[ 51.826806] Bluetooth: hci1: command 0x0419 tx timeout [ 52.217165] Bluetooth: hci3: command 0x0419 tx timeout [ 52.226638] Bluetooth: hci4: command 0x0419 tx timeout [ 52.297064] Bluetooth: hci5: command 0x0419 tx timeout [ 165.327201] Bluetooth: hci0: command 0x0406 tx timeout [ 170.446874] Bluetooth: hci3: command 0x0406 tx timeout [ 170.455586] Bluetooth: hci1: command 0x0406 tx timeout [ 170.476617] Bluetooth: hci4: command 0x0406 tx timeout [ 170.500124] Bluetooth: hci5: command 0x0406 tx timeout [ 170.522209] Bluetooth: hci2: command 0x0406 tx timeout [ 399.582017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.590805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.600966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.608514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.617196] device bridge_slave_1 left promiscuous mode [ 399.624108] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.681157] device bridge_slave_0 left promiscuous mode [ 399.687466] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.723297] device veth1_macvtap left promiscuous mode [ 399.730160] device veth0_macvtap left promiscuous mode [ 399.735841] device veth1_vlan left promiscuous mode [ 399.742688] device veth0_vlan left promiscuous mode [ 399.851004] device hsr_slave_1 left promiscuous mode [ 399.900824] device hsr_slave_0 left promiscuous mode [ 399.958615] team0 (unregistering): Port device team_slave_1 removed [ 399.969291] team0 (unregistering): Port device team_slave_0 removed [ 399.980407] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 400.053185] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 400.128818] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. [ 400.987838] IPVS: ftp: loaded support on port[0] = 21 [ 402.501169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.509926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.522172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.531220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.542863] device bridge_slave_1 left promiscuous mode [ 402.551271] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.599183] device bridge_slave_0 left promiscuous mode [ 402.606160] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.640849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.651858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.662405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.673703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.684554] device bridge_slave_1 left promiscuous mode [ 402.693531] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.750612] device bridge_slave_0 left promiscuous mode [ 402.757641] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.790094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.797556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.807253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.816215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.826867] device bridge_slave_1 left promiscuous mode [ 402.834046] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.878865] device bridge_slave_0 left promiscuous mode [ 402.885023] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.933864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.941977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.951109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.958810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.967407] device bridge_slave_1 left promiscuous mode [ 402.973995] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.998597] device bridge_slave_0 left promiscuous mode [ 403.004918] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.040824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.048232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.056451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.066691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.076021] device bridge_slave_1 left promiscuous mode [ 403.083236] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.138727] device bridge_slave_0 left promiscuous mode [ 403.146303] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.204887] device veth1_macvtap left promiscuous mode [ 403.212063] device veth0_macvtap left promiscuous mode [ 403.219058] device veth1_vlan left promiscuous mode [ 403.225059] device veth0_vlan left promiscuous mode [ 403.234942] device veth1_macvtap left promiscuous mode [ 403.242260] device veth0_macvtap left promiscuous mode [ 403.249220] device veth1_vlan left promiscuous mode [ 403.255985] device veth0_vlan left promiscuous mode [ 403.263662] device veth1_macvtap left promiscuous mode [ 403.270764] device veth0_macvtap left promiscuous mode [ 403.278670] device veth1_vlan left promiscuous mode [ 403.284586] device veth0_vlan left promiscuous mode [ 403.290626] device veth1_macvtap left promiscuous mode [ 403.296447] device veth0_macvtap left promiscuous mode [ 403.303068] device veth1_vlan left promiscuous mode [ 403.309547] device veth0_vlan left promiscuous mode [ 403.315179] device veth1_macvtap left promiscuous mode [ 403.322073] device veth0_macvtap left promiscuous mode [ 403.329501] device veth1_vlan left promiscuous mode [ 403.335289] device veth0_vlan left promiscuous mode [ 403.660965] device hsr_slave_1 left promiscuous mode [ 403.701158] device hsr_slave_0 left promiscuous mode [ 403.739377] team0 (unregistering): Port device team_slave_1 removed [ 403.750669] team0 (unregistering): Port device team_slave_0 removed [ 403.759555] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 403.781471] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 403.841517] bond0 (unregistering): Released all slaves [ 403.949568] device hsr_slave_1 left promiscuous mode [ 403.984105] device hsr_slave_0 left promiscuous mode [ 404.021087] team0 (unregistering): Port device team_slave_1 removed [ 404.032668] team0 (unregistering): Port device team_slave_0 removed [ 