Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 53.242878][ T244] Bluetooth: : Invalid header checksum [ 53.248739][ T244] Bluetooth: : Invalid header checksum [ 53.254220][ T244] ================================================================== [ 53.262256][ T244] BUG: KASAN: null-ptr-deref in __pm_runtime_resume+0x154/0x180 [ 53.270049][ T244] Write of size 4 at addr 0000000000000388 by task kworker/u4:4/244 [ 53.277996][ T244] [ 53.280292][ T244] CPU: 1 PID: 244 Comm: kworker/u4:4 Not tainted 5.14.0-syzkaller #0 [ 53.288327][ T244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.298618][ T244] Workqueue: events_unbound flush_to_ldisc [ 53.304402][ T244] Call Trace: [ 53.307848][ T244] dump_stack_lvl+0xcd/0x134 [ 53.312606][ T244] kasan_report.cold+0x66/0xdf [ 53.317526][ T244] ? __pm_runtime_resume+0x154/0x180 [ 53.322789][ T244] kasan_check_range+0x13d/0x180 [ 53.327701][ T244] __pm_runtime_resume+0x154/0x180 [ 53.332789][ T244] h5_recv+0x2c4/0x680 [ 53.336839][ T244] ? h5_slip_one_byte+0x150/0x150 [ 53.341835][ T244] ? lock_release+0x522/0x720 [ 53.346490][ T244] hci_uart_tty_receive+0x24d/0x710 [ 53.351666][ T244] ? hci_uart_send_frame+0x6c0/0x6c0 [ 53.356924][ T244] tty_ldisc_receive_buf+0x14d/0x190 [ 53.362500][ T244] tty_port_default_receive_buf+0x6e/0xa0 [ 53.368192][ T244] flush_to_ldisc+0x20d/0x380 [ 53.372859][ T244] process_one_work+0x9bf/0x16b0 [ 53.377800][ T244] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 53.383171][ T244] ? rwlock_bug.part.0+0x90/0x90 [ 53.388108][ T244] worker_thread+0x658/0x11f0 [ 53.392785][ T244] ? process_one_work+0x16b0/0x16b0 [ 53.397983][ T244] kthread+0x3e5/0x4d0 [ 53.402047][ T244] ? set_kthread_struct+0x130/0x130 [ 53.407511][ T244] ret_from_fork+0x1f/0x30 [ 53.411941][ T244] ================================================================== [ 53.420132][ T244] Kernel panic - not syncing: panic_on_warn set ... [ 53.426704][ T244] CPU: 1 PID: 244 Comm: kworker/u4:4 Tainted: G B 5.14.0-syzkaller #0 [ 53.436142][ T244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.446266][ T244] Workqueue: events_unbound flush_to_ldisc [ 53.452056][ T244] Call Trace: [ 53.455316][ T244] dump_stack_lvl+0xcd/0x134 [ 53.459891][ T244] panic+0x306/0x73d [ 53.463770][ T244] ? __warn_printk+0xf3/0xf3 [ 53.468341][ T244] ? preempt_schedule_common+0x59/0xc0 [ 53.473784][ T244] ? __pm_runtime_resume+0x154/0x180 [ 53.479052][ T244] ? preempt_schedule_thunk+0x16/0x18 [ 53.484580][ T244] ? trace_hardirqs_on+0x38/0x1c0 [ 53.489763][ T244] ? trace_hardirqs_on+0x51/0x1c0 [ 53.494856][ T244] ? __pm_runtime_resume+0x154/0x180 [ 53.500121][ T244] ? __pm_runtime_resume+0x154/0x180 [ 53.505388][ T244] end_report.cold+0x5a/0x5a [ 53.509959][ T244] kasan_report.cold+0x71/0xdf [ 53.514704][ T244] ? __pm_runtime_resume+0x154/0x180 [ 53.519974][ T244] kasan_check_range+0x13d/0x180 [ 53.524891][ T244] __pm_runtime_resume+0x154/0x180 [ 53.529987][ T244] h5_recv+0x2c4/0x680 [ 53.534039][ T244] ? h5_slip_one_byte+0x150/0x150 [ 53.539046][ T244] ? lock_release+0x522/0x720 [ 53.543707][ T244] hci_uart_tty_receive+0x24d/0x710 [ 53.548886][ T244] ? hci_uart_send_frame+0x6c0/0x6c0 [ 53.554152][ T244] tty_ldisc_receive_buf+0x14d/0x190 [ 53.559419][ T244] tty_port_default_receive_buf+0x6e/0xa0 [ 53.565120][ T244] flush_to_ldisc+0x20d/0x380 [ 53.569782][ T244] process_one_work+0x9bf/0x16b0 [ 53.574707][ T244] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 53.580064][ T244] ? rwlock_bug.part.0+0x90/0x90 [ 53.584988][ T244] worker_thread+0x658/0x11f0 [ 53.589653][ T244] ? process_one_work+0x16b0/0x16b0 [ 53.594835][ T244] kthread+0x3e5/0x4d0 [ 53.598885][ T244] ? set_kthread_struct+0x130/0x130 [ 53.604064][ T244] ret_from_fork+0x1f/0x30 [ 53.615263][ T244] Kernel Offset: disabled [ 53.619569][ T244] Rebooting in 86400 seconds..