DUID 00:04:2f:bc:f2:2f:e4:1d:55:f7:99:3b:0f:15:66:5c:e9:07
forked to background, child pid 3173
[ 20.447653][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.458234][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.241520][ T142] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts.
executing program
[ 320.723764][ T3613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 320.730946][ T3613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 320.738142][ T3613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 320.746282][ T3613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 320.753723][ T3613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 320.760847][ T3613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 322.801089][ T1128] Bluetooth: hci0: command 0x0409 tx timeout
[ 324.881119][ T1128] Bluetooth: hci0: command 0x041b tx timeout
[ 326.961141][ T1128] Bluetooth: hci0: command 0x040f tx timeout
[ 329.041125][ T1128] Bluetooth: hci0: command 0x0419 tx timeout
[ 331.121154][ T1128] Bluetooth: hci0: command 0x0405 tx timeout
[ 446.961110][ T1128] Bluetooth: hci0: command 0x0406 tx timeout
[ 572.881189][ T28] INFO: task krfcommd:2707 blocked for more than 143 seconds.
[ 572.888662][ T28] Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 572.897489][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 572.906174][ T28] task:krfcommd state:D stack:28696 pid: 2707 ppid: 2 flags:0x00004000
[ 572.915410][ T28] Call Trace:
[ 572.918682][ T28]
[ 572.921622][ T28] __schedule+0x937/0x1090
[ 572.926136][ T28] ? __sched_text_start+0x8/0x8
[ 572.930962][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 572.936488][ T28] ? __might_sleep+0xe0/0xe0
[ 572.941133][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 572.946322][ T28] schedule+0xeb/0x1b0
[ 572.950370][ T28] schedule_preempt_disabled+0xf/0x20
[ 572.955747][ T28] __mutex_lock_common+0xd1f/0x2590
[ 572.960944][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 572.966552][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 572.971755][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 572.977367][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 572.983264][ T28] mutex_lock_nested+0x1a/0x20
[ 572.988019][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 572.993409][ T28] rfcomm_run+0x195/0x2c0
[ 572.997754][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 573.003052][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.008940][ T28] ? wait_woken+0x1b0/0x1b0
[ 573.013482][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.019367][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.024494][ T28] ? __kthread_parkme+0x166/0x1c0
[ 573.029571][ T28] kthread+0x2a3/0x2d0
[ 573.033674][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 573.038956][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.043993][ T28] ret_from_fork+0x1f/0x30
[ 573.048444][ T28]
[ 573.051492][ T28] INFO: task syz-executor340:3618 blocked for more than 143 seconds.
[ 573.059540][ T28] Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 573.068234][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 573.076899][ T28] task:syz-executor340 state:D stack:26552 pid: 3618 ppid: 3612 flags:0x00004006
[ 573.086108][ T28] Call Trace:
[ 573.089375][ T28]
[ 573.092312][ T28] __schedule+0x937/0x1090
[ 573.096723][ T28] ? __sched_text_start+0x8/0x8
[ 573.101583][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 573.106987][ T28] ? trace_lock_acquire+0x59/0x190
[ 573.112102][ T28] ? __lock_sock+0x1ca/0x330
[ 573.116731][ T28] ? _local_bh_enable+0xa0/0xa0
[ 573.121624][ T28] schedule+0xeb/0x1b0
[ 573.125686][ T28] __lock_sock+0x1cf/0x330
[ 573.130079][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 573.135366][ T28] ? wake_bit_function+0x230/0x230
[ 573.140816][ T28] ? __rwlock_init+0x140/0x140
[ 573.145585][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 573.150779][ T28] lock_sock_nested+0x9f/0x100
[ 573.155558][ T28] rfcomm_sk_state_change+0x63/0x300
[ 573.160845][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 573.165896][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 573.170762][ T28] __rfcomm_sock_close+0x101/0x220
[ 573.175887][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 573.180992][ T28] rfcomm_sock_release+0x55/0x120
[ 573.186047][ T28] sock_close+0xd8/0x260
[ 573.190275][ T28] ? sock_mmap+0x90/0x90
[ 573.194520][ T28] __fput+0x3fc/0x870
[ 573.198549][ T28] task_work_run+0x146/0x1c0
[ 573.203148][ T28] do_exit+0x5e3/0x20f0
[ 573.207292][ T28] ? get_signal+0x16f8/0x2330
[ 573.212018][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 573.217388][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 573.222417][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.228077][ T28] ? print_irqtrace_events+0x220/0x220
[ 573.233539][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.238659][ T28] do_group_exit+0x2af/0x2b0
[ 573.243520][ T28] get_signal+0x1831/0x2330
[ 573.248019][ T28] ? ptrace_notify+0x340/0x340
[ 573.252782][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.257975][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 573.263565][ T28] ? __sys_connect_file+0x170/0x170
[ 573.268754][ T28] ? get_sigframe_size+0x10/0x10
[ 573.273706][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 573.279554][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 573.285198][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 573.290935][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 573.296421][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 573.302333][ T28] RIP: 0033:0x7f369c26e3f9
[ 573.306729][ T28] RSP: 002b:00007ffdb9c77ab8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 573.315143][ T28] RAX: fffffffffffffffc RBX: 0000555556f653b8 RCX: 00007f369c26e3f9
[ 573.323126][ T28] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000004
[ 573.331101][ T28] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[ 573.339063][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 573.347292][ T28] R13: 0000000000000072 R14: 00007ffdb9c77b40 R15: 0000000000000000
[ 573.355273][ T28]
[ 573.358273][ T28] INFO: lockdep is turned off.
