forked to background, child pid 3171
no interfa[ 17.626612][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0
ces have a carrier
[ 17.635276][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 70.636292][ T35] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts.
executing program
[ 498.878028][ T3623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 498.885189][ T3623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 498.892342][ T3623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 498.899817][ T3623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 498.907141][ T3623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 498.914344][ T3623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 500.955803][ T6] Bluetooth: hci0: command 0x0409 tx timeout
[ 503.035905][ T35] Bluetooth: hci0: command 0x041b tx timeout
[ 505.115858][ T6] Bluetooth: hci0: command 0x040f tx timeout
[ 507.195844][ T6] Bluetooth: hci0: command 0x0419 tx timeout
[ 509.275814][ T6] Bluetooth: hci0: command 0x0405 tx timeout
[ 625.675737][ T35] Bluetooth: hci0: command 0x0406 tx timeout
[ 715.755821][ T27] INFO: task krfcommd:2701 blocked for more than 143 seconds.
[ 715.763290][ T27] Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 715.772297][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 715.781289][ T27] task:krfcommd state:D stack:29576 pid: 2701 ppid: 2 flags:0x00004000
[ 715.790612][ T27] Call Trace:
[ 715.794039][ T27]
[ 715.797000][ T27] __schedule+0xa9a/0x4940
[ 715.802205][ T27] ? __switch_to+0x5cc/0x1060
[ 715.806910][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 715.812362][ T27] ? lock_release+0x522/0x720
[ 715.817058][ T27] ? io_schedule_timeout+0x140/0x140
[ 715.822369][ T27] ? rwlock_bug.part.0+0x90/0x90
[ 715.827316][ T27] schedule+0xd2/0x1f0
[ 715.831375][ T27] schedule_preempt_disabled+0xf/0x20
[ 715.836744][ T27] __mutex_lock+0xa32/0x12f0
[ 715.841324][ T27] ? rfcomm_run+0x2ed/0x4a30
[ 715.845930][ T27] ? mutex_lock_io_nested+0x1150/0x1150
[ 715.851476][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 715.856344][ T27] rfcomm_run+0x2ed/0x4a30
[ 715.860755][ T27] ? find_held_lock+0x2d/0x110
[ 715.866047][ T27] ? rfcomm_check_accept+0x240/0x240
[ 715.871328][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 715.876181][ T27] ? __init_waitqueue_head+0xd0/0xd0
[ 715.881481][ T27] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 715.887524][ T27] ? lockdep_hardirqs_on+0x79/0x100
[ 715.893323][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 715.899909][ T27] ? __kthread_parkme+0x15f/0x220
[ 715.904950][ T27] ? rfcomm_check_accept+0x240/0x240
[ 715.910559][ T27] kthread+0x2e9/0x3a0
[ 715.914635][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 715.920318][ T27] ret_from_fork+0x1f/0x30
[ 715.924751][ T27]
[ 715.927951][ T27] INFO: task syz-executor201:3628 blocked for more than 143 seconds.
[ 715.936059][ T27] Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 715.944720][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 715.953518][ T27] task:syz-executor201 state:D stack:28176 pid: 3628 ppid: 3622 flags:0x00004006
[ 715.962748][ T27] Call Trace:
[ 715.966032][ T27]
[ 715.968948][ T27] __schedule+0xa9a/0x4940
[ 715.973367][ T27] ? lock_acquire+0x442/0x510
[ 715.978063][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 715.983516][ T27] ? prepare_to_wait_exclusive+0xd7/0x2b0
