forked to background, child pid 3174
no interfaces ha[ 19.958216][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0
ve a carrier
[ 19.967597][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 71.087989][ T144] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts.
executing program
[ 496.930232][ T3626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 496.937447][ T3626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 496.944685][ T3626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 496.952264][ T3626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 496.959583][ T3626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 496.966754][ T3626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 499.006739][ T144] Bluetooth: hci0: command 0x0409 tx timeout
[ 501.086701][ T144] Bluetooth: hci0: command 0x041b tx timeout
[ 503.166712][ T144] Bluetooth: hci0: command 0x040f tx timeout
[ 505.246720][ T144] Bluetooth: hci0: command 0x0419 tx timeout
[ 507.326698][ T144] Bluetooth: hci0: command 0x0405 tx timeout
[ 621.006661][ T144] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.206675][ T28] INFO: task krfcommd:2707 blocked for more than 143 seconds.
[ 716.214146][ T28] Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.222835][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.231592][ T28] task:krfcommd state:D stack:29080 pid: 2707 ppid: 2 flags:0x00004000
[ 716.240859][ T28] Call Trace:
[ 716.244133][ T28]
[ 716.247099][ T28] __schedule+0x937/0x1090
[ 716.251566][ T28] ? __sched_text_start+0x8/0x8
[ 716.256394][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.261925][ T28] ? __might_sleep+0xe0/0xe0
[ 716.266600][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.271780][ T28] schedule+0xeb/0x1b0
[ 716.275842][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.281221][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.286458][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.292119][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.297343][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.302959][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.308891][ T28] mutex_lock_nested+0x1a/0x20
[ 716.313654][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.319074][ T28] rfcomm_run+0x195/0x2c0
[ 716.323400][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.328727][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.334617][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.339412][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.345305][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.350464][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.355551][ T28] kthread+0x2a3/0x2d0
[ 716.359650][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.364927][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.369556][ T28] ret_from_fork+0x1f/0x30
[ 716.373998][ T28]
[ 716.377077][ T28] INFO: task syz-executor418:3631 blocked for more than 143 seconds.
[ 716.385131][ T28] Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.393825][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.402497][ T28] task:syz-executor418 state:D stack:26552 pid: 3631 ppid: 3625 flags:0x00004006
[ 716.411707][ T28] Call Trace:
[ 716.414976][ T28]
[ 716.417956][ T28] __schedule+0x937/0x1090
[ 716.422379][ T28] ? __sched_text_start+0x8/0x8
[ 716.427240][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.432664][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.437788][ T28] ? __lock_sock+0x1ca/0x330
[ 716.442411][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.447436][ T28] schedule+0xeb/0x1b0
[ 716.451517][ T28] __lock_sock+0x1cf/0x330
[ 716.455922][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.461434][ T28] ? wake_bit_function+0x230/0x230
[ 716.466548][ T28] ? __rwlock_init+0x140/0x140
[ 716.471335][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.476514][ T28] lock_sock_nested+0x9f/0x100
[ 716.481303][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.486613][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.491623][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.496452][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.501574][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.506693][ T28] rfcomm_sock_release+0x55/0x120
[ 716.511695][ T28] sock_close+0xd8/0x260
[ 716.515923][ T28] ? sock_mmap+0x90/0x90
[ 716.520194][ T28] __fput+0x3f6/0x860
[ 716.524237][ T28] task_work_run+0x146/0x1c0
[ 716.528881][ T28] do_exit+0x5e3/0x20f0
[ 716.533067][ T28] ? get_signal+0x1fda/0x23f0
[ 716.537785][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.543163][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.548201][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.553864][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.559337][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.564444][ T28] do_group_exit+0x2af/0x2b0
[ 716.569177][ T28] get_signal+0x23e8/0x23f0
[ 716.573671][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.578872][ T28] ? ptrace_notify+0x340/0x340
[ 716.583639][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.588869][ T28] arch_do_signal_or_restart+0xa1/0x740
[ 716.594455][ T28] ? __sys_connect_file+0x170/0x170
[ 716.599709][ T28] ? get_sigframe_size+0x10/0x10
[ 716.604641][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 716.610591][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 716.616221][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.622029][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.627511][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.633393][ T28] RIP: 0033:0x7faa979a81b9
[ 716.637821][ T28] RSP: 002b:00007ffe072d6c08 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.646225][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007faa979a81b9
[ 716.654205][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.662184][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.670168][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555f5a2b8
[ 716.678152][ T28] R13: 0000000000000072 R14: 00007ffe072d6c60 R15: 0000000000000003
[ 716.686105][ T28]
[ 716.689130][ T28] INFO: lockdep is turned off.