404.044021] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.081242] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.107974] Bluetooth: hci0: command 0x0409 tx timeout [ 404.142504] bond0 (unregistering): Released all slaves [ 404.222845] device hsr_slave_1 left promiscuous mode [ 404.254527] device hsr_slave_0 left promiscuous mode [ 404.306488] team0 (unregistering): Port device team_slave_1 removed [ 404.319353] team0 (unregistering): Port device team_slave_0 removed [ 404.329996] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.361371] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.415605] bond0 (unregistering): Released all slaves [ 404.500353] device hsr_slave_1 left promiscuous mode [ 404.524195] device hsr_slave_0 left promiscuous mode [ 404.577000] team0 (unregistering): Port device team_slave_1 removed [ 404.590882] team0 (unregistering): Port device team_slave_0 removed [ 404.601604] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.641783] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.713837] bond0 (unregistering): Released all slaves [ 404.790965] device hsr_slave_1 left promiscuous mode [ 404.852018] device hsr_slave_0 left promiscuous mode [ 404.896107] team0 (unregistering): Port device team_slave_1 removed [ 404.906671] team0 (unregistering): Port device team_slave_0 removed [ 404.918475] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.961516] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 405.022636] bond0 (unregistering): Released all slaves [ 406.187713] Bluetooth: hci0: command 0x041b tx timeout [ 407.676190] list_del corruption, ffff8881c5a16e88->next is LIST_POISON1 (dead000000000100) [ 407.687405] ------------[ cut here ]------------ [ 407.695506] kernel BUG at lib/list_debug.c:47! [ 407.701658] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 407.707707] CPU: 1 PID: 7239 Comm: kworker/u5:1 Not tainted 4.19.188-syzkaller #0 [ 407.717699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.728261] Workqueue: hci0 hci_rx_work [ 407.733352] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 407.740205] Code: f9 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 40 a0 67 87 e8 e7 67 f9 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 e0 9f 67 87 e8 d3 67 f9 ff <0f> 0b 48 89 de 48 c7 c7 00 a1 67 87 e8 c2 67 f9 ff 0f 0b 48 89 de [ 407.760341] RSP: 0018:ffff8881df49f6f8 EFLAGS: 00010282 [ 407.766067] RAX: 000000000000004e RBX: ffff8881c5a16e88 RCX: 0000000000000000 [ 407.774935] RDX: 0000000000000000 RSI: ffffffff87679d40 RDI: ffffffff8a1a0aa0 [ 407.782641] RBP: ffff8881df49f710 R08: ffffed103ed25081 R09: ffffed103ed25080 [ 407.791314] R10: ffffed103ed25080 R11: ffff8881f6928407 R12: dead000000000200 [ 407.799771] R13: dead000000000100 R14: ffff8881d39e4780 R15: ffff8881d39e4800 [ 407.807756] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 407.817582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.824635] CR2: 00000000007bc608 CR3: 000000000846d005 CR4: 00000000001606e0 [ 407.835045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.843408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.851589] Call Trace: [ 407.854365] l2cap_chan_put+0x49/0x1a0 [ 407.858616] l2cap_recv_frame+0xf29/0xa430 [ 407.863410] ? hci_event_packet+0x5ec/0x7230 [ 407.868071] ? quarantine_put+0xda/0x1c0 [ 407.872378] ? l2cap_ertm_init+0xa30/0xa30 [ 407.876801] ? __lock_acquire+0x764/0x47c0 [ 407.881452] ? update_group_capacity+0xb60/0xb60 [ 407.886561] ? __lock_acquire+0x764/0x47c0 [ 407.891431] ? mark_held_locks+0x130/0x130 [ 407.895730] ? __lock_acquire+0x764/0x47c0 [ 407.900202] ? mark_held_locks+0x130/0x130 [ 407.904977] ? __lock_acquire+0x764/0x47c0 [ 407.909916] ? hci_rx_work+0x231/0x8f0 [ 407.914243] ? lock_acquire+0x180/0x3a0 [ 407.918456] ? hci_rx_work+0x231/0x8f0 [ 407.923367] ? mark_held_locks+0x130/0x130 [ 407.927706] ? hci_rx_work+0x5a1/0x8f0 [ 407.932017] ? lock_downgrade+0x860/0x860 [ 407.936508] ? mark_held_locks+0xc7/0x130 [ 407.940939] ? kasan_check_write+0x14/0x20 [ 407.945856] ? __mutex_unlock_slowpath+0xe8/0x6a0 [ 407.951520] ? wait_for_completion_io+0x20/0x20 [ 407.956467] l2cap_recv_acldata+0x756/0x8a0 [ 407.961340] hci_rx_work+0x5d6/0x8f0 [ 407.965220] process_one_work+0x7b9/0x15a0 [ 407.969947] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 407.974971] ? lock_acquire+0x180/0x3a0 [ 407.979020] ? kasan_check_write+0x14/0x20 [ 407.983236] ? do_raw_spin_lock+0xd0/0x240 [ 407.987714] worker_thread+0x85/0xb60 [ 407.991954] ? __kthread_parkme+0x37/0x1c0 [ 407.996167] kthread+0x347/0x410 [ 408.000048] ? process_one_work+0x15a0/0x15a0 [ 408.005062] ? kthread_park+0x100/0x100 [ 408.009218] ret_from_fork+0x24/0x30 [ 408.013287] Modules linked in: [ 408.016735] ---[ end trace 03754a96d7dd9698 ]--- [ 408.021762] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 408.027658] Code: f9 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 40 a0 67 87 e8 e7 67 f9 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 e0 9f 67 87 e8 d3 67 f9 ff <0f> 0b 48 89 de 48 c7 c7 00 a1 67 87 e8 c2 67 f9 ff 0f 0b 48 89 de [ 408.048488] RSP: 0018:ffff8881df49f6f8 EFLAGS: 00010282 [ 408.054266] RAX: 000000000000004e RBX: ffff8881c5a16e88 RCX: 0000000000000000 [ 408.062197] RDX: 0000000000000000 RSI: ffffffff87679d40 RDI: ffffffff8a1a0aa0 [ 408.070227] RBP: ffff8881df49f710 R08: ffffed103ed25081 R09: ffffed103ed25080 [ 408.078052] R10: ffffed103ed25080 R11: ffff8881f6928407 R12: dead000000000200 [ 408.085604] R13: dead000000000100 R14: ffff8881d39e4780 R15: ffff8881d39e4800 [ 408.094273] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 408.103115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.109388] CR2: 00000000007bc608 CR3: 000000000846d005 CR4: 00000000001606e0 [ 408.117238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.124980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.132720] Kernel panic - not syncing: Fatal exception [ 408.140837] Kernel Offset: disabled [ 408.144922] Rebooting in 86400 seconds..