[ 51.730721][ T5016] Bluetooth: hci5: command 0x0419 tx timeout [ 51.745139][ T5016] Bluetooth: hci4: command 0x0419 tx timeout [ 51.768476][ T5016] Bluetooth: hci1: command 0x0419 tx timeout [ 51.810509][ T5016] Bluetooth: hci3: command 0x0419 tx timeout [ 170.515826][ T5016] Bluetooth: hci2: command 0x0406 tx timeout [ 170.532457][ T5016] Bluetooth: hci4: command 0x0406 tx timeout [ 170.555668][ T5016] Bluetooth: hci5: command 0x0406 tx timeout [ 170.589373][ T5016] Bluetooth: hci1: command 0x0406 tx timeout [ 170.607664][ T5016] Bluetooth: hci3: command 0x0406 tx timeout [ 170.638567][ T5016] Bluetooth: hci0: command 0x0406 tx timeout [ 466.149571][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.157058][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.164581][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.172680][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.180175][ T8] kasan: CONFIG_KASAN_INLINE enabled [ 466.185543][ T8] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 466.193605][ T8] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 466.200509][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.3.0-rc8-syzkaller #0 [ 466.208623][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.218653][ T8] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 466.226440][ T8] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 466.232561][ T8] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 99 0b 00 00 [ 466.252134][ T8] RSP: 0018:ffff8880b57c7aa8 EFLAGS: 00010246 [ 466.258181][ T8] RAX: dffffc0000000000 RBX: ffff8880a2222c40 RCX: 0000000000000000 [ 466.266119][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 466.274057][ T8] RBP: ffff8880b57c7bc0 R08: ffff8880a0839400 R09: 0000000000000001 [ 466.282257][ T8] R10: ffffed1016af8f8c R11: 0000000000000003 R12: ffff8880a0839400 [ 466.290211][ T8] R13: dffffc0000000000 R14: ffffed101410728e R15: 000000000000003c [ 466.298171][ T8] FS: 0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000 [ 466.307066][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.313616][ T8] CR2: 00005646efc2b130 CR3: 00000000a6762000 CR4: 00000000001406f0 [ 466.321554][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.329508][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.337449][ T8] Call Trace: [ 466.340728][ T8] ? mark_held_locks+0x130/0x130 [ 466.345632][ T8] ? batadv_iv_ogm_schedule+0x622/0xe80 [ 466.351157][ T8] ? lock_downgrade+0x710/0x710 [ 466.355976][ T8] ? batadv_iv_ogm_iface_disable+0x70/0x70 [ 466.361749][ T8] ? lock_acquire+0x12a/0x300 [ 466.366391][ T8] ? batadv_iv_ogm_schedule+0x916/0xe80 [ 466.371921][ T8] batadv_iv_ogm_schedule+0xb47/0xe80 [ 466.377258][ T8] ? batadv_iv_ogm_queue_add+0xe50/0xe50 [ 466.382858][ T8] ? process_one_work+0x6fc/0x1560 [ 466.387935][ T8] ? lock_downgrade+0x710/0x710 [ 466.392752][ T8] batadv_iv_send_outstanding_bat_ogm_packet+0x570/0x7d0 [ 466.399753][ T8] ? lock_acquire+0x12a/0x300 [ 466.404408][ T8] ? process_one_work+0x71b/0x1560 [ 466.409495][ T8] ? trace_hardirqs_on+0x28/0x1b0 [ 466.414490][ T8] process_one_work+0x7d2/0x1560 [ 466.419411][ T8] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 466.424748][ T8] ? lock_acquire+0x12a/0x300 [ 466.429391][ T8] ? _raw_spin_lock_irq+0xe/0x50 [ 466.434300][ T8] worker_thread+0x85/0xb60 [ 466.438770][ T8] ? __kthread_parkme+0x47/0x1a0 [ 466.443689][ T8] kthread+0x331/0x3f0 [ 466.447731][ T8] ? process_one_work+0x1560/0x1560 [ 466.452893][ T8] ? kthread_park+0x120/0x120 [ 466.457539][ T8] ret_from_fork+0x24/0x30 [ 466.461919][ T8] Modules linked in: [ 466.466409][ T8] ---[ end trace 222d5e1c8699ea84 ]--- [ 466.471873][ T8] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 466.478063][ T8] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 99 0b 00 00 [ 466.497721][ T8] RSP: 0018:ffff8880b57c7aa8 EFLAGS: 00010246 [ 466.503757][ T8] RAX: dffffc0000000000 RBX: ffff8880a2222c40 RCX: 0000000000000000 [ 466.511731][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 466.519742][ T8] RBP: ffff8880b57c7bc0 R08: ffff8880a0839400 R09: 0000000000000001 [ 466.527728][ T8] R10: ffffed1016af8f8c R11: 0000000000000003 R12: ffff8880a0839400 [ 466.535720][ T8] R13: dffffc0000000000 R14: ffffed101410728e R15: 000000000000003c [ 466.543768][ T8] FS: 0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000 [ 466.552716][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.559340][ T8] CR2: 00005646efc2b130 CR3: 00000000a6762000 CR4: 00000000001406f0 [ 466.567312][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.575263][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.583268][ T8] Kernel panic - not syncing: Fatal exception [ 466.589900][ T8] Kernel Offset: disabled [ 466.594218][ T8] Rebooting in 86400 seconds..