forked to background, child pid 3174
no interfaces have a carrier
[ 21.255837][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.266232][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.252691][ T1130] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts.
executing program
[ 492.335305][ T3628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 492.342533][ T3628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 492.349682][ T3628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 492.357140][ T3626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 492.364526][ T3626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 492.371629][ T3626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 494.412237][ T26] Bluetooth: hci0: command 0x0409 tx timeout
[ 496.492203][ T26] Bluetooth: hci0: command 0x041b tx timeout
[ 498.572285][ T26] Bluetooth: hci0: command 0x040f tx timeout
[ 500.652293][ T26] Bluetooth: hci0: command 0x0419 tx timeout
[ 502.732209][ T26] Bluetooth: hci0: command 0x0405 tx timeout
[ 615.932277][ T26] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.252357][ T28] INFO: task krfcommd:2708 blocked for more than 143 seconds.
[ 716.259845][ T28] Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0
[ 716.268633][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.277449][ T28] task:krfcommd state:D stack:29176 pid: 2708 ppid: 2 flags:0x00004000
[ 716.286794][ T28] Call Trace:
[ 716.290067][ T28]
[ 716.293121][ T28] __schedule+0x937/0x1090
[ 716.297626][ T28] ? __sched_text_start+0x8/0x8
[ 716.302568][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.308078][ T28] ? __might_sleep+0xe0/0xe0
[ 716.312805][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.318001][ T28] schedule+0xeb/0x1b0
[ 716.322049][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.327567][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.332861][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.338464][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.343759][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.349383][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.355373][ T28] mutex_lock_nested+0x1a/0x20
[ 716.360130][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.365600][ T28] rfcomm_run+0x195/0x2c0
[ 716.369928][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.375349][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.381236][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.385923][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.391836][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.397074][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.402274][ T28] kthread+0x2a3/0x2d0
[ 716.406354][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.411630][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.416395][ T28] ret_from_fork+0x1f/0x30
[ 716.420891][ T28]
[ 716.424069][ T28] INFO: task syz-executor365:3631 blocked for more than 143 seconds.
[ 716.432119][ T28] Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0
[ 716.440973][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.449700][ T28] task:syz-executor365 state:D stack:26552 pid: 3631 ppid: 3625 flags:0x00004006
[ 716.459090][ T28] Call Trace:
[ 716.462556][ T28]
[ 716.465481][ T28] __schedule+0x937/0x1090
[ 716.469881][ T28] ? __sched_text_start+0x8/0x8
[ 716.474796][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.480312][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.485526][ T28] ? __lock_sock+0x1ca/0x330
[ 716.490174][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.495122][ T28] schedule+0xeb/0x1b0
[ 716.499182][ T28] __lock_sock+0x1cf/0x330
[ 716.503641][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.508931][ T28] ? wake_bit_function+0x230/0x230
[ 716.514062][ T28] ? __rwlock_init+0x140/0x140
[ 716.518818][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.524126][ T28] lock_sock_nested+0x9f/0x100
[ 716.528890][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.534209][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.539242][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.544111][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.549214][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.554362][ T28] rfcomm_sock_release+0x55/0x120
[ 716.559376][ T28] sock_close+0xd8/0x260
[ 716.563626][ T28] ? sock_mmap+0x90/0x90
[ 716.567873][ T28] __fput+0x3f6/0x860
[ 716.571907][ T28] task_work_run+0x146/0x1c0
[ 716.576556][ T28] do_exit+0x5e3/0x20c0
[ 716.580752][ T28] ? get_signal+0x1f75/0x23c0
[ 716.585480][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.590843][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.595923][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.601603][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.607072][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.612231][ T28] do_group_exit+0x2af/0x2b0
[ 716.616811][ T28] get_signal+0x23bd/0x23c0
[ 716.621294][ T28] ? rfcomm_sock_connect+0x313/0x470
[ 716.626594][ T28] ? lock_release+0x82/0x810
[ 716.631179][ T28] ? ptrace_notify+0x350/0x350
[ 716.635968][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.641165][ T28] arch_do_signal_or_restart+0x8e/0x740
[ 716.646774][ T28] ? __sys_connect_file+0x170/0x170
[ 716.651965][ T28] ? get_sigframe_size+0x10/0x10
[ 716.657005][ T28] ? exit_to_user_mode_prepare+0x102/0x1f0
[ 716.662906][ T28] exit_to_user_mode_prepare+0x128/0x1f0
[ 716.668524][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.674295][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.679748][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.685654][ T28] RIP: 0033:0x7f5789bd01b9
[ 716.690058][ T28] RSP: 002b:00007fff20bc4178 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.698516][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f5789bd01b9
[ 716.706514][ T28] RDX: 000000000000005a RSI: 0000000020000000 RDI: 0000000000000004
[ 716.714529][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.722532][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555b182b8
[ 716.730486][ T28] R13: 0000000000000072 R14: 00007fff20bc41d0 R15: 0000000000000003
[ 716.738564][ T28]
[ 716.741580][ T28] INFO: lockdep is turned off.
