forked to background, child pid 3173
no interfaces have a carrier
[ 20.047210][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.055588][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 71.103858][ T919] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts.
executing program
[ 347.105599][ T3623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 347.112756][ T3623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 347.120056][ T3623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 347.127638][ T3623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 347.135004][ T3623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 347.142096][ T3623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 349.183365][ T141] Bluetooth: hci0: command 0x0409 tx timeout
[ 351.263358][ T919] Bluetooth: hci0: command 0x041b tx timeout
[ 353.343401][ T919] Bluetooth: hci0: command 0x040f tx timeout
[ 355.423419][ T919] Bluetooth: hci0: command 0x0419 tx timeout
[ 357.503429][ T919] Bluetooth: hci0: command 0x0405 tx timeout
[ 378.304242][ T1223] ieee802154 phy0 wpan0: encryption failed: -22
[ 378.310517][ T1223] ieee802154 phy1 wpan1: encryption failed: -22
[ 439.744216][ T1223] ieee802154 phy0 wpan0: encryption failed: -22
[ 439.750503][ T1223] ieee802154 phy1 wpan1: encryption failed: -22
[ 472.543360][ T141] Bluetooth: hci0: command 0x0406 tx timeout
[ 501.184427][ T1223] ieee802154 phy0 wpan0: encryption failed: -22
[ 501.190751][ T1223] ieee802154 phy1 wpan1: encryption failed: -22
[ 562.624226][ T1223] ieee802154 phy0 wpan0: encryption failed: -22
[ 562.630498][ T1223] ieee802154 phy1 wpan1: encryption failed: -22
[ 572.863363][ T28] INFO: task krfcommd:2706 blocked for more than 143 seconds.
[ 572.870938][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 572.879742][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 572.888444][ T28] task:krfcommd state:D stack:29976 pid: 2706 ppid: 2 flags:0x00004000
[ 572.897820][ T28] Call Trace:
[ 572.901092][ T28]
[ 572.904147][ T28] __schedule+0x937/0x1090
[ 572.908706][ T28] ? __sched_text_start+0x8/0x8
[ 572.913714][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 572.919248][ T28] ? __might_sleep+0xe0/0xe0
[ 572.924068][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 572.929266][ T28] schedule+0xeb/0x1b0
[ 572.933510][ T28] schedule_preempt_disabled+0xf/0x20
[ 572.938879][ T28] __mutex_lock_common+0xd1f/0x2590
[ 572.944279][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 572.949909][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 572.955264][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 572.960896][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 572.966934][ T28] mutex_lock_nested+0x1a/0x20
[ 572.971695][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 572.977279][ T28] rfcomm_run+0x195/0x2c0
[ 572.981615][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 572.987088][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 572.992988][ T28] ? wait_woken+0x1b0/0x1b0
[ 572.997613][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.003598][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.008731][ T28] ? __kthread_parkme+0x166/0x1c0
[ 573.014009][ T28] kthread+0x2a3/0x2d0
[ 573.018074][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 573.023482][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.028070][ T28] ret_from_fork+0x1f/0x30
[ 573.032519][ T28]
[ 573.035713][ T28] INFO: task syz-executor433:3624 blocked for more than 143 seconds.
[ 573.043871][ T28] Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.052524][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 573.061323][ T28] task:syz-executor433 state:D stack:26552 pid: 3624 ppid: 3619 flags:0x00004006
[ 573.070634][ T28] Call Trace:
[ 573.074091][ T28]
[ 573.077017][ T28] __schedule+0x937/0x1090
[ 573.081417][ T28] ? __sched_text_start+0x8/0x8
[ 573.086404][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 573.091828][ T28] ? trace_lock_acquire+0x59/0x190
[ 573.097047][ T28] ? __lock_sock+0x1ca/0x330
[ 573.101704][ T28] ? _local_bh_enable+0xa0/0xa0
[ 573.106681][ T28] schedule+0xeb/0x1b0
[ 573.110743][ T28] __lock_sock+0x1cf/0x330
[ 573.115359][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 573.120651][ T28] ? wake_bit_function+0x230/0x230
[ 573.125793][ T28] ? __rwlock_init+0x140/0x140
[ 573.130624][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 573.135968][ T28] lock_sock_nested+0x9f/0x100
[ 573.140725][ T28] rfcomm_sk_state_change+0x63/0x300
[ 573.146131][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 573.151154][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 573.156118][ T28] __rfcomm_sock_close+0x101/0x220
[ 573.161236][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 573.166454][ T28] rfcomm_sock_release+0x55/0x120
[ 573.171470][ T28] sock_close+0xd8/0x260
[ 573.175817][ T28] ? sock_mmap+0x90/0x90
[ 573.180068][ T28] __fput+0x3fc/0x870
[ 573.184252][ T28] task_work_run+0x146/0x1c0
[ 573.188841][ T28] do_exit+0x5e3/0x20f0
[ 573.192974][ T28] ? get_signal+0x16f8/0x2330
[ 573.197914][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 573.203372][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 573.208397][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.214184][ T28] ? print_irqtrace_events+0x220/0x220
[ 573.219634][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 573.224847][ T28] do_group_exit+0x2af/0x2b0
[ 573.229429][ T28] get_signal+0x1831/0x2330
[ 573.234146][ T28] ? ptrace_notify+0x340/0x340
[ 573.238912][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.244152][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 573.249835][ T28] ? __sys_connect_file+0x170/0x170
[ 573.255158][ T28] ? get_sigframe_size+0x10/0x10
[ 573.260092][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 573.266097][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 573.271722][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 573.277584][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 573.283039][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 573.289090][ T28] RIP: 0033:0x7efcf0ca27d9
[ 573.293615][ T28] RSP: 002b:00007ffc46f64ae8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 573.302018][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007efcf0ca27d9
[ 573.310090][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 573.318156][ T28] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[ 573.326208][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555ed72b8
[ 573.334265][ T28] R13: 0000000000000072 R14: 0000000000000003 R15: 00007ffc46f64b50
[ 573.342231][ T28]
[ 573.345398][ T28] INFO: lockdep is turned off.