[ 715.989265][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 715.994730][ T27] ? lock_release+0x720/0x720
[ 715.999492][ T27] ? __lock_sock+0x90/0x260
[ 716.004001][ T27] ? io_schedule_timeout+0x140/0x140
[ 716.009339][ T27] ? trace_hardirqs_on+0x5b/0x1c0
[ 716.014385][ T27] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 716.020236][ T27] schedule+0xd2/0x1f0
[ 716.024302][ T27] __lock_sock+0x13d/0x260
[ 716.028730][ T27] ? sock_omalloc+0x180/0x180
[ 716.033398][ T27] ? prepare_to_wait_exclusive+0x2b0/0x2b0
[ 716.039233][ T27] lock_sock_nested+0xd6/0xf0
[ 716.044008][ T27] rfcomm_sk_state_change+0xb4/0x390
[ 716.049310][ T27] __rfcomm_dlc_close+0x1b6/0x8a0
[ 716.054331][ T27] rfcomm_dlc_close+0x1ea/0x240
[ 716.059187][ T27] __rfcomm_sock_close+0xac/0x260
[ 716.064207][ T27] rfcomm_sock_shutdown+0xf4/0x220
[ 716.069325][ T27] rfcomm_sock_release+0x5f/0x140
[ 716.074343][ T27] __sock_release+0xcd/0x280
[ 716.079041][ T27] sock_close+0x18/0x20
[ 716.083192][ T27] __fput+0x277/0x9d0
[ 716.087188][ T27] ? __sock_release+0x280/0x280
[ 716.092031][ T27] task_work_run+0xdd/0x1a0
[ 716.096546][ T27] do_exit+0xaff/0x2a30
[ 716.100697][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 716.106289][ T27] ? lock_acquire+0x3f1/0x510
[ 716.111062][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 716.116691][ T27] ? lock_release+0x522/0x720
[ 716.121384][ T27] ? mm_update_next_owner+0x7a0/0x7a0
[ 716.126980][ T27] ? lock_downgrade+0x6e0/0x6e0
[ 716.131832][ T27] ? do_raw_spin_lock+0x120/0x2a0
[ 716.136909][ T27] ? rwlock_bug.part.0+0x90/0x90
[ 716.141853][ T27] do_group_exit+0xd2/0x2f0
[ 716.146395][ T27] get_signal+0x28b8/0x2900
[ 716.150894][ T27] ? lock_acquire+0x442/0x510
[ 716.155567][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 716.161315][ T27] ? rcu_read_lock_sched_held+0xd/0x70
[ 716.166778][ T27] ? signal_setup_done+0x550/0x550
[ 716.171873][ T27] ? rwlock_bug.part.0+0x90/0x90
[ 716.176826][ T27] ? wake_up_q+0xf0/0xf0
[ 716.181067][ T27] arch_do_signal_or_restart+0x2b2/0x1720
[ 716.186829][ T27] ? rfcomm_sock_connect+0x15a/0x460
[ 716.192123][ T27] ? __local_bh_enable_ip+0xa0/0x120
[ 716.197425][ T27] ? rfcomm_sock_connect+0x15f/0x460
[ 716.202710][ T27] ? rfcomm_sock_compat_ioctl+0x30/0x30
[ 716.208264][ T27] ? __sys_connect_file+0x4e/0x190
[ 716.213367][ T27] ? get_sigframe_size+0x10/0x10
[ 716.218319][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.224553][ T27] ? __sys_connect+0x10a/0x190
[ 716.229346][ T27] ? __sys_connect_file+0x190/0x190
[ 716.234543][ T27] ? vtime_user_exit+0x218/0x6c0
[ 716.239519][ T27] exit_to_user_mode_prepare+0x17d/0x290
[ 716.245154][ T27] syscall_exit_to_user_mode+0x19/0x60
[ 716.250650][ T27] do_syscall_64+0x42/0x80
[ 716.255068][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.261049][ T27] RIP: 0033:0x7f45e684e1b9
[ 716.265466][ T27] RSP: 002b:00007ffea1940058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.273921][ T27] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f45e684e1b9
[ 716.281940][ T27] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.289934][ T27] RBP: 0000000000000003 R08: 000000ff00000000 R09: 000000ff00000000
[ 716.297905][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00005555570c32b8
[ 716.305874][ T27] R13: 0000000000000072 R14: 00007ffea19400b0 R15: 0000000000000003
[ 716.313834][ T27]
[ 716.317299][ T27] INFO: lockdep is turned off.
