IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
8021q: adding VLAN 0 to HW filter on device batadv0
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
BUG: sleeping function called from invalid context at net/core/sock.c:2831
in_atomic(): 1, irqs_disabled(): 0, pid: 1785, name: kworker/u5:2
6 locks held by kworker/u5:2/1785:
 #0: 00000000dfd2810e ((wq_completion)"%s"hdev->name#2){....}, at: wake_up_worker kernel/workqueue.c:838 [inline]
 #0: 00000000dfd2810e ((wq_completion)"%s"hdev->name#2){....}, at: process_one_work+0x1b1/0x4d0 kernel/workqueue.c:2116
 #1: 00000000437051ff ((work_completion)(&hdev->rx_work)){....}, at: wake_up_worker kernel/workqueue.c:838 [inline]
 #1: 00000000437051ff ((work_completion)(&hdev->rx_work)){....}, at: process_one_work+0x1b1/0x4d0 kernel/workqueue.c:2116
 #2: 0000000098255313 (&hdev->lock){....}, at: hci_sync_conn_complete_evt net/bluetooth/hci_event.c:4052 [inline]
 #2: 0000000098255313 (&hdev->lock){....}, at: hci_event_packet+0x1533/0x2f80 net/bluetooth/hci_event.c:5822
 #3: 0000000084e0608c (hci_cb_list_lock){....}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:1238 [inline]
 #3: 0000000084e0608c (hci_cb_list_lock){....}, at: hci_sync_conn_complete_evt net/bluetooth/hci_event.c:4103 [inline]
 #3: 0000000084e0608c (hci_cb_list_lock){....}, at: hci_event_packet+0x1644/0x2f80 net/bluetooth/hci_event.c:5822
 #4: 00000000b9f04730 (&(&conn->lock)->rlock#2){....}, at: spin_lock include/linux/spinlock.h:329 [inline]
 #4: 00000000b9f04730 (&(&conn->lock)->rlock#2){....}, at: sco_conn_ready net/bluetooth/sco.c:1036 [inline]
 #4: 00000000b9f04730 (&(&conn->lock)->rlock#2){....}, at: sco_connect_cfm net/bluetooth/sco.c:1121 [inline]
 #4: 00000000b9f04730 (&(&conn->lock)->rlock#2){....}, at: sco_connect_cfm+0x117/0x2d0 net/bluetooth/sco.c:1109
 #5: 00000000abf5f810 (slock-AF_BLUETOOTH-BTPROTO_SCO){....}, at: spin_lock include/linux/spinlock.h:329 [inline]
 #5: 00000000abf5f810 (slock-AF_BLUETOOTH-BTPROTO_SCO){....}, at: sco_conn_ready net/bluetooth/sco.c:1049 [inline]
 #5: 00000000abf5f810 (slock-AF_BLUETOOTH-BTPROTO_SCO){....}, at: sco_connect_cfm net/bluetooth/sco.c:1121 [inline]
 #5: 00000000abf5f810 (slock-AF_BLUETOOTH-BTPROTO_SCO){....}, at: sco_connect_cfm+0x1b7/0x2d0 net/bluetooth/sco.c:1109
CPU: 1 PID: 1785 Comm: kworker/u5:2 Not tainted 4.19.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: hci0 hci_rx_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x87/0xba lib/dump_stack.c:113
 ___might_sleep.cold.17+0xb1/0xc4 kernel/sched/core.c:6143
 __might_sleep+0x16/0x20 kernel/sched/core.c:6096
 lock_sock_nested+0x22/0xa0 net/core/sock.c:2831
 bt_accept_enqueue+0x3a/0xc0 net/bluetooth/af_bluetooth.c:162
 __sco_chan_add+0x33/0x60 net/bluetooth/sco.c:196
 sco_conn_ready net/bluetooth/sco.c:1065 [inline]
 sco_connect_cfm net/bluetooth/sco.c:1121 [inline]
 sco_connect_cfm+0x231/0x2d0 net/bluetooth/sco.c:1109
 hci_connect_cfm include/net/bluetooth/hci_core.h:1241 [inline]
 hci_sync_conn_complete_evt net/bluetooth/hci_event.c:4103 [inline]
 hci_event_packet+0x1676/0x2f80 net/bluetooth/hci_event.c:5822
 hci_rx_work+0x1c1/0x420 net/bluetooth/hci_core.c:4347
 process_one_work+0x255/0x4d0 kernel/workqueue.c:2153
 worker_thread+0x3e/0x330 kernel/workqueue.c:2296
 kthread+0x127/0x140 kernel/kthread.c:246
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413
list_add double add: new=ffff88022c4563d8, prev=ffff88022c4563d8, next=ffff8802344d30c0.
