DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 3175 [ 20.409028][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.417681][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 76.196043][ T26] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. executing program [ 491.237992][ T3636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.245095][ T3636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.252247][ T3636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.259725][ T3636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.267262][ T3636] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 491.274611][ T3636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.315398][ T918] Bluetooth: hci0: command 0x0409 tx timeout [ 495.395411][ T918] Bluetooth: hci0: command 0x041b tx timeout [ 497.475434][ T918] Bluetooth: hci0: command 0x040f tx timeout [ 499.555470][ T918] Bluetooth: hci0: command 0x0419 tx timeout [ 501.635424][ T918] Bluetooth: hci0: command 0x0405 tx timeout [ 615.875413][ T141] Bluetooth: hci0: command 0x0406 tx timeout [ 716.195385][ T28] INFO: task krfcommd:2708 blocked for more than 143 seconds. [ 716.202852][ T28] Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0 [ 716.211614][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.220368][ T28] task:krfcommd state:D stack:27896 pid: 2708 ppid: 2 flags:0x00004000 [ 716.229709][ T28] Call Trace: [ 716.233038][ T28] [ 716.236073][ T28] __schedule+0x937/0x1090 [ 716.240559][ T28] ? __sched_text_start+0x8/0x8 [ 716.245698][ T28] ? __mutex_trylock_common+0xb3/0x300 [ 716.251195][ T28] ? __might_sleep+0xe0/0xe0 [ 716.255893][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 716.261090][ T28] schedule+0xeb/0x1b0 [ 716.265143][ T28] schedule_preempt_disabled+0xf/0x20 [ 716.270541][ T28] __mutex_lock_common+0xd1f/0x2590 [ 716.275782][ T28] ? rfcomm_process_sessions+0x21/0x3f0 [ 716.281370][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 716.286586][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0 [ 716.292222][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 716.298145][ T28] mutex_lock_nested+0x1a/0x20 [ 716.302940][ T28] rfcomm_process_sessions+0x21/0x3f0 [ 716.308343][ T28] rfcomm_run+0x195/0x2c0 [ 716.312668][ T28] ? rfcomm_security_cfm+0x630/0x630 [ 716.318039][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 716.323934][ T28] ? wait_woken+0x1b0/0x1b0 [ 716.328526][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 716.334426][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 716.339592][ T28] ? __kthread_parkme+0x166/0x1c0 [ 716.344677][ T28] kthread+0x2a3/0x2d0 [ 716.348773][ T28] ? rfcomm_security_cfm+0x630/0x630 [ 716.354057][ T28] ? kthread_blkcg+0xd0/0xd0 [ 716.358680][ T28] ret_from_fork+0x1f/0x30 [ 716.363144][ T28] [ 716.366204][ T28] INFO: task syz-executor384:3639 blocked for more than 143 seconds. [ 716.374256][ T28] Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0 [ 716.383017][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.391710][ T28] task:syz-executor384 state:D stack:26200 pid: 3639 ppid: 3633 flags:0x00004006 [ 716.400980][ T28] Call Trace: [ 716.404249][ T28] [ 716.407193][ T28] __schedule+0x937/0x1090 [ 716.411612][ T28] ? __sched_text_start+0x8/0x8 [ 716.416482][ T28] ? __local_bh_enable_ip+0x163/0x1f0 [ 716.421918][ T28] ? trace_lock_acquire+0x59/0x190 [ 716.427042][ T28] ? __lock_sock+0x1ca/0x330 [ 716.431664][ T28] ? _local_bh_enable+0xa0/0xa0 [ 716.436533][ T28] schedule+0xeb/0x1b0 [ 716.440596][ T28] __lock_sock+0x1cf/0x330 [ 716.444992][ T28] ? sk_page_frag_refill+0x2f0/0x2f0 [ 716.450291][ T28] ? wake_bit_function+0x230/0x230 [ 716.455414][ T28] ? __rwlock_init+0x140/0x140 [ 716.460159][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 716.465387][ T28] lock_sock_nested+0x9f/0x100 [ 716.470160][ T28] rfcomm_sk_state_change+0x63/0x300 [ 716.475487][ T28] __rfcomm_dlc_close+0x2cc/0x480 [ 