[ 50.365289] Bluetooth: hci4 command 0x0419 tx timeout [ 50.435724] Bluetooth: hci5 command 0x0419 tx timeout [ 163.788507] Bluetooth: hci0 command 0x0406 tx timeout [ 163.794034] Bluetooth: hci1 command 0x0406 tx timeout [ 163.824257] Bluetooth: hci2 command 0x0406 tx timeout [ 168.906063] Bluetooth: hci3 command 0x0406 tx timeout [ 168.925311] Bluetooth: hci4 command 0x0406 tx timeout [ 168.955373] Bluetooth: hci5 command 0x0406 tx timeout [ 192.427168] random: crng init done [ 192.431055] random: 7 urandom warning(s) missed due to ratelimiting [ 397.631339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.638345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.647507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.655178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.664717] device bridge_slave_1 left promiscuous mode [ 397.671722] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.712125] device bridge_slave_0 left promiscuous mode [ 397.718347] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.774172] device veth1_macvtap left promiscuous mode [ 397.780814] device veth0_macvtap left promiscuous mode [ 397.786152] device veth1_vlan left promiscuous mode [ 397.793001] device veth0_vlan left promiscuous mode [ 397.921716] device hsr_slave_1 left promiscuous mode [ 397.962824] device hsr_slave_0 left promiscuous mode [ 398.007178] team0 (unregistering): Port device team_slave_1 removed [ 398.017221] team0 (unregistering): Port device team_slave_0 removed [ 398.028196] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 398.063095] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 398.125904] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. [ 399.502598] IPVS: ftp: loaded support on port[0] = 21 [ 401.471786] list_del corruption, ffff8881d6ba3828->next is LIST_POISON1 (dead000000000100) [ 401.482451] ------------[ cut here ]------------ [ 401.488191] kernel BUG at lib/list_debug.c:47! [ 401.496324] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 401.503182] Modules linked in: [ 401.507424] CPU: 1 PID: 26628 Comm: kworker/u5:1 Not tainted 4.14.221-syzkaller #0 [ 401.516591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.527332] Workqueue: hci0 hci_rx_work [ 401.532399] task: ffff8881d3a566c0 task.stack: ffff8881c7e58000 [ 401.539138] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 401.546565] RSP: 0018:ffff8881c7e5f7e0 EFLAGS: 00010282 [ 401.553826] RAX: 000000000000004e RBX: ffff8881d6ba3828 RCX: 0000000000000000 [ 401.562876] RDX: 000000000000004e RSI: ffffffff86cbeba0 RDI: ffffed1038fcbef3 [ 401.571891] RBP: ffff8881c7e5f7f8 R08: ffff8881d3a56fb8 R09: 0000000000000000 [ 401.580013] R10: 0000000000000000 R11: dffffc0000000000 R12: dead000000000200 [ 401.588273] R13: dead000000000100 R14: ffff8881ef330cc0 R15: ffff8881ef330d40 [ 401.597807] FS: 0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 401.607171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.613747] CR2: 0000000001dd6608 CR3: 0000000007e6a002 CR4: 00000000001606e0 [ 401.621174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.628961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.636413] Call Trace: [ 401.639175] l2cap_chan_put+0x49/0x1a0 [ 401.643126] l2cap_recv_frame+0xeca/0x9e10 [ 401.647348] ? l2cap_ertm_init+0xb60/0xb60 [ 401.652022] ? __lock_acquire+0x701/0x42d0 [ 401.656250] ? trace_hardirqs_on+0x10/0x10 [ 401.660550] ? __lock_acquire+0x701/0x42d0 [ 401.665029] ? __lock_acquire+0x701/0x42d0 [ 401.669427] ? lock_acquire+0x17e/0x3e0 [ 401.673551] ? hci_rx_work+0x224/0x8e0 [ 401.677415] ? hci_rx_work+0x594/0x8e0 [ 401.681296] ? lock_downgrade+0x7f0/0x7f0 [ 401.685692] ? __mutex_unlock_slowpath+0x7d/0x7e0 [ 401.691081] ? wait_for_completion_io+0x20/0x20 [ 401.696060] l2cap_recv_acldata+0x756/0x8a0 [ 401.700632] hci_rx_work+0x5c9/0x8e0 [ 401.704500] process_one_work+0x74f/0x1620 [ 401.708718] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 401.713643] worker_thread+0xcc/0xee0 [ 401.718347] kthread+0x338/0x400 [ 401.722588] ? process_one_work+0x1620/0x1620 [ 401.727328] ? kthread_create_on_node+0xa0/0xa0 [ 401.732956] ret_from_fork+0x24/0x30 [ 401.737004] Code: 86 f9 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 e0 0c 04 87 e8 d4 86 f9 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 80 0c 04 87 e8 c0 86 f9 ff <0f> 0b 48 89 de 48 c7 c7 a0 0d 04 87 e8 af 86 f9 ff 0f 0b 48 89 [ 401.757569] RIP: __list_del_entry_valid.cold.1+0x26/0x4a RSP: ffff8881c7e5f7e0 [ 401.765599] ---[ end trace 47914b24040d47d2 ]--- [ 401.770461] Kernel panic - not syncing: Fatal exception [ 401.778577] Kernel Offset: disabled [ 401.782537] Rebooting in 86400 seconds..