[ 716.322040][ T27] NMI backtrace for cpu 0
[ 716.326337][ T27] CPU: 0 PID: 27 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.337242][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.347270][ T27] Call Trace:
[ 716.350524][ T27]
[ 716.353440][ T27] dump_stack_lvl+0xcd/0x134
[ 716.358011][ T27] nmi_cpu_backtrace.cold+0x47/0x144
[ 716.363271][ T27] ? lapic_can_unplug_cpu+0x80/0x80
[ 716.368447][ T27] nmi_trigger_cpumask_backtrace+0x1e6/0x230
[ 716.374406][ T27] watchdog+0xc1d/0xf50
[ 716.378537][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 716.384705][ T27] kthread+0x2e9/0x3a0
[ 716.388800][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 716.394420][ T27] ret_from_fork+0x1f/0x30
[ 716.398815][ T27]
[ 716.401881][ T27] Sending NMI from CPU 0 to CPUs 1:
[ 716.407104][ C1] NMI backtrace for cpu 1
[ 716.407116][ C1] CPU: 1 PID: 1003 Comm: kworker/u4:4 Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.407134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.407144][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 716.407165][ C1] RIP: 0010:load_new_mm_cr3+0x32/0x130
[ 716.407186][ C1] Code: f3 74 2a e9 85 00 00 00 48 89 ef e8 d8 f7 ff ff 66 81 fb fe 0f 48 89 c6 0f 87 df 00 00 00 83 c3 01 0f b7 c3 48 09 f0 0f 22 d8 <5b> 5d c3 66 81 fe fe 0f 77 68 be 08 00 00 00 48 c7 c7 d0 37 b6 8d
[ 716.407200][ C1] RSP: 0018:ffffc90004a37970 EFLAGS: 00000093
[ 716.407211][ C1] RAX: 000000000ba8e000 RBX: 0000000000000000 RCX: 0000000000000000
[ 716.407220][ C1] RDX: ffff88801d3c8000 RSI: ffffffff81359fd4 RDI: 0000000000000003
[ 716.407229][ C1] RBP: ffffffff8ba8e000 R08: 000000001fffffff R09: ffffffff8beb7b38
[ 716.407239][ C1] R10: ffffffff8135a019 R11: 000000000000003f R12: ffff888140168000
[ 716.407248][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[ 716.407260][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 716.407273][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.407290][ C1] CR2: 0000562b80ab65b8 CR3: 000000000ba8e000 CR4: 0000000000350ee0
[ 716.407299][ C1] Call Trace:
[ 716.407303][ C1]
[ 716.407307][ C1] switch_mm_irqs_off+0x496/0xa10
[ 716.407325][ C1] ? kasan_check_range+0x13d/0x180
[ 716.407340][ C1] ? kmem_cache_alloc_node_trace+0xa7/0x310
[ 716.407359][ C1] __text_poke+0x544/0x8c0
[ 716.407377][ C1] ? text_poke_loc_init+0x450/0x450
[ 716.407394][ C1] ? optimize_nops+0x2d0/0x2d0
[ 716.407409][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.407428][ C1] text_poke_bp_batch+0x433/0x6b0
[ 716.407446][ C1] ? do_sync_core+0x20/0x20
[ 716.407464][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.407482][ C1] ? __jump_label_update+0x351/0x400
[ 716.407498][ C1] text_poke_finish+0x16/0x30
[ 716.407514][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 716.407531][ C1] jump_label_update+0x32f/0x410
[ 716.407546][ C1] static_key_enable_cpuslocked+0x1b1/0x260
[ 716.407561][ C1] static_key_enable+0x16/0x20
[ 716.407574][ C1] toggle_allocation_gate+0x100/0x390
[ 716.407589][ C1] ? lock_release+0x720/0x720
[ 716.407605][ C1] ? wake_up_kfence_timer+0x20/0x20
[ 716.407620][ C1] ? finish_task_switch.isra.0+0x319/0xb80
[ 716.407636][ C1] ? trace_hardirqs_on+0x5b/0x1c0
[ 716.407655][ C1] ? finish_task_switch.isra.0+0x319/0xb80
[ 716.407671][ C1] ? read_word_at_a_time+0xe/0x20
[ 716.407685][ C1] ? strscpy+0xa1/0x2a0
[ 716.407699][ C1] process_one_work+0x996/0x1610
[ 716.407716][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 716.407731][ C1] ? rwlock_bug.part.0+0x90/0x90
[ 716.407749][ C1] worker_thread+0x665/0x1080
[ 716.407765][ C1] ? __kthread_parkme+0x15f/0x220
[ 716.407781][ C1] ? process_one_work+0x1610/0x1610
[ 716.407795][ C1] kthread+0x2e9/0x3a0
[ 716.407810][ C1] ? kthread_complete_and_exit+0x40/0x40
[ 716.407828][ C1] ret_from_fork+0x1f/0x30
[ 716.407847][ C1]
[ 716.408100][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 716.721730][ T27] CPU: 0 PID: 27 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-12817-gcffb2b72d3ed #0
[ 716.732633][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.742658][ T27] Call Trace:
[ 716.745910][ T27]
[ 716.748812][ T27] dump_stack_lvl+0xcd/0x134
[ 716.753383][ T27] panic+0x2d7/0x636
[ 716.757248][ T27] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 716.763200][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.769416][ T27] ? irq_work_claim+0x76/0x90
[ 716.774064][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.780277][ T27] ? irq_work_queue+0x29/0x80
[ 716.785011][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.791224][ T27] ? watchdog.cold+0x130/0x158
[ 716.795960][ T27] watchdog.cold+0x141/0x158
[ 716.800524][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 716.806473][ T27] kthread+0x2e9/0x3a0
[ 716.810515][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 716.816117][ T27] ret_from_fork+0x1f/0x30
[ 716.820508][ T27]
[ 716.824017][ T27] Kernel Offset: disabled
[ 716.828319][ T27] Rebooting in 86400 seconds..