716.480517][ T28] rfcomm_dlc_close+0x10d/0x1c0 [ 716.485406][ T28] __rfcomm_sock_close+0x101/0x220 [ 716.490513][ T28] rfcomm_sock_shutdown+0xa5/0x220 [ 716.495656][ T28] rfcomm_sock_release+0x55/0x120 [ 716.500672][ T28] sock_close+0xd8/0x260 [ 716.504903][ T28] ? sock_mmap+0x90/0x90 [ 716.509166][ T28] __fput+0x3f6/0x860 [ 716.513207][ T28] task_work_run+0x146/0x1c0 [ 716.517831][ T28] do_exit+0x5e3/0x20f0 [ 716.521983][ T28] ? get_signal+0x16f8/0x2330 [ 716.526774][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 716.532141][ T28] ? __lock_acquire+0x2b00/0x2b00 [ 716.537182][ T28] ? rcu_read_lock_sched_held+0x5f/0x130 [ 716.542842][ T28] ? print_irqtrace_events+0x220/0x220 [ 716.548307][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 716.553421][ T28] do_group_exit+0x2af/0x2b0 [ 716.558030][ T28] get_signal+0x1831/0x2330 [ 716.562535][ T28] ? ptrace_notify+0x340/0x340 [ 716.567330][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 716.572525][ T28] arch_do_signal_or_restart+0x9c/0x730 [ 716.578125][ T28] ? __sys_connect_file+0x170/0x170 [ 716.583339][ T28] ? get_sigframe_size+0x10/0x10 [ 716.588293][ T28] ? exit_to_user_mode_prepare+0x102/0x200 [ 716.594181][ T28] exit_to_user_mode_prepare+0x165/0x200 [ 716.599898][ T28] ? trace_irq_disable_rcuidle+0x11/0x170 [ 716.605670][ T28] syscall_exit_to_user_mode+0x2e/0x70 [ 716.611127][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.617046][ T28] RIP: 0033:0x7fa40862b1b9 [ 716.621462][ T28] RSP: 002b:00007ffee08f2cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 716.629921][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fa40862b1b9 [ 716.637905][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004 [ 716.645884][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001 [ 716.653847][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00005555561ea2b8 [ 716.661831][ T28] R13: 0000000000000072 R14: 00007ffee08f2d30 R15: 0000000000000003 [ 716.669810][ T28] [ 716.672824][ T28] INFO: lockdep is turned off. [ 716.677600][ T28] NMI backtrace for cpu 0 [ 716.681915][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0 [ 716.692819][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.702849][ T28] Call Trace: [ 716.706108][ T28] [ 716.709038][ T28] dump_stack_lvl+0x1dc/0x2d8 [ 716.713746][ T28] ? show_regs_print_info+0x12/0x12 [ 716.718940][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.724656][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 716.730531][ T28] nmi_cpu_backtrace+0x45f/0x490 [ 716.735456][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 716.741593][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.747302][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 716.753187][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 716.759275][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 716.765245][ T28] watchdog+0xc82/0xcd0 [ 716.769409][ T28] kthread+0x2a3/0x2d0 [ 716.773458][ T28] ? hungtask_pm_notify+0x50/0x50 [ 716.778464][ T28] ? kthread_blkcg+0xd0/0xd0 [ 716.783033][ T28] ret_from_fork+0x1f/0x30 [ 716.787438][ T28] [ 716.790534][ T28] Sending NMI from CPU 0 to CPUs 1: [ 716.795753][ C1] NMI backtrace for cpu 1 [ 716.795763][ C1] CPU: 1 PID: 90 Comm: kworker/u4:3 Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0 [ 716.795777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.795786][ C1] Workqueue: events_unbound toggle_allocation_gate [ 716.795848][ C1] RIP: 0010:insn_get_prefixes+0x452/0x1930 [ 716.795885][ C1] Code: fd eb 27 e8 80 06 29 fd eb 20 e8 79 06 29 fd e9 61 fe ff ff e8 6f 06 29 fd eb 0f e8 68 06 29 fd e9 4c fe ff ff e8 5e 06 29 fd <49> be 00 00 00 00 00 fc ff df 48 8b 44 24 38 42 80 3c 30 00 48 8b [ 716.795895][ C1] RSP: 0018:ffffc90001c6f638 EFLAGS: 00000293 [ 716.795905][ C1] RAX: ffffffff845d4b89 RBX: ffffc90001c6f91f RCX: ffff888018f51d00 [ 716.795916][ C1] RDX: 0000000000000000 RSI: 000000000000001f RDI: 