[ 573.363040][ T28] NMI backtrace for cpu 1
[ 573.367357][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 573.378260][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.388286][ T28] Call Trace:
[ 573.391549][ T28]
[ 573.394458][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.399178][ T28] ? show_regs_print_info+0x12/0x12
[ 573.404362][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.410067][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 573.415939][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 573.421418][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 573.427560][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.433277][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 573.439172][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 573.445273][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 573.451242][ T28] watchdog+0xc82/0xcd0
[ 573.455414][ T28] kthread+0x2a3/0x2d0
[ 573.459474][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.464484][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.469131][ T28] ret_from_fork+0x1f/0x30
[ 573.473547][ T28]
[ 573.476602][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 573.481823][ C0] NMI backtrace for cpu 0
[ 573.481834][ C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 573.481849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.481857][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 573.481923][ C0] RIP: 0010:insn_get_displacement+0x0/0xa90
[ 573.481962][ C0] Code: ff ff e8 03 cc 7a fd e9 d5 fe ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e2 fe ff ff 4c 89 ef e8 a8 cb 7a fd e9 d5 fe ff ff 0f 1f 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 28 49 89 fc 48 bd 00 00 00
[ 573.481973][ C0] RSP: 0018:ffffc900000d7880 EFLAGS: 00000246
[ 573.481984][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88813fe7d700
[ 573.481993][ C0] RDX: ffff88813fe7d700 RSI: 0000000000000000 RDI: ffffc900000d7980
[ 573.482002][ C0] RBP: 1ffff9200001af37 R08: ffffffff845d74f9 R09: ffffc900000d7980
[ 573.482012][ C0] R10: fffff5200001af3b R11: 0000000000000000 R12: dffffc0000000000
[ 573.482021][ C0] R13: 0000000000000000 R14: ffffc900000d7980 R15: ffffc900000d79bc
[ 573.482035][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 573.482046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 573.482056][ C0] CR2: 00007fb1d781a990 CR3: 000000000ca8e000 CR4: 00000000003506f0
[ 573.482068][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 573.482076][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 573.482084][ C0] Call Trace:
[ 573.482088][ C0]
[ 573.482092][ C0] insn_get_immediate+0x404/0x1fe0
[ 573.482108][ C0] ? __mutex_trylock_common+0x1a8/0x300
[ 573.482121][ C0] ? kmem_cache_alloc+0xde/0x310
[ 573.482134][ C0] insn_decode+0x350/0x4c0
[ 573.482149][ C0] ? kmem_cache_alloc+0xde/0x310
[ 573.482160][ C0] __jump_label_patch+0xe0/0x2b0
[ 573.482194][ C0] ? kmem_cache_alloc+0xde/0x310
[ 573.482205][ C0] ? arch_jump_label_transform_queue+0xd0/0xd0
[ 573.482219][ C0] ? __mutex_lock_common+0x1914/0x2590
[ 573.482236][ C0] ? kmem_cache_alloc+0xde/0x310
[ 573.482246][ C0] ? kmem_cache_alloc+0xed/0x310
[ 573.482257][ C0] ? kmem_cache_alloc+0xde/0x310
[ 573.482268][ C0] ? static_key_disable_cpuslocked+0x99/0x1b0
[ 573.482297][ C0] ? read_lock_is_recursive+0x10/0x10
[ 573.482311][ C0] ? mutex_lock_io_nested+0x60/0x60
[ 573.482325][ C0] arch_jump_label_transform_queue+0x49/0xd0
[ 573.482340][ C0] __jump_label_update+0x15d/0x350
[ 573.482368][ C0] static_key_disable_cpuslocked+0xcc/0x1b0
[ 573.482382][ C0] static_key_disable+0x16/0x20
[ 573.482395][ C0] toggle_allocation_gate+0x3c8/0x460
[ 573.482408][ C0] ? show_object+0xa0/0xa0
[ 573.482418][ C0] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.482432][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 573.482445][ C0] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.482459][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 573.482473][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.482489][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 573.482504][ C0] process_one_work+0x83c/0x11a0
[ 573.482524][ C0] ? worker_detach_from_pool+0x260/0x260
[ 573.482540][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 573.482554][ C0] ? kthread_data+0x4d/0xc0
[ 573.482567][ C0] ? wq_worker_running+0x95/0x190
[ 573.482581][ C0] worker_thread+0xa6c/0x1290
[ 573.482604][ C0] kthread+0x2a3/0x2d0
[ 573.482615][ C0] ? rcu_lock_release+0x20/0x20
[ 573.482628][ C0] ? kthread_blkcg+0xd0/0xd0
[ 573.482641][ C0] ret_from_fork+0x1f/0x30
[ 573.482660][ C0]
[ 573.482821][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 573.830747][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10753-gbddac7c1e02b #0
[ 573.841660][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.851693][ T28] Call Trace:
[ 573.854959][ T28]
[ 573.857876][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.862553][ T28] ? show_regs_print_info+0x12/0x12
[ 573.867736][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.873443][ T28] ? vscnprintf+0x59/0x80
[ 573.877753][ T28] panic+0x313/0x890
[ 573.881683][ T28] ? asm_sysvec_call_function_single+0x12/0x20
[ 573.887821][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 573.893955][ T28] ? nmi_panic+0x90/0x90
[ 573.898180][ T28] ? irq_work_queue+0xbd/0x120
[ 573.902981][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 573.909025][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 573.915072][ T28] watchdog+0xcc2/0xcd0
[ 573.919215][ T28] kthread+0x2a3/0x2d0
[ 573.923265][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.928270][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.932843][ T28] ret_from_fork+0x1f/0x30
[ 573.937244][ T28]
[ 573.940569][ T28] Kernel Offset: disabled
[ 573.944883][ T28] Rebooting in 86400 seconds..