[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 78.116684][ T8479] list_add double add: new=ffff88802037a420, prev=ffff88802037a420, next=ffff8881400e1000. [ 78.128041][ T8479] ------------[ cut here ]------------ [ 78.134764][ T8479] kernel BUG at lib/list_debug.c:29! [ 78.140335][ T8479] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 78.146638][ T8479] CPU: 1 PID: 8479 Comm: kworker/u5:4 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 78.156925][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.167456][ T8479] Workqueue: hci5 hci_rx_work [ 78.172354][ T8479] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 78.178462][ T8479] Code: 68 f3 eb fa 4c 89 e1 48 c7 c7 e0 1c e3 89 e8 aa 88 f2 ff 0f 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 1e e3 89 e8 93 88 f2 ff <0f> 0b 48 89 f1 48 c7 c7 a0 1d e3 89 4c 89 e6 e8 7f 88 f2 ff 0f 0b [ 78.198668][ T8479] RSP: 0018:ffffc9000181f7d8 EFLAGS: 00010286 [ 78.205039][ T8479] RAX: 0000000000000058 RBX: ffff8881400e1000 RCX: 0000000000000000 [ 78.213378][ T8479] RDX: ffff88801f295580 RSI: ffffffff815dbea5 RDI: fffff52000303eed [ 78.221675][ T8479] RBP: ffff88802037a420 R08: 0000000000000058 R09: 0000000000000000 [ 78.229656][ T8479] R10: ffffffff815d5cee R11: 0000000000000000 R12: ffff8881400e1000 [ 78.237948][ T8479] R13: ffff8880198b1340 R14: ffff88802037a438 R15: ffff88802037a420 [ 78.246019][ T8479] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 78.255136][ T8479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.261926][ T8479] CR2: 0000000001f16748 CR3: 0000000027b36000 CR4: 00000000001506e0 [ 78.270119][ T8479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.278117][ T8479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.286296][ T8479] Call Trace: [ 78.289584][ T8479] kobject_add_internal+0x18d/0xa60 [ 78.294890][ T8479] ? lockdep_hardirqs_on+0x79/0x100 [ 78.300303][ T8479] kobject_add+0x150/0x1c0 [ 78.304929][ T8479] ? kset_create_and_add+0x190/0x190 [ 78.310324][ T8479] ? kfree+0xeb/0x650 [ 78.314420][ T8479] ? kfree_const+0x51/0x60 [ 78.318939][ T8479] device_add+0x36a/0x2100 [ 78.323381][ T8479] ? device_initialize+0x500/0x500 [ 78.328609][ T8479] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 78.334899][ T8479] hci_conn_add_sysfs+0x97/0x190 [ 78.339963][ T8479] hci_sync_conn_complete_evt.isra.0+0x54a/0x810 [ 78.346324][ T8479] hci_event_packet+0xf32/0x7c50 [ 78.351378][ T8479] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 78.357491][ T8479] ? lock_chain_count+0x20/0x20 [ 78.362365][ T8479] ? hci_le_meta_evt+0x4490/0x4490 [ 78.367946][ T8479] ? find_held_lock+0x2d/0x110 [ 78.372817][ T8479] ? skb_dequeue+0x125/0x180 [ 78.377772][ T8479] ? mark_held_locks+0x9f/0xe0 [ 78.382722][ T8479] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 78.388757][ T8479] ? lockdep_hardirqs_on+0x79/0x100 [ 78.394719][ T8479] hci_rx_work+0x4f8/0xd30 [ 78.399371][ T8479] process_one_work+0x98d/0x1600 [ 78.404414][ T8479] ? pwq_dec_nr_in_flight+0x320/0x320 [ 78.409805][ T8479] ? rwlock_bug.part.0+0x90/0x90 [ 78.414849][ T8479] ? _raw_spin_lock_irq+0x41/0x50 [ 78.419907][ T8479] worker_thread+0x64c/0x1120 [ 78.425224][ T8479] ? process_one_work+0x1600/0x1600 [ 78.430448][ T8479] kthread+0x3b1/0x4a0 [ 78.434532][ T8479] ? __kthread_bind_mask+0xc0/0xc0 [ 78.439791][ T8479] ret_from_fork+0x1f/0x30 [ 78.444227][ T8479] Modules linked in: [ 78.448325][ T8479] ---[ end trace 47d0cc8ab1bc8524 ]--- [ 78.454016][ T8479] RIP: 0010:__list_add_valid.cold+0x26/0x3c executing program executing program executing program executing program [ 78.460420][ T8479] Code: 68 f3 eb fa 4c 89 e1 48 c7 c7 e0 1c e3 89 e8 aa 88 f2 ff 0f 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 1e e3 89 e8 93 88 f2 ff <0f> 0b 48 89 f1 48 c7 c7 a0 1d e3 89 4c 89 e6 e8 7f 88 f2 ff 0f 0b [ 78.481723][ T8479] RSP: 0018:ffffc9000181f7d8 EFLAGS: 00010286 [ 78.488385][ T8479] RAX: 0000000000000058 RBX: ffff8881400e1000 RCX: 0000000000000000 [ 78.496941][ T8479] RDX: ffff88801f295580 RSI: ffffffff815dbea5 RDI: fffff52000303eed [ 78.505420][ T8479] RBP: ffff88802037a420 R08: 0000000000000058 R09: 0000000000000000 executing program [ 78.513829][ T8479] R10: ffffffff815d5cee R11: 0000000000000000 R12: ffff8881400e1000 [ 78.522044][ T8479] R13: ffff8880198b1340 R14: ffff88802037a438 R15: ffff88802037a420 [ 78.530262][ T8479] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 78.539677][ T8479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.546288][ T8479] CR2: 0000000001f16748 CR3: 000000000be8e000 CR4: 00000000001506e0 [ 78.554563][ T8479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.563539][ T8479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.573259][ T8479] Kernel panic - not syncing: Fatal exception [ 78.580933][ T8479] Kernel Offset: disabled [ 78.585279][ T8479] Rebooting in 86400 seconds..