kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
kobject: 'kvm' (00000000374c9a1b): kobject_uevent_env
CPU: 0 PID: 7594 Comm: kworker/0:3 Not tainted 5.0.0-rc6+ #72
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events hci_uart_write_work
kobject: 'kvm' (00000000374c9a1b): fill_kobj_path: path = '/devices/virtual/misc/kvm'
RIP: 0010:hci_uart_write_work+0x1b6/0x710 drivers/bluetooth/hci_ldisc.c:180
Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 9e 80 53 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d
RSP: 0018:ffff888084aa7cb0 EFLAGS: 00010203
Bluetooth: Can't allocate HCI device
RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000
kobject: 'kvm' (00000000374c9a1b): kobject_uevent_env
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c
RBP: ffff888084aa7d30 R08: ffff88808618a240 R09: ffff88808618ab08
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880876dd440
R13: ffff88808ec85100 R14: ffff8880a4476328 R15: ffff8880876dd4b0
Bluetooth: Invalid header checksum
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000afa978 CR3: 00000000a8afd000 CR4: 00000000001426f0
kobject: 'kvm' (00000000374c9a1b): fill_kobj_path: path = '/devices/virtual/misc/kvm'
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2173
 worker_thread+0x98/0xe40 kernel/workqueue.c:2319
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
Bluetooth: Invalid header checksum
---[ end trace cae38534f52e05ee ]---
RIP: 0010:hci_uart_write_work+0x1b6/0x710 drivers/bluetooth/hci_ldisc.c:180
Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 9e 80 53 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d
kobject: 'loop3' (000000007827188d): kobject_uevent_env
RSP: 0018:ffff888084aa7cb0 EFLAGS: 00010203
RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000
kobject: '(null)' (0000000028fa2626): kobject_cleanup, parent           (null)
kobject: 'loop3' (000000007827188d): fill_kobj_path: path = '/devices/virtual/block/loop3'
kobject: '(null)' (0000000028fa2626): calling ktype release
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 1
RBP: ffff888084aa7d30 R08: ffff88808618a240 R09: ffff88808618ab08
CPU: 1 PID: 8716 Comm: syz-executor.3 Tainted: G      D           5.0.0-rc6+ #72
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0x1b lib/fault-inject.c:149
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880876dd440
R13: ffff88808ec85100 R14: ffff8880a4476328 R15: ffff8880876dd4b0
 __should_fail_alloc_page mm/page_alloc.c:3152 [inline]
 should_fail_alloc_page+0x50/0x60 mm/page_alloc.c:3199
 prepare_alloc_pages mm/page_alloc.c:4476 [inline]
 __alloc_pages_nodemask+0x1a1/0x710 mm/page_alloc.c:4523
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1398 [inline]
 cache_grow_begin+0x9c/0x8c0 mm/slab.c:2666
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 cache_alloc_refill mm/slab.c:3033 [inline]
 ____cache_alloc mm/slab.c:3116 [inline]
 ____cache_alloc mm/slab.c:3099 [inline]
 __do_cache_alloc mm/slab.c:3338 [inline]
 slab_alloc mm/slab.c:3373 [inline]
 kmem_cache_alloc_trace+0x67f/0x760 mm/slab.c:3607
CR2: 00007fdc2c933000 CR3: 0000000088388000 CR4: 00000000001406f0
 kmalloc include/linux/slab.h:545 [inline]
 kzalloc include/linux/slab.h:740 [inline]
 hci_alloc_dev+0x43/0x1d00 net/bluetooth/hci_core.c:3116
 hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:623 [inline]
 hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:693 [inline]
 hci_uart_tty_ioctl+0x321/0xa70 drivers/bluetooth/hci_ldisc.c:748
kobject: 'integrity' (00000000beef12c9): kobject_uevent_env
 tty_ioctl+0xac9/0x14d0 drivers/tty/tty_io.c:2662
kobject: 'integrity' (00000000beef12c9): kobject_uevent_env: filter function caused the event to drop!
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
kobject: 'integrity' (00000000beef12c9): kobject_cleanup, parent           (null)
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
kobject: 'integrity' (00000000beef12c9): does not have a release() function, it is broken and must be fixed. See Documentation/kobject.txt.