invalid opcode: 0000 [#1] SMP PTI
CPU: 1 PID: 743 Comm: kworker/u5:0 Tainted: G        W         4.19.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: hci0 hci_rx_work
RIP: 0010:__list_add_valid+0x46/0x50 lib/list_debug.c:29
Code: 95 00 00 00 48 39 f8 74 0c 48 39 fa 74 07 b8 01 00 00 00 5d c3 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 68 9c a7 82 e8 73 ca a7 ff <0f> 0b 0f 1f 84 00 00 00 00 00 48 b9 00 01 00 00 00 00 ad de 55 48
RSP: 0018:ffffc90001cefc18 EFLAGS: 00010246
RAX: 0000000000000058 RBX: ffff88022c4563d0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff880237b15788 RDI: ffff880237b15788
RBP: ffffc90001cefc18 R08: 0000000000000008 R09: 000000001e9aebcd
R10: 0000000000000000 R11: ffff8802355c88a8 R12: ffff880227e73090
R13: ffff8802344d30c0 R14: ffff88022c4563d8 R15: ffff88022c4563d8
FS:  0000000000000000(0000) GS:ffff880237b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d83450fa8 CR3: 0000000002c1e000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 kobj_kset_join lib/kobject.c:188 [inline]
 kobject_add_internal+0x80/0x240 lib/kobject.c:238
 kobject_add_varg lib/kobject.c:382 [inline]
 kobject_add+0x7d/0xb0 lib/kobject.c:426
 device_add+0x129/0x6f0 drivers/base/core.c:1879
 hci_conn_add_sysfs+0x49/0xc0 net/bluetooth/hci_sysfs.c:53
 hci_sync_conn_complete_evt net/bluetooth/hci_event.c:4080 [inline]
 hci_event_packet+0x2f03/0x2f80 net/bluetooth/hci_event.c:5822
 hci_rx_work+0x1c1/0x420 net/bluetooth/hci_core.c:4347
 process_one_work+0x255/0x4d0 kernel/workqueue.c:2153
 worker_thread+0x3e/0x330 kernel/workqueue.c:2296
 kthread+0x127/0x140 kernel/kthread.c:246
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413
Modules linked in:
---[ end trace 706380acc3f09219 ]---
RIP: 0010:__list_add_valid+0x46/0x50 lib/list_debug.c:29
Code: 95 00 00 00 48 39 f8 74 0c 48 39 fa 74 07 b8 01 00 00 00 5d c3 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 68 9c a7 82 e8 73 ca a7 ff <0f> 0b 0f 1f 84 00 00 00 00 00 48 b9 00 01 00 00 00 00 ad de 55 48
RSP: 0018:ffffc90001cefc18 EFLAGS: 00010246
RAX: 0000000000000058 RBX: ffff88022c4563d0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff880237b15788 RDI: ffff880237b15788
RBP: ffffc90001cefc18 R08: 0000000000000008 R09: 000000001e9aebcd
R10: 0000000000000000 R11: ffff8802355c88a8 R12: ffff880227e73090
R13: ffff8802344d30c0 R14: ffff88022c4563d8 R15: ffff88022c4563d8
FS:  0000000000000000(0000) GS:ffff880237b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d83450fa8 CR3: 0000000002c1e000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400