DUID 00:04:a1:84:1b:e0:48:24:35:f8:15:f9:55:b5:79:ea:e6:3e
forked to background, child pid 3173
[ 20.345468][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.356630][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.234893][ T1129] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts.
executing program
[ 497.679410][ T3633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 497.686647][ T3633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 497.693867][ T3633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 497.701325][ T3635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 497.708894][ T3635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 497.716046][ T3635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 499.754206][ T142] Bluetooth: hci0: command 0x0409 tx timeout
[ 501.834197][ T6] Bluetooth: hci0: command 0x041b tx timeout
[ 503.914188][ T6] Bluetooth: hci0: command 0x040f tx timeout
[ 505.994218][ T6] Bluetooth: hci0: command 0x0419 tx timeout
[ 508.074187][ T6] Bluetooth: hci0: command 0x0405 tx timeout
[ 621.034150][ T6] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.234183][ T28] INFO: task krfcommd:2706 blocked for more than 143 seconds.
[ 716.241658][ T28] Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 716.250516][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.259220][ T28] task:krfcommd state:D stack:30008 pid: 2706 ppid: 2 flags:0x00004000
[ 716.268462][ T28] Call Trace:
[ 716.271745][ T28]
[ 716.274711][ T28] __schedule+0x937/0x1090
[ 716.279251][ T28] ? __sched_text_start+0x8/0x8
[ 716.284123][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.289769][ T28] ? __might_sleep+0xe0/0xe0
[ 716.294529][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.299746][ T28] schedule+0xeb/0x1b0
[ 716.303804][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.309214][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.314444][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.320045][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.325289][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.330949][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.336880][ T28] mutex_lock_nested+0x1a/0x20
[ 716.341637][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.347032][ T28] rfcomm_run+0x195/0x2c0
[ 716.351357][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.356680][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.362569][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.367139][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.373032][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.378195][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.383288][ T28] kthread+0x2a3/0x2d0
[ 716.387395][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.392688][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.397325][ T28] ret_from_fork+0x1f/0x30
[ 716.401820][ T28]
[ 716.404881][ T28] INFO: task syz-executor164:3636 blocked for more than 143 seconds.
[ 716.412933][ T28] Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 716.421640][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.430329][ T28] task:syz-executor164 state:D stack:26552 pid: 3636 ppid: 3631 flags:0x00004006
[ 716.439571][ T28] Call Trace:
[ 716.442844][ T28]
[ 716.445803][ T28] __schedule+0x937/0x1090
[ 716.450225][ T28] ? __sched_text_start+0x8/0x8
[ 716.455118][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.460553][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.465695][ T28] ? __lock_sock+0x1ca/0x330
[ 716.470373][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.475328][ T28] schedule+0xeb/0x1b0
[ 716.479397][ T28] __lock_sock+0x1cf/0x330
[ 716.483821][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.489125][ T28] ? wake_bit_function+0x230/0x230
[ 716.494258][ T28] ? __rwlock_init+0x140/0x140
[ 716.499014][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.504237][ T28] lock_sock_nested+0x9f/0x100
[ 716.509003][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.514340][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.519367][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.524246][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.529378][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.534559][ T28] rfcomm_sock_release+0x55/0x120
[ 716.539582][ T28] sock_close+0xd8/0x260
[ 716.543807][ T28] ? sock_mmap+0x90/0x90
[ 716.548068][ T28] __fput+0x3fc/0x870
[ 716.552114][ T28] task_work_run+0x146/0x1c0
[ 716.556754][ T28] do_exit+0x5e3/0x20f0
[ 716.560912][ T28] ? get_signal+0x16f8/0x2330
[ 716.565690][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.571081][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.576166][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.581863][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.587349][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.592460][ T28] do_group_exit+0x2af/0x2b0
[ 716.597101][ T28] get_signal+0x1831/0x2330
[ 716.601611][ T28] ? ptrace_notify+0x340/0x340
[ 716.606394][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.611749][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 716.617386][ T28] ? __sys_connect_file+0x170/0x170
[ 716.622583][ T28] ? get_sigframe_size+0x10/0x10
[ 716.627545][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 716.633424][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 716.639128][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.644921][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.650384][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.656324][ T28] RIP: 0033:0x7f67f5af71b9
[ 716.660732][ T28] RSP: 002b:00007fff870ff1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.669166][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f67f5af71b9
[ 716.677192][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.685193][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.693163][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555556b682b8
[ 716.701173][ T28] R13: 0000000000000072 R14: 00007fff870ff210 R15: 0000000000000003
[ 716.709163][ T28]
[ 716.712167][ T28] INFO: lockdep is turned off.
