[ 45.143287][ T2931] Bluetooth: hci3: command 0x0419 tx timeout [ 45.151109][ T2931] Bluetooth: hci2: command 0x0419 tx timeout [ 45.157577][ T2931] Bluetooth: hci5: command 0x0419 tx timeout [ 45.163883][ T2931] Bluetooth: hci0: command 0x0419 tx timeout [ 159.437301][ T3317] Bluetooth: hci4: command 0x0406 tx timeout [ 159.437306][ T2931] Bluetooth: hci5: command 0x0406 tx timeout [ 159.437324][ T2931] Bluetooth: hci0: command 0x0406 tx timeout [ 159.444012][ T3317] Bluetooth: hci3: command 0x0406 tx timeout [ 159.451663][ T2931] Bluetooth: hci1: command 0x0406 tx timeout [ 159.470566][ T2931] Bluetooth: hci2: command 0x0406 tx timeout [ 398.364476][ T6177] syz-executor.0 (6177) used greatest stack depth: 11376 bytes left [ 398.652854][ T371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.770320][ T371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.889468][ T371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.982696][ T371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.732025][ T371] device hsr_slave_0 left promiscuous mode [ 400.770642][ T371] device hsr_slave_1 left promiscuous mode [ 400.851510][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.859256][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.868123][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.876133][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.884797][ T371] device bridge_slave_1 left promiscuous mode [ 400.892009][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.942590][ T371] device bridge_slave_0 left promiscuous mode [ 400.949034][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.005120][ T371] device veth1_macvtap left promiscuous mode [ 401.011799][ T371] device veth0_macvtap left promiscuous mode [ 401.017888][ T371] device veth1_vlan left promiscuous mode [ 401.024390][ T371] device veth0_vlan left promiscuous mode [ 403.312878][ T371] team0 (unregistering): Port device team_slave_1 removed [ 403.323935][ T371] team0 (unregistering): Port device team_slave_0 removed [ 403.333589][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.373382][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.484373][ T371] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. [ 403.733103][ T29] audit: type=1400 audit(1611153677.883:11): avc: denied { execmem } for pid=19135 comm="syz-executor263" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 403.850241][ C0] hrtimer: interrupt took 22821 ns [ 406.138060][ T371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.242244][ T371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.363489][ T371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.481351][ T371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.700464][ T371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.895983][ T371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.005782][ T371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.120901][ T371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.297890][ T371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.487426][ T371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.581346][ T371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.690889][ T371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.899937][ T371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.066251][ T371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.166130][ T371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.279923][ T371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.488825][ T371] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.667212][ T371] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.768429][ T371] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.858931][ T371] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.672066][ T371] device hsr_slave_0 left promiscuous mode [ 414.690226][ T371] device hsr_slave_1 left promiscuous mode [ 414.780277][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.789593][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.799253][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.811435][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.822278][ T371] device bridge_slave_1 left promiscuous mode [ 414.828404][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.860038][ T371] device bridge_slave_0 left promiscuous mode [ 414.866738][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.901568][ T371] device hsr_slave_0 left promiscuous mode [ 414.939795][ T371] device hsr_slave_1 left promiscuous mode [ 415.010605][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.020031][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.029065][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.037005][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.048564][ T371] device bridge_slave_1 left promiscuous mode [ 415.055098][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.100232][ T371] device bridge_slave_0 left promiscuous mode [ 415.107140][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.150996][ T371] device hsr_slave_0 left promiscuous mode [ 415.170179][ T371] device hsr_slave_1 left promiscuous mode [ 415.262006][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.270935][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.281091][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.289820][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.298355][ T371] device bridge_slave_1 left promiscuous mode [ 415.307831][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.350576][ T371] device bridge_slave_0 left promiscuous mode [ 415.357023][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.391601][ T371] device hsr_slave_0 left promiscuous mode [ 415.429830][ T371] device hsr_slave_1 left promiscuous mode [ 415.509700][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.517403][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.528680][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.536536][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.548198][ T371] device bridge_slave_1 left promiscuous mode [ 415.554737][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.602153][ T371] device bridge_slave_0 left promiscuous mode [ 415.609567][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.642246][ T371] device hsr_slave_0 left promiscuous mode [ 415.682763][ T371] device hsr_slave_1 left promiscuous mode [ 415.750365][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.757885][ T371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.767454][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.775313][ T371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.784368][ T371] device bridge_slave_1 left promiscuous mode [ 415.790795][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.810366][ T371] device bridge_slave_0 left promiscuous mode [ 415.816633][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.856696][ T371] device veth1_macvtap left promiscuous mode [ 415.863224][ T371] device veth0_macvtap left promiscuous mode [ 415.869530][ T371] device veth1_vlan left promiscuous mode [ 415.875670][ T371] device veth0_vlan left promiscuous mode [ 415.990031][ T371] device veth1_macvtap left promiscuous mode [ 415.996323][ T371] device veth0_macvtap left promiscuous mode [ 416.007425][ T371] device veth1_vlan left promiscuous mode [ 416.013641][ T371] device veth0_vlan left promiscuous mode [ 416.140249][ T371] device veth1_macvtap left promiscuous mode [ 416.146448][ T371] device veth0_macvtap left promiscuous mode [ 416.155812][ T371] device veth1_vlan left promiscuous mode [ 416.162133][ T371] device veth0_vlan left promiscuous mode [ 416.263332][ T371] device veth1_macvtap left promiscuous mode [ 416.270106][ T371] device veth0_macvtap left promiscuous mode [ 416.276312][ T371] device veth1_vlan left promiscuous mode [ 416.285684][ T371] device veth0_vlan left promiscuous mode [ 416.411208][ T371] device veth1_macvtap left promiscuous mode [ 416.417818][ T371] device veth0_macvtap left promiscuous mode [ 416.425533][ T371] device veth1_vlan left promiscuous mode [ 416.432810][ T371] device veth0_vlan left promiscuous mode [ 429.713492][ T371] team0 (unregistering): Port device team_slave_1 removed [ 429.724560][ T371] team0 (unregistering): Port device team_slave_0 removed [ 429.734910][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.761923][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.870782][ T371] bond0 (unregistering): Released all slaves [ 430.025044][ T371] team0 (unregistering): Port device team_slave_1 removed [ 430.035584][ T371] team0 (unregistering): Port device team_slave_0 removed [ 430.045684][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.101851][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.200949][ T371] bond0 (unregistering): Released all slaves [ 430.361468][ T371] team0 (unregistering): Port device team_slave_1 removed [ 430.372641][ T371] team0 (unregistering): Port device team_slave_0 removed [ 430.383452][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.431392][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.544006][ T371] bond0 (unregistering): Released all slaves [ 430.695863][ T371] team0 (unregistering): Port device team_slave_1 removed [ 430.706623][ T371] team0 (unregistering): Port device team_slave_0 removed [ 430.717028][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.750932][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.830988][ T371] bond0 (unregistering): Released all slaves [ 430.931419][ T371] team0 (unregistering): Port device team_slave_1 removed [ 430.942179][ T371] team0 (unregistering): Port device team_slave_0 removed [ 430.952592][ T371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.991338][ T371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.051140][ T371] bond0 (unregistering): Released all slaves [ 542.450781][ T771] ------------[ cut here ]------------ [ 542.456845][ T771] WARNING: CPU: 0 PID: 771 at kernel/time/posix-timers.c:849 timer_wait_running+0x10f/0x120 [ 542.468914][ T771] Modules linked in: [ 542.473517][ T771] CPU: 0 PID: 771 Comm: syz-executor263 Not tainted 5.11.0-rc4-syzkaller #0 [ 542.482942][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.493600][ T771] RIP: 0010:timer_wait_running+0x10f/0x120 [ 542.499799][ T771] Code: 0f 85 6a ff ff ff 48 c7 c2 20 b2 e9 83 be 8a 02 00 00 48 c7 c7 50 af e9 83 c6 05 e9 e9 65 03 01 e8 de 2d db 01 e9 46 ff ff ff <0f> 0b e9 5d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 54 55 53 48 [ 542.520008][ T771] RSP: 0018:ffffc900020ebe58 EFLAGS: 00010246 [ 542.526545][ T771] RAX: 0000000000000000 RBX: ffff888114062af8 RCX: 0000000000000001 [ 542.534960][ T771] RDX: 0000000000000001 RSI: ffffffff83f4152b RDI: 00000000ffffffff [ 542.543581][ T771] RBP: ffffc900020ebe78 R08: 0000000000000001 R09: 0000000000000001 [ 542.551988][ T771] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 542.560286][ T771] R13: ffffffff8362ea40 R14: ffffc900020ebe90 R15: 0000000000000000 [ 542.568651][ T771] FS: 00007fd8e1bfc700(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 542.578037][ T771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.585105][ T771] CR2: 00007fd8e1bdae78 CR3: 000000010b5ae005 CR4: 00000000001706e0 [ 542.593599][ T771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.602468][ T771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.610749][ T771] Call Trace: [ 542.614217][ T771] do_timer_settime+0xc1/0x120 [ 542.618999][ T771] __x64_sys_timer_settime+0x6b/0xd0 [ 542.624826][ T771] ? syscall_enter_from_user_mode+0x1c/0x60 [ 542.631358][ T771] do_syscall_64+0x2d/0x70 [ 542.635802][ T771] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.641942][ T771] RIP: 0033:0x4468e9 [ 542.646028][ T771] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.666346][ T771] RSP: 002b:00007fd8e1bfbdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 542.675077][ T771] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 00000000004468e9 [ 542.683352][ T771] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.692103][ T771] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 542.700426][ T771] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 542.708539][ T771] R13: 00007ffd17d061ff R14: 00007fd8e1bfc9c0 R15: 20c49ba5e353f7cf [ 542.716987][ T771] Kernel panic - not syncing: panic_on_warn set ... [ 542.723573][ T771] CPU: 0 PID: 771 Comm: syz-executor263 Not tainted 5.11.0-rc4-syzkaller #0 [ 542.732217][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.742246][ T771] Call Trace: [ 542.745507][ T771] dump_stack+0xa3/0xc8 [ 542.749645][ T771] panic+0x135/0x31a [ 542.753512][ T771] ? timer_wait_running+0x10f/0x120 [ 542.758976][ T771] __warn.cold.13+0x16/0x20 [ 542.763452][ T771] ? timer_wait_running+0x10f/0x120 [ 542.768624][ T771] report_bug+0xc0/0xf0 [ 542.772858][ T771] handle_bug+0x35/0x90 [ 542.776989][ T771] exc_invalid_op+0x13/0x60 [ 542.781683][ T771] asm_exc_invalid_op+0x12/0x20 [ 542.786746][ T771] RIP: 0010:timer_wait_running+0x10f/0x120 [ 542.792618][ T771] Code: 0f 85 6a ff ff ff 48 c7 c2 20 b2 e9 83 be 8a 02 00 00 48 c7 c7 50 af e9 83 c6 05 e9 e9 65 03 01 e8 de 2d db 01 e9 46 ff ff ff <0f> 0b e9 5d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 54 55 53 48 [ 542.812650][ T771] RSP: 0018:ffffc900020ebe58 EFLAGS: 00010246 [ 542.818797][ T771] RAX: 0000000000000000 RBX: ffff888114062af8 RCX: 0000000000000001 [ 542.827177][ T771] RDX: 0000000000000001 RSI: ffffffff83f4152b RDI: 00000000ffffffff [ 542.835339][ T771] RBP: ffffc900020ebe78 R08: 0000000000000001 R09: 0000000000000001 [ 542.843843][ T771] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 542.852477][ T771] R13: ffffffff8362ea40 R14: ffffc900020ebe90 R15: 0000000000000000 [ 542.860434][ T771] ? timer_wait_running+0x61/0x120 [ 542.865843][ T771] do_timer_settime+0xc1/0x120 [ 542.870705][ T771] __x64_sys_timer_settime+0x6b/0xd0 [ 542.876150][ T771] ? syscall_enter_from_user_mode+0x1c/0x60 [ 542.882059][ T771] do_syscall_64+0x2d/0x70 [ 542.886461][ T771] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.892336][ T771] RIP: 0033:0x4468e9 [ 542.896302][ T771] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.916757][ T771] RSP: 002b:00007fd8e1bfbdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 542.925149][ T771] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 00000000004468e9 [ 542.933277][ T771] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.941406][ T771] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 542.949600][ T771] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 542.958323][ T771] R13: 00007ffd17d061ff R14: 00007fd8e1bfc9c0 R15: 20c49ba5e353f7cf [ 542.968597][ T771] Kernel Offset: disabled [ 542.974185][ T771] Rebooting in 86400 seconds..