[ 373.895229] Bluetooth: hci1 command 0x0401 tx timeout [ 375.985225] Bluetooth: hci1 command 0x0401 tx timeout [ 378.055120] Bluetooth: hci1 command 0x0401 tx timeout [ 380.135180] Bluetooth: hci1 command 0x0401 tx timeout [ 382.225082] Bluetooth: hci1 command 0x0401 tx timeout [ 384.295220] Bluetooth: hci1 command 0x0401 tx timeout [ 386.375460] Bluetooth: hci1 command 0x0401 tx timeout [ 388.455253] Bluetooth: hci1 command 0x0401 tx timeout [ 390.535100] Bluetooth: hci1 command 0x0401 tx timeout [ 392.625220] Bluetooth: hci1 command 0x0401 tx timeout [ 394.695089] Bluetooth: hci1 command 0x0401 tx timeout [ 396.775223] Bluetooth: hci1 command 0x0401 tx timeout [ 398.961644] Bluetooth: hci1 command 0x0401 tx timeout Warning: Permanently added '10.128.0.16' (ECDSA) to the list of known hosts. [ 399.495776] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 399.506846] ------------[ cut here ]------------ [ 399.511621] WARNING: CPU: 0 PID: 2342 at lib/debugobjects.c:290 debug_print_object.cold.8+0xa7/0xdb [ 399.520777] Modules linked in: [ 399.523944] CPU: 0 PID: 2342 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 399.531707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.541036] task: ffff8881ecad22c0 task.stack: ffff88817a2d0000 [ 399.547074] RIP: 0010:debug_print_object.cold.8+0xa7/0xdb [ 399.552585] RSP: 0018:ffff88817a2d7788 EFLAGS: 00010082 [ 399.557923] RAX: 0000000000000061 RBX: 0000000000000003 RCX: 0000000000000000 [ 399.565169] RDX: 0000000000000061 RSI: ffffffff86cbeca0 RDI: ffffed102f45aee8 [ 399.572418] RBP: ffff88817a2d77b0 R08: 0000000000000000 R09: 0000000000000000 [ 399.579678] R10: fffffbfff13446c9 R11: dffffc0000000000 R12: ffffffff86cb9f20 [ 399.586926] R13: ffffffff813a25f0 R14: 0000000000000000 R15: dffffc0000000000 [ 399.594184] FS: 00007f48764f9700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 399.602392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.608249] CR2: 0000559f2a4e99f0 CR3: 0000000007e6a003 CR4: 00000000001606f0 [ 399.615514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.622773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.630013] Call Trace: [ 399.632575] debug_check_no_obj_freed+0x4bc/0x890 [ 399.637409] ? debug_object_activate+0x4b0/0x4b0 [ 399.642139] kfree+0xbd/0x270 [ 399.645222] bt_host_release+0x10/0x20 [ 399.649104] device_release+0xd7/0x170 [ 399.652988] kobject_put+0x10d/0x1b0 [ 399.656677] put_device+0x12/0x20 [ 399.660103] hci_free_dev+0x10/0x20 [ 399.663702] vhci_release+0x73/0xe0 [ 399.667304] __fput+0x232/0x740 [ 399.670562] ? _raw_spin_unlock_irq+0x27/0x90 [ 399.675043] ____fput+0x9/0x10 [ 399.678231] task_work_run+0xe5/0x170 [ 399.682018] do_exit+0x98b/0x2c90 [ 399.685465] ? mm_update_next_owner+0x630/0x630 [ 399.690130] ? get_signal+0x2a5/0x1a90 [ 399.693993] ? lock_downgrade+0x7f0/0x7f0 [ 399.698115] do_group_exit+0xf8/0x2c0 [ 399.701912] get_signal+0x2f6/0x1a90 [ 399.705636] ? hci_sock_ioctl+0x199/0x600 [ 399.709781] ? hci_sock_sendmsg+0x22d0/0x22d0 [ 399.714250] do_signal+0x7f/0x18b0 [ 399.717782] ? sock_do_ioctl+0x62/0xa0 [ 399.721653] ? sock_ioctl+0x251/0x430 [ 399.725443] ? setup_sigcontext+0x7d0/0x7d0 [ 399.729747] ? do_vfs_ioctl+0x180/0xfb0 [ 399.733712] ? __fget+0x1a9/0x2f0 [ 399.737142] ? lock_downgrade+0x7f0/0x7f0 [ 399.741278] ? ioctl_preallocate+0x1a0/0x1a0 [ 399.745667] ? kick_process+0xe9/0x170 [ 399.749588] ? task_work_add+0x91/0xe0 [ 399.753453] ? exit_to_usermode_loop+0x3a/0x190 [ 399.758099] exit_to_usermode_loop+0x11e/0x190 [ 399.762656] do_syscall_64+0x416/0x5b0 [ 399.766526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.771343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 399.776524] RIP: 0033:0x465109 [ 399.779683] RSP: 002b:00007f48764f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.787366] RAX: fffffffffffffffc RBX: 000000000055d040 RCX: 0000000000465109 [ 399.794609] RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 [ 399.801871] RBP: 00000000004af711 R08: 0000000000000000 R09: 0000000000000000 [ 399.809156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055d040 [ 399.816428] R13: 00007ffda7bb220f R14: 00007f48764f9300 R15: 0000000000022000 [ 399.823681] Code: 87 48 89 fa 48 c1 ea 03 80 3c 02 00 75 42 48 8b 14 dd 60 1a 04 87 4d 89 e9 4d 89 e0 44 89 f1 48 c7 c7 80 10 04 87 e8 f4 85 f9 ff <0f> 0b e9 a2 a9 a5 fc 48 89 75 d8 e8 16 86 27 fb 48 8b 75 d8 eb [ 399.842729] ---[ end trace 25887867cd9b63b5 ]--- [ 399.847485] [ 399.847487] ====================================================== [ 399.847487] WARNING: possible circular locking dependency detected [ 399.847488] 4.14.227-syzkaller #0 Not tainted [ 399.847489] ------------------------------------------------------ [ 399.847490] syz-executor.4/2342 is trying to acquire lock: [ 399.847490] ((console_sem).lock){-...}, at: [] down_trylock+0x13/0x70 [ 399.847493] [ 399.847494] but task is already holding lock: [ 399.847494] (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x156/0x890 [ 399.847496] [ 399.847497] which lock already depends on the new lock. [ 399.847498] [ 399.847498] [ 399.847499] the existing dependency chain (in reverse order) is: [ 399.847499] [ 399.847500] -> #5 (&obj_hash[i].lock){-.-.}: [ 399.847502] lock_acquire+0x17e/0x3e0 [ 399.847503] _raw_spin_lock_irqsave+0x99/0xd0 [ 399.847503] debug_object_activate+0x112/0x4b0 [ 399.847504] enqueue_hrtimer+0x1f/0x330 [ 399.847505] hrtimer_start_range_ns+0x4d5/0x1040 [ 399.847505] schedule_hrtimeout_range_clock+0x138/0x2f0 [ 399.847506] schedule_hrtimeout+0x12/0x20 [ 399.847507] wait_task_inactive+0x49f/0x560 [ 399.847507] __kthread_bind_mask+0x19/0xa0 [ 399.847508] kthread_bind_mask+0xe/0x10 [ 399.847509] create_worker+0x2ea/0x570 [ 399.847509] workqueue_init+0x450/0x506 [ 399.847510] kernel_init_freeable+0x344/0x575 [ 399.847510] kernel_init+0xc/0x105 [ 399.847511] ret_from_fork+0x24/0x30 [ 399.847512] [ 399.847512] -> #4 (hrtimer_bases.lock){-.-.}: [ 399.847514] lock_acquire+0x17e/0x3e0 [ 399.847515] _raw_spin_lock_irqsave+0x99/0xd0 [ 399.847516] lock_hrtimer_base.isra.2+0x6b/0x140 [ 399.847516] hrtimer_start_range_ns+0x89/0x1040 [ 399.847517] enqueue_task_rt+0x5a3/0xdb0 [ 399.847518] __sched_setscheduler.constprop.14+0xd5f/0x26e0 [ 399.847518] _sched_setscheduler+0x113/0x190 [ 399.847519] sched_setscheduler+0xe/0x10 [ 399.847520] watchdog_enable+0x10c/0x170 [ 399.847520] smpboot_thread_fn+0x3c4/0x850 [ 399.847521] kthread+0x338/0x400 [ 399.847521] ret_from_fork+0x24/0x30 [ 399.847522] [ 399.847522] -> #3 (&rt_b->rt_runtime_lock){-.-.}: [ 399.847525] lock_acquire+0x17e/0x3e0 [ 399.847525] _raw_spin_lock+0x2d/0x40 [ 399.847526] enqueue_task_rt+0x530/0xdb0 [ 399.847526] __sched_setscheduler.constprop.14+0xd5f/0x26e0 [ 399.847527] _sched_setscheduler+0x113/0x190 [ 399.847528] sched_setscheduler+0xe/0x10 [ 399.847528] watchdog_enable+0x10c/0x170 [ 399.847529] smpboot_thread_fn+0x3c4/0x850 [ 399.847530] kthread+0x338/0x400 [ 399.847530] ret_from_fork+0x24/0x30 [ 399.847531] [ 399.847531] -> #2 (&rq->lock){-.-.