[ 716.716952][ T28] NMI backtrace for cpu 1
[ 716.721266][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 716.732169][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.742202][ T28] Call Trace:
[ 716.745460][ T28]
[ 716.748369][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.753088][ T28] ? show_regs_print_info+0x12/0x12
[ 716.758269][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.763997][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 716.769882][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.774844][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.780982][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.786695][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.792787][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.798753][ T28] watchdog+0xc82/0xcd0
[ 716.802938][ T28] kthread+0x2a3/0x2d0
[ 716.806992][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.812000][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.816572][ T28] ret_from_fork+0x1f/0x30
[ 716.820979][ T28]
[ 716.824087][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 716.829294][ C0] NMI backtrace for cpu 0
[ 716.829305][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 716.829321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.829329][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 716.829406][ C0] RIP: 0010:insn_get_opcode+0x81f/0xa90
[ 716.829449][ C0] Code: 0f 85 a8 01 00 00 41 8b 1e bd c0 07 08 00 be c0 07 08 00 21 de 31 ff e8 ff fa 28 fd 21 dd 74 24 e8 e6 f6 28 fd 48 8b 6c 24 20 <42> 8a 44 25 00 84 c0 48 8b 5c 24 50 0f 85 90 01 00 00 c6 03 01 45
[ 716.829460][ C0] RSP: 0018:ffffc900001076d8 EFLAGS: 00000293
[ 716.829470][ C0] RAX: ffffffff845d5ae4 RBX: 1ffff92000020f39 RCX: ffff88813fe7ba00
[ 716.829481][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 716.829489][ C0] RBP: 1ffff92000020f33 R08: ffffffff845d5ab4 R09: ffffc90000107980
[ 716.829499][ C0] R10: fffff52000020f3b R11: 0000000000000000 R12: dffffc0000000000
[ 716.829508][ C0] R13: 0000000000000000 R14: ffffc90000107990 R15: ffffc900001079cc
[ 716.829518][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 716.829529][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.829538][ C0] CR2: 0000558e1eb7ca88 CR3: 000000000ca8e000 CR4: 00000000003506f0
[ 716.829551][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.829559][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.829567][ C0] Call Trace:
[ 716.829571][ C0]
[ 716.829582][ C0] insn_get_modrm+0x205/0x760
[ 716.829600][ C0] insn_get_displacement+0x12a/0xa90
[ 716.829617][ C0] insn_get_immediate+0x404/0x1fe0
[ 716.829631][ C0] ? __mutex_trylock_common+0x1a8/0x300
[ 716.829643][ C0] ? kmem_cache_alloc+0xde/0x310
[ 716.829657][ C0] insn_decode+0x350/0x4c0
[ 716.829671][ C0] ? kmem_cache_alloc+0xde/0x310
[ 716.829682][ C0] __jump_label_patch+0xe0/0x2b0
[ 716.829718][ C0] ? kmem_cache_alloc+0xde/0x310
[ 716.829730][ C0] ? arch_jump_label_transform_queue+0xd0/0xd0
[ 716.829743][ C0] ? __mutex_lock_common+0x1914/0x2590
[ 716.829760][ C0] ? kmem_cache_alloc+0xde/0x310
[ 716.829771][ C0] ? kmem_cache_alloc+0xed/0x310
[ 716.829782][ C0] ? kmem_cache_alloc+0xdf/0x310
[ 716.829793][ C0] ? static_key_disable_cpuslocked+0x99/0x1b0
[ 716.829824][ C0] ? read_lock_is_recursive+0x10/0x10
[ 716.829838][ C0] ? mutex_lock_io_nested+0x60/0x60
[ 716.829853][ C0] arch_jump_label_transform_queue+0x49/0xd0
[ 716.829867][ C0] __jump_label_update+0x15d/0x350
[ 716.829902][ C0] static_key_disable_cpuslocked+0xcc/0x1b0
[ 716.829917][ C0] static_key_disable+0x16/0x20
[ 716.829929][ C0] toggle_allocation_gate+0x3c8/0x460
[ 716.829942][ C0] ? show_object+0xa0/0xa0
[ 716.829953][ C0] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.829967][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 716.829980][ C0] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.829994][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.830008][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.830024][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.830040][ C0] process_one_work+0x83c/0x11a0
[ 716.830060][ C0] ? worker_detach_from_pool+0x260/0x260
[ 716.830075][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.830090][ C0] ? kthread_data+0x4d/0xc0
[ 716.830102][ C0] ? wq_worker_running+0x95/0x190
[ 716.830116][ C0] worker_thread+0xa6c/0x1290
[ 716.830139][ C0] kthread+0x2a3/0x2d0
[ 716.830151][ C0] ? rcu_lock_release+0x20/0x20
[ 716.830163][ C0] ? kthread_blkcg+0xd0/0xd0
[ 716.830176][ C0] ret_from_fork+0x1f/0x30
[ 716.830196][ C0]
[ 716.830326][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 717.188284][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 717.199194][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 717.209230][ T28] Call Trace:
[ 717.212556][ T28]
[ 717.215491][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 717.220171][ T28] ? show_regs_print_info+0x12/0x12
[ 717.225365][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 717.231081][ T28] ? vscnprintf+0x59/0x80
[ 717.235410][ T28] panic+0x313/0x890
[ 717.239364][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 717.244981][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.251127][ T28] ? nmi_panic+0x90/0x90
[ 717.255351][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 717.260721][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.266862][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 717.273013][ T28] watchdog+0xcc2/0xcd0
[ 717.277161][ T28] kthread+0x2a3/0x2d0
[ 717.281223][ T28] ? hungtask_pm_notify+0x50/0x50
[ 717.286233][ T28] ? kthread_blkcg+0xd0/0xd0
[ 717.290804][ T28] ret_from_fork+0x1f/0x30
[ 717.295204][ T28]
[ 717.298456][ T28] Kernel Offset: disabled
[ 717.302766][ T28] Rebooting in 86400 seconds..