forked to background, child pid [ 20.697351][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0
3174
no interfaces have a carrier
[ 20.710710][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 76.272241][ T14] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts.
executing program
[ 491.957382][ T3628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 491.964630][ T3628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 491.971935][ T3630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 491.979202][ T3630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 491.986511][ T3630] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 491.993645][ T3630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 494.031765][ T26] Bluetooth: hci0: command 0x0409 tx timeout
[ 496.111756][ T26] Bluetooth: hci0: command 0x041b tx timeout
[ 498.191795][ T26] Bluetooth: hci0: command 0x040f tx timeout
[ 500.271797][ T26] Bluetooth: hci0: command 0x0419 tx timeout
[ 502.351786][ T26] Bluetooth: hci0: command 0x0405 tx timeout
[ 615.951773][ T26] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.271740][ T28] INFO: task krfcommd:2708 blocked for more than 143 seconds.
[ 716.279226][ T28] Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 716.288000][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.296698][ T28] task:krfcommd state:D stack:30008 pid: 2708 ppid: 2 flags:0x00004000
[ 716.305975][ T28] Call Trace:
[ 716.309260][ T28]
[ 716.312359][ T28] __schedule+0x937/0x1090
[ 716.316901][ T28] ? __sched_text_start+0x8/0x8
[ 716.321784][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.327290][ T28] ? __might_sleep+0xe0/0xe0
[ 716.331957][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.337149][ T28] schedule+0xeb/0x1b0
[ 716.341200][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.346655][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.351920][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.357507][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.362745][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.368395][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.374335][ T28] mutex_lock_nested+0x1a/0x20
[ 716.379104][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.384490][ T28] rfcomm_run+0x195/0x2c0
[ 716.388902][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.394225][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.400121][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.404699][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.410616][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.415776][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.420877][ T28] kthread+0x2a3/0x2d0
[ 716.424964][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.430248][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.434868][ T28] ret_from_fork+0x1f/0x30
[ 716.439350][ T28]
[ 716.442400][ T28] INFO: task syz-executor144:3632 blocked for more than 143 seconds.
[ 716.450449][ T28] Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 716.459134][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.467828][ T28] task:syz-executor144 state:D stack:26552 pid: 3632 ppid: 3626 flags:0x00004006
[ 716.477070][ T28] Call Trace:
[ 716.480514][ T28]
[ 716.483462][ T28] __schedule+0x937/0x1090
[ 716.487880][ T28] ? __sched_text_start+0x8/0x8
[ 716.492761][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.498186][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.503308][ T28] ? __lock_sock+0x1ca/0x330
[ 716.507941][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.512856][ T28] schedule+0xeb/0x1b0
[ 716.516923][ T28] __lock_sock+0x1cf/0x330
[ 716.521321][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.526633][ T28] ? wake_bit_function+0x230/0x230
[ 716.531776][ T28] ? __rwlock_init+0x140/0x140
[ 716.536536][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.541747][ T28] lock_sock_nested+0x9f/0x100
[ 716.546533][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.551922][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.556943][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.561805][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.566909][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.572063][ T28] rfcomm_sock_release+0x55/0x120
[ 716.577080][ T28] sock_close+0xd8/0x260
[ 716.581303][ T28] ? sock_mmap+0x90/0x90
[ 716.585559][ T28] __fput+0x3f6/0x860
[ 716.589597][ T28] task_work_run+0x146/0x1c0
[ 716.594276][ T28] do_exit+0x5e3/0x20f0
[ 716.598432][ T28] ? get_signal+0x16f8/0x2330
[ 716.603176][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.608538][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.613616][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.619302][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.624787][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.629916][ T28] do_group_exit+0x2af/0x2b0
[ 716.634558][ T28] get_signal+0x1831/0x2330
[ 716.639063][ T28] ? ptrace_notify+0x340/0x340
[ 716.643842][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.649036][ T28] arch_do_signal_or_restart+0x9c/0x730
[ 716.654651][ T28] ? __sys_connect_file+0x170/0x170
[ 716.659841][ T28] ? get_sigframe_size+0x10/0x10
[ 716.664815][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 716.670690][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 716.676463][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.682256][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.687714][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.693635][ T28] RIP: 0033:0x7fc1039e91b9
[ 716.698045][ T28] RSP: 002b:00007ffcfb45dff8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.706466][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fc1039e91b9
[ 716.714460][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.722449][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.730410][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00005555569592b8
[ 716.738412][ T28] R13: 0000000000000072 R14: 00007ffcfb45e050 R15: 0000000000000003
[ 716.746404][ T28]
[ 716.749407][ T28] INFO: lockdep is turned off.
