Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts.
executing program
[ 493.427405][ T3633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 493.434509][ T3633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 493.441618][ T3633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 493.449047][ T3633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 493.456425][ T3633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 493.463546][ T3633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 495.504920][ T14] Bluetooth: hci0: command 0x0409 tx timeout
[ 497.584929][ T1708] Bluetooth: hci0: command 0x041b tx timeout
[ 499.664952][ T1708] Bluetooth: hci0: command 0x040f tx timeout
[ 501.744975][ T1708] Bluetooth: hci0: command 0x0419 tx timeout
[ 503.824974][ T1708] Bluetooth: hci0: command 0x0405 tx timeout
[ 615.904895][ T1708] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.224846][ T28] INFO: task krfcommd:2706 blocked for more than 143 seconds.
[ 716.232308][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 716.241028][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.249793][ T28] task:krfcommd state:D stack:28984 pid: 2706 ppid: 2 flags:0x00004000
[ 716.259045][ T28] Call Trace:
[ 716.262328][ T28]
[ 716.265301][ T28] __schedule+0x937/0x1090
[ 716.269818][ T28] ? __sched_text_start+0x8/0x8
[ 716.274641][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.280381][ T28] ? __might_sleep+0xe0/0xe0
[ 716.285045][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.290250][ T28] schedule+0xeb/0x1b0
[ 716.294298][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.299681][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.304931][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.310508][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.315738][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.321447][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.327363][ T28] mutex_lock_nested+0x1a/0x20
[ 716.332118][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.337571][ T28] rfcomm_run+0x195/0x2c0
[ 716.341906][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.347210][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.353097][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.357777][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.363773][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.368904][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.374000][ T28] kthread+0x2a3/0x2d0
[ 716.378092][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.383367][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.388190][ T28] ret_from_fork+0x1f/0x30
[ 716.392644][ T28]
[ 716.395694][ T28] INFO: task syz-executor327:3637 blocked for more than 143 seconds.
[ 716.403741][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 716.412418][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.421107][ T28] task:syz-executor327 state:D stack:26552 pid: 3637 ppid: 3631 flags:0x00004006
[ 716.430332][ T28] Call Trace:
[ 716.433605][ T28]
[ 716.436556][ T28] __schedule+0x937/0x1090
[ 716.440968][ T28] ? __sched_text_start+0x8/0x8
[ 716.445817][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.451225][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.456356][ T28] ? __lock_sock+0x1ca/0x330
[ 716.461002][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.465880][ T28] schedule+0xeb/0x1b0
[ 716.469940][ T28] __lock_sock+0x1cf/0x330
[ 716.474339][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.479645][ T28] ? wake_bit_function+0x230/0x230
[ 716.484769][ T28] ? __rwlock_init+0x140/0x140
[ 716.489521][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.494696][ T28] lock_sock_nested+0x9f/0x100
[ 716.499696][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.505010][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.510029][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.514893][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.519994][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.525115][ T28] rfcomm_sock_release+0x55/0x120
[ 716.530128][ T28] sock_close+0xd8/0x260
[ 716.534442][ T28] ? sock_mmap+0x90/0x90
[ 716.538694][ T28] __fput+0x3fc/0x870
[ 716.542713][ T28] task_work_run+0x146/0x1c0
[ 716.547346][ T28] do_exit+0x5e3/0x20f0
[ 716.551496][ T28] ? get_signal+0x16f8/0x2330
[ 716.556226][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.561587][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.566619][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.572273][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.577742][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.582845][ T28] do_group_exit+0x2af/0x2b0
[ 716.587461][ T28] get_signal+0x1831/0x2330
[ 716.591960][ T28] ? ptrace_notify+0x340/0x340
[ 716.596733][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.601923][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 716.607685][ T28] ? __sys_connect_file+0x170/0x170
[ 716.612895][ T28] ? get_sigframe_size+0x10/0x10
[ 716.618028][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 716.623864][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 716.629624][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.635431][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.640904][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.646805][ T28] RIP: 0033:0x7f277be2a1b9
[ 716.651210][ T28] RSP: 002b:00007fff8f2cb6b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.659656][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f277be2a1b9
[ 716.667636][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.675648][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.683609][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 000055555648c2b8
[ 716.691586][ T28] R13: 0000000000000072 R14: 00007fff8f2cb710 R15: 0000000000000003
[ 716.699589][ T28]
[ 716.702605][ T28] INFO: lockdep is turned off.
