Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. syzkaller login: [ 70.197047][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.199548][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.204999][ T4296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.212039][ T4297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.219374][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.226870][ T4297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.233277][ T4296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.239813][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.247117][ T4296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.253689][ T4297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.260921][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.267476][ T4297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.274328][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.281055][ T4297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.288467][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.303065][ T4297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.303959][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.310204][ T4297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.317114][ T4296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.324351][ T4297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.332400][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.338652][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.344840][ T4296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.352208][ T4297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.359187][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.365678][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.372801][ T4296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.379905][ T4297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.386647][ T4296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.402182][ T4297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program executing program [ 175.601473][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 175.608525][ C1] (detected by 1, t=10502 jiffies, g=5753, q=26 ncpus=2) [ 175.615639][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294954701-4294944198), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 175.629010][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g5753 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 175.640124][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 175.650091][ C1] rcu: RCU grace-period kthread stack dump: [ 175.655985][ C1] task:rcu_preempt state:R running task stack:28096 pid:16 ppid:2 flags:0x00004000 [ 175.666785][ C1] Call Trace: [ 175.670066][ C1] [ 175.672999][ C1] __schedule+0x10ec/0x40b0 [ 175.677535][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 175.682743][ C1] ? _raw_spin_unlock+0x40/0x40 [ 175.687606][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 175.693514][ C1] schedule+0xb9/0x180 [ 175.697586][ C1] schedule_timeout+0x15c/0x280 [ 175.702442][ C1] ? console_conditional_schedule+0x40/0x40 [ 175.708337][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 175.714325][ C1] ? update_process_times+0x1b0/0x1b0 [ 175.719709][ C1] ? prepare_to_swait_event+0x335/0x350 [ 175.725266][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 175.730127][ C1] ? rcu_gp_kthread+0x380/0x380 [ 175.734981][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 175.740967][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 175.745727][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 175.750580][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 175.755786][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 175.760990][ C1] rcu_gp_kthread+0x95/0x380 [ 175.765592][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 175.770705][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 175.776607][ C1] ? __kthread_parkme+0x162/0x1c0 [ 175.781645][ C1] kthread+0x29d/0x330 [ 175.785721][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 175.790831][ C1] ? kthread_blkcg+0xd0/0xd0 [ 175.795428][ C1] ret_from_fork+0x1f/0x30 [ 175.799867][ C1] [ 175.802885][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 175.809211][ C1] Sending NMI from CPU 1 to CPUs 0: [ 175.814424][ C0] NMI backtrace for cpu 0 [ 175.814440][ C0] CPU: 0 PID: 4300 Comm: syz-executor251 Not tainted syzkaller #0 [ 175.814453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.814461][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 175.814481][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 80 00 00 00 00 48 8b 04 24 65 48 8b 15 b4 9e 81 7e 65 8b [ 175.814496][ C0] RSP: 0018:ffffc90003e378b8 EFLAGS: 00000093 [ 175.814508][ C0] RAX: ffffffff81714030 RBX: 0000000000000000 RCX: ffff888079cd9dc0 [ 175.814519][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.814527][ C0] RBP: ffffc90003e37978 R08: dffffc0000000000 R09: fffffbfff1c3ee26 [ 175.814537][ C0] R10: fffffbfff1c3ee26 R11: 1ffffffff1c3ee25 R12: 1ffff11004c0541c [ 175.814547][ C0] R13: dffffc0000000000 R14: 1ffff920007c6f18 R15: dffffc0000000000 [ 175.814557][ C0] FS: 00005555902f1480(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 175.814570][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.814580][ C0] CR2: 000020000006b000 CR3: 000000007f8ba000 CR4: 00000000003506f0 [ 175.814592][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.814600][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.814608][ C0] Call Trace: [ 175.814613][ C0] [ 175.814618][ C0] seqcount_lockdep_reader_access+0x70/0x1c0 [ 175.814636][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 175.814652][ C0] ? ktime_get+0x7b/0x270 [ 175.814666][ C0] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 175.814682][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 175.814697][ C0] ktime_get+0x7b/0x270 [ 175.814712][ C0] clockevents_program_min_delta+0x55/0x340 [ 175.814730][ C0] ? ktime_get+0x247/0x270 [ 175.814747][ C0] hrtimer_start_range_ns+0xb9a/0xfc0 [ 175.814767][ C0] posixtimer_rearm+0x131/0x340 [ 175.814788][ C0] dequeue_signal+0x1b6/0x4b0 [ 175.814805][ C0] ? __might_fault+0xa6/0x120 [ 175.814828][ C0] get_signal+0x547/0x1350 [ 175.814855][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 175.814874][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 175.814892][ C0] ? load_gs_index+0x120/0x120 [ 175.814908][ C0] ? get_sigframe_size+0x10/0x10 [ 175.814932][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 175.814952][ C0] exit_to_user_mode_loop+0x70/0x110 [ 175.814971][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 175.814989][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 175.815008][ C0] do_syscall_64+0x58/0xa0 [ 175.815021][ C0] ? clear_bhb_loop+0x60/0xb0 [ 175.815035][ C0] ? clear_bhb_loop+0x60/0xb0 [ 175.815048][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.815069][ C0] RIP: 0033:0x7fa98b1b418a [ 175.815085][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 13 7c 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 73 7c 02 00 8b 44 24 [ 175.815095][ C0] RSP: 002b:00007ffdbeda87b0 EFLAGS: 00000293 [ 175.815106][ C0] RAX: fffffffffffffff7 RBX: 0000000000000004 RCX: 00007fa98b1b418a [ 175.815116][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.815124][ C0] RBP: 0000000000000000 R08: 00007fa98b20c13c R09: 00007fa98b20c13c [ 175.815133][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fa98b20c13c [ 175.815141][ C0] R13: 00007fa98b205157 R14: 00007ffdbeda8800 R15: 0000000000000000 [ 175.815157][ C0]