[ 716.754176][ T28] NMI backtrace for cpu 0
[ 716.758491][ T28] CPU: 0 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 716.769396][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.779427][ T28] Call Trace:
[ 716.782685][ T28]
[ 716.785599][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.790307][ T28] ? show_regs_print_info+0x12/0x12
[ 716.795488][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.801219][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140
[ 716.807094][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.812019][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.818161][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.823869][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 716.829757][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.835875][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.841851][ T28] watchdog+0xc82/0xcd0
[ 716.846031][ T28] kthread+0x2a3/0x2d0
[ 716.850083][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.855090][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.859665][ T28] ret_from_fork+0x1f/0x30
[ 716.864070][ T28]
[ 716.867194][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 716.872420][ C1] NMI backtrace for cpu 1
[ 716.872431][ C1] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 716.872446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.872455][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 716.872521][ C1] RIP: 0010:rcu_read_lock_sched_held+0x4/0x130
[ 716.872538][ C1] Code: 84 00 00 00 00 00 e9 db fc 20 00 66 2e 0f 1f 84 00 00 00 00 00 90 e9 8b ff 20 00 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 <41> 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 65 48 8b 04 25 28 00
[ 716.872548][ C1] RSP: 0018:ffffc900000d75c8 EFLAGS: 00000282
[ 716.872559][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8167654b
[ 716.872568][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e20d768
[ 716.872577][ C1] RBP: ffffc900000d75c8 R08: dffffc0000000000 R09: fffffbfff1c41aee
[ 716.872587][ C1] R10: fffffbfff1c41aee R11: 0000000000000000 R12: 0000000000000000
[ 716.872595][ C1] R13: 1ffff9200001aecc R14: 0000000000000000 R15: dffffc0000000000
[ 716.872604][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 716.872616][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.872625][ C1] CR2: 00007f4fc1393990 CR3: 000000000ca8e000 CR4: 00000000003506e0
[ 716.872638][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.872647][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.872655][ C1] Call Trace:
[ 716.872659][ C1]
[ 716.872664][ C1] trace_lock_acquire+0x59/0x190
[ 716.872680][ C1] lock_acquire+0xa5/0x4d0
[ 716.872692][ C1] ? __get_locked_pte+0x2ad/0x390
[ 716.872722][ C1] ? inat_get_opcode_attribute+0x8/0x50
[ 716.872775][ C1] ? insn_get_prefixes+0xbf4/0x1930
[ 716.872789][ C1] ? trace_lock_release+0x4f/0x150
[ 716.872801][ C1] ? read_lock_is_recursive+0x10/0x10
[ 716.872814][ C1] ? print_irqtrace_events+0x220/0x220
[ 716.872826][ C1] ? inat_get_escape_attribute+0x10b/0x190
[ 716.872841][ C1] ? insn_get_opcode+0x7b4/0xa90
[ 716.872856][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.872869][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.872885][ C1] _raw_spin_lock+0x2a/0x40
[ 716.872900][ C1] ? __get_locked_pte+0x2ad/0x390
[ 716.872912][ C1] __get_locked_pte+0x2ad/0x390
[ 716.872927][ C1] __text_poke+0x280/0x9f0
[ 716.872961][ C1] ? kmem_cache_alloc+0xde/0x310
[ 716.872975][ C1] ? text_poke+0x80/0x80
[ 716.872988][ C1] ? __mutex_trylock_common+0x1a8/0x300
[ 716.873000][ C1] ? __might_sleep+0xe0/0xe0
[ 716.873015][ C1] ? atomic_dec_and_mutex_lock+0xb0/0xb0
[ 716.873028][ C1] ? insn_decode+0x335/0x4c0
[ 716.873044][ C1] ? __mutex_lock_common+0x1914/0x2590
[ 716.873058][ C1] ? kmem_cache_alloc+0xde/0x310
[ 716.873069][ C1] text_poke_bp_batch+0x1b5/0x920
[ 716.873086][ C1] ? mutex_lock_io_nested+0x60/0x60
[ 716.873100][ C1] ? text_poke_loc_init+0x570/0x570
[ 716.873115][ C1] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 716.873129][ C1] ? __jump_label_update+0x32c/0x350
[ 716.873169][ C1] text_poke_finish+0x16/0x30
[ 716.873182][ C1] arch_jump_label_transform_apply+0x13/0x20
[ 716.873195][ C1] static_key_disable_cpuslocked+0xcc/0x1b0
[ 716.873210][ C1] static_key_disable+0x16/0x20
[ 716.873222][ C1] toggle_allocation_gate+0x3c8/0x460
[ 716.873235][ C1] ? show_object+0xa0/0xa0
[ 716.873245][ C1] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.873259][ C1] ? __lock_acquire+0x2b00/0x2b00
[ 716.873272][ C1] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.873285][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.873298][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.873314][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.873330][ C1] process_one_work+0x83c/0x11a0
[ 716.873349][ C1] ? worker_detach_from_pool+0x260/0x260
[ 716.873364][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.873379][ C1] ? kthread_data+0x4d/0xc0
[ 716.873392][ C1] ? wq_worker_running+0x95/0x190
[ 716.873405][ C1] worker_thread+0xa6c/0x1290
[ 716.873429][ C1] kthread+0x2a3/0x2d0
[ 716.873440][ C1] ? rcu_lock_release+0x20/0x20
[ 716.873453][ C1] ? kthread_blkcg+0xd0/0xd0
[ 716.873465][ C1] ret_from_fork+0x1f/0x30
[ 716.873485][ C1]
[ 716.873490][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.070 msecs
[ 716.881627][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 716.881639][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11138-gf022814633e1 #0
[ 716.881657][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.881665][ T28] Call Trace:
[ 716.881672][ T28]
[ 716.881678][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.881697][ T28] ? show_regs_print_info+0x12/0x12
[ 716.881711][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.881733][ T28] ? vscnprintf+0x59/0x80
[ 716.881747][ T28] panic+0x313/0x890
[ 716.881812][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 716.881830][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 716.881848][ T28] ? nmi_panic+0x90/0x90
[ 716.881864][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 716.881882][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 716.881897][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 716.881915][ T28] watchdog+0xcc2/0xcd0
[ 716.881938][ T28] kthread+0x2a3/0x2d0
[ 716.881952][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.881968][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.881983][ T28] ret_from_fork+0x1f/0x30
[ 716.882004][ T28]
[ 716.889882][ T28] Kernel Offset: disabled
[ 717.416167][ T28] Rebooting in 86400 seconds..