Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 554.890285][ T20] Bluetooth: hci0: command 0x0409 tx timeout [ 556.969391][ T20] Bluetooth: hci0: command 0x041b tx timeout [ 559.049266][ T20] Bluetooth: hci0: command 0x040f tx timeout [ 561.129110][ T20] Bluetooth: hci0: command 0x0419 tx timeout [ 563.208935][ T20] Bluetooth: hci0: command 0x0405 tx timeout [ 677.201029][ T20] Bluetooth: hci0: command 0x0406 tx timeout [ 716.078965][ T26] INFO: task syz-executor157:6562 blocked for more than 143 seconds. [ 716.087202][ T26] Not tainted 5.14.0-next-20210901-syzkaller #0 [ 716.094595][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.103461][ T26] task:syz-executor157 state:D stack:26880 pid: 6562 ppid: 6530 flags:0x00004006 [ 716.113180][ T26] Call Trace: [ 716.116470][ T26] __schedule+0x940/0x26f0 [ 716.121571][ T26] ? io_schedule_timeout+0x140/0x140 [ 716.126948][ T26] ? mark_held_locks+0x9f/0xe0 [ 716.132315][ T26] schedule+0xd3/0x270 [ 716.136416][ T26] __lock_sock+0x13d/0x260 [ 716.141250][ T26] ? sock_omalloc+0x180/0x180 [ 716.145943][ T26] ? __rfcomm_dlc_close+0x162/0x8a0 [ 716.151632][ T26] ? finish_wait+0x270/0x270 [ 716.156283][ T26] ? rwlock_bug.part.0+0x90/0x90 [ 716.161655][ T26] lock_sock_nested+0xf6/0x120 [ 716.166440][ T26] rfcomm_sk_state_change+0xb4/0x390 [ 716.172338][ T26] __rfcomm_dlc_close+0x1b6/0x8a0 [ 716.177390][ T26] rfcomm_dlc_close+0x1ea/0x240 [ 716.182743][ T26] __rfcomm_sock_close+0xac/0x260 [ 716.187807][ T26] rfcomm_sock_shutdown+0xe9/0x210 [ 716.193263][ T26] rfcomm_sock_release+0x5f/0x140 [ 716.198307][ T26] __sock_release+0xcd/0x280 [ 716.203246][ T26] sock_close+0x18/0x20 [ 716.207425][ T26] __fput+0x288/0x9f0 [ 716.211862][ T26] ? __sock_release+0x280/0x280 [ 716.216729][ T26] task_work_run+0xdd/0x1a0 [ 716.221802][ T26] do_exit+0xbae/0x2a30 [ 716.226023][ T26] ? mm_update_next_owner+0x7a0/0x7a0 [ 716.231753][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 716.236630][ T26] do_group_exit+0x125/0x310 [ 716.241597][ T26] get_signal+0x47f/0x2160 [ 716.246458][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 716.251824][ T26] arch_do_signal_or_restart+0x2a9/0x1c40 [ 716.257631][ T26] ? rfcomm_sock_connect+0x15f/0x460 [ 716.263264][ T26] ? rfcomm_sock_getname+0x300/0x300 [ 716.268580][ T26] ? __sys_connect_file+0x4e/0x1a0 [ 716.274059][ T26] ? get_sigframe_size+0x10/0x10 [ 716.279106][ T26] ? __sys_connect_file+0x1a0/0x1a0 [ 716.284337][ T26] exit_to_user_mode_prepare+0x17d/0x290 [ 716.290409][ T26] syscall_exit_to_user_mode+0x19/0x60 [ 716.295944][ T26] do_syscall_64+0x42/0xb0 [ 716.300699][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.306654][ T26] RIP: 0033:0x445fe9 [ 716.310914][ T26] RSP: 002b:00007fff85049fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 716.319530][ T26] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 0000000000445fe9 [ 716.327514][ T26] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004 [ 716.336495][ T26] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001 [ 716.344586][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000014112b8 [ 716.352679][ T26] R13: 0000000000000072 R14: 00007fff8504a040 R15: 0000000000000003 [ 716.360846][ T26] [ 716.360846][ T26] Showing all locks held in the system: [ 716.368560][ T26] 1 lock held by khungtaskd/26: [ 716.373879][ T26] #0: ffffffff8b97fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 716.383906][ T26] 1 lock held by krfcommd/2876: [ 716.388831][ T26] #0: ffffffff8d31ede8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_run+0x2ed/0x4a20 [ 716.397945][ T26] 1 lock held by in:imklog/6232: [ 716.402976][ T26] 4 locks held by syz-executor157/6562: [ 716.408519][ T26] #0: ffff888145e26210 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 716.419102][ T26] #1: ffff88801d622120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_shutdown+0x54/0x210 [ 716.430932][ T26] #2: ffffffff8d31ede8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x34/0x240 [ 716.440651][ T26] #3: ffff88807edd9928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x162/0x8a0 [ 