000000000000000b [ 716.795924][ C1] RBP: ffffffff8a88306d R08: ffffffff845d4a67 R09: ffffc90001c6f980 [ 716.795933][ C1] R10: fffff5200038df3b R11: 0000000000000000 R12: ffffffff8a88306c [ 716.795943][ C1] R13: ffffc90001c6f980 R14: ffffffff8a88306a R15: ffffffff8a883079 [ 716.795953][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 716.795964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.795973][ C1] CR2: 000056140a78e7c8 CR3: 000000000ca8e000 CR4: 00000000003506e0 [ 716.795985][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.795993][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.796001][ C1] Call Trace: [ 716.796005][ C1] [ 716.796010][ C1] ? __text_poke+0x874/0x9f0 [ 716.796043][ C1] ? trace_lock_release+0x4f/0x150 [ 716.796058][ C1] ? print_irqtrace_events+0x220/0x220 [ 716.796070][ C1] ? inat_get_escape_attribute+0x10b/0x190 [ 716.796096][ C1] insn_get_opcode+0x1c5/0xa90 [ 716.796116][ C1] insn_get_modrm+0x205/0x760 [ 716.796133][ C1] insn_get_displacement+0x12a/0xa90 [ 716.796150][ C1] insn_get_immediate+0x404/0x1fe0 [ 716.796163][ C1] ? __kmalloc_track_caller+0x140/0x370 [ 716.796178][ C1] insn_decode+0x350/0x4c0 [ 716.796193][ C1] ? __kmalloc_track_caller+0x13b/0x370 [ 716.796205][ C1] text_poke_loc_init+0xc5/0x570 [ 716.796219][ C1] ? __kmalloc_track_caller+0x13b/0x370 [ 716.796231][ C1] ? text_poke_finish+0x30/0x30 [ 716.796249][ C1] ? read_lock_is_recursive+0x10/0x10 [ 716.796262][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 716.796280][ C1] arch_jump_label_transform_queue+0x70/0xd0 [ 716.796294][ C1] __jump_label_update+0x15d/0x350 [ 716.796336][ C1] static_key_disable_cpuslocked+0xcc/0x1b0 [ 716.796351][ C1] static_key_disable+0x16/0x20 [ 716.796363][ C1] toggle_allocation_gate+0x3c8/0x460 [ 716.796376][ C1] ? show_object+0xa0/0xa0 [ 716.796386][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 716.796400][ C1] ? __lock_acquire+0x2b00/0x2b00 [ 716.796413][ C1] ? rcu_read_lock_sched_held+0x5f/0x130 [ 716.796427][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 716.796440][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 716.796456][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.796472][ C1] process_one_work+0x83c/0x11a0 [ 716.796492][ C1] ? worker_detach_from_pool+0x260/0x260 [ 716.796507][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 716.796521][ C1] ? kthread_data+0x4d/0xc0 [ 716.796534][ C1] ? wq_worker_running+0x95/0x190 [ 716.796547][ C1] worker_thread+0xa6c/0x1290 [ 716.796565][ C1] ? _raw_spin_unlock+0x40/0x40 [ 716.796583][ C1] kthread+0x2a3/0x2d0 [ 716.796594][ C1] ? rcu_lock_release+0x20/0x20 [ 716.796611][ C1] ? kthread_blkcg+0xd0/0xd0 [ 716.796624][ C1] ret_from_fork+0x1f/0x30 [ 716.796644][ C1] [ 716.805291][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 716.805302][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0 [ 716.805319][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.805327][ T28] Call Trace: [ 716.805332][ T28] [ 716.805338][ T28] dump_stack_lvl+0x1dc/0x2d8 [ 716.805356][ T28] ? show_regs_print_info+0x12/0x12 [ 716.805370][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.805391][ T28] ? vscnprintf+0x59/0x80 [ 716.805406][ T28] panic+0x313/0x890 [ 716.805449][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 716.805466][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 716.805484][ T28] ? nmi_panic+0x90/0x90 [ 716.805500][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 716.805518][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 716.805533][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280 [ 716.805552][ T28] watchdog+0xcc2/0xcd0 [ 716.805573][ T28] kthread+0x2a3/0x2d0 [ 716.805588][ T28] ? hungtask_pm_notify+0x50/0x50 [ 716.805616][ T28] ? kthread_blkcg+0xd0/0xd0 [ 716.805630][ T28] ret_from_fork+0x1f/0x30 [ 716.805651][ T28] [ 716.812287][ T28] Kernel Offset: disabled [ 717.267515][ T28] Rebooting in 86400 seconds..