Unable to handle kernel NULL pointer dereference at virtual address 0000000000000058 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000000165dd8000 [0000000000000058] pgd=0000000000000000, p4d=0000000000000000 Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 3079 Comm: kworker/u5:7 Not tainted 6.0.0-rc6-syzkaller-17718-g4a4a085d97ce #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Workqueue: hci1 hci_rx_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : klist_next+0x28/0x18c lib/klist.c:377 lr : klist_next+0x24/0x18c lib/klist.c:376 sp : ffff8000128a3b20 x29: ffff8000128a3b20 x28: ffff80000c538570 x27: ffff80000b942e64 x26: 0000000000000004 x25: 0000000000000000 x24: ffff80000d842aa0 x23: 0000000000000000 x22: ffff0000cb5f2000 x21: ffff0000fcdfc538 x20: 0000000000000000 x19: ffff8000128a3b78 x18: 00000000000003a1 x17: ffff80000c00d6bc x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000002 x13: 0000000000000002 x12: 0000000000040000 x11: 00000000000033d8 x10: ffff80001f25a000 x9 : ffff8000096b3558 x8 : 00000000000033d9 x7 : ffff8000095d79e4 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff80000b97c59c x1 : ffff8000128a3b78 x0 : 0000000000000000 Call trace: klist_next+0x28/0x18c lib/klist.c:377 next_device drivers/base/core.c:3756 [inline] device_find_child+0x50/0x114 drivers/base/core.c:3899 hci_conn_del_sysfs+0x54/0xfc net/bluetooth/hci_sysfs.c:71 hci_conn_cleanup+0x2d4/0x380 net/bluetooth/hci_conn.c:147 hci_conn_del+0x144/0x2a8 net/bluetooth/hci_conn.c:1022 hci_disconn_complete_evt+0x3e4/0x498 net/bluetooth/hci_event.c:3417 hci_event_func net/bluetooth/hci_event.c:7443 [inline] hci_event_packet+0x5c4/0x60c net/bluetooth/hci_event.c:7495 hci_rx_work+0x1a4/0x2f4 net/bluetooth/hci_core.c:4007 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 Code: 910003fd aa0003f3 97afb520 a9405260 (f9402c18) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 910003fd mov x29, sp 4: aa0003f3 mov x19, x0 8: 97afb520 bl 0xfffffffffebed488 c: a9405260 ldp x0, x20, [x19] * 10: f9402c18 ldr x24, [x0, #88] <-- trapping instruction