Warning: Permanently added '10.128.1.69' (ECDSA) to the list of known hosts.
executing program
[ 504.824430][ T3627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 504.831693][ T3627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 504.838855][ T3627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 504.846454][ T3629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 504.853800][ T3629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 504.861049][ T3629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 506.901587][ T14] Bluetooth: hci0: command 0x0409 tx timeout
[ 508.981580][ T14] Bluetooth: hci0: command 0x041b tx timeout
[ 511.061622][ T14] Bluetooth: hci0: command 0x040f tx timeout
[ 513.141627][ T14] Bluetooth: hci0: command 0x0419 tx timeout
[ 515.221590][ T14] Bluetooth: hci0: command 0x0405 tx timeout
[ 631.301610][ T14] Bluetooth: hci0: command 0x0406 tx timeout
[ 716.261685][ T28] INFO: task krfcommd:2708 blocked for more than 143 seconds.
[ 716.270953][ T28] Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0
[ 716.279722][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.288484][ T28] task:krfcommd state:D stack:28504 pid: 2708 ppid: 2 flags:0x00004000
[ 716.297758][ T28] Call Trace:
[ 716.301060][ T28]
[ 716.304041][ T28] __schedule+0x937/0x1090
[ 716.308536][ T28] ? __sched_text_start+0x8/0x8
[ 716.313407][ T28] ? __mutex_trylock_common+0xb3/0x300
[ 716.318925][ T28] ? __might_sleep+0xe0/0xe0
[ 716.323576][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.328771][ T28] schedule+0xeb/0x1b0
[ 716.332862][ T28] schedule_preempt_disabled+0xf/0x20
[ 716.338243][ T28] __mutex_lock_common+0xd1f/0x2590
[ 716.343532][ T28] ? rfcomm_process_sessions+0x21/0x3f0
[ 716.349152][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.354369][ T28] ? __mutex_unlock_slowpath+0x244/0x7d0
[ 716.360002][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.365924][ T28] mutex_lock_nested+0x1a/0x20
[ 716.370688][ T28] rfcomm_process_sessions+0x21/0x3f0
[ 716.376078][ T28] rfcomm_run+0x195/0x2c0
[ 716.380403][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.385720][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.391716][ T28] ? wait_woken+0x1b0/0x1b0
[ 716.396203][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.402123][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.407235][ T28] ? __kthread_parkme+0x166/0x1c0
[ 716.412342][ T28] kthread+0x2a3/0x2d0
[ 716.416400][ T28] ? rfcomm_security_cfm+0x630/0x630
[ 716.421704][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.426284][ T28] ret_from_fork+0x1f/0x30
[ 716.430719][ T28]
[ 716.433773][ T28] INFO: task syz-executor425:3632 blocked for more than 143 seconds.
[ 716.441867][ T28] Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0
[ 716.450512][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 716.459184][ T28] task:syz-executor425 state:D stack:26552 pid: 3632 ppid: 3626 flags:0x00004006
[ 716.468404][ T28] Call Trace:
[ 716.471692][ T28]
[ 716.474620][ T28] __schedule+0x937/0x1090
[ 716.479033][ T28] ? __sched_text_start+0x8/0x8
[ 716.483947][ T28] ? __local_bh_enable_ip+0x163/0x1f0
[ 716.489440][ T28] ? trace_lock_acquire+0x59/0x190
[ 716.494636][ T28] ? __lock_sock+0x1ca/0x330
[ 716.499267][ T28] ? _local_bh_enable+0xa0/0xa0
[ 716.504145][ T28] schedule+0xeb/0x1b0
[ 716.508205][ T28] __lock_sock+0x1cf/0x330
[ 716.512645][ T28] ? sk_page_frag_refill+0x2f0/0x2f0
[ 716.517922][ T28] ? wake_bit_function+0x230/0x230
[ 716.523077][ T28] ? __rwlock_init+0x140/0x140
[ 716.527829][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 716.533054][ T28] lock_sock_nested+0x9f/0x100
[ 716.537823][ T28] rfcomm_sk_state_change+0x63/0x300
[ 716.543152][ T28] __rfcomm_dlc_close+0x2cc/0x480
[ 716.548175][ T28] rfcomm_dlc_close+0x10d/0x1c0
[ 716.553085][ T28] __rfcomm_sock_close+0x101/0x220
[ 716.558189][ T28] rfcomm_sock_shutdown+0xa5/0x220
[ 716.563340][ T28] rfcomm_sock_release+0x55/0x120