}: [ 399.847533] lock_acquire+0x17e/0x3e0 [ 399.847534] _raw_spin_lock+0x2d/0x40 [ 399.847535] task_fork_fair+0x62/0x550 [ 399.847535] sched_fork+0x3a6/0xbd0 [ 399.847536] copy_process.part.6+0x15cb/0x6e40 [ 399.847537] _do_fork+0x162/0xc70 [ 399.847537] kernel_thread+0x24/0x30 [ 399.847538] rest_init+0x1d/0x23d [ 399.847538] start_kernel+0x567/0x58f [ 399.847539] x86_64_start_reservations+0x29/0x2b [ 399.847540] x86_64_start_kernel+0x76/0x79 [ 399.847540] secondary_startup_64+0xa5/0xb0 [ 399.847541] [ 399.847541] -> #1 (&p->pi_lock){-.-.}: [ 399.847543] lock_acquire+0x17e/0x3e0 [ 399.847544] _raw_spin_lock_irqsave+0x99/0xd0 [ 399.847545] try_to_wake_up+0x82/0x1110 [ 399.847546] wake_up_process+0x10/0x20 [ 399.847546] __up.isra.0+0x136/0x1a0 [ 399.847547] up+0x95/0xe0 [ 399.847547] __up_console_sem+0xa0/0x150 [ 399.847548] console_unlock+0x44a/0xe50 [ 399.847549] vt_ioctl+0x1c87/0x2090 [ 399.847550] tty_ioctl+0x438/0x1260 [ 399.847550] do_vfs_ioctl+0x180/0xfb0 [ 399.847551] SyS_ioctl+0x74/0x80 [ 399.847551] do_syscall_64+0x1c7/0x5b0 [ 399.847552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 399.847553] [ 399.847553] -> #0 ((console_sem).lock){-...}: [ 399.847555] __lock_acquire+0x32ee/0x42d0 [ 399.847556] lock_acquire+0x17e/0x3e0 [ 399.847556] _raw_spin_lock_irqsave+0x99/0xd0 [ 399.847557] down_trylock+0x13/0x70 [ 399.847558] __down_trylock_console_sem+0x93/0x1a0 [ 399.847558] console_trylock+0x11/0x50 [ 399.847559] vprintk_emit+0x1ab/0x4e0 [ 399.847560] vprintk_default+0x1a/0x20 [ 399.847560] vprintk_func+0x49/0x130 [ 399.847561] printk+0x91/0xab [ 399.847562] debug_print_object.cold.8+0xa7/0xdb [ 399.847562] debug_check_no_obj_freed+0x4bc/0x890 [ 399.847563] kfree+0xbd/0x270 [ 399.847563] bt_host_release+0x10/0x20 [ 399.847564] device_release+0xd7/0x170 [ 399.847565] kobject_put+0x10d/0x1b0 [ 399.847565] put_device+0x12/0x20 [ 399.847566] hci_free_dev+0x10/0x20 [ 399.847566] vhci_release+0x73/0xe0 [ 399.847567] __fput+0x232/0x740 [ 399.847568] ____fput+0x9/0x10 [ 399.847568] task_work_run+0xe5/0x170 [ 399.847569] do_exit+0x98b/0x2c90 [ 399.847569] do_group_exit+0xf8/0x2c0 [ 399.847570] get_signal+0x2f6/0x1a90 [ 399.847571] do_signal+0x7f/0x18b0 [ 399.847571] exit_to_usermode_loop+0x11e/0x190 [ 399.847572] do_syscall_64+0x416/0x5b0 [ 399.847573] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 399.847573] [ 399.847574] other info that might help us debug this: [ 399.847574] [ 399.847575] Chain exists of: [ 399.847575] (console_sem).lock --> hrtimer_bases.lock --> &obj_hash[i].lock [ 399.847578] [ 399.847579] Possible unsafe locking scenario: [ 399.847579] [ 399.847580] CPU0 CPU1 [ 399.847581] ---- ---- [ 399.847581] lock(&obj_hash[i].lock); [ 399.847582] lock(hrtimer_bases.lock); [ 399.847584] lock(&obj_hash[i].lock); [ 399.847585] lock((console_sem).lock); [ 399.847587] [ 399.847587] *** DEADLOCK *** [ 399.847588] [ 399.847588] 1 lock held by syz-executor.4/2342: [ 399.847589] #0: (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x156/0x890 [ 399.847591] [ 399.847592] stack backtrace: [ 399.847593] CPU: 0 PID: 2342 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 399.847594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.847594] Call Trace: [ 399.847595] dump_stack+0x14b/0x1e7 [ 399.847595] print_circular_bug.isra.17.cold.40+0x2e3/0x41e [ 399.847596] ? save_trace+0xe0/0x290 [ 399.847597] __lock_acquire+0x32ee/0x42d0 [ 399.847597] ? trace_hardirqs_on+0x10/0x10 [ 399.847598] ? netdev_bits+0xa0/0xa0 [ 