DUID 00:04:9f:e8:07:f9:ba:36:1f:d4:05:68:5a:d1:6a:7f:90:cd
forked to background, child pid 3173
[ 20.839180][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.848262][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.315383][ T917] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts.
executing program
[ 347.757011][ T3631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 347.764609][ T3631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 347.771941][ T3631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 347.779554][ T3631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 347.787026][ T3631] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 347.794170][ T3631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 349.834646][ T26] Bluetooth: hci0: command 0x0409 tx timeout
[ 351.914641][ T26] Bluetooth: hci0: command 0x041b tx timeout
[ 353.994652][ T26] Bluetooth: hci0: command 0x040f tx timeout
[ 356.074642][ T26] Bluetooth: hci0: command 0x0419 tx timeout
[ 358.154658][ T26] Bluetooth: hci0: command 0x0405 tx timeout
[ 378.395828][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[ 378.402393][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[ 439.835917][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[ 439.842265][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[ 472.634590][ T26] Bluetooth: hci0: command 0x0406 tx timeout
[ 501.275832][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[ 501.282127][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[ 562.715919][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[ 562.722247][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[ 572.954566][ T28] INFO: task krfcommd:2707 blocked for more than 143 seconds.
[ 572.962052][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 572.970823][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 572.979566][ T28] task:krfcommd state:D stack:29720 pid: 2707 ppid: 2 flags:0x00004000
[ 572.988917][ T28] Call Trace:
[ 572.992190][ T28]
[ 572.995221][ T28] __schedule+0x937/0x1090
[ 572.999746][ T28] ? __sched_text_start+0x8/0x8
[ 573.004710][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 573.010233][ T28] ? __might_sleep+0xe0/0xe0
[ 573.014998][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.020199][ T28] schedule+0xeb/0x1b0
[ 573.024363][ T28] schedule_preempt_disabled+0xf/0x20
[ 573.030053][ T28] __mutex_lock_common+0xd1f/0x2590
[ 573.035384][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 573.041008][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 573.046328][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 573.052102][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.058281][ T28] mutex_lock_nested+0x1a/0x20
[ 573.063053][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 573.068578][ T28] rfcomm_run+0x195/0x2c0
[ 573.072910][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 573.078360][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.084255][ T28] ? wait_woken+0x1b0/0x1b0
[ 573.089036][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.095056][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.100232][ T28] ? __kthread_parkme+0x166/0x1c0
[ 573.105445][ T28] kthread+0x2a3/0x2d0
[ 573.109517][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 573.114916][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.119591][ T28] ret_from_fork+0x1f/0x30
[ 573.124038][ T28]
[ 573.127344][ T28] INFO: task syz-executor199:3632 blocked for more than 143 seconds.
[ 573.135494][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.144186][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 573.152870][ T28] task:syz-executor199 state:D stack:26552 pid: 3632 ppid: 3627 flags:0x00004006
[ 573.162118][ T28] Call Trace:
[ 573.165658][ T28]
[ 573.168606][ T28] __schedule+0x937/0x1090
[ 573.173006][ T28] ? __sched_text_start+0x8/0x8
[ 573.177925][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 573.183391][ T28] ? trace_lock_acquire+0x59/0x190
[ 573.188626][ T28] ? __lock_sock+0x1ca/0x330
[ 573.193290][ T28] ? _local_bh_enable+0xa0/0xa0
[ 573.198192][ T28] schedule+0xeb/0x1b0
[ 573.202265][ T28] __lock_sock+0x1cf/0x330
[ 573.206700][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 573.211981][ T28] ? wake_bit_function+0x230/0x230
[ 573.217115][ T28] ? __rwlock_init+0x140/0x140
[ 573.221966][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 573.227200][ T28] lock_sock_nested+0x9f/0x100
[ 573.231963][ T28] rfcomm_sk_state_change+0x63/0x300
[ 573.237265][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 573.242304][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 573.247344][ T28] __rfcomm_sock_close+0x101/0x220
[ 573.252449][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 573.257583][ T28] rfcomm_sock_release+0x55/0x120
[ 573.262606][ T28] sock_close+0xd8/0x260
[ 573.266871][ T28] ? sock_mmap+0x90/0x90
[ 573.271104][ T28] __fput+0x3fc/0x870
[ 573.275149][ T28] task_work_run+0x146/0x1c0
[ 573.279737][ T28] do_exit+0x5e3/0x20f0
[ 573.283867][ T28] ? get_signal+0x16f8/0x2330
[ 573.288610][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 573.293975][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 573.299016][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.304791][ T28] ? print_irqtrace_events+0x220/0x220
[ 573.310249][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.315483][ T28] do_group_exit+0x2af/0x2b0
[ 573.320159][ T28] get_signal+0x1831/0x2330
[ 573.324690][ T28] ? ptrace_notify+0x340/0x340
[ 573.329446][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.334666][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 573.340296][ T28] ? __sys_connect_file+0x170/0x170
[ 573.345707][ T28] ? get_sigframe_size+0x10/0x10
[ 573.350818][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 573.356730][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 573.362353][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 573.368121][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 573.373574][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 573.379483][ T28] RIP: 0033:0x7f8e4c9ae7d9
[ 573.383891][ T28] RSP: 002b:00007ffd86ac0b38 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 573.392476][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f8e4c9ae7d9
[ 573.400564][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 573.408558][ T28] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[ 573.416541][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 000055555594b2b8
[ 573.424530][ T28] R13: 0000000000000072 R14: 0000000000000003 R15: 00007ffd86ac0ba0
[ 573.432506][ T28]
[ 573.435562][ T28] INFO: lockdep is turned off.
