Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 198.050691][ T28] audit: type=1400 audit(1713948174.931:87): avc: denied { execmem } for pid=5084 comm="syz-executor365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 198.089285][ T28] audit: type=1400 audit(1713948174.961:88): avc: denied { mounton } for pid=5089 comm="syz-executor365" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 198.124416][ T28] audit: type=1400 audit(1713948174.961:89): avc: denied { mount } for pid=5089 comm="syz-executor365" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.148303][ T28] audit: type=1400 audit(1713948174.961:90): avc: denied { create } for pid=5093 comm="syz-executor365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.173445][ T28] audit: type=1400 audit(1713948174.961:91): avc: denied { create } for pid=5089 comm="syz-executor365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.195680][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.197888][ T28] audit: type=1400 audit(1713948174.961:92): avc: denied { read write } for pid=5089 comm="syz-executor365" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.204598][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.227773][ T28] audit: type=1400 audit(1713948174.961:93): avc: denied { read write } for pid=5093 comm="syz-executor365" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.234784][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.266175][ T28] audit: type=1400 audit(1713948174.961:94): avc: denied { open } for pid=5089 comm="syz-executor365" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.266390][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.290925][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.300043][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.304697][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.311728][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.319405][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.326354][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.333397][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.340208][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.346463][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.355037][ T28] audit: type=1400 audit(1713948174.961:95): avc: denied { open } for pid=5093 comm="syz-executor365" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.360796][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.392619][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.392799][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.401239][ T28] audit: type=1400 audit(1713948175.001:96): avc: denied { ioctl } for pid=5091 comm="syz-executor365" path="socket:[3480]" dev="sockfs" ino=3480 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.407313][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.433371][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.440197][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.445956][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.454142][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.459944][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.467321][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.474416][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.483430][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.488039][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.497013][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.509023][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.518408][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.529845][ T4470] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.858704][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 303.865758][ C0] rcu: (detected by 0, t=10502 jiffies, g=7393, q=17 ncpus=2) [ 303.873314][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10496 (4294967453-4294956957), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 303.886695][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g7393 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 303.897814][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 303.907789][ C0] rcu: RCU grace-period kthread stack dump: [ 303.913684][ C0] task:rcu_preempt state:R running task stack:27296 pid:16 tgid:16 ppid:2 flags:0x00004000 [ 303.925434][ C0] Call Trace: [ 303.928725][ C0] [ 303.931668][ C0] __schedule+0xf15/0x5d00 [ 303.936276][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 303.941580][ C0] ? __pfx___schedule+0x10/0x10 [ 303.946450][ C0] ? schedule+0x298/0x350 [ 303.950798][ C0] ? __pfx_lock_release+0x10/0x10 [ 303.955844][ C0] ? __pfx___mod_timer+0x10/0x10 [ 303.960846][ C0] ? lock_acquire+0x1b1/0x560 [ 303.965547][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 303.971030][ C0] schedule+0xe7/0x350 [ 303.975126][ C0] schedule_timeout+0x136/0x2a0 [ 303.980028][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 303.985421][ C0] ? __pfx_process_timeout+0x10/0x10 [ 303.990731][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 303.996559][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 304.002069][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 304.006903][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 