Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts.
syzkaller login: [ 84.995234][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 85.004910][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 85.004964][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 85.013815][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.021633][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 85.029059][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 85.039030][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 85.045373][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 85.052198][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.060576][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 85.068301][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 85.075353][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 85.081923][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 85.090156][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.097954][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 85.106833][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 85.119829][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 85.122163][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 85.128613][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 85.135802][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.142178][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 85.150995][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 85.159431][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 85.167576][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 85.184637][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 85.184787][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 85.196235][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.210666][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 85.219833][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.219899][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
executing program
executing program
executing program
[ 123.008056][ T4269] Bluetooth: hci3: command 0x0409 tx timeout
[ 123.014879][ T4269] Bluetooth: hci0: command 0x0409 tx timeout
[ 123.025892][ T4267] Bluetooth: hci4: command 0x0409 tx timeout
[ 123.031834][ T7] cfg80211: failed to load regulatory.db
[ 123.032743][ T4267] Bluetooth: hci2: command 0x0409 tx timeout
[ 123.047849][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
executing program
executing program
[ 125.681200][ T4269] Bluetooth: hci0: command 0x041b tx timeout
[ 125.688259][ T4267] Bluetooth: hci2: command 0x041b tx timeout
[ 125.694616][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[ 125.701957][ T4266] Bluetooth: hci4: command 0x041b tx timeout
[ 125.708816][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[ 230.757694][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 230.764785][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22/1:b..l
[ 230.772792][ C0] (detected by 0, t=10502 jiffies, g=8377, q=133 ncpus=2)
[ 230.780028][ C0] task:kworker/1:0 state:R running task stack:26296 pid:22 ppid:2 flags:0x00004000
[ 230.791331][ C0] Workqueue: events_power_efficient gc_worker
[ 230.797482][ C0] Call Trace:
[ 230.800801][ C0]
[ 230.803772][ C0] __schedule+0x143f/0x4570
[ 230.808430][ C0] ? release_firmware_map_entry+0x18b/0x18b
[ 230.814358][ C0] ? print_irqtrace_events+0x210/0x210
[ 230.819862][ C0] ? preempt_schedule_irq+0xec/0x1c0
[ 230.825192][ C0] preempt_schedule_irq+0xf7/0x1c0
[ 230.830348][ C0] ? preempt_schedule_notrace+0x140/0x140
[ 230.836108][ C0] ? rcu_is_watching+0x11/0xb0
[ 230.840909][ C0] irqentry_exit+0x53/0x80
[ 230.845370][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 230.851383][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x25/0x30