[ 573.440306][ T28] NMI backtrace for cpu 1
[ 573.444609][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.455536][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.465568][ T28] Call Trace:
[ 573.468831][ T28]
[ 573.471755][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.476465][ T28] ? show_regs_print_info+0x12/0x12
[ 573.481726][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.487440][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 573.492390][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 573.498533][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.504280][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 573.510351][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 573.516496][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 573.522490][ T28] watchdog+0xc82/0xcd0
[ 573.526687][ T28] kthread+0x2a3/0x2d0
[ 573.530746][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.535843][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.540427][ T28] ret_from_fork+0x1f/0x30
[ 573.544840][ T28]
[ 573.548191][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 573.553434][ C0] NMI backtrace for cpu 0
[ 573.553444][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.553460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.553469][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 573.553541][ C0] RIP: 0010:switch_mm_irqs_off+0x623/0x910
[ 573.553584][ C0] Code: 49 8d 9f 70 05 00 00 48 89 df be 04 00 00 00 e8 b3 93 9b 00 48 89 d8 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 85 01 00 00 83 3b 00 <74> 0e e8 f6 5d c4 ff bf 00 01 00 00 31 f6 eb 07 be 00 01 00 00 31
[ 573.553595][ C0] RSP: 0018:ffffc900001076c0 EFLAGS: 00000046
[ 573.553607][ C0] RAX: 1ffff1102802e000 RBX: ffff888140170570 RCX: ffffffff813ca34d
[ 573.553623][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888140170570
[ 573.553632][ C0] RBP: ffffc900001077d0 R08: dffffc0000000000 R09: ffffed102802e0af
[ 573.553642][ C0] R10: ffffed102802e0af R11: 0000000000000000 R12: ffffffff8cdeac40
[ 573.553651][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888140170000
[ 573.553661][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 573.553673][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 573.553682][ C0] CR2: 000055862ee1df98 CR3: 000000013fe05000 CR4: 00000000003506f0
[ 573.553695][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 573.553702][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 573.553711][ C0] Call Trace:
[ 573.553715][ C0]
[ 573.553722][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 573.553738][ C0] ? __rwlock_init+0x140/0x140
[ 573.553752][ C0] ? switch_mm+0x190/0x190
[ 573.553765][ C0] ? kmem_cache_alloc_node+0xea/0x370
[ 573.553780][ C0] ? __get_locked_pte+0x2ad/0x390
[ 573.553818][ C0] __text_poke+0x5bd/0x9f0
[ 573.553853][ C0] ? kmem_cache_alloc_node_trace+0xef/0x370
[ 573.553868][ C0] ? text_poke+0x80/0x80
[ 573.553881][ C0] ? text_poke_sync+0x20/0x20
[ 573.553896][ C0] ? smp_call_function_many+0x30/0x30
[ 573.553927][ C0] ? perf_event_bpf_output+0x240/0x240
[ 573.553983][ C0] ? preempt_schedule_thunk+0x16/0x18
[ 573.553999][ C0] ? cpumask_next+0x20/0x100
[ 573.554013][ C0] ? on_each_cpu_cond_mask+0x55/0x80
[ 573.554024][ C0] ? text_poke_sync+0x20/0x20
[ 573.554038][ C0] ? text_poke_sync+0x20/0x20
[ 573.554052][ C0] ? kmem_cache_alloc_node_trace+0xef/0x370
[ 573.554065][ C0] text_poke_bp_batch+0x680/0x920
[ 573.554084][ C0] ? text_poke_loc_init+0x570/0x570
[ 573.554100][ C0] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 573.554114][ C0] ? __jump_label_update+0x32c/0x350
[ 573.554144][ C0] text_poke_finish+0x16/0x30
[ 573.554157][ C0] arch_jump_label_transform_apply+0x13/0x20
[ 573.554171][ C0] static_key_enable_cpuslocked+0x12d/0x250
[ 573.554186][ C0] static_key_enable+0x16/0x20
[ 573.554198][ C0] toggle_allocation_gate+0xbf/0x460
[ 573.554211][ C0] ? show_object+0xa0/0xa0
[ 573.554222][ C0] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.554236][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 573.554249][ C0] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.554264][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 573.554277][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.554295][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 573.554312][ C0] process_one_work+0x83c/0x11a0
[ 573.554333][ C0] ? worker_detach_from_pool+0x260/0x260
[ 573.554348][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 573.554363][ C0] ? kthread_data+0x4d/0xc0
[ 573.554376][ C0] ? wq_worker_running+0x95/0x190
[ 573.554390][ C0] worker_thread+0xa6c/0x1290
[ 573.554414][ C0] kthread+0x2a3/0x2d0
[ 573.554426][ C0] ? rcu_lock_release+0x20/0x20
[ 573.554439][ C0] ? kthread_blkcg+0xd0/0xd0
[ 573.554455][ C0] ret_from_fork+0x1f/0x30
[ 573.554472][ C0]
[ 573.554477][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.043 msecs
[ 573.555455][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 573.555464][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.555480][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.555487][ T28] Call Trace:
[ 573.555493][ T28]
[ 573.555498][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.555518][ T28] ? show_regs_print_info+0x12/0x12
[ 573.555534][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.555554][ T28] ? vscnprintf+0x59/0x80
[ 573.555568][ T28] panic+0x313/0x890
[ 573.555616][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 573.555631][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 573.555647][ T28] ? nmi_panic+0x90/0x90
[ 573.555662][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 573.555677][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 573.555692][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 573.555709][ T28] watchdog+0xcc2/0xcd0
[ 573.555729][ T28] kthread+0x2a3/0x2d0
[ 573.555743][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.555757][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.555771][ T28] ret_from_fork+0x1f/0x30
[ 573.555790][ T28]
[ 573.559018][ T28] Kernel Offset: disabled
[ 574.054888][ T28] Rebooting in 86400 seconds..