304.012211][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 304.018041][ C0] rcu_gp_kthread+0x271/0x380 [ 304.022740][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.027962][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.033218][ C0] ? __kthread_parkme+0x148/0x220 [ 304.038305][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.043519][ C0] kthread+0x2c1/0x3a0 [ 304.047610][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.052835][ C0] ? __pfx_kthread+0x10/0x10 [ 304.057445][ C0] ret_from_fork+0x45/0x80 [ 304.061890][ C0] ? __pfx_kthread+0x10/0x10 [ 304.066505][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.071313][ C0] [ 304.074343][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 304.080674][ C0] Sending NMI from CPU 0 to CPUs 1: [ 304.085890][ C1] NMI backtrace for cpu 1 [ 304.085899][ C1] CPU: 1 PID: 5114 Comm: syz-executor365 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 304.085921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 304.085932][ C1] RIP: 0010:__lock_acquire+0xa04/0x3b30 [ 304.085964][ C1] Code: 48 8b 04 24 48 05 c8 0a 00 00 48 89 c2 48 89 44 24 70 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a1 2a 00 00 <48> 8b 04 24 48 8b 98 c8 0a 00 00 8b 44 24 10 85 c0 0f 84 3c 05 00 [ 304.085982][ C1] RSP: 0018:ffffc9000320f8b0 EFLAGS: 00000046 [ 304.086040][ C1] RAX: dffffc0000000000 RBX: 00000000000001b3 RCX: ffffffff816ba90a [ 304.086054][ C1] RDX: 1ffff1100f976c99 RSI: 0000000000000008 RDI: ffffffff93dda1b0 [ 304.086068][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff27bb436 [ 304.086080][ C1] R10: ffffffff93dda1b7 R11: 0000000000000000 R12: 0000000000000000 [ 304.086093][ C1] R13: 0000000000000000 R14: ffff88807cbb64d8 R15: 0000000000000004 [ 304.086106][ C1] FS: 000055558a3cd3c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 304.086126][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.086141][ C1] CR2: 000000002006b000 CR3: 000000007f514000 CR4: 00000000003506f0 [ 304.086154][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.086171][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.086184][ C1] Call Trace: [ 304.086190][ C1] [ 304.086197][ C1] ? show_regs+0x8c/0xa0 [ 304.086225][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 304.086283][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 304.086314][ C1] ? nmi_handle+0x1a9/0x5c0 [ 304.086333][ C1] ? __lock_acquire+0xa04/0x3b30 [ 304.086359][ C1] ? default_do_nmi+0x6a/0x160 [ 304.086383][ C1] ? exc_nmi+0x170/0x1e0 [ 304.086405][ C1] ? end_repeat_nmi+0xf/0x53 [ 304.086470][ C1] ? __lock_acquire+0xeba/0x3b30 [ 304.086496][ C1] ? __lock_acquire+0xa04/0x3b30 [ 304.086522][ C1] ? __lock_acquire+0xa04/0x3b30 [ 304.086548][ C1] ? __lock_acquire+0xa04/0x3b30 [ 304.086573][ C1] [ 304.086579][ C1] [ 304.086588][ C1] ? hlock_class+0x4e/0x130 [ 304.086609][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 304.086634][ C1] ? clockevents_program_event+0x155/0x380 [ 304.086695][ C1] ? __pfx_mark_lock+0x10/0x10 [ 304.086720][ C1] lock_acquire+0x1b1/0x560 [ 304.086746][ C1] ? __might_fault+0xe3/0x190 [ 304.086802][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 304.086830][ C1] ? __pfx___might_resched+0x10/0x10 [ 304.086879][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 304.086904][ C1] ? __might_fault+0xe3/0x190 [ 304.086927][ C1] __might_fault+0x11b/0x190 [ 304.086950][ C1] ? __might_fault+0xe3/0x190 [ 304.086972][ C1] ? copy_fpstate_to_sigframe+0x2b2/0xaa0 [ 304.086999][ C1] copy_fpstate_to_sigframe+0x80d/0xaa0 [ 304.087025][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 304.087051][ C1] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 304.087078][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 304.087104][ C1] ? find_held_lock+0x2d/0x110 [ 304.087126][ C1] get_sigframe+0x455/0x930 [ 304.087150][ C1] ? __pfx_get_sigframe+0x10/0x10 [ 304.087179][ C1] x64_setup_rt_frame+0x129/0xce0 [ 304.087204][ C1] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 304.087249][ C1] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 304.087273][ C1] ? do_sigaltstack.constprop.0+0x547/0x800 [ 304.087335][ C1] arch_do_signal_or_restart+0x5e6/0x7e0 [ 304.087360][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 304.087384][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.087410][ C1] ? __do_sys_rt_sigreturn+0x167/0x230 [ 304.087435][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 304.087461][ C1] syscall_exit_to_user_mode+0x14a/0x2a0 [ 304.087482][ C1] do_syscall_64+0xdc/0x260 [ 304.087502][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.087524][ C1] RIP: 0033:0x7ff33953be79 [ 304.087538][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 304.087556][ C1] RSP: 002b:00007fff51af15e8 EFLAGS: 00000246 [ 304.087570][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007ff33953be79 [ 304.087583][ C1] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.087595][ C1] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 304.087607][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000055558a3cd370 [ 304.087620][ C1] R13: 0000000000000003 R14: 00007fff51af1660 R15: 00007fff51af1650 [ 304.087636][ C1] [ 304.087643][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.753 msecs