[ 467.612600][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.633799][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.800148][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.815075][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.027236][ T105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.161226][ T105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.380197][ T105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.522915][ T105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.881995][ T105] bridge_slave_1: left allmulticast mode [ 469.911364][ T105] bridge_slave_1: left promiscuous mode [ 469.946003][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.983253][ T105] bridge_slave_0: left allmulticast mode [ 469.989025][ T105] bridge_slave_0: left promiscuous mode [ 470.023062][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.672371][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.705503][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.749384][ T105] bond0 (unregistering): Released all slaves [ 471.306603][ T105] hsr_slave_0: left promiscuous mode [ 471.345515][ T105] hsr_slave_1: left promiscuous mode [ 471.370322][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.396165][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.419036][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.446897][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.499826][ T105] veth1_macvtap: left promiscuous mode [ 471.521206][ T105] veth0_macvtap: left promiscuous mode [ 471.537879][ T105] veth1_vlan: left promiscuous mode [ 471.558927][ T105] veth0_vlan: left promiscuous mode [ 472.562148][ T105] team0 (unregistering): Port device team_slave_1 removed [ 472.648449][ T105] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 474.107726][ T6342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.120136][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.129024][ T6332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.146889][ T6332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.157802][T10835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.165599][T10834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.173954][ T6332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.181951][T10835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.189680][ T6332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.196053][T10835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.207599][T10835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.218812][ T6332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.226650][ T6332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.237633][T10834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.246993][ T6342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.247453][T10834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.255534][ T6342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.269731][ T6342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.276963][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.286355][ T6342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.302930][T10834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.311297][T10834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.329270][T10834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.337305][T10834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.348984][T10834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.485258][ T105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.806418][ T105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.105933][ T105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.391821][ T105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program [ 476.660665][ T5891] Bluetooth: hci0: command tx timeout [ 476.666938][T10834] Bluetooth: hci1: command tx timeout [ 476.673451][ T5888] Bluetooth: hci3: command tx timeout [ 476.673458][T10835] Bluetooth: hci4: command tx timeout [ 476.673707][T10835] Bluetooth: hci2: command tx timeout [ 581.722717][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 581.729799][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19679/1:b..l [ 581.738126][ C0] rcu: (detected by 0, t=10502 jiffies, g=48445, q=809 ncpus=2) [ 581.745872][ C0] task:syz-executor112 state:R running task stack:26144 pid:19679 tgid:19679 ppid:19676 task_flags:0x400140 flags:0x00080000 [ 581.760310][ C0] Call Trace: [ 581.763698][ C0] [ 581.766728][ C0] __schedule+0x1585/0x5310 [ 581.771272][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 581.776221][ C0] ? __pfx___schedule+0x10/0x10 [ 581.781084][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 581.786211][ C0] preempt_schedule_irq+0x4d/0xa0 [ 581.791344][ C0] irqentry_exit+0x599/0x620 [ 581.796146][ C0] ? trace_irq_disable+0x3b/0x150 [ 581.801216][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.807242][ C0] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 581.813088][ C0] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 581.832719][ C0] RSP: 0018:ffffc9000ca3f198 EFLAGS: 00000a02 [ 581.838907][ C0] RAX: 0000000000000000 RBX: ffffffff902a4810 RCX: dffffc0000000000 [ 581.846901][ C0] RDX: ffffffff902a4810 RSI: ffffffff90a68bae RDI: ffffffff8c27a620 [ 581.854885][ C0] RBP: ffffffff902a4810 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 581.862965][ C0] R10: ffffc9000ca3f2b8 R11: ffffffff81b0c280 R12: ffffffff8185c005 [ 581.870961][ C0] R13: ffffffff902a4810 R14: ffffc9000ca3f268 R15: ffffffff902a4810 [ 581.878972][ C0] ? copy_process+0x18b5/0x3cf0 [ 581.883963][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.890231][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 581.895372][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 581.900857][ C0] ? copy_process+0x18b6/0x3cf0 [ 581.905830][ C0] ? copy_process+0x18b6/0x3cf0 [ 581.910700][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.916953][ C0] arch_stack_walk+0x11b/0x150 [ 581.921835][ C0] ? copy_process+0x18b6/0x3cf0 [ 581.926903][ C0] ? anon_vma_clone+0x412/0xa00 [ 581.931865][ C0] stack_trace_save+0xa9/0x100 [ 581.936821][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 581.942344][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 581.947484][ C0] kasan_save_track+0x3e/0x80 [ 581.952600][ C0] ? kasan_save_track+0x3e/0x80 [ 581.957629][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 581.962838][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 581.968671][ C0] ? anon_vma_clone+0x412/0xa00 [ 581.973530][ C0] ? anon_vma_fork+0x16a/0x570 [ 581.978470][ C0] ? dup_mmap+0x991/0x1d90 [ 581.982977][ C0] ? copy_mm+0x13b/0x4b0 [ 581.987236][ C0] ? copy_process+0x18b6/0x3cf0 [ 581.992147][ C0] __kasan_slab_alloc+0x6c/0x80 [ 581.997014][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 582.002664][ C0] ? anon_vma_clone+0x412/0xa00 [ 582.007689][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 582.013352][ C0] anon_vma_clone+0x412/0xa00 [ 582.018129][ C0] anon_vma_fork+0x16a/0x570 [ 582.022736][ C0] dup_mmap+0x991/0x1d90 [ 582.027004][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 582.031688][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 582.036904][ C0] copy_mm+0x13b/0x4b0 [ 582.041018][ C0] copy_process+0x18b6/0x3cf0 [ 582.045800][ C0] ? copy_process+0x921/0x3cf0 [ 582.050771][ C0] ? __pfx_copy_process+0x10/0x10 [ 582.056012][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 582.061470][ C0] kernel_clone+0x248/0x8e0 [ 582.066001][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.072074][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 582.077139][ C0] __x64_sys_clone+0x1b6/0x230 [ 582.081912][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 582.087238][ C0] ? kmem_cache_free+0x187/0x630 [ 582.092227][ C0] ? __se_sys_mkdir+0xc8/0x150 [ 582.097014][ C0] do_syscall_64+0x14d/0xf80 [ 582.101607][ C0] ? trace_irq_disable+0x3b/0x150 [ 582.106653][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.112901][ C0] ? clear_bhb_loop+0x40/0x90 [ 582.117761][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.123659][ C0] RIP: 0033:0x7f8729fca162 [ 582.128086][ C0] RSP: 002b:00007fff835cee10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 582.136848][ C0] RAX: ffffffffffffffda RBX: 00007fff835cee10 RCX: 00007f8729fca162 [ 582.144834][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 582.152811][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000ffffffff [ 582.160791][ C0] R10: 000055558dae8690 R11: 0000000000000246 R12: 0000000000000001 [ 582.168847][ C0] R13: 00007fff835cef90 R14: 00007fff835cefd0 R15: 0000000000000000 [ 582.177020][ C0] [ 582.180078][ C0] rcu: rcu_preempt kthread starved for 10543 jiffies! g48445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 582.191551][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 582.201865][ C0] rcu: RCU grace-period kthread stack dump: [ 582.207775][ C0] task:rcu_preempt state:R running task stack:27744 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 582.221533][ C0] Call Trace: [ 582.224823][ C0] [ 582.227773][ C0] __schedule+0x1585/0x5310 [ 582.232341][ C0] ? __pfx___schedule+0x10/0x10 [ 582.237345][ C0] ? schedule+0x90/0x360 [ 582.241693][ C0] schedule+0x164/0x360 [ 582.245874][ C0] schedule_timeout+0x158/0x2c0 [ 582.250763][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 582.256245][ C0] ? __pfx_process_timeout+0x10/0x10 [ 582.261548][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.267461][ C0] ? prepare_to_swait_event+0x340/0x370 [ 582.273014][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 582.277886][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 582.283272][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 582.288063][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 582.293453][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 582.298929][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.304752][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 582.309359][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 582.314648][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.320463][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 582.325492][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 582.330620][ C0] kthread+0x388/0x470 [ 582.334780][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 582.339996][ C0] ? __pfx_kthread+0x10/0x10 [ 582.344686][ C0] ret_from_fork+0x51e/0xb90 [ 582.349300][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 582.354418][ C0] ? __switch_to+0xc7d/0x1450 [ 582.359119][ C0] ? __pfx_kthread+0x10/0x10 [ 582.363718][ C0] ret_from_fork_asm+0x1a/0x30 [ 582.368640][ C0] [ 582.371672][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 582.378011][ C0] Sending NMI from CPU 0 to CPUs 1: [ 582.383231][ C1] NMI backtrace for cpu 1 [ 582.383263][ C1] CPU: 1 UID: 0 PID: 19707 Comm: syz-executor112 Not tainted syzkaller #0 PREEMPT(full) [ 582.383281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 582.383291][ C1] RIP: 0010:entry_SYSCALL_64_safe_stack+0x2/0xe [ 582.383312][ C1] Code: fa 0f 01 f8 65 48 89 25 85 5f 1a 12 66 90 0f 20 dc 0f 1f 44 00 00 48 81 e4 ff e7 ff ff 0f 22 dc 65 48 8b 25 65 cf 1b 12 6a 2b <65> ff 35 60 5f 1a 12 41 53 6a 33 51 50 57 56 52 51 6a da 41 50 41 [ 582.383325][ C1] RSP: 0018:ffffc90005e57fe8 EFLAGS: 00000006 [ 582.383339][ C1] RAX: 000000000000000f RBX: 000055558dae83c0 RCX: 00007f8729fa4ae9 [ 582.383360][ C1] RDX: 00007fff835ce940 RSI: 00007fff835cea70 RDI: 0000000000000021 [ 582.383370][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.383379][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f872a002062 [ 582.383389][ C1] R13: 00007fff835cef90 R14: 00007fff835cefd0 R15: 0000000000000000 [ 582.383399][ C1] FS: 000055558dae83c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 582.383412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.383422][ C1] CR2: 000055558dae8320 CR3: 0000000079032000 CR4: 00000000003526f0 [ 582.383436][ C1] Call Trace: [ 582.383443][ C1] [ 582.383450][ C1]