forked to background, child pid [ 20.235570][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0
3174
no interfaces have a carrier
[ 20.250694][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.247960][ T144] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts.
executing program
[ 856.569190][ T3645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 856.576307][ T3645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 856.583473][ T3645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 856.590946][ T3645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 856.598345][ T3645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 856.605447][ T3645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 858.646696][ T6] Bluetooth: hci0: command 0x0409 tx timeout
[ 860.726710][ T6] Bluetooth: hci0: command 0x041b tx timeout
[ 862.806726][ T6] Bluetooth: hci0: command 0x040f tx timeout
[ 864.886715][ T6] Bluetooth: hci0: command 0x0419 tx timeout
[ 866.966726][ T6] Bluetooth: hci0: command 0x0405 tx timeout
[ 979.446633][ T6] Bluetooth: hci0: command 0x0406 tx timeout
[ 1018.966657][ T28] INFO: task syz-executor966:3649 blocked for more than 143 seconds.
[ 1018.974737][ T28] Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 1018.983456][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1018.992151][ T28] task:syz-executor966 state:D stack:26552 pid: 3649 ppid: 3643 flags:0x00004006
[ 1019.001391][ T28] Call Trace:
[ 1019.004661][ T28]
[ 1019.007623][ T28] __schedule+0x937/0x1090
[ 1019.012140][ T28] ? __sched_text_start+0x8/0x8
[ 1019.017003][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 1019.022413][ T28] ? trace_lock_acquire+0x59/0x190
[ 1019.027608][ T28] ? __lock_sock+0x1ca/0x330
[ 1019.032225][ T28] ? _local_bh_enable+0xa0/0xa0
[ 1019.037088][ T28] schedule+0xeb/0x1b0
[ 1019.041150][ T28] __lock_sock+0x1cf/0x330
[ 1019.045555][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 1019.050857][ T28] ? wake_bit_function+0x230/0x230
[ 1019.056014][ T28] ? __rwlock_init+0x140/0x140
[ 1019.060797][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 1019.065992][ T28] lock_sock_nested+0x9f/0x100
[ 1019.070778][ T28] rfcomm_sk_state_change+0x63/0x300
[ 1019.076117][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 1019.081202][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 1019.086046][ T28] __rfcomm_sock_close+0x101/0x220
[ 1019.091185][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 1019.096288][ T28] rfcomm_sock_release+0x55/0x120
[ 1019.101441][ T28] sock_close+0xd8/0x260
[ 1019.105684][ T28] ? sock_mmap+0x90/0x90
[ 1019.109950][ T28] __fput+0x3f6/0x860
[ 1019.113994][ T28] task_work_run+0x146/0x1c0
[ 1019.118652][ T28] do_exit+0x5e3/0x20f0
[ 1019.122799][ T28] ? get_signal+0x16f8/0x2330
[ 1019.127538][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 1019.132901][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 1019.137937][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 1019.143614][ T28] ? print_irqtrace_events+0x220/0x220
[ 1019.149093][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 1019.154203][ T28] do_group_exit+0x2af/0x2b0
[ 1019.158803][ T28] get_signal+0x1831/0x2330
[ 1019.163306][ T28] ? ptrace_notify+0x340/0x340
[ 1019.168084][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 1019.173281][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 1019.178925][ T28] ? __sys_connect_file+0x170/0x170
[ 1019.184122][ T28] ? get_sigframe_size+0x10/0x10
[ 1019.189084][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 1019.194965][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 1019.200625][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 1019.206389][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 1019.211878][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1019.217777][ T28] RIP: 0033:0x7fc460f5f7c9
[ 1019.222169][ T28] RSP: 002b:00007ffd6246dfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1019.230716][ T28] RAX: fffffffffffffffc RBX: 000055555726a3b8 RCX: 00007fc460f5f7c9
[ 1019.238729][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 1019.246722][ T28] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
[ 1019.254691][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1019.262712][ T28] R13: 0000000000000072 R14: 00007ffd6246e060 R15: 0000000000000000
[ 1019.270741][ T28]
[ 1019.273768][ T28] INFO: lockdep is turned off.