[ 230.857656][ C0] Code: cc cc cc cc cc 31 c0 83 3d f7 2d ef 03 00 74 1d 83 3d 92 61 ef 03 00 74 14 65 48 8b 0d 94 e7 50 75 31 c0 83 b9 dc 0a 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc 48 8b 3c 24 e8 57 fb ff ff 66 90
[ 230.877309][ C0] RSP: 0018:ffffc900001c7af8 EFLAGS: 00000246
[ 230.883430][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888018c4bb80
[ 230.891432][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80
[ 230.899433][ C0] RBP: ffffc900001c7c50 R08: dffffc0000000000 R09: fffffbfff225724d
[ 230.907550][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 230.915547][ C0] R13: 0000000000004000 R14: 0000000000040000 R15: 000000000000b4b1
[ 230.923578][ C0] ? gc_worker+0x29b/0x1540
[ 230.928127][ C0] gc_worker+0x2a4/0x1540
[ 230.932499][ C0] ? gc_worker+0x27a/0x1540
[ 230.937035][ C0] ? read_lock_is_recursive+0x10/0x10
[ 230.942457][ C0] ? print_irqtrace_events+0x210/0x210
[ 230.947956][ C0] ? init_conntrack+0xfc0/0xfc0
[ 230.952840][ C0] ? do_raw_spin_unlock+0x137/0x8a0
[ 230.958077][ C0] ? process_one_work+0x806/0x1260
[ 230.963221][ C0] process_one_work+0x917/0x1260
[ 230.968297][ C0] ? worker_detach_from_pool+0x260/0x260
[ 230.973968][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 230.979561][ C0] ? kthread_data+0x4e/0xc0
[ 230.984172][ C0] ? wq_worker_running+0x97/0x190
[ 230.989236][ C0] worker_thread+0xa47/0x1200
[ 230.993954][ C0] ? release_firmware_map_entry+0x18b/0x18b
[ 230.999906][ C0] kthread+0x28d/0x320
[ 231.004009][ C0] ? worker_clr_flags+0x190/0x190
[ 231.009079][ C0] ? kthread_blkcg+0xd0/0xd0
[ 231.013733][ C0] ret_from_fork+0x1f/0x30
[ 231.018236][ C0]
[ 231.021292][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g8377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 231.032517][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 231.042508][ C0] rcu: RCU grace-period kthread stack dump:
[ 231.048418][ C0] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000
[ 231.059233][ C0] Call Trace:
[ 231.062536][ C0]
[ 231.065497][ C0] __schedule+0x143f/0x4570
[ 231.070042][ C0] ? _raw_spin_unlock+0x40/0x40
[ 231.074939][ C0] ? __mod_timer+0x956/0xee0
[ 231.079573][ C0] ? release_firmware_map_entry+0x18b/0x18b
[ 231.085511][ C0] ? lockdep_softirqs_off+0x420/0x420
[ 231.090923][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 231.096850][ C0] ? _raw_spin_unlock+0x40/0x40
[ 231.101747][ C0] schedule+0xbf/0x180
[ 231.105858][ C0] schedule_timeout+0x1b9/0x300
[ 231.110758][ C0] ? console_conditional_schedule+0x40/0x40
[ 231.116697][ C0] ? update_process_times+0x1b0/0x1b0
[ 231.122119][ C0] ? prepare_to_swait_event+0x329/0x350
[ 231.127725][ C0] rcu_gp_fqs_loop+0x2d2/0x1150
[ 231.132626][ C0] ? lockdep_hardirqs_on+0x94/0x130
[ 231.137859][ C0] ? rcu_gp_init+0x15f0/0x15f0
[ 231.142655][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 231.148590][ C0] ? finish_swait+0xcf/0x1e0
[ 231.153225][ C0] rcu_gp_kthread+0xa3/0x3b0
[ 231.157853][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 231.162997][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 231.168928][ C0] ? __kthread_parkme+0x168/0x1c0
[ 231.173999][ C0] kthread+0x28d/0x320
[ 231.178094][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 231.183238][ C0] ? kthread_blkcg+0xd0/0xd0
[ 231.187857][ C0] ret_from_fork+0x1f/0x30
[ 231.192323][ C0]
[ 231.195363][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 231.201719][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 231.206968][ C1] NMI backtrace for cpu 1
[ 231.206986][ C1] CPU: 1 PID: 4278 Comm: syz-executor688 Not tainted 6.1.131-syzkaller #0
[ 231.207003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 231.207012][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80
[ 231.207043][ C1] Code: 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 4c 8b 04 24 <65> 48 8b 0d 94 c1 77 7e 65 8b 05 95 c1 77 7e 25 00 01 ff 00 74 10