399.847599] ? trace_hardirqs_on+0x10/0x10 [ 399.847599] ? kvm_clock_read+0x23/0x40 [ 399.847600] ? kvm_sched_clock_read+0x9/0x20 [ 399.847600] lock_acquire+0x17e/0x3e0 [ 399.847601] ? down_trylock+0x13/0x70 [ 399.847602] ? vprintk_emit+0x1ab/0x4e0 [ 399.847602] _raw_spin_lock_irqsave+0x99/0xd0 [ 399.847603] ? down_trylock+0x13/0x70 [ 399.847604] down_trylock+0x13/0x70 [ 399.847604] ? vprintk_emit+0x1ab/0x4e0 [ 399.847605] __down_trylock_console_sem+0x93/0x1a0 [ 399.847606] console_trylock+0x11/0x50 [ 399.847606] vprintk_emit+0x1ab/0x4e0 [ 399.847607] ? work_on_cpu_safe+0x60/0x60 [ 399.847607] vprintk_default+0x1a/0x20 [ 399.847608] vprintk_func+0x49/0x130 [ 399.847609] ? work_on_cpu_safe+0x60/0x60 [ 399.847609] printk+0x91/0xab [ 399.847610] ? log_store.cold.10+0x11/0x11 [ 399.847611] ? lock_acquire+0x17e/0x3e0 [ 399.847611] ? debug_check_no_obj_freed+0x156/0x890 [ 399.847612] ? work_on_cpu_safe+0x60/0x60 [ 399.847613] debug_print_object.cold.8+0xa7/0xdb [ 399.847613] debug_check_no_obj_freed+0x4bc/0x890 [ 399.847614] ? debug_object_activate+0x4b0/0x4b0 [ 399.847615] kfree+0xbd/0x270 [ 399.847615] bt_host_release+0x10/0x20 [ 399.847616] device_release+0xd7/0x170 [ 399.847616] kobject_put+0x10d/0x1b0 [ 399.847617] put_device+0x12/0x20 [ 399.847618] hci_free_dev+0x10/0x20 [ 399.847618] vhci_release+0x73/0xe0 [ 399.847619] __fput+0x232/0x740 [ 399.847619] ? _raw_spin_unlock_irq+0x27/0x90 [ 399.847620] ____fput+0x9/0x10 [ 399.847621] task_work_run+0xe5/0x170 [ 399.847621] do_exit+0x98b/0x2c90 [ 399.847622] ? mm_update_next_owner+0x630/0x630 [ 399.847622] ? get_signal+0x2a5/0x1a90 [ 399.847623] ? lock_downgrade+0x7f0/0x7f0 [ 399.847624] do_group_exit+0xf8/0x2c0 [ 399.847624] get_signal+0x2f6/0x1a90 [ 399.847625] ? hci_sock_ioctl+0x199/0x600 [ 399.847625] ? hci_sock_sendmsg+0x22d0/0x22d0 [ 399.847626] do_signal+0x7f/0x18b0 [ 399.847627] ? sock_do_ioctl+0x62/0xa0 [ 399.847627] ? sock_ioctl+0x251/0x430 [ 399.847628] ? setup_sigcontext+0x7d0/0x7d0 [ 399.847629] ? do_vfs_ioctl+0x180/0xfb0 [ 399.847629] ? __fget+0x1a9/0x2f0 [ 399.847630] ? lock_downgrade+0x7f0/0x7f0 [ 399.847630] ? ioctl_preallocate+0x1a0/0x1a0 [ 399.847631] ? kick_process+0xe9/0x170 [ 399.847632] ? task_work_add+0x91/0xe0 [ 399.847632] ? exit_to_usermode_loop+0x3a/0x190 [ 399.847633] exit_to_usermode_loop+0x11e/0x190 [ 399.847634] do_syscall_64+0x416/0x5b0 [ 399.847634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.847635] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 399.847635] RIP: 0033:0x465109 [ 399.847636] RSP: 002b:00007f48764f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.847638] RAX: fffffffffffffffc RBX: 000000000055d040 RCX: 0000000000465109 [ 399.847638] RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 [ 399.847639] RBP: 00000000004af711 R08: 0000000000000000 R09: 0000000000000000 [ 399.847644] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055d040 [ 399.847645] R13: 00007ffda7bb220f R14: 00007f48764f9300 R15: 0000000000022000 [ 400.907123] syz-executor.4 (5785) used greatest stack depth: 24344 bytes left [ 401.075760] syz-executor.3 (5781) used greatest stack depth: 24336 bytes left [ 401.376254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.382973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.390239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.397001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.403984] device bridge_slave_1 left promiscuous mode [ 401.409464] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.445554] device