[ 1019.278540][ T28] NMI backtrace for cpu 1
[ 1019.282856][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 1019.293765][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.303802][ T28] Call Trace:
[ 1019.307067][ T28]
[ 1019.309986][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 1019.314714][ T28] ? show_regs_print_info+0x12/0x12
[ 1019.319894][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1019.325614][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 1019.331491][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 1019.336413][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 1019.342554][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1019.348317][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 1019.354202][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1019.360304][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 1019.366267][ T28] watchdog+0xc82/0xcd0
[ 1019.370428][ T28] kthread+0x2a3/0x2d0
[ 1019.374523][ T28] ? hungtask_pm_notify+0x50/0x50
[ 1019.379537][ T28] ? kthread_blkcg+0xd0/0xd0
[ 1019.384127][ T28] ret_from_fork+0x1f/0x30
[ 1019.388614][ T28]
[ 1019.391701][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 1019.396928][ C0] NMI backtrace for cpu 0
[ 1019.396938][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 1019.396953][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.396961][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 1019.397054][ C0] RIP: 0010:memcpy_erms+0x8/0x10
[ 1019.397072][ C0] Code: cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 f3 a4 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe 7c 35
[ 1019.397082][ C0] RSP: 0018:ffffc900001077d8 EFLAGS: 00000002
[ 1019.397093][ C0] RAX: 00002aaaaaaab9df RBX: ffff88813fe20000 RCX: 0000000000000000
[ 1019.397102][ C0] RDX: 0000000000000001 RSI: ffffffff8f7f944b RDI: 00002aaaaaaab9e0
[ 1019.397112][ C0] RBP: ffffc90000107990 R08: dffffc0000000000 R09: fffffbfff1eff28a
[ 1019.397121][ C0] R10: fffffbfff1eff28a R11: 0000000000000000 R12: ffffc900001078a0
[ 1019.397130][ C0] R13: ffff88813fe9ba00 R14: 8000000000000063 R15: ffff88813fe15558
[ 1019.397140][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 1019.397151][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1019.397161][ C0] CR2: 0000560c5ecff680 CR3: 00000001400fb000 CR4: 00000000003506f0
[ 1019.397173][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1019.397181][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1019.397189][ C0] Call Trace:
[ 1019.397194][ C0]
[ 1019.397197][ C0] __text_poke+0x606/0x9f0
[ 1019.397235][ C0] ? kmem_cache_alloc_node_trace+0xef/0x370
[ 1019.397250][ C0] ? text_poke+0x80/0x80
[ 1019.397263][ C0] ? text_poke_sync+0x20/0x20
[ 1019.397278][ C0] ? smp_call_function_many+0x30/0x30
[ 1019.397307][ C0] ? perf_event_bpf_output+0x240/0x240
[ 1019.397352][ C0] ? text_poke_sync+0x20/0x20
[ 1019.397365][ C0] ? text_poke_sync+0x20/0x20
[ 1019.397379][ C0] ? kmem_cache_alloc_node_trace+0xef/0x370
[ 1019.397391][ C0] text_poke_bp_batch+0x680/0x920
[ 1019.397409][ C0] ? text_poke_loc_init+0x570/0x570
[ 1019.397424][ C0] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 1019.397438][ C0] ? __jump_label_update+0x32c/0x350
[ 1019.397467][ C0] text_poke_finish+0x16/0x30
[ 1019.397480][ C0] arch_jump_label_transform_apply+0x13/0x20
[ 1019.397493][ C0] static_key_enable_cpuslocked+0x12d/0x250
[ 1019.397508][ C0] static_key_enable+0x16/0x20
[ 1019.397520][ C0] toggle_allocation_gate+0xbf/0x460
[ 1019.397532][ C0] ? show_object+0xa0/0xa0
[ 1019.397543][ C0] ? do_raw_spin_unlock+0x134/0x8a0
[ 1019.397557][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 1019.397570][ C0] ? rcu_read_lock_sched_held+0x5f/0x130
[ 1019.397583][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1019.397597][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1019.397614][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 1019.397629][ C0] process_one_work+0x83c/0x11a0
[ 1019.397649][ C0] ? worker_detach_from_pool+0x260/0x260
[ 1019.397664][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 1019.397679][ C0] ? kthread_data+0x4d/0xc0
[ 1019.397692][ C0] ? wq_worker_running+0x95/0x190
[ 1019.397705][ C0] worker_thread+0xa6c/0x1290
[ 1019.397728][ C0] kthread+0x2a3/0x2d0
[ 1019.397739][ C0] ? rcu_lock_release+0x20/0x20
[ 1019.397752][ C0] ? kthread_blkcg+0xd0/0xd0
[ 1019.397765][ C0] ret_from_fork+0x1f/0x30
[ 1019.397784][ C0]
[ 1019.397925][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1019.733374][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 1019.744290][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.754321][ T28] Call Trace:
[ 1019.757579][ T28]
[ 1019.760509][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 1019.765163][ T28] ? show_regs_print_info+0x12/0x12
[ 1019.770332][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1019.776028][ T28] ? vscnprintf+0x59/0x80
[ 1019.780333][ T28] panic+0x313/0x890
[ 1019.784252][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 1019.790379][ T28] ? nmi_panic+0x90/0x90
[ 1019.794607][ T28] ? nmi_trigger_cpumask_backtrace+0x1a1/0x280
[ 1019.800734][ T28] ? irq_work_queue+0xbd/0x120
[ 1019.805512][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1019.811554][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1019.817595][ T28] watchdog+0xcc2/0xcd0
[ 1019.821728][ T28] kthread+0x2a3/0x2d0
[ 1019.825771][ T28] ? hungtask_pm_notify+0x50/0x50
[ 1019.830769][ T28] ? kthread_blkcg+0xd0/0xd0
[ 1019.835332][ T28] ret_from_fork+0x1f/0x30
[ 1019.839725][ T28]
[ 1019.842915][ T28] Kernel Offset: disabled
[ 1019.847227][ T28] Rebooting in 86400 seconds..