[ 716.568355][ T28] sock_close+0xd8/0x260
[ 716.572610][ T28] ? sock_mmap+0x90/0x90
[ 716.576840][ T28] __fput+0x3f6/0x860
[ 716.580844][ T28] task_work_run+0x146/0x1c0
[ 716.585536][ T28] do_exit+0x5e3/0x20f0
[ 716.589702][ T28] ? get_signal+0x1fda/0x23f0
[ 716.594423][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 716.599799][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.604948][ T28] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.610654][ T28] ? print_irqtrace_events+0x220/0x220
[ 716.616138][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 716.621252][ T28] do_group_exit+0x2af/0x2b0
[ 716.625881][ T28] get_signal+0x23e8/0x23f0
[ 716.630386][ T28] ? __lock_acquire+0x2b00/0x2b00
[ 716.635419][ T28] ? ptrace_notify+0x340/0x340
[ 716.640175][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.645417][ T28] arch_do_signal_or_restart+0xa1/0x740
[ 716.651054][ T28] ? __sys_connect_file+0x170/0x170
[ 716.656334][ T28] ? get_sigframe_size+0x10/0x10
[ 716.661282][ T28] ? exit_to_user_mode_prepare+0x102/0x200
[ 716.667192][ T28] exit_to_user_mode_prepare+0x165/0x200
[ 716.672853][ T28] ? trace_irq_disable_rcuidle+0x11/0x170
[ 716.678648][ T28] syscall_exit_to_user_mode+0x2e/0x70
[ 716.684148][ T28] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.690035][ T28] RIP: 0033:0x7f0cb3ad41b9
[ 716.694459][ T28] RSP: 002b:00007ffd902b0a48 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 716.702977][ T28] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f0cb3ad41b9
[ 716.710934][ T28] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
[ 716.718960][ T28] RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
[ 716.726953][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555c642b8
[ 716.735024][ T28] R13: 0000000000000072 R14: 00007ffd902b0aa0 R15: 0000000000000003
[ 716.743026][ T28]
[ 716.746043][ T28] INFO: lockdep is turned off.
[ 716.750790][ T28] NMI backtrace for cpu 1
[ 716.755098][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0
[ 716.766162][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.776204][ T28] Call Trace:
[ 716.779464][ T28]
[ 716.782387][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 716.787112][ T28] ? show_regs_print_info+0x12/0x12
[ 716.792290][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.798029][ T28] nmi_cpu_backtrace+0x45f/0x490
[ 716.802983][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 716.809122][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 716.814819][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 716.820693][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 716.826792][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 716.832755][ T28] watchdog+0xc82/0xcd0
[ 716.836926][ T28] kthread+0x2a3/0x2d0
[ 716.840994][ T28] ? hungtask_pm_notify+0x50/0x50
[ 716.846001][ T28] ? kthread_blkcg+0xd0/0xd0
[ 716.850570][ T28] ret_from_fork+0x1f/0x30
[ 716.854968][ T28]
[ 716.858053][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 716.863284][ C0] NMI backtrace for cpu 0
[ 716.863295][ C0] CPU: 0 PID: 90 Comm: kworker/u4:3 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0
[ 716.863311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 716.863319][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 716.863396][ C0] RIP: 0010:__kasan_check_write+0x0/0x10
[ 716.863418][ C0] Code: 4c 89 fe 31 c0 e8 98 25 93 ff eb d3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 89 f6 48 8b 0c 24 31 d2 e9 c3 ee ff ff 0f 1f 00 <89> f6 48 8b 0c 24 ba 01 00 00 00 e9 b0 ee ff ff 55 41 56 53 48 89
[ 716.863429][ C0] RSP: 0018:ffffc90001c3f6b8 EFLAGS: 00000046
[ 716.863440][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 716.863449][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888140160660
[ 716.863457][ C0] RBP: ffffc90001c3f7d0 R08: ffffffff813c767c R09: 0000000000000003
[ 716.863467][ C0] R10: fffff52000387ee5 R11: 0000000000000004 R12: ffffffff8cdeac40
