Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready ------------[ cut here ]------------ IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready kernel BUG at include/linux/skbuff.h:2149! IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 9637 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88809a9e6140 task.stack: ffff88808d478000 RIP: 0010:__skb_pull include/linux/skbuff.h:2149 [inline] RIP: 0010:skb_pull_inline include/linux/skbuff.h:2155 [inline] RIP: 0010:skb_pull net/core/skbuff.c:1744 [inline] RIP: 0010:skb_pull+0xb9/0xf0 net/core/skbuff.c:1742 RSP: 0018:ffff88808d47f2e8 EFLAGS: 00010287 RAX: 0000000000000fde RBX: ffff88809beaa1c0 RCX: 0000000000000000 RDX: 0000000000000007 RSI: 0000000000000018 RDI: ffff88809beaa244 RBP: ffff88808d47f2f8 R08: ffff88809beaa298 R09: ffff88809beaa290 R10: ffff88809f3375d4 R11: ffff88809a9e6140 R12: ffff88809f336a80 R13: 0000000000000080 R14: ffff8880b5232da0 R15: 0000000000000000 FS: 00007f7a5c1fa700(0000) GS:ffff8880ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8c4770a000 CR3: 00000000a3de4000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ipgre_xmit+0x24a/0x760 net/ipv4/ip_gre.c:658 __netdev_start_xmit include/linux/netdevice.h:4051 [inline] netdev_start_xmit include/linux/netdevice.h:4060 [inline] xmit_one net/core/dev.c:3005 [inline] dev_hard_start_xmit+0x15e/0x780 net/core/dev.c:3021 __dev_queue_xmit+0x1d8b/0x25b0 net/core/dev.c:3521 IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready dev_queue_xmit+0xb/0x10 net/core/dev.c:3554 packet_snd.isra.30+0x9ad/0x2aa0 net/packet/af_packet.c:3024 packet_sendmsg+0x10c9/0x2da0 net/packet/af_packet.c:3049 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 kernel_sendmsg+0x26/0x30 net/socket.c:664 sock_no_sendpage+0xf7/0x130 net/core/sock.c:2595 kernel_sendpage+0x60/0xd0 net/socket.c:3407 sock_sendpage+0x6d/0xd0 net/socket.c:871 pipe_to_sendpage+0x206/0x420 fs/splice.c:451 splice_from_pipe_feed fs/splice.c:502 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:626 IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready splice_from_pipe+0xb5/0x110 fs/splice.c:661 generic_splice_sendpage+0x10/0x20 fs/splice.c:832 do_splice_from fs/splice.c:851 [inline] do_splice fs/splice.c:1147 [inline] SYSC_splice fs/splice.c:1402 [inline] SyS_splice+0x6f1/0x1590 fs/splice.c:1382 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465b09 RSP: 002b:00007f7a5c1fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465b09 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00000000004b069f R08: 000000000004ffe0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 R13: 00007ffc6b9836ef R14: 00007f7a5c1fa300 R15: 0000000000022000 Code: ea 03 80 3c 02 00 75 48 48 8b 83 d8 00 00 00 89 f6 48 01 f0 48 89 83 d8 00 00 00 48 83 c4 08 5b 5d c3 48 83 c4 08 31 c0 5b 5d c3 <0f> 0b 89 75 f4 e8 dd b9 b5 fb 8b 75 f4 e9 66 ff ff ff 89 75 f0 RIP: __skb_pull include/linux/skbuff.h:2149 [inline] RSP: ffff88808d47f2e8 RIP: skb_pull_inline include/linux/skbuff.h:2155 [inline] RSP: ffff88808d47f2e8 RIP: skb_pull net/core/skbuff.c:1744 [inline] RSP: ffff88808d47f2e8 RIP: skb_pull+0xb9/0xf0 net/core/skbuff.c:1742 RSP: ffff88808d47f2e8 ---[ end trace 2e03edd17454c4fd ]---