[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. syzkaller login: [ 67.577582][ T27] audit: type=1400 audit(1596473004.194:8): avc: denied { execmem } for pid=6859 comm="syz-executor673" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 67.596812][ T6860] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program [ 68.685279][ T6884] Bluetooth: hci0: hardware error 0x00 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 68.830394][ T6882] debugfs: Directory '200' with parent 'hci0' already present! [ 68.838508][ T6882] list_add double add: new=ffff88808e9b6418, prev=ffff88808e9b6418, next=ffff8880a973ef00. [ 68.849480][ T6882] ------------[ cut here ]------------ [ 68.855277][ T6882] kernel BUG at lib/list_debug.c:29! [ 68.861199][ T6882] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 68.867706][ T6882] CPU: 1 PID: 6882 Comm: kworker/u5:1 Not tainted 5.8.0-rc7-syzkaller #0 [ 68.876389][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.886624][ T6882] Workqueue: hci0 hci_rx_work [ 68.891470][ T6882] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 68.897375][ T6882] Code: 57 ff ff ff 4c 89 e1 48 c7 c7 20 92 93 88 e8 b1 f1 c1 fd 0f 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 60 93 93 88 e8 9a f1 c1 fd <0f> 0b 48 89 f1 48 c7 c7 e0 92 93 88 4c 89 e6 e8 86 f1 c1 fd 0f 0b [ 68.917287][ T6882] RSP: 0018:ffffc90001777830 EFLAGS: 00010282 [ 68.923902][ T6882] RAX: 0000000000000058 RBX: ffff8880a973ef00 RCX: 0000000000000000 [ 68.932175][ T6882] RDX: ffff888094f1c200 RSI: ffffffff815d4ef7 RDI: fffff520002eeef8 [ 68.940249][ T6882] RBP: ffff88808e9b6418 R08: 0000000000000058 R09: ffff8880ae7318e7 [ 68.948321][ T6882] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a973ef00 [ 68.956303][ T6882] R13: ffff888087315270 R14: ffff88808e9b6430 R15: ffff88808e9b6418 [ 68.964420][ T6882] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 68.973851][ T6882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.980443][ T6882] CR2: 00007ffdcd6db747 CR3: 000000009ba09000 CR4: 00000000001406e0 [ 68.988423][ T6882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.996400][ T6882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.004377][ T6882] Call Trace: [ 69.007697][ T6882] kobject_add_internal+0x18d/0x940 [ 69.016122][ T6882] kobject_add+0x150/0x1c0 [ 69.020783][ T6882] ? kset_create_and_add+0x190/0x190 [ 69.026078][ T6882] ? kfree+0x1cd/0x2c0 [ 69.030164][ T6882] ? trace_hardirqs_on+0x5f/0x220 [ 69.035418][ T6882] ? lockdep_hardirqs_on+0x6a/0xe0 [ 69.040555][ T6882] ? device_add+0x33b/0x1be0 [ 69.045151][ T6882] device_add+0x35a/0x1be0 [ 69.049830][ T6882] ? debugfs_create_dir+0x2cf/0x390 [ 69.055272][ T6882] ? device_check_offline+0x280/0x280 [ 69.061248][ T6882] ? hci_debugfs_create_conn+0x179/0x1f0 [ 69.067040][ T6882] ? hci_debugfs_create_le+0x850/0x850 [ 69.072509][ T6882] hci_conn_add_sysfs+0x84/0xe0 [ 69.077371][ T6882] hci_event_packet+0xe0b/0x86f5 [ 69.082319][ T6882] ? hci_cmd_complete_evt+0xc6e0/0xc6e0 [ 69.087870][ T6882] ? lock_acquire+0x1f1/0xad0 [ 69.092779][ T6882] ? skb_dequeue+0x1c/0x180 [ 69.097281][ T6882] ? find_held_lock+0x2d/0x110 [ 69.102054][ T6882] ? mark_lock+0xbc/0x1710 [ 69.106479][ T6882] ? mark_held_locks+0x9f/0xe0 [ 69.111255][ T6882] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 69.117062][ T6882] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 69.123145][ T6882] ? trace_hardirqs_on+0x5f/0x220 [ 69.129793][ T6882] ? lockdep_hardirqs_on+0x6a/0xe0 [ 69.135440][ T6882] hci_rx_work+0x22e/0xb10 [ 69.140113][ T6882] process_one_work+0x94c/0x1670 [ 69.145712][ T6882] ? lock_release+0x8d0/0x8d0 [ 69.150469][ T6882] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 69.155848][ T6882] ? rwlock_bug.part.0+0x90/0x90 [ 69.161233][ T6882] ? lockdep_hardirqs_off+0x66/0xa0 [ 69.166551][ T6882] worker_thread+0x64c/0x1120 [ 69.171328][ T6882] ? process_one_work+0x1670/0x1670 [ 69.176553][ T6882] kthread+0x3b5/0x4a0 executing program executing program executing program executing program [ 69.180629][ T6882] ? __kthread_bind_mask+0xc0/0xc0 [ 69.185898][ T6882] ? __kthread_bind_mask+0xc0/0xc0 [ 69.191104][ T6882] ret_from_fork+0x1f/0x30 [ 69.195530][ T6882] Modules linked in: [ 69.199962][ T6882] ---[ end trace b1bcc552c32d25e9 ]--- [ 69.205562][ T6882] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 69.211766][ T6882] Code: 57 ff ff ff 4c 89 e1 48 c7 c7 20 92 93 88 e8 b1 f1 c1 fd 0f 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 60 93 93 88 e8 9a f1 c1 fd <0f> 0b 48 89 f1 48 c7 c7 e0 92 93 88 4c 89 e6 e8 86 f1 c1 fd 0f 0b [ 69.232697][ T6882] RSP: 0018:ffffc90001777830 EFLAGS: 00010282 [ 69.238821][ T6882] RAX: 0000000000000058 RBX: ffff8880a973ef00 RCX: 0000000000000000 [ 69.246822][ T6882] RDX: ffff888094f1c200 RSI: ffffffff815d4ef7 RDI: fffff520002eeef8 [ 69.255256][ T6882] RBP: ffff88808e9b6418 R08: 0000000000000058 R09: ffff8880ae7318e7 [ 69.263317][ T6882] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a973ef00 [ 69.272111][ T6882] R13: ffff888087315270 R14: ffff88808e9b6430 R15: ffff88808e9b6418 [ 69.280551][ T6882] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 69.289757][ T6882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.296532][ T6882] CR2: 00007ffdcd6db747 CR3: 0000000009a79000 CR4: 00000000001406e0 [ 69.304582][ T6882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.313048][ T6882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.321265][ T6882] Kernel panic - not syncing: Fatal exception [ 69.328778][ T6882] Kernel Offset: disabled [ 69.333108][ T6882] Rebooting in 86400 seconds..