[ 716.707360][ T28] NMI backtrace for cpu 0
[ 716.711671][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 716.722574][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.732606][ T28] Call Trace:
[ 716.735859][ T28]
[ 716.738766][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.743460][ T28] ? show_regs_print_info+0x12/0x12
[ 716.748638][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.754431][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 716.760298][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.765229][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.771356][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.777047][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 716.782914][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.788973][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.794927][ T28] watchdog+0xc82/0xcd0
[ 716.799076][ T28] kthread+0x2a3/0x2d0
[ 716.803118][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.808114][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.812681][ T28] ret_from_fork+0x1f/0x30
[ 716.817082][ T28]
[ 716.820141][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 716.825354][ C1] NMI backtrace for cpu 1
[ 716.825364][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 716.825380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.825388][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 716.825445][ C1] RIP: 0010:smp_call_function_many_cond+0xc22/0xe10
[ 716.825482][ C1] Code: 83 e6 01 31 ff e8 9e c6 0b 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0e e8 79 c2 0b 00 eb 4c 0f 1f 80 00 00 00 00 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 2b e8 56 c2
[ 716.825493][ C1] RSP: 0018:ffffc90000107820 EFLAGS: 00000293
[ 716.825504][ C1] RAX: ffffffff817a8fca RBX: 1ffff11017348405 RCX: ffff88813fe9ba00
[ 716.825514][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 716.825523][ C1] RBP: ffffc90000107960 R08: ffffffff817a8f92 R09: ffffffff8457a700
[ 716.825533][ C1] R10: 0000000000000009 R11: ffff88813fe9ba00 R12: 0000000000000000
[ 716.825541][ C1] R13: ffff8880b9a42028 R14: ffff8880b9b3ac80 R15: dffffc0000000000
[ 716.825551][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 716.825563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.825573][ C1] CR2: 00005577c62a7680 CR3: 000000000ca8e000 CR4: 00000000003506e0
[ 716.825585][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.825593][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.825602][ C1] Call Trace:
[ 716.825606][ C1]
[ 716.825613][ C1] ? text_poke_sync+0x20/0x20
[ 716.825648][ C1] ? smp_call_function_many+0x30/0x30
[ 716.825660][ C1] ? perf_event_bpf_output+0x240/0x240
[ 716.825739][ C1] ? text_poke_sync+0x20/0x20
[ 716.825754][ C1] on_each_cpu_cond_mask+0x3b/0x80
[ 716.825767][ C1] text_poke_bp_batch+0x64a/0x920
[ 716.825787][ C1] ? text_poke_loc_init+0x570/0x570
[ 716.825803][ C1] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 716.825817][ C1] ? __jump_label_update+0x32c/0x350
[ 716.825846][ C1] text_poke_finish+0x16/0x30
[ 716.825860][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 716.825873][ C1] static_key_enable_cpuslocked+0x12d/0x250
[ 716.825888][ C1] static_key_enable+0x16/0x20
[ 716.825901][ C1] toggle_allocation_gate+0xbf/0x460
[ 716.825913][ C1] ? show_object+0xa0/0xa0
[ 716.825925][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.825939][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 716.825953][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.825967][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.825981][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.825999][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.826015][ C1] process_one_work+0x83c/0x11a0
[ 716.826036][ C1] ? worker_detach_from_pool+0x260/0x260
[ 716.826059][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.826075][ C1] ? kthread_data+0x4d/0xc0
[ 716.826088][ C1] ? wq_worker_running+0x95/0x190
[ 716.826102][ C1] worker_thread+0xa6c/0x1290
[ 716.826125][ C1] kthread+0x2a3/0x2d0
[ 716.826137][ C1] ? rcu_lock_release+0x20/0x20
[ 716.826150][ C1] ? kthread_blkcg+0xd0/0xd0
[ 716.826164][ C1] ret_from_fork+0x1f/0x30
[ 716.826183][ C1]
[ 716.826357][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 717.143299][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 717.154201][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 717.164231][ T28] Call Trace:
[ 717.167486][ T28]
[ 717.170398][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 717.175055][ T28] ? show_regs_print_info+0x12/0x12
[ 717.180224][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 717.185923][ T28] ? vscnprintf+0x59/0x80
[ 717.190222][ T28] panic+0x313/0x890
[ 717.194139][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 717.199744][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.205871][ T28] ? nmi_panic+0x90/0x90
[ 717.210086][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 717.215434][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.221560][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 717.227687][ T28] watchdog+0xcc2/0xcd0
[ 717.231818][ T28] kthread+0x2a3/0x2d0
[ 717.235860][ T28] ? hungtask_pm_notify+0x50/0x50
[ 717.240857][ T28] ? kthread_blkcg+0xd0/0xd0
[ 717.245420][ T28] ret_from_fork+0x1f/0x30
[ 717.249812][ T28]
[ 717.253001][ T28] Kernel Offset: disabled
[ 717.257351][ T28] Rebooting in 86400 seconds..