[ 399.643959] ? exit_to_usermode_loop+0x3a/0x1e0 [ 399.643965] ? trace_hardirqs_on+0x28/0x190 [ 399.643970] exit_to_usermode_loop+0x159/0x1e0 [ 399.643975] do_syscall_64+0x413/0x4e0 [ 399.643980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.643985] RIP: 0033:0x4665e9 [ 399.643992] Code: Bad RIP value. [ 399.643995] RSP: 002b:00007ffd2c699728 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.644000] RAX: ffffffffffffff92 RBX: 0000000000000032 RCX: 00000000004665e9 [ 399.644003] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf8c [ 399.644005] RBP: 000000000056bf8c R08: 00000066e830e897 R09: 0000000000000000 [ 399.644007] R10: 00007ffd2c699800 R11: 0000000000000246 R12: 00000000000616ee [ 399.644009] R13: 00000000000003e8 R14: 000000000056bf80 R15: 00000000000616df [ 399.644016] Modules linked in: [ 399.670702] ---[ end trace 28b680099fc1dd67 ]--- [ 399.675546] kasan: CONFIG_KASAN_INLINE enabled [ 399.684146] RIP: 0010:klist_next+0x48/0x450 [ 399.695440] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 399.709696] Code: 48 89 fb 48 83 ec 18 80 3c 02 00 0f 85 e1 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c 24 50 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b4 02 00 00 4c 8d 6b 08 4d 8b 7c 24 50 48 b8 00 [ 399.732008] general protection fault: 0000 [#3] PREEMPT SMP KASAN [ 399.744483] RSP: 0000:ffff888098b3f6c0 EFLAGS: 00010206 [ 399.748559] CPU: 1 PID: 8483 Comm: syz-executor.1 Tainted: G D 4.19.208-syzkaller #0 [ 399.748562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.748571] RIP: 0010:klist_next+0x48/0x450 [ 399.748576] Code: 48 89 fb 48 83 ec 18 80 3c 02 00 0f 85 e1 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c 24 50 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b4 02 00 00 4c 8d 6b 08 4d 8b 7c 24 50 48 b8 00 [ 399.748579] RSP: 0018:ffff8880aa48f6b0 EFLAGS: 00010206 [ 399.748583] RAX: dffffc0000000000 RBX: ffff8880aa48f730 RCX: ffffffff813d2053 [ 399.748585] RDX: 000000000000000a RSI: ffff8880aa48f730 RDI: 0000000000000050 [ 399.748588] RBP: ffff8880aa48f6f0 R08: ffffed101363988d R09: ffffed101363988c [ 399.748590] R10: ffffed101363988c R11: ffff88809b1cc463 R12: 0000000000000000 [ 399.748593] R13: 0000000000000000 R14: ffffffff86d984f0 R15: dffffc0000000000 [ 399.748597] FS: 0000000002f74400(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 [ 399.748599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.748602] CR2: 00007ffe153cb8b7 CR3: 000000009c183000 CR4: 00000000003406e0 [ 399.748607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.748610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.748612] Call Trace: [ 399.748621] ? synchronize_rcu_expedited+0xb0/0xb0 [ 399.748628] ? bt_link_release+0x20/0x20 [ 399.748634] device_find_child+0xb1/0x170 [ 399.748639] ? device_for_each_child+0x140/0x140 [ 399.748646] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 399.748652] ? trace_hardirqs_on+0x28/0x190 [ 399.748657] ? bt_link_release+0x20/0x20 [ 399.748662] hci_conn_del_sysfs+0xaa/0x150 [ 399.748669] hci_conn_cleanup+0x1ff/0x4e0 [ 399.748675] hci_conn_del+0x22c/0x6b0 [ 399.748680] hci_conn_hash_flush+0x171/0x230 [ 399.748686] hci_dev_do_close+0x5dc/0xf10 [ 399.748693] ? hci_dev_open+0x200/0x200 [ 399.748698] ? kasan_check_write+0x14/0x20 [ 399.748705] hci_unregister_dev+0x12f/0x400 [ 399.748712] vhci_release+0x6b/0xe0 [ 399.748718] __fput+0x249/0x7f0 [ 399.748724] ____fput+0x9/0x10 [ 399.748730] task_work_run+0x108/0x180 [ 399.748737] do_exit+0xa6a/0x2d90 [ 399.748743] ? rcu_read_lock_sched_held+0x108/0x120 [ 399.748749] ? __mark_inode_dirty+0x8d6/0xcb0 [ 399.748756] ? mm_update_next_owner+0x680/0x680 [ 399.748761] ? pipe_write+0x64f/0xd00 [ 399.748769] ? get_signal+0x2ba/0x1970 [ 399.748773] ? _raw_spin_unlock_irq+0x27/0x90 [ 399.748777] ? get_signal+0x2ba/0x1970 [ 399.748783] do_group_exit+0xf8/0x2c0 [ 399.748789] get_signal+0x30b/0x1970 [ 399.748794] ? __vfs_write+0x443/0x890 [ 399.748799] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 399.748807] do_signal+0x87/0x1870 [ 399.748815] ? fsnotify_first_mark+0x130/0x130 [ 399.748820] ? setup_sigcontext+0x7d0/0x7d0 [ 399.748828] ? vfs_write+0x339/0x4d0 [ 399.748834] ? ksys_write+0x103/0x260 [ 399.748839] ? exit_to_usermode_loop+0x3a/0x1e0 [ 399.748842] ? do_syscall_64+0x413/0x4e0 [ 399.748848] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 399.748852] ? exit_to_usermode_loop+0x3a/0x1e0 [ 399.748856] ? trace_hardirqs_on+0x28/0x190 [ 399.748862] exit_to_usermode_loop+0x159/0x1e0 [ 399.748867] do_syscall_64+0x413/0x4e0 [ 399.748872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.748875] RIP: 0033:0x4192cf [ 399.748883] Code: Bad RIP value. [ 399.748886] RSP: 002b:00007fff474790b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 399.748890] RAX: 000000000000000c RBX: 000000000000174b RCX: 00000000004192cf [ 399.748893] RDX: 000000000000000c RSI: 00007fff474791b0 RDI: 00000000000000f8 [ 399.748895] RBP: 00007fff4747914c R08: 0000000000000000 R09: 00000066eb211bf2 [ 399.748898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 399.748901] R13: 000000000006170a R14: 0000000000000002 R15: 00007fff474791b0 [ 399.748908] Modules linked in: [ 399.751293] kasan: CONFIG_KASAN_INLINE enabled [ 399.767968] RAX: dffffc0000000000 RBX: ffff888098b3f740 RCX: ffffffff813d2053 [ 399.777572] ---[ end trace 28b680099fc1dd68 ]--- [ 399.785956] RBP: ffff888098b3f700 R08: ffffed1014333cbd R09: ffffed1014333cbc [ 399.790386] RIP: 0010:klist_next+0x48/0x450 [ 399.791571] R10: ffffed1014333cbc R11: ffff8880a199e5e3 R12: 0000000000000000 [ 399.796131] Code: 48 89 fb 48 83 ec 18 80 3c 02 00 0f 85 e1 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c 24 50 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b4 02 00 00 4c 8d 6b 08 4d 8b 7c 24 50 48 b8 00 [ 399.800345] RDX: 000000000000000a RSI: ffff888098b3f740 RDI: 0000000000000050 [ 399.805894] RSP: 0000:ffff888098b3f6c0 EFLAGS: 00010206 [ 399.808025] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 399.812219] RAX: dffffc0000000000 RBX: ffff888098b3f740 RCX: ffffffff813d2053 [ 399.821502] RBP: ffff888098b3f700 R08: ffffed1014333cbd R09: ffffed1014333cbc [ 399.826187] RDX: 000000000000000a RSI: ffff888098b3f740 RDI: 0000000000000050 [ 399.829094] R10: ffffed1014333cbc R11: ffff8880a199e5e3 R12: 0000000000000000 [ 399.832478] RBP: ffff888098b3f700 R08: ffffed1014333cbd R09: ffffed1014333cbc [ 399.836866] R13: 0000000000000000 R14: ffffffff86d984f0 R15: dffffc0000000000 [ 399.840186] R10: ffffed1014333cbc R11: ffff8880a199e5e3 R12: 0000000000000000 [ 399.845114] R13: 0000000000000000 R14: ffffffff86d984f0 R15: dffffc0000000000 [ 399.851926] R13: 0000000000000000 R14: ffffffff86d984f0 R15: dffffc0000000000 [ 399.857773] general protection fault: 0000 [#4] PREEMPT SMP KASAN [ 399.860961] FS: 0000000002f74400(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 [ 399.865560] CPU: 0 PID: 19124 Comm: syz-executor.5 Tainted: G D 4.19.208-syzkaller #0 [ 399.865563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.865571] RIP: 0010:klist_next+0x48/0x450 [ 399.865576] Code: 48 89 fb 48 83 ec 18 80 3c 02 00 0f 85 e1 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c 24 50 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b4 02 00 00 4c 8d 6b 08 4d 8b 7c 24 50 48 b8 00 [ 399.865578] RSP: 0018:ffff8880aa34f6c0 EFLAGS: 00010206 [ 399.865582] RAX: dffffc0000000000 RBX: ffff8880aa34f740 RCX: ffffffff813d2053 [ 399.865584] RDX: 000000000000000a