[ 72.637102][ T8988] Bluetooth: hci2: command 0x0419 tx timeout [ 72.669892][ T8988] Bluetooth: hci4: command 0x0419 tx timeout [ 72.702306][ T8988] Bluetooth: hci5: command 0x0419 tx timeout [ 72.740195][ T8988] Bluetooth: hci3: command 0x0419 tx timeout [ 190.863366][ T22] Bluetooth: hci1: command 0x0406 tx timeout [ 190.880026][ T22] Bluetooth: hci0: command 0x0406 tx timeout [ 190.915255][ T22] Bluetooth: hci5: command 0x0406 tx timeout [ 190.953922][ T22] Bluetooth: hci2: command 0x0406 tx timeout [ 190.994621][ T22] Bluetooth: hci3: command 0x0406 tx timeout [ 191.030212][ T22] Bluetooth: hci4: command 0x0406 tx timeout [ 428.360676][ T9163] syz-executor.1 (9163) used greatest stack depth: 23480 bytes left Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. [ 430.169556][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.178844][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.189252][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.197852][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.207214][ T87] device bridge_slave_1 left promiscuous mode [ 430.215406][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.224688][ T87] device bridge_slave_0 left promiscuous mode [ 430.232276][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.244388][ T87] device veth1_macvtap left promiscuous mode [ 430.250958][ T87] device veth0_macvtap left promiscuous mode [ 430.257186][ T87] device veth1_vlan left promiscuous mode [ 430.263851][ T87] device veth0_vlan left promiscuous mode [ 432.991843][ T87] device hsr_slave_0 left promiscuous mode [ 432.997932][ T87] device hsr_slave_1 left promiscuous mode [ 433.018623][ T87] team0 (unregistering): Port device team_slave_1 removed [ 433.029437][ T87] team0 (unregistering): Port device team_slave_0 removed [ 433.040312][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.054949][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.087925][ T87] bond0 (unregistering): Released all slaves [ 441.324290][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.333151][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.342466][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.350139][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.358685][ T87] device bridge_slave_1 left promiscuous mode [ 441.365791][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.373723][ T87] device bridge_slave_0 left promiscuous mode [ 441.379861][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.389660][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.397926][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.405939][T10507] kasan: CONFIG_KASAN_INLINE enabled [ 441.412503][T10507] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 441.421081][T10507] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 441.428121][T10507] CPU: 1 PID: 10507 Comm: kworker/u4:7 Not tainted 5.4.0-rc1-syzkaller #0 [ 441.436678][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.446809][T10507] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 441.454587][T10507] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xef0 [ 441.460798][T10507] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 f6 0b 00 00 [ 441.481354][T10507] RSP: 0018:ffff88808988fa90 EFLAGS: 00010246 [ 441.487957][T10507] RAX: dffffc0000000000 RBX: 00000000000003d4 RCX: 0000000000000000 [ 441.495906][T10507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 441.504017][T10507] RBP: ffff88808988fba8 R08: ffff88809ba43180 R09: 0000000000000001 [ 441.512501][T10507] R10: ffffed10116bd9af R11: ffff88808b5ecd7f R12: ffff88809ba43180 [ 441.520448][T10507] R13: ffff88808b5ecd40 R14: 0000000000000000 R15: 000000000000003c [ 441.528872][T10507] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 441.538206][T10507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.545058][T10507] CR2: 00007f0705a3a000 CR3: 00000000a3df1000 CR4: 00000000001406e0 [ 441.553092][T10507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.561256][T10507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.569629][T10507] Call Trace: [ 441.573171][T10507] ? batadv_iv_ogm_schedule+0x67f/0xee0 [ 441.578915][T10507] ? lock_downgrade+0x710/0x710 [ 441.584134][T10507] ? batadv_iv_gw_get_best_gw_node+0x5b0/0x5b0 [ 441.590978][T10507] ? lock_acquire+0x127/0x350 [ 441.595918][T10507] batadv_iv_ogm_schedule+0x802/0xee0 [ 441.601278][T10507] ? batadv_iv_ogm_queue_add+0xef0/0xef0 [ 441.607244][T10507] batadv_iv_send_outstanding_bat_ogm_packet+0x55d/0x890 [ 441.614768][T10507] ? rcu_read_lock_sched_held+0xa7/0xd0 [ 441.620594][T10507] ? rcu_read_lock_bh_held+0xc0/0xc0 [ 441.625914][T10507] ? trace_hardirqs_on+0x28/0x1a0 [ 441.631306][T10507] process_one_work+0x858/0x1700 [ 441.636483][T10507] ? __schedule+0x944/0x1e30 [ 441.641246][T10507] ? pwq_dec_nr_in_flight+0x370/0x370 [ 441.647033][T10507] ? lock_acquire+0x127/0x350 [ 441.651843][T10507] worker_thread+0x85/0xb60 [ 441.656755][T10507] ? __kthread_parkme+0x47/0x1a0 [ 441.662664][T10507] kthread+0x331/0x3f0 [ 441.666971][T10507] ? process_one_work+0x1700/0x1700 [ 441.672450][T10507] ? kthread_create_worker_on_cpu+0xc0/0xc0 [ 441.678592][T10507] ret_from_fork+0x24/0x30 [ 441.682993][T10507] Modules linked in: [ 441.687426][T10507] ---[ end trace a421e69690c784ab ]--- [ 441.692989][T10507] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xef0 [ 441.699679][T10507] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 f6 0b 00 00 [ 441.721252][T10507] RSP: 0018:ffff88808988fa90 EFLAGS: 00010246 [ 441.727403][T10507] RAX: dffffc0000000000 RBX: 00000000000003d4 RCX: 0000000000000000 [ 441.735510][T10507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 441.743761][T10507] RBP: ffff88808988fba8 R08: ffff88809ba43180 R09: 0000000000000001 [ 441.752167][T10507] R10: ffffed10116bd9af R11: ffff88808b5ecd7f R12: ffff88809ba43180 [ 441.760548][T10507] R13: ffff88808b5ecd40 R14: 0000000000000000 R15: 000000000000003c [ 441.768786][T10507] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 441.777851][T10507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.784686][T10507] CR2: 00007f0705a3a000 CR3: 00000000a3df1000 CR4: 00000000001406e0 [ 441.793019][T10507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.801846][T10507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.810044][T10507] Kernel panic - not syncing: Fatal exception [ 441.817733][T10507] Kernel Offset: disabled [ 441.822412][T10507] Rebooting in 86400 seconds..