[ 716.863476][ C0] R13: dffffc0000000000 R14: ffff888140160660 R15: ffff888140160000
[ 716.863486][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 716.863497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 716.863507][ C0] CR2: 000055c18b8b9a68 CR3: 000000000ca8e000 CR4: 00000000003506f0
[ 716.863519][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 716.863527][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 716.863535][ C0] Call Trace:
[ 716.863540][ C0]
[ 716.863544][ C0] switch_mm_irqs_off+0x270/0x910
[ 716.863575][ C0] ? __lock_acquire+0x2b00/0x2b00
[ 716.863589][ C0] ? __rwlock_init+0x140/0x140
[ 716.863602][ C0] ? switch_mm+0x190/0x190
[ 716.863615][ C0] ? kmem_cache_alloc_node_trace+0xef/0x370
[ 716.863648][ C0] ? __get_locked_pte+0x2ad/0x390
[ 716.863676][ C0] __text_poke+0x5bd/0x9f0
[ 716.863711][ C0] ? kmem_cache_alloc_bulk+0x163/0x590
[ 716.863727][ C0] ? text_poke+0x80/0x80
[ 716.863740][ C0] ? text_poke_sync+0x20/0x20
[ 716.863755][ C0] ? smp_call_function_many+0x30/0x30
[ 716.863797][ C0] ? perf_event_bpf_output+0x240/0x240
[ 716.863841][ C0] ? text_poke_sync+0x20/0x20
[ 716.863854][ C0] ? text_poke_sync+0x20/0x20
[ 716.863868][ C0] ? kmem_cache_alloc_bulk+0x163/0x590
[ 716.863883][ C0] text_poke_bp_batch+0x680/0x920
[ 716.863901][ C0] ? text_poke_loc_init+0x570/0x570
[ 716.863918][ C0] ? arch_jump_label_transform_queue+0x7c/0xd0
[ 716.863932][ C0] ? __jump_label_update+0x32c/0x350
[ 716.863963][ C0] text_poke_finish+0x16/0x30
[ 716.863976][ C0] arch_jump_label_transform_apply+0x13/0x20
[ 716.863990][ C0] static_key_disable_cpuslocked+0xcc/0x1b0
[ 716.864004][ C0] static_key_disable+0x16/0x20
[ 716.864016][ C0] toggle_allocation_gate+0x3c8/0x460
[ 716.864031][ C0] ? show_object+0xa0/0xa0
[ 716.864044][ C0] ? do_raw_spin_unlock+0x134/0x8a0
[ 716.864057][ C0] ? wake_bit_function+0x230/0x230
[ 716.864070][ C0] ? rcu_read_lock_sched_held+0x5f/0x130
[ 716.864085][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 716.864097][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.864114][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 716.864128][ C0] process_one_work+0x83c/0x11a0
[ 716.864149][ C0] ? worker_detach_from_pool+0x260/0x260
[ 716.864164][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 716.864177][ C0] ? kthread_data+0x4d/0xc0
[ 716.864190][ C0] ? wq_worker_running+0x95/0x190
[ 716.864203][ C0] worker_thread+0xa6c/0x1290
[ 716.864217][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 716.864233][ C0] ? _raw_spin_unlock+0x40/0x40
[ 716.864250][ C0] kthread+0x2a3/0x2d0
[ 716.864261][ C0] ? rcu_lock_release+0x20/0x20
[ 716.864273][ C0] ? kthread_blkcg+0xd0/0xd0
[ 716.864286][ C0] ret_from_fork+0x1f/0x30
[ 716.864306][ C0]
[ 716.864312][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.027 msecs
[ 716.865284][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 717.251820][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0
[ 717.262737][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 717.272767][ T28] Call Trace:
[ 717.276029][ T28]
[ 717.278945][ T28] dump_stack_lvl+0x1dc/0x2d8
[ 717.283606][ T28] ? show_regs_print_info+0x12/0x12
[ 717.288782][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 717.294484][ T28] ? vscnprintf+0x59/0x80
[ 717.298791][ T28] panic+0x313/0x890
[ 717.302664][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 717.308280][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.314415][ T28] ? nmi_panic+0x90/0x90
[ 717.318637][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 717.323988][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 717.330120][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 717.336255][ T28] watchdog+0xcc2/0xcd0
[ 717.340394][ T28] kthread+0x2a3/0x2d0
[ 717.344444][ T28] ? hungtask_pm_notify+0x50/0x50
[ 717.349448][ T28] ? kthread_blkcg+0xd0/0xd0
[ 717.354017][ T28] ret_from_fork+0x1f/0x30
[ 717.358419][ T28]
[ 717.361580][ T28] Kernel Offset: disabled
[ 717.365888][ T28] Rebooting in 86400 seconds..