RSI: ffff8880aa34f740 RDI: 0000000000000050 [ 399.865586] RBP: ffff8880aa34f700 R08: ffffed101316f05d R09: ffffed101316f05c [ 399.865588] R10: ffffed101316f05c R11: ffff888098b782e3 R12: 0000000000000000 [ 399.865590] R13: 0000000000000000 R14: ffffffff86d984f0 R15: dffffc0000000000 [ 399.865593] FS: 00000000026b5400(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000 [ 399.865596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.865598] CR2: 00007fb07d261010 CR3: 00000000a1a86000 CR4: 00000000003406f0 [ 399.865603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.865607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.871208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.874570] Call Trace: [ 399.874582] ? synchronize_rcu_expedited+0xb0/0xb0 [ 399.874589] ? bt_link_release+0x20/0x20 [ 399.874594] device_find_child+0xb1/0x170 [ 399.874599] ? device_for_each_child+0x140/0x140 [ 399.874605] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 399.874613] ? trace_hardirqs_on+0x28/0x190 [ 399.879176] CR2: 00007f51d7333000 CR3: 00000000b3140000 CR4: 00000000003406e0 [ 399.882191] ? bt_link_release+0x20/0x20 [ 399.887278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.891243] hci_conn_del_sysfs+0xaa/0x150 [ 399.896043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.900722] hci_conn_cleanup+0x1ff/0x4e0 [ 399.905200] Kernel panic - not syncing: Fatal exception [ 399.909852] hci_conn_del+0x22c/0x6b0 [ 400.766328] hci_conn_hash_flush+0x171/0x230 [ 400.770811] hci_dev_do_close+0x5dc/0xf10 [ 400.775143] ? hci_dev_open+0x200/0x200 [ 400.779161] ? kasan_check_write+0x14/0x20 [ 400.783641] hci_unregister_dev+0x12f/0x400 [ 400.788032] vhci_release+0x6b/0xe0 [ 400.791742] __fput+0x249/0x7f0 [ 400.795186] ____fput+0x9/0x10 [ 400.798479] task_work_run+0x108/0x180 [ 400.802356] do_exit+0xa6a/0x2d90 [ 400.805797] ? mm_update_next_owner+0x680/0x680 [ 400.810541] ? do_wp_page+0xba6/0x20b0 [ 400.814432] ? get_signal+0x2ba/0x1970 [ 400.818324] ? _raw_spin_unlock_irq+0x27/0x90 [ 400.822977] ? get_signal+0x2ba/0x1970 [ 400.826980] do_group_exit+0xf8/0x2c0 [ 400.830884] get_signal+0x30b/0x1970 [ 400.834790] ? __lock_acquire+0x764/0x47c0 [ 400.839229] ? __do_page_fault+0x508/0xab0 [ 400.843560] do_signal+0x87/0x1870 [ 400.847195] ? mark_held_locks+0x130/0x130 [ 400.851709] ? up_read+0x1a/0x110 [ 400.855254] ? __do_page_fault+0x508/0xab0 [ 400.860108] ? setup_sigcontext+0x7d0/0x7d0 [ 400.864536] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 400.869384] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 400.874229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 400.879410] ? trace_hardirqs_on_caller+0x28/0x180 [ 400.884513] ? exit_to_usermode_loop+0x3a/0x1e0 [ 400.889244] ? syscall_return_slowpath+0x31a/0x3b0 [ 400.894154] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 400.898751] ? exit_to_usermode_loop+0x3a/0x1e0 [ 400.903880] ? trace_hardirqs_on+0x28/0x190 [ 400.908212] exit_to_usermode_loop+0x159/0x1e0 [ 400.912794] syscall_return_slowpath+0x31a/0x3b0 [ 400.918215] ret_from_fork+0x15/0x30 [ 400.922095] RIP: 0033:0x464bdb [ 400.925459] Code: Bad RIP value. [ 400.928831] RSP: 002b:00007ffc725692a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 400.936965] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000464bdb [ 400.944323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 400.952159] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000026b5400 [ 400.959936] R10: 00000000026b56d0 R11: 0000000000000246 R12: 0000000000000001 [ 400.967376] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc72569390 [ 400.974952] Modules linked in: [ 400.978858] Kernel Offset: disabled [ 400.982688] Rebooting in 86400 seconds..