[ 47.332276][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 47.340028][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 47.401978][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 47.408735][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 164.512570][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 164.519075][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 164.544166][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 164.556622][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 164.576838][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 164.594490][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 459.587037][ T2605] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.599800][ T6976] syz-executor.2 (6976) used greatest stack depth: 11704 bytes left [ 459.607861][ T6980] syz-executor.4 (6980) used greatest stack depth: 11632 bytes left [ 459.615884][ T6982] syz-executor.1 (6982) used greatest stack depth: 11616 bytes left [ 459.623983][ T6973] syz-executor.3 (6973) used greatest stack depth: 11400 bytes left [ 459.676798][ T2605] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.755533][ T2605] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.877998][ T2605] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.863564][ T2605] device hsr_slave_0 left promiscuous mode [ 460.870295][ T2605] device hsr_slave_1 left promiscuous mode [ 460.876942][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.884389][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.892652][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.899999][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.908347][ T2605] device bridge_slave_1 left promiscuous mode [ 460.915107][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.923477][ T2605] device bridge_slave_0 left promiscuous mode [ 460.929588][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.941392][ T2605] device veth1_macvtap left promiscuous mode [ 460.947545][ T2605] device veth0_macvtap left promiscuous mode [ 460.953594][ T2605] device veth1_vlan left promiscuous mode [ 460.959410][ T2605] device veth0_vlan left promiscuous mode [ 462.930930][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 462.940332][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 462.949720][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.960556][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.988603][ T2605] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. [ 463.451186][ T28] audit: type=1400 audit(1604369803.980:12): avc: denied { execmem } for pid=11450 comm="syz-executor145" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 464.136005][ T2605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.238653][ T2605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.343193][ T2605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.448237][ T2605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.580634][ T2605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.749890][ T2605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.839246][ T2605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.938220][ T2605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.057228][ T2605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.218910][ T2605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.329267][ T2605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.434628][ T2605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.552418][ T2605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.715642][ T2605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.817545][ T2605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.927954][ T2605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.072795][ T2605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.213558][ T2605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.324807][ T2605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.430406][ T2605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.796753][ T2605] device hsr_slave_0 left promiscuous mode [ 469.803577][ T2605] device hsr_slave_1 left promiscuous mode [ 469.809634][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.820633][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.828849][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.839753][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.848167][ T2605] device bridge_slave_1 left promiscuous mode [ 469.857444][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.865228][ T2605] device bridge_slave_0 left promiscuous mode [ 469.874910][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.885033][ T2605] device hsr_slave_0 left promiscuous mode [ 469.890989][ T2605] device hsr_slave_1 left promiscuous mode [ 469.897223][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.904814][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.913525][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.920906][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.929912][ T2605] device bridge_slave_1 left promiscuous mode [ 469.936379][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.944289][ T2605] device bridge_slave_0 left promiscuous mode [ 469.950361][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.960442][ T2605] device hsr_slave_0 left promiscuous mode [ 469.966637][ T2605] device hsr_slave_1 left promiscuous mode [ 469.972846][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.980208][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.988344][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.995915][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.004920][ T2605] device bridge_slave_1 left promiscuous mode [ 470.011115][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.018563][ T2605] device bridge_slave_0 left promiscuous mode [ 470.024693][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.034550][ T2605] device hsr_slave_0 left promiscuous mode [ 470.040626][ T2605] device hsr_slave_1 left promiscuous mode [ 470.048272][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.057859][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.067387][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.075142][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.083573][ T2605] device bridge_slave_1 left promiscuous mode [ 470.089676][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.097603][ T2605] device bridge_slave_0 left promiscuous mode [ 470.103820][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.112895][ T2605] device hsr_slave_0 left promiscuous mode [ 470.118868][ T2605] device hsr_slave_1 left promiscuous mode [ 470.124968][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.132541][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.140603][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.148224][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.156230][ T2605] device bridge_slave_1 left promiscuous mode [ 470.162680][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.170016][ T2605] device bridge_slave_0 left promiscuous mode [ 470.176562][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.189846][ T2605] device veth1_macvtap left promiscuous mode [ 470.196051][ T2605] device veth0_macvtap left promiscuous mode [ 470.202346][ T2605] device veth1_vlan left promiscuous mode [ 470.208061][ T2605] device veth0_vlan left promiscuous mode [ 470.214782][ T2605] device veth1_macvtap left promiscuous mode [ 470.221672][ T2605] device veth0_macvtap left promiscuous mode [ 470.227677][ T2605] device veth1_vlan left promiscuous mode [ 470.233923][ T2605] device veth0_vlan left promiscuous mode [ 470.240763][ T2605] device veth1_macvtap left promiscuous mode [ 470.247704][ T2605] device veth0_macvtap left promiscuous mode [ 470.254145][ T2605] device veth1_vlan left promiscuous mode [ 470.259880][ T2605] device veth0_vlan left promiscuous mode [ 470.266597][ T2605] device veth1_macvtap left promiscuous mode [ 470.272845][ T2605] device veth0_macvtap left promiscuous mode [ 470.278845][ T2605] device veth1_vlan left promiscuous mode [ 470.285004][ T2605] device veth0_vlan left promiscuous mode [ 470.291691][ T2605] device veth1_macvtap left promiscuous mode [ 470.297677][ T2605] device veth0_macvtap left promiscuous mode [ 470.304222][ T2605] device veth1_vlan left promiscuous mode [ 470.309956][ T2605] device veth0_vlan left promiscuous mode [ 482.747061][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 482.756664][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 482.765851][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.777694][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.804059][ T2605] bond0 (unregistering): Released all slaves [ 482.892210][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 482.901796][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 482.913222][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.924681][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.952237][ T2605] bond0 (unregistering): Released all slaves [ 483.019653][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 483.028973][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 483.039008][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.050173][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.081411][ T2605] bond0 (unregistering): Released all slaves [ 483.147055][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 483.156456][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 483.167800][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.178598][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.207698][ T2605] bond0 (unregistering): Released all slaves [ 483.259207][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 483.269218][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 483.279234][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.289799][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.317350][ T2605] bond0 (unregistering): Released all slaves [ 521.856525][T22903] ------------[ cut here ]------------ [ 521.862169][T22903] WARNING: CPU: 1 PID: 22903 at kernel/time/posix-timers.c:849 timer_wait_running+0x10f/0x120 [ 521.873303][T22903] Modules linked in: [ 521.877550][T22903] CPU: 0 PID: 22903 Comm: syz-executor145 Not tainted 5.10.0-rc2-syzkaller #0 [ 521.886461][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.896728][T22903] RIP: 0010:timer_wait_running+0x10f/0x120 [ 521.902546][T22903] Code: 0f 85 6a ff ff ff 48 c7 c2 60 95 e8 83 be 83 02 00 00 48 c7 c7 90 92 e8 83 c6 05 aa 5c 46 03 01 e8 93 2b d6 01 e9 46 ff ff ff <0f> 0b e9 5d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 54 55 53 48 [ 521.922438][T22903] RSP: 0018:ffffc9000b467e58 EFLAGS: 00010246 [ 521.928702][T22903] RAX: 0000000000000000 RBX: ffff88811f123618 RCX: 0000000000000001 [ 521.936799][T22903] RDX: 0000000080000001 RSI: ffffffff83f2e21b RDI: 00000000ffffffff [ 521.944795][T22903] RBP: ffffc9000b467e78 R08: 0000000000000001 R09: 0000000000000001 [ 521.952795][T22903] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 521.960862][T22903] R13: ffffffff8362e540 R14: ffffc9000b467e90 R15: 0000000000000000 [ 521.968855][T22903] FS: 00007f1cd5243700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 521.977868][T22903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.984450][T22903] CR2: 000000002000016c CR3: 000000011da00000 CR4: 00000000001506f0 [ 521.992731][T22903] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.001223][T22903] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 522.009216][T22903] Call Trace: [ 522.012510][T22903] do_timer_settime+0xc1/0x120 [ 522.017430][T22903] __x64_sys_timer_settime+0x6b/0xd0 [ 522.022743][T22903] ? syscall_enter_from_user_mode+0x1c/0x60 [ 522.028755][T22903] do_syscall_64+0x2d/0x70 [ 522.033174][T22903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.039119][T22903] RIP: 0033:0x4468e9 [ 522.043034][T22903] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.062765][T22903] RSP: 002b:00007f1cd5242db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 522.071248][T22903] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 00000000004468e9 [ 522.079266][T22903] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.087263][T22903] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 522.095222][T22903] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 522.103458][T22903] R13: 00007ffc6f340e8f R14: 00007f1cd52439c0 R15: 20c49ba5e353f7cf [ 522.111624][T22903] Kernel panic - not syncing: panic_on_warn set ... [ 522.118182][T22903] CPU: 0 PID: 22903 Comm: syz-executor145 Not tainted 5.10.0-rc2-syzkaller #0 [ 522.126982][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.136999][T22903] Call Trace: [ 522.140250][T22903] dump_stack+0xa3/0xc8 [ 522.144370][T22903] panic+0x135/0x31a [ 522.148230][T22903] ? timer_wait_running+0x10f/0x120 [ 522.153416][T22903] __warn.cold.13+0x4b/0x4b [ 522.157890][T22903] ? timer_wait_running+0x10f/0x120 [ 522.163051][T22903] report_bug+0xc0/0xf0 [ 522.167173][T22903] handle_bug+0x35/0x90 [ 522.171288][T22903] exc_invalid_op+0x13/0x60 [ 522.175763][T22903] asm_exc_invalid_op+0x12/0x20 [ 522.180586][T22903] RIP: 0010:timer_wait_running+0x10f/0x120 [ 522.186355][T22903] Code: 0f 85 6a ff ff ff 48 c7 c2 60 95 e8 83 be 83 02 00 00 48 c7 c7 90 92 e8 83 c6 05 aa 5c 46 03 01 e8 93 2b d6 01 e9 46 ff ff ff <0f> 0b e9 5d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 54 55 53 48 [ 522.205954][T22903] RSP: 0018:ffffc9000b467e58 EFLAGS: 00010246 [ 522.211985][T22903] RAX: 0000000000000000 RBX: ffff88811f123618 RCX: 0000000000000001 [ 522.219928][T22903] RDX: 0000000080000001 RSI: ffffffff83f2e21b RDI: 00000000ffffffff [ 522.227862][T22903] RBP: ffffc9000b467e78 R08: 0000000000000001 R09: 0000000000000001 [ 522.235796][T22903] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 522.243816][T22903] R13: ffffffff8362e540 R14: ffffc9000b467e90 R15: 0000000000000000 [ 522.251756][T22903] ? timer_wait_running+0x61/0x120 [ 522.256829][T22903] do_timer_settime+0xc1/0x120 [ 522.261555][T22903] __x64_sys_timer_settime+0x6b/0xd0 [ 522.266801][T22903] ? syscall_enter_from_user_mode+0x1c/0x60 [ 522.272667][T22903] do_syscall_64+0x2d/0x70 [ 522.277051][T22903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.282926][T22903] RIP: 0033:0x4468e9 [ 522.286779][T22903] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.306356][T22903] RSP: 002b:00007f1cd5242db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 522.314751][T22903] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 00000000004468e9 [ 522.322687][T22903] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.330651][T22903] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 522.338583][T22903] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 522.346517][T22903] R13: 00007ffc6f340e8f R14: 00007f1cd52439c0 R15: 20c49ba5e353f7cf [ 522.355942][T22903] Kernel Offset: disabled [ 522.360292][T22903] Rebooting in 86400 seconds..