bridge_slave_0 left promiscuous mode [ 401.452053] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.506232] device veth1_macvtap left promiscuous mode [ 401.511557] device veth0_macvtap left promiscuous mode [ 401.517725] device veth1_vlan left promiscuous mode [ 401.522828] device veth0_vlan left promiscuous mode [ 401.589250] device hsr_slave_1 left promiscuous mode [ 401.626754] device hsr_slave_0 left promiscuous mode [ 401.668637] team0 (unregistering): Port device team_slave_1 removed [ 401.676821] team0 (unregistering): Port device team_slave_0 removed [ 401.684315] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 401.717599] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 401.763701] bond0 (unregistering): Released all slaves [ 402.796920] IPVS: ftp: loaded support on port[0] = 21 [ 402.935063] Bluetooth: hci1 command 0x0409 tx timeout [ 405.015068] Bluetooth: hci1 command 0x041b tx timeout [ 406.656833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.663563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.671033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.678067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.685303] device bridge_slave_1 left promiscuous mode [ 406.690740] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.715553] device bridge_slave_0 left promiscuous mode [ 406.721008] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.756843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.763562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.770960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.777917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.784776] device bridge_slave_1 left promiscuous mode [ 406.790564] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.825357] device bridge_slave_0 left promiscuous mode [ 406.830769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.896657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.903360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.910520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.917228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.924137] device bridge_slave_1 left promiscuous mode [ 406.929826] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.975463] device bridge_slave_0 left promiscuous mode [ 406.980887] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.036482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.043216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.050527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.057465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.064339] device bridge_slave_1 left promiscuous mode [ 407.070138] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.095020] Bluetooth: hci1 command 0x040f tx timeout [ 407.115319] device bridge_slave_0 left promiscuous mode [ 407.120761] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.186752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.193442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.200616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.207345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.214282] device bridge_slave_1 left promiscuous mode [ 407.220257] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.255553] device bridge_slave_0 left promiscuous mode [ 407.261029] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.307418] device veth1_macvtap left promiscuous mode [ 407.312691] device veth0_macvtap left promiscuous mode [ 