[ 716.746349][ T28] NMI backtrace for cpu 0
[ 716.750662][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0
[ 716.761567][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.771604][ T28] Call Trace:
[ 716.774867][ T28]
[ 716.777778][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.782505][ T28] ? show_regs_print_info+0x12/0x12
[ 716.787682][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.793415][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 716.799287][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.804213][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.810349][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.816050][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 716.821924][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.828013][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.833973][ T28] watchdog+0xc82/0xcd0
[ 716.838152][ T28] kthread+0x2a3/0x2d0
[ 716.842212][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.847215][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.851780][ T28] ret_from_fork+0x1f/0x30
[ 716.856193][ T28]
[ 716.859261][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 716.864485][ C1] NMI backtrace for cpu 1
[ 716.864495][ C1] CPU: 1 PID: 983 Comm: kworker/u4:4 Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0
[ 716.864511][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.864520][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 716.864594][ C1] RIP: 0010:insn_get_prefixes+0xbef/0x1930
[ 716.864612][ C1] Code: 44 8a 6d 00 41 0f b6 fd e8 be 99 ff ff 41 89 c4 41 83 e4 0f 41 8d 5c 24 f3 bf 02 00 00 00 89 de e8 86 c5 28 fd 83 fb 03 72 0a 6c c1 28 fd e9 c5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
[ 716.864623][ C1] RSP: 0018:ffffc90004f7f638 EFLAGS: 00000286
[ 716.864634][ C1] RAX: 0000000000000000 RBX: 00000000fffffff3 RCX: dffffc0000000000
[ 716.864644][ C1] RDX: ffff88801d405700 RSI: 00000000fffffff3 RDI: 0000000000000002
[ 716.864653][ C1] RBP: ffffffff81d6dd5e R08: ffffffff845d45ca R09: ffffc90004f7f980
[ 716.864664][ C1] R10: fffff520009eff3b R11: 0000000000000000 R12: 0000000000000000
[ 716.864672][ C1] R13: ffffc90004f7f9e9 R14: ffffc90004f7f9e0 R15: 1ffff920009eff3a
[ 716.864683][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 716.864694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.864704][ C1] CR2: 00005579209be000 CR3: 000000000ca8e000 CR4: 00000000003506e0
[ 716.864717][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.864725][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.864733][ C1] Call Trace:
[ 716.864737][ C1]
[ 716.864745][ C1] ? inat_get_escape_attribute+0x10b/0x190
[ 716.864761][ C1] insn_get_opcode+0x1c5/0xa90
[ 716.864778][ C1] ? trace_lock_acquire+0x59/0x190
[ 716.864794][ C1] insn_get_modrm+0x205/0x760
[ 716.864810][ C1] insn_get_displacement+0x12a/0xa90
[ 716.864827][ C1] insn_get_immediate+0x404/0x1fe0
[ 716.864841][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 716.864853][ C1] ? kmem_cache_alloc_lru+0xbe/0x300
[ 716.864886][ C1] insn_decode+0x350/0x4c0
[ 716.864900][ C1] ? kmem_cache_alloc_lru+0xbe/0x300
[ 716.864915][ C1] __jump_label_patch+0xdf/0x410
[ 716.864949][ C1] ? kmem_cache_alloc_lru+0xbe/0x300
[ 716.864964][ C1] ? arch_jump_label_transform_queue+0xd0/0xd0
[ 716.864981][ C1] ? kmem_cache_alloc_lru+0xbe/0x300
[ 716.864995][ C1] ? kmem_cache_alloc_lru+0xcd/0x300
[ 716.865008][ C1] ? kmem_cache_alloc_lru+0xbe/0x300
[ 716.865023][ C1] ? read_lock_is_recursive+0x10/0x10
[ 716.865036][ C1] ? mutex_lock_io_nested+0x60/0x60
[ 716.865053][ C1] arch_jump_label_transform_queue+0x49/0xd0
[ 716.865067][ C1] __jump_label_update+0x15d/0x350
[ 716.865103][ C1] static_key_disable_cpuslocked+0xcc/0x1b0
[ 716.865118][ C1] static_key_disable+0x16/0x20
[ 716.865130][ C1] toggle_allocation_gate+0x3c8/0x460
[ 716.865146][ C1] ? show_object+0xa0/0xa0
[ 716.865159][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.865173][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 716.865185][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.865199][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.865212][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.865229][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.865244][ C1] process_one_work+0x83c/0x11a0
[ 716.865265][ C1] ? worker_detach_from_pool+0x260/0x260
[ 716.865280][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.865294][ C1] ? kthread_data+0x4d/0xc0
[ 716.865307][ C1] ? wq_worker_running+0x95/0x190
[ 716.865320][ C1] worker_thread+0xa6c/0x1290
[ 716.865335][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.865351][ C1] ? _raw_spin_unlock+0x40/0x40
[ 716.865368][ C1] kthread+0x2a3/0x2d0
[ 716.865380][ C1] ? rcu_lock_release+0x20/0x20
[ 716.865393][ C1] ? kthread_blkcg+0xd0/0xd0
[ 716.865405][ C1] ret_from_fork+0x1f/0x30
[ 716.865425][ C1]
[ 716.865514][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 717.239458][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0
[ 717.250365][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 717.260400][ T28] Call Trace:
[ 717.263670][ T28]
[ 717.266582][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 717.271259][ T28] ? show_regs_print_info+0x12/0x12
[ 717.276439][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 717.282141][ T28] ? vscnprintf+0x59/0x80
[ 717.286454][ T28] panic+0x313/0x890
[ 717.290326][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 717.295944][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.302073][ T28] ? nmi_panic+0x90/0x90
[ 717.306295][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 717.311655][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.317786][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 717.323922][ T28] watchdog+0xcc2/0xcd0
[ 717.328067][ T28] kthread+0x2a3/0x2d0
[ 717.332118][ T28] ? hungtask_pm_notify+0x50/0x50
[ 717.337121][ T28] ? kthread_blkcg+0xd0/0xd0
[ 717.341700][ T28] ret_from_fork+0x1f/0x30
[ 717.346102][ T28]
[ 717.349270][ T28] Kernel Offset: disabled
[ 717.353581][ T28] Rebooting in 86400 seconds..