[ 716.693874][ T28] NMI backtrace for cpu 0
[ 716.698174][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.709080][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.719111][ T28] Call Trace:
[ 716.722383][ T28]
[ 716.725302][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.730019][ T28] ? show_regs_print_info+0x12/0x12
[ 716.735191][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.740903][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.745817][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.751953][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.757663][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 716.763541][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.769668][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.775632][ T28] watchdog+0xc82/0xcd0
[ 716.779799][ T28] kthread+0x2a3/0x2d0
[ 716.783849][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.788854][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.793423][ T28] ret_from_fork+0x1f/0x30
[ 716.797826][ T28]
[ 716.800887][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 716.806108][ C1] NMI backtrace for cpu 1
[ 716.806117][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.806132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.806140][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 716.806210][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x11/0x12
[ 716.806229][ C1] Code: 51 41 52 41 53 e8 df 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 3c 01 75 02 5a 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 55 48 89 e5 41 57 41
[ 716.806240][ C1] RSP: 0018:ffffc90000107768 EFLAGS: 00000246
[ 716.806250][ C1] RAX: 0000000000000001 RBX: 1ffff110022b6c25 RCX: 0000000000000001
[ 716.806260][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880115b6120
[ 716.806268][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10022b6c25
[ 716.806278][ C1] R10: ffffed10022b6c25 R11: 0000000000000000 R12: 1ffff110022b6c26
[ 716.806287][ C1] R13: ffff8880115b6130 R14: ffff8880115b6128 R15: ffff8880115b6120
[ 716.806297][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 716.806309][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.806318][ C1] CR2: 000055947b3e3728 CR3: 000000000ca8e000 CR4: 00000000003506e0
[ 716.806331][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.806340][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.806349][ C1] Call Trace:
[ 716.806353][ C1]
[ 716.806357][ C1] do_raw_spin_unlock+0x134/0x8a0
[ 716.806373][ C1] ? __text_poke+0x606/0x9f0
[ 716.806414][ C1] ? kmem_cache_alloc_node+0xea/0x370
[ 716.806451][ C1] _raw_spin_unlock+0x1a/0x40
[ 716.806465][ C1] __text_poke+0x874/0x9f0
[ 716.806479][ C1] ? kmem_cache_alloc_node+0xea/0x370
[ 716.806495][ C1] ? text_poke+0x80/0x80
[ 716.806507][ C1] ? text_poke_sync+0x20/0x20
[ 716.806522][ C1] ? smp_call_function_many+0x30/0x30
[ 716.806552][ C1] ? perf_event_bpf_output+0x240/0x240
[ 716.806604][ C1] ? preempt_schedule_thunk+0x16/0x18
[ 716.806619][ C1] ? cpumask_next+0x20/0x100
[ 716.806631][ C1] ? on_each_cpu_cond_mask+0x55/0x80
[ 716.806654][ C1] ? text_poke_sync+0x20/0x20
[ 716.806667][ C1] ? text_poke_sync+0x20/0x20
[ 716.806681][ C1] ? kmem_cache_alloc_node+0xea/0x370
[ 716.806695][ C1] text_poke_bp_batch+0x680/0x920
[ 716.806714][ C1] ? text_poke_loc_init+0x570/0x570
[ 716.806729][ C1] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 716.806744][ C1] ? __jump_label_update+0x32c/0x350
[ 716.806758][ C1] text_poke_finish+0x16/0x30
[ 716.806779][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 716.806792][ C1] static_key_enable_cpuslocked+0x12d/0x250
[ 716.806806][ C1] static_key_enable+0x16/0x20
[ 716.806818][ C1] toggle_allocation_gate+0xbf/0x460
[ 716.806833][ C1] ? show_object+0xa0/0xa0
[ 716.806846][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.806858][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 716.806871][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.806885][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.806897][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.806913][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.806926][ C1] process_one_work+0x83c/0x11a0
[ 716.806946][ C1] ? worker_detach_from_pool+0x260/0x260
[ 716.806961][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.806974][ C1] ? kthread_data+0x4d/0xc0
[ 716.806987][ C1] ? wq_worker_running+0x95/0x190
[ 716.807000][ C1] worker_thread+0xa6c/0x1290
[ 716.807022][ C1] kthread+0x2a3/0x2d0
[ 716.807034][ C1] ? rcu_lock_release+0x20/0x20
[ 716.807046][ C1] ? kthread_blkcg+0xd0/0xd0
[ 716.807058][ C1] ret_from_fork+0x1f/0x30
[ 716.807077][ C1]
[ 716.807108][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 716.807116][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.807132][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.807139][ T28] Call Trace:
[ 716.807144][ T28]
[ 716.807149][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.807167][ T28] ? show_regs_print_info+0x12/0x12
[ 716.807182][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.807200][ T28] ? vscnprintf+0x59/0x80
[ 716.807227][ T28] panic+0x313/0x890
[ 716.807242][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 716.807258][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 716.807280][ T28] ? nmi_panic+0x90/0x90
[ 716.807295][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 716.807310][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 716.807326][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 716.807345][ T28] watchdog+0xcc2/0xcd0
[ 716.807365][ T28] kthread+0x2a3/0x2d0
[ 716.807377][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.807391][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.807405][ T28] ret_from_fork+0x1f/0x30
[ 716.807424][ T28]
[ 716.811567][ T28] Kernel Offset: disabled
[ 717.292994][ T28] Rebooting in 86400 seconds..