[ 573.350143][ T28] NMI backtrace for cpu 0
[ 573.354440][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.365341][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.375376][ T28] Call Trace:
[ 573.378642][ T28]
[ 573.381566][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.386284][ T28] ? show_regs_print_info+0x12/0x12
[ 573.391462][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.397172][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 573.402129][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 573.408261][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.413953][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 573.419822][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 573.425912][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 573.431869][ T28] watchdog+0xc82/0xcd0
[ 573.436036][ T28] kthread+0x2a3/0x2d0
[ 573.440079][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.445078][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.449646][ T28] ret_from_fork+0x1f/0x30
[ 573.454039][ T28]
[ 573.457164][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 573.462374][ C1] NMI backtrace for cpu 1
[ 573.462384][ C1] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.462399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.462408][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 573.462484][ C1] RIP: 0010:text_poke_bp_batch+0x387/0x920
[ 573.462537][ C1] Code: c0 f4 d1 20 8e 48 c1 e8 03 48 89 44 24 58 4c 8b 64 24 40 4d 89 ee 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 8d 5e 0f 48 89 d8 <48> c1 e8 03 48 be 00 00 00 00 00 fc ff df 0f b6 04 30 84 c0 0f 85
[ 573.462548][ C1] RSP: 0018:ffffc900000d79a0 EFLAGS: 00000202
[ 573.462560][ C1] RAX: ffffffff8f7f442f RBX: ffffffff8f7f442f RCX: ffff88813fe6d700
[ 573.462571][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 573.462579][ C1] RBP: ffffc900000d7ae8 R08: ffffffff81aab855 R09: fffffbfff1c414e4
[ 573.462590][ C1] R10: fffffbfff1c414e4 R11: 0000000000000000 R12: 0000000000000008
[ 573.462598][ C1] R13: ffffffff8f7f4400 R14: ffffffff8f7f4420 R15: 0000000000000005
[ 573.462608][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 573.462620][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 573.462629][ C1] CR2: 0000562b5d682000 CR3: 000000000ca8e000 CR4: 00000000003506e0
[ 573.462642][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 573.462650][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 573.462658][ C1] Call Trace:
[ 573.462663][ C1]
[ 573.462673][ C1] ? text_poke_loc_init+0x570/0x570
[ 573.462690][ C1] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 573.462705][ C1] ? __jump_label_update+0x32c/0x350
[ 573.462754][ C1] text_poke_finish+0x16/0x30
[ 573.462768][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 573.462781][ C1] static_key_enable_cpuslocked+0x12d/0x250
[ 573.462797][ C1] static_key_enable+0x16/0x20
[ 573.462809][ C1] toggle_allocation_gate+0xbf/0x460
[ 573.462822][ C1] ? show_object+0xa0/0xa0
[ 573.462833][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 573.462848][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 573.462861][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 573.462876][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 573.462889][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 573.462908][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 573.462924][ C1] process_one_work+0x83c/0x11a0
[ 573.462944][ C1] ? worker_detach_from_pool+0x260/0x260
[ 573.462960][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 573.462974][ C1] ? kthread_data+0x4d/0xc0
[ 573.462987][ C1] ? wq_worker_running+0x95/0x190
[ 573.463001][ C1] worker_thread+0xa6c/0x1290
[ 573.463025][ C1] kthread+0x2a3/0x2d0
[ 573.463037][ C1] ? rcu_lock_release+0x20/0x20
[ 573.463050][ C1] ? kthread_blkcg+0xd0/0xd0
[ 573.463063][ C1] ret_from_fork+0x1f/0x30
[ 573.463083][ C1]
[ 573.463410][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 573.463419][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-10752-g52d543b5497c #0
[ 573.463435][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 573.463442][ T28] Call Trace:
[ 573.463447][ T28]
[ 573.463453][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 573.463473][ T28] ? show_regs_print_info+0x12/0x12
[ 573.463489][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 573.463508][ T28] ? vscnprintf+0x59/0x80
[ 573.463522][ T28] panic+0x313/0x890
[ 573.463568][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 573.463583][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 573.463600][ T28] ? nmi_panic+0x90/0x90
[ 573.463615][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 573.463630][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 573.463645][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 573.463661][ T28] watchdog+0xcc2/0xcd0
[ 573.463682][ T28] kthread+0x2a3/0x2d0
[ 573.463695][ T28] ? hungtask_pm_notify+0x50/0x50
[ 573.463709][ T28] ? kthread_blkcg+0xd0/0xd0
[ 573.463723][ T28] ret_from_fork+0x1f/0x30
[ 573.463742][ T28]
[ 573.467655][ T28] Kernel Offset: disabled
[ 573.863311][ T28] Rebooting in 86400 seconds..