[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. syzkaller login: [ 40.942112] audit: type=1400 audit(1596404664.433:8): avc: denied { execmem } for pid=6474 comm="syz-executor386" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.962415] IPVS: ftp: loaded support on port[0] = 21 executing program [ 42.101223] kasan: CONFIG_KASAN_INLINE enabled [ 42.105968] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 42.119148] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 42.125420] CPU: 1 PID: 6500 Comm: kworker/u5:1 Not tainted 4.19.136-syzkaller #0 [ 42.133187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.142552] Workqueue: hci0 hci_rx_work [ 42.146525] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x24a/0x7a0 [ 42.152833] Code: 48 c1 ea 03 80 3c 02 00 0f 85 60 05 00 00 48 8b 9d 28 08 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 23 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 42.171739] RSP: 0018:ffff8880a7ecfa78 EFLAGS: 00010202 [ 42.177178] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff867c041f [ 42.184612] RDX: 0000000000000002 RSI: ffffffff867c042c RDI: 0000000000000010 [ 42.191867] RBP: ffff8880a52a6ec0 R08: 0000000000000000 R09: 0000000000000000 [ 42.199220] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 42.206515] R13: ffff8880891de040 R14: 00000000000000c8 R15: ffff8880891dd110 [ 42.213772] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 42.221981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.227845] CR2: 00007ffb4403a0e8 CR3: 0000000087a24000 CR4: 00000000001406e0 [ 42.235101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.242366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.249617] Call Trace: [ 42.252202] hci_event_packet+0x1973/0x858f [ 42.256510] ? mark_held_locks+0xf0/0xf0 [ 42.260555] ? __lock_acquire+0x6de/0x3ff0 [ 42.264775] ? hci_cmd_complete_evt+0xb5e0/0xb5e0 [ 42.269621] ? __update_load_avg_se+0x5ec/0xa00 [ 42.274283] ? debug_object_deactivate+0x1f9/0x2e0 [ 42.279219] ? mark_held_locks+0xa6/0xf0 [ 42.283279] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 42.288625] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 42.293227] hci_rx_work+0x46b/0xa90 [ 42.296929] process_one_work+0x864/0x1570 [ 42.301169] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 42.305842] worker_thread+0x64c/0x1130 [ 42.309819] ? process_one_work+0x1570/0x1570 [ 42.314316] kthread+0x30b/0x410 [ 42.317663] ? kthread_park+0x180/0x180 [ 42.321626] ret_from_fork+0x24/0x30 [ 42.325348] Modules linked in: [ 42.329365] ---[ end trace d874faf22ea41dc0 ]--- [ 42.334146] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x24a/0x7a0 [ 42.340710] Code: 48 c1 ea 03 80 3c 02 00 0f 85 60 05 00 00 48 8b 9d 28 08 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 23 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 42.359739] RSP: 0018:ffff8880a7ecfa78 EFLAGS: 00010202 [ 42.365106] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff867c041f [ 42.372483] RDX: 0000000000000002 RSI: ffffffff867c042c RDI: 0000000000000010 [ 42.379824] RBP: ffff8880a52a6ec0 R08: 0000000000000000 R09: 0000000000000000 [ 42.387095] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 42.394443] R13: ffff8880891de040 R14: 00000000000000c8 R15: ffff8880891dd110 [ 42.401806] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 42.410092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.415982] CR2: 00007ffb4403a0e8 CR3: 0000000087a24000 CR4: 00000000001406e0 [ 42.423361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.430827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.438102] Kernel panic - not syncing: Fatal exception [ 42.444567] Kernel Offset: disabled [ 42.448189] Rebooting in 86400 seconds..