[ 397.681300] syz-executor.2 (5914) used greatest stack depth: 23128 bytes left [ 398.421428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.428638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.438938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.448157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.458325] device bridge_slave_1 left promiscuous mode [ 398.465203] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.513069] device bridge_slave_0 left promiscuous mode [ 398.519417] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.575589] device veth1_macvtap left promiscuous mode [ 398.582046] device veth0_macvtap left promiscuous mode [ 398.587757] device veth1_vlan left promiscuous mode [ 398.594056] device veth0_vlan left promiscuous mode [ 398.721517] device hsr_slave_1 left promiscuous mode [ 398.762246] device hsr_slave_0 left promiscuous mode [ 398.806919] team0 (unregistering): Port device team_slave_1 removed [ 398.818464] team0 (unregistering): Port device team_slave_0 removed [ 398.831734] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 398.882135] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 398.969671] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. [ 399.188358] IPVS: ftp: loaded support on port[0] = 21 [ 400.582387] list_del corruption, ffff8881ddfa1948->next is LIST_POISON1 (dead000000000100) [ 400.591339] ------------[ cut here ]------------ [ 400.596881] kernel BUG at lib/list_debug.c:47! [ 400.601953] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 400.607692] CPU: 1 PID: 909 Comm: kworker/u5:0 Not tainted 4.19.198-syzkaller #0 [ 400.616035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.625641] Workqueue: hci0 hci_rx_work [ 400.629785] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 400.635968] Code: f9 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 a5 67 87 e8 ca 68 f9 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 a4 67 87 e8 b6 68 f9 ff <0f> 0b 48 89 de 48 c7 c7 c0 a5 67 87 e8 a5 68 f9 ff 0f 0b 48 89 de [ 400.655833] RSP: 0018:ffff8881d58f76f8 EFLAGS: 00010282 [ 400.661357] RAX: 000000000000004e RBX: ffff8881ddfa1948 RCX: 0000000000000000 [ 400.668905] RDX: 0000000000000000 RSI: ffffffff8767a200 RDI: ffffffff8a19faa0 [ 400.676509] RBP: ffff8881d58f7710 R08: ffffed103ed25081 R09: ffffed103ed25080 [ 400.684536] R10: ffffed103ed25080 R11: ffff8881f6928407 R12: dead000000000200 [ 400.692224] R13: dead000000000100 R14: ffff8881d5016500 R15: ffff8881d5016580 [ 400.699558] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 400.708307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.714281] CR2: 0000000001f3c608 CR3: 000000000846d006 CR4: 00000000001606e0 [ 400.722079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.730125] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.737377] Call Trace: [ 400.740128] l2cap_chan_put+0x49/0x1a0 [ 400.744092] l2cap_recv_frame+0xf29/0xa430 [ 400.748477] ? hci_event_packet+0x5ec/0x72c0 [ 400.753228] ? quarantine_put+0xda/0x1c0 [ 400.757709] ? l2cap_ertm_init+0xa30/0xa30 [ 400.762689] ? __lock_acquire+0x764/0x47c0 [ 400.767138] ? update_group_capacity+0xb60/0xb60 [ 400.772288] ? __lock_acquire+0x764/0x47c0 [ 400.776596] ? mark_held_locks+0x130/0x130 [ 400.781781] ? __lock_acquire+0x764/0x47c0 [ 400.786168] ? mark_held_locks+0x130/0x130 [ 400.790811] ? __lock_acquire+0x764/0x47c0 [ 400.795206] ? hci_rx_work+0x231/0x8f0 [ 400.799161] ? lock_acquire+0x180/0x3a0 [ 400.803310] ? hci_rx_work+0x231/0x8f0 [ 400.807350] ? mark_held_locks+0x130/0x130 [ 400.811685] ? hci_rx_work+0x5a1/0x8f0 [ 400.815924] ? lock_downgrade+0x860/0x860 [ 400.820138] ? mark_held_locks+0xc7/0x130 [ 400.824261] ? kasan_check_write+0x14/0x20 [ 400.828472] ? __mutex_unlock_slowpath+0xe8/0x6a0 [ 400.833288] ? wait_for_completion_io+0x20/0x20 [ 400.837931] l2cap_recv_acldata+0x756/0x8a0 [ 400.842559] hci_rx_work+0x5d6/0x8f0 [ 400.846354] process_one_work+0x7b9/0x15a0 [ 400.850567] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 400.855564] ? lock_acquire+0x180/0x3a0 [ 400.859872] ? kasan_check_write+0x14/0x20 [ 400.865497] ? do_raw_spin_lock+0xd0/0x240 [ 400.869890] worker_thread+0x85/0xb60 [ 400.873844] ? __kthread_parkme+0x37/0x1c0 [ 400.878319] kthread+0x347/0x410 [ 400.882444] ? process_one_work+0x15a0/0x15a0 [ 400.886941] ? __kthread_cancel_work+0x170/0x170 [ 400.891849] ret_from_fork+0x24/0x30 [ 400.895810] Modules linked in: [ 400.899490] ---[ end trace 4f6e13a87035f1eb ]--- [ 400.904689] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 400.910837] Code: f9 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 a5 67 87 e8 ca 68 f9 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 a4 67 87 e8 b6 68 f9 ff <0f> 0b 48 89 de 48 c7 c7 c0 a5 67 87 e8 a5 68 f9 ff 0f 0b 48 89 de [ 400.930181] RSP: 0018:ffff8881d58f76f8 EFLAGS: 00010282 [ 400.935529] RAX: 000000000000004e RBX: ffff8881ddfa1948 RCX: 0000000000000000 [ 400.943464] RDX: 0000000000000000 RSI: ffffffff8767a200 RDI: ffffffff8a19faa0 [ 400.950936] RBP: ffff8881d58f7710 R08: ffffed103ed25081 R09: ffffed103ed25080 [ 400.958950] R10: ffffed103ed25080 R11: ffff8881f6928407 R12: dead000000000200 [ 400.966731] R13: dead000000000100 R14: ffff8881d5016500 R15: ffff8881d5016580 [ 400.975669] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 400.985322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.992109] CR2: 0000000001f3c608 CR3: 000000000846d006 CR4: 00000000001606e0 [ 400.999805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.008235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.015838] Kernel panic - not syncing: Fatal exception [ 401.023962] Kernel Offset: disabled [ 401.028406] Rebooting in 86400 seconds..