[ 231.207057][ C1] RSP: 0018:ffffc90003e077b8 EFLAGS: 00000046
[ 231.207072][ C1] RAX: 1d1055d31a220800 RBX: 0000000000000200 RCX: ffffc90003e07703
[ 231.207084][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 231.207094][ C1] RBP: ffffc90003e07868 R08: ffffffff817a18f9 R09: fffffbfff1d4168e
[ 231.207106][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 231.207117][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: 1ffff920007c0ef8
[ 231.207128][ C1] FS: 000055559474e3c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 231.207143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 231.207154][ C1] CR2: 00007ff2bf4dd510 CR3: 0000000020f4c000 CR4: 00000000003506e0
[ 231.207168][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 231.207177][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 231.207191][ C1] Call Trace:
[ 231.207198][ C1]
[ 231.207205][ C1] ? nmi_cpu_backtrace+0x3de/0x560
[ 231.207223][ C1] ? read_lock_is_recursive+0x10/0x10
[ 231.207251][ C1] ? nmi_trigger_cpumask_backtrace+0x430/0x430
[ 231.207269][ C1] ? nmi_handle+0x25/0x440
[ 231.207302][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10
[ 231.207317][ C1] ? nmi_handle+0x12e/0x440
[ 231.207343][ C1] ? nmi_handle+0x25/0x440
[ 231.207368][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x80
[ 231.207391][ C1] ? default_do_nmi+0x62/0x150
[ 231.207409][ C1] ? exc_nmi+0xa8/0x100
[ 231.207426][ C1] ? end_repeat_nmi+0x16/0x31
[ 231.207450][ C1] ? seqcount_lockdep_reader_access+0x1a9/0x220
[ 231.207482][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x80
[ 231.207506][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x80
[ 231.207530][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x80
[ 231.207554][ C1]
[ 231.207558][ C1]
[ 231.207562][ C1] seqcount_lockdep_reader_access+0x1a9/0x220
[ 231.207587][ C1] ? ktime_get_real_ts64+0x460/0x460
[ 231.207615][ C1] ktime_get+0x31/0x270
[ 231.207638][ C1] clockevents_program_event+0xe1/0x310
[ 231.207667][ C1] hrtimer_start_range_ns+0xada/0xc80
[ 231.207694][ C1] posixtimer_rearm+0x1ad/0x3f0
[ 231.207715][ C1] ? alarmtimer_resume+0x50/0x50
[ 231.207732][ C1] ? do_raw_spin_unlock+0x137/0x8a0
[ 231.207753][ C1] dequeue_signal+0x245/0x590
[ 231.207780][ C1] ? unhandled_signal+0x1d0/0x1d0
[ 231.207805][ C1] ? uprobe_deny_signal+0x74/0x230
[ 231.207828][ C1] get_signal+0x5ed/0x17a0
[ 231.207860][ C1] ? ptrace_notify+0x370/0x370
[ 231.207889][ C1] arch_do_signal_or_restart+0xb0/0x1a10
[ 231.207909][ C1] ? __might_fault+0xa1/0x110
[ 231.207933][ C1] ? __lock_acquire+0x1f80/0x1f80
[ 231.207962][ C1] ? do_sigaltstack+0x3f3/0x610
[ 231.207983][ C1] ? get_sigframe_size+0x10/0x10
[ 231.208001][ C1] ? restore_altstack+0x107/0x150
[ 231.208020][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 231.208051][ C1] ? exit_to_user_mode_loop+0x39/0x100
[ 231.208070][ C1] exit_to_user_mode_loop+0x6a/0x100
[ 231.208087][ C1] exit_to_user_mode_prepare+0xb1/0x140
[ 231.208105][ C1] syscall_exit_to_user_mode+0x60/0x270
[ 231.208128][ C1] do_syscall_64+0x47/0xb0
[ 231.208143][ C1] ? clear_bhb_loop+0x45/0xa0
[ 231.208164][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 231.208185][ C1] RIP: 0033:0x7ff2bf4c4259
[ 231.208207][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 231.208220][ C1] RSP: 002b:00007ffc65a7b368 EFLAGS: 00000246
[ 231.208232][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007ff2bf4c4259
[ 231.208243][ C1] RDX: 000020000006b000 RSI: 0000000000000000 RDI: 0000000000000000
[ 231.208252][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 231.208262][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc65a7b38c
[ 231.208272][ C1] R13: 00007ffc65a7b3c0 R14: 00007ffc65a7b3a0 R15: 0000000000000001
[ 231.208290][ C1]
[ 231.208297][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.338 msecs