716.450119][ T26] [ 716.452444][ T26] ============================================= [ 716.452444][ T26] [ 716.461082][ T26] NMI backtrace for cpu 1 [ 716.465401][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.14.0-next-20210901-syzkaller #0 [ 716.474400][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.484434][ T26] Call Trace: [ 716.487696][ T26] dump_stack_lvl+0xcd/0x134 [ 716.492341][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 716.497612][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.502846][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 716.508853][ T26] watchdog+0xcb7/0xed0 [ 716.513024][ T26] ? trace_sched_process_hang+0x280/0x280 [ 716.518737][ T26] kthread+0x3e5/0x4d0 [ 716.522804][ T26] ? set_kthread_struct+0x130/0x130 [ 716.528056][ T26] ret_from_fork+0x1f/0x30 [ 716.532575][ T26] Sending NMI from CPU 1 to CPUs 0: [ 716.537792][ C0] NMI backtrace for cpu 0 [ 716.537803][ C0] CPU: 0 PID: 2958 Comm: systemd-journal Not tainted 5.14.0-next-20210901-syzkaller #0 [ 716.537827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.537838][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 [ 716.537871][ C0] Code: fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 65 8b 05 39 e6 8b 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 40 f0 01 00 a9 [ 716.537890][ C0] RSP: 0018:ffffc900014dfde0 EFLAGS: 00000282 [ 716.537907][ C0] RAX: 0000000080000000 RBX: ffffc900014dff58 RCX: 1ffff9200029bfc7 [ 716.537922][ C0] RDX: dffffc0000000000 RSI: 1ffff9200029bfcd RDI: ffffc900014dfe38 [ 716.537937][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8176c71a [ 716.537950][ C0] R10: ffffffff81765c97 R11: 0000000000000002 R12: 0000000000000053 [ 716.537964][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc900014dfe30 [ 716.537978][ C0] FS: 00007f43756768c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 716.537997][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.538012][ C0] CR2: 00007f4372a49000 CR3: 000000001a5d4000 CR4: 00000000001506f0 [ 716.538026][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.538038][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.538051][ C0] Call Trace: [ 716.538056][ C0] __seccomp_filter+0x88/0x1040 [ 716.538084][ C0] ? seccomp_notify_ioctl+0xdc0/0xdc0 [ 716.538116][ C0] __secure_computing+0xfc/0x360 [ 716.538142][ C0] syscall_trace_enter.constprop.0+0x94/0x270 [ 716.538168][ C0] do_syscall_64+0x16/0xb0 [ 716.538189][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.538216][ C0] RIP: 0033:0x7f4374931687 [ 716.538237][ C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 716.538256][ C0] RSP: 002b:00007ffc79978938 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 716.538275][ C0] RAX: ffffffffffffffda RBX: 00007ffc7997b850 RCX: 00007f4374931687 [ 716.538290][ C0] RDX: 00007f43753a2a00 RSI: 00000000000001ed RDI: 00005646c59898a0 [ 716.538303][ C0] RBP: 00007ffc79978970 R08: 0000000000000000 R09: 0000000000000000 [ 716.538317][ C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 716.538329][ C0] R13: 0000000000000000 R14: 00007ffc7997b850 R15: 00007ffc79978e60 [ 716.538833][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 716.787328][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.14.0-next-20210901-syzkaller #0 [ 716.796348][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.806407][ T26] Call Trace: [ 716.809693][ T26] dump_stack_lvl+0xcd/0x134 [ 716.814298][ T26] panic+0x2b0/0x6dd [ 716.818230][ T26] ? __warn_printk+0xf3/0xf3 [ 716.822857][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 716.828064][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 716.833442][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 716.839622][ T26] ? watchdog.cold+0x1b9/0x1de [ 716.844789][ T26] watchdog.cold+0x1ca/0x1de [ 716.849392][ T26] ? trace_sched_process_hang+0x280/0x280 [ 716.855129][ T26] kthread+0x3e5/0x4d0 [ 716.859202][ T26] ? set_kthread_struct+0x130/0x130 [ 716.864408][ T26] ret_from_fork+0x1f/0x30 [ 716.870273][ T26] Kernel Offset: disabled [ 716.874612][ T26] Rebooting in 86400 seconds..