0x1ea/0xda0 [ 70.671371] Code: b6 14 10 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 d7 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 45 d0 4c 8d 60 70 <0f> b7 58 2a 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f [ 70.678940] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.680922] RSP: 0018:ffff8880a944f6c0 EFLAGS: 00010246 [ 70.680929] RAX: ffffffffffffffac RBX: 0000000000000000 RCX: ffffffffffffffd6 [ 70.680934] RDX: dffffc0000000000 RSI: ffffffff85883972 RDI: 0000000000000005 [ 70.680938] RBP: ffff8880a944f748 R08: ffff8880a94341c0 R09: 0000000000000003 [ 70.680945] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 000000000000001c [ 70.680949] R13: ffff8880a0c91780 R14: ffff8880a895a960 R15: 0000000000000006 [ 70.680959] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 70.686725] kobject: 'hci5' (0000000071fba331): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 70.690350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.690356] CR2: ffffffffffffffd6 CR3: 00000000954b2000 CR4: 00000000001406f0 [ 70.690362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.690367] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.690372] Kernel panic - not syncing: Fatal exception [ 70.697523] Kernel Offset: disabled [ 71.070553] Rebooting in 86400 seconds..