407.318031] device veth1_vlan left promiscuous mode [ 407.323048] device veth0_vlan left promiscuous mode [ 407.328298] device veth1_macvtap left promiscuous mode [ 407.333590] device veth0_macvtap left promiscuous mode [ 407.338899] device veth1_vlan left promiscuous mode [ 407.343930] device veth0_vlan left promiscuous mode [ 407.349253] device veth1_macvtap left promiscuous mode [ 407.354528] device veth0_macvtap left promiscuous mode [ 407.359836] device veth1_vlan left promiscuous mode [ 407.364895] device veth0_vlan left promiscuous mode [ 407.370565] device veth1_macvtap left promiscuous mode [ 407.376053] device veth0_macvtap left promiscuous mode [ 407.381336] device veth1_vlan left promiscuous mode [ 407.386976] device veth0_vlan left promiscuous mode [ 407.392084] device veth1_macvtap left promiscuous mode [ 407.397795] device veth0_macvtap left promiscuous mode [ 407.403065] device veth1_vlan left promiscuous mode [ 407.408516] device veth0_vlan left promiscuous mode [ 407.590288] device hsr_slave_1 left promiscuous mode [ 407.636742] device hsr_slave_0 left promiscuous mode [ 407.708209] team0 (unregistering): Port device team_slave_1 removed [ 407.716905] team0 (unregistering): Port device team_slave_0 removed [ 407.724364] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 407.777100] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 407.822689] bond0 (unregistering): Released all slaves [ 407.917222] device hsr_slave_1 left promiscuous mode [ 407.966557] device hsr_slave_0 left promiscuous mode [ 408.028708] team0 (unregistering): Port device team_slave_1 removed [ 408.036836] team0 (unregistering): Port device team_slave_0 removed [ 408.044234] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.087246] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 408.132858] bond0 (unregistering): Released all slaves [ 408.226791] device hsr_slave_1 left promiscuous mode [ 408.266615] device hsr_slave_0 left promiscuous mode [ 408.318303] team0 (unregistering): Port device team_slave_1 removed [ 408.326246] team0 (unregistering): Port device team_slave_0 removed [ 408.333666] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.357316] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 408.403001] bond0 (unregistering): Released all slaves [ 408.527045] device hsr_slave_1 left promiscuous mode [ 408.576138] device hsr_slave_0 left promiscuous mode [ 408.618645] team0 (unregistering): Port device team_slave_1 removed [ 408.626785] team0 (unregistering): Port device team_slave_0 removed [ 408.634159] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.687043] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 408.732177] bond0 (unregistering): Released all slaves [ 408.846912] device hsr_slave_1 left promiscuous mode [ 408.896746] device hsr_slave_0 left promiscuous mode [ 408.939091] team0 (unregistering): Port device team_slave_1 removed [ 408.946639] team0 (unregistering): Port device team_slave_0 removed [ 408.953985] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.996521] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 409.042414] bond0 (unregistering): Released all slaves [ 409.185035] Bluetooth: hci1 command 0x0419 tx timeout *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated [ 409.473368] syz-executor827[2448] bad frame in rt_sigreturn frame:00007ffc43eb8438 ip:7ffc43eb8518 sp:0 orax:ffffffffffffffff *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated *** stack smashing detected ***: terminated