Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 88.370930][ T4311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.379868][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.388361][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.395899][ T4312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.397230][ T4312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.407188][ T4311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.415713][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.422106][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.426072][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.434018][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.445853][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.453245][ T4312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.453837][ T4311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.461098][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.470079][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.484712][ T4313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.492571][ T4313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.492785][ T4314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.505257][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.514750][ T4314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.515442][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.523922][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.530338][ T4313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.537636][ T4314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.549979][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.551538][ T4314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.558180][ T4313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.572061][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.575150][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.588646][ T4314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.905688][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.918088][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.930846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.963177][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.971043][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.982256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.003526][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.014186][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.026463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.042733][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.050610][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.061027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.082420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.090365][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.114133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.128762][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.142609][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.150638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 89.176919][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.197279][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.206570][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.215094][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.224017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.237672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 186.579101][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 186.585566][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 186.591967][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 186.598256][ T4307] Bluetooth: hci1: command 0x0409 tx timeout [ 186.604490][ T4307] Bluetooth: hci4: command 0x0409 tx timeout executing program [ 186.674175][ T14] cfg80211: failed to load regulatory.db [ 291.702387][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 291.709500][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P56/1:b..l [ 291.717555][ C1] (detected by 1, t=10503 jiffies, g=8561, q=256 ncpus=2) [ 291.724818][ C1] task:kworker/u4:4 state:R running task stack:24400 pid:56 ppid:2 flags:0x00004000 [ 291.736176][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 291.742288][ C1] Call Trace: [ 291.745626][ C1] [ 291.748608][ C1] __schedule+0x11d1/0x40e0 [ 291.753194][ C1] ? mark_lock+0x94/0x320 [ 291.757611][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 291.763828][ C1] ? __sched_text_start+0x8/0x8 [ 291.768732][ C1] ? lock_chain_count+0x20/0x20 [ 291.773648][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 291.778992][ C1] preempt_schedule_irq+0xbb/0x160 [ 291.784159][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 291.789935][ C1] ? rcu_is_watching+0x11/0xa0 [ 291.794771][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 291.800650][ C1] irqentry_exit+0x63/0x70 [ 291.805120][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.811176][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 291.816622][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 291.836293][ C1] RSP: 0018:ffffc90001576b00 EFLAGS: 00000206 [ 291.842426][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3e9c355887893700 [ 291.850445][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 291.858475][ C1] RBP: ffffc90001576c08 R08: dffffc0000000000 R09: 1ffffffff215fe48 [ 291.866496][ C1] R10: dffffc0000000000 R11: fffffbfff215fe49 R12: 0000000000000001 [ 291.874522][ C1] R13: 1ffff920002aed6c R14: 0000000000000246 R15: dffffc0000000000 [ 291.882573][ C1] ? verify_lock_unused+0x140/0x140 [ 291.887845][ C1] ? read_lock_is_recursive+0x10/0x10 [ 291.893293][ C1] ? verify_lock_unused+0x140/0x140 [ 291.898559][ C1] folio_memcg_lock+0x9e/0x320 [ 291.903387][ C1] ? folio_memcg_lock+0x7d/0x320 [ 291.908380][ C1] ? folio_memcg_lock+0x7d/0x320 [ 291.913380][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 291.919164][ C1] ? cgroup_rstat_updated+0xd7/0x350 [ 291.924520][ C1] ? folio_mapping+0x1ba/0x4d0 [ 291.929354][ C1] __folio_start_writeback+0x165/0x1000 [ 291.934968][ C1] ? __folio_end_writeback+0xdf0/0xdf0 [ 291.940488][ C1] ? lock_chain_count+0x20/0x20 [ 291.945401][ C1] ? __mod_lruvec_page_state+0xa1/0x410 [ 291.951008][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 291.956792][ C1] ? folio_clear_dirty_for_io+0x713/0xc50 [ 291.962587][ C1] ext4_bio_write_page+0x30d/0x2ae0 [ 291.967887][ C1] mpage_submit_page+0x17a/0x210 [ 291.972889][ C1] ext4_writepages+0x1b3d/0x2f40 [ 291.977941][ C1] ? ext4_read_folio+0x370/0x370 [ 291.982977][ C1] ? writeback_sb_inodes+0x46b/0x1850 [ 291.988426][ C1] ? ext4_read_folio+0x370/0x370 [ 291.993416][ C1] do_writepages+0x3ba/0x640 [ 291.998074][ C1] ? wbc_attach_and_unlock_inode+0x387/0x5f0 [ 292.004120][ C1] ? __writepage+0x130/0x130 [ 292.008781][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 292.013868][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 292.018977][ C1] __writeback_single_inode+0x156/0x1160 [ 292.024686][ C1] writeback_sb_inodes+0xb30/0x1850 [ 292.029981][ C1] ? queue_io+0x5a0/0x5a0 [ 292.034415][ C1] __writeback_inodes_wb+0x12a/0x3f0 [ 292.039869][ C1] wb_writeback+0x494/0xd50 [ 292.044454][ C1] ? percpu_ref_tryget+0x250/0x250 [ 292.049636][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.055709][ C1] wb_workfn+0xb68/0xee0 [ 292.060058][ C1] ? inode_wait_for_writeback+0x220/0x220 [ 292.065854][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.071913][ C1] ? read_lock_is_recursive+0x10/0x10 [ 292.077362][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.082635][ C1] ? process_one_work+0x7b0/0x1160 [ 292.087811][ C1] process_one_work+0x8a2/0x1160 [ 292.092829][ C1] ? worker_detach_from_pool+0x240/0x240 [ 292.098613][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 292.103701][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 292.109314][ C1] ? kthread_data+0x4b/0xc0 [ 292.113897][ C1] worker_thread+0xaa2/0x1270 [ 292.118658][ C1] ? __kthread_parkme+0x162/0x1c0 [ 292.123751][ C1] kthread+0x29d/0x330 [ 292.127867][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 292.133068][ C1] ? kthread_blkcg+0xd0/0xd0 [ 292.137713][ C1] ret_from_fork+0x1f/0x30 [ 292.142236][ C1] [ 292.145309][ C1] rcu: rcu_preempt kthread starved for 10546 jiffies! g8561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 292.156551][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 292.166570][ C1] rcu: RCU grace-period kthread stack dump: [ 292.172500][ C1] task:rcu_preempt state:R running task stack:26416 pid:16 ppid:2 flags:0x00004000 [ 292.183338][ C1] Call Trace: [ 292.186666][ C1] [ 292.189643][ C1] __schedule+0x11d1/0x40e0 [ 292.194220][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 292.200183][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 292.206160][ C1] ? __sched_text_start+0x8/0x8 [ 292.211077][ C1] ? __mod_timer+0x91e/0xd00 [ 292.215725][ C1] schedule+0xb9/0x180 [ 292.219846][ C1] schedule_timeout+0x184/0x2d0 [ 292.224759][ C1] ? console_conditional_schedule+0x40/0x40 [ 292.230723][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.236765][ C1] ? update_process_times+0x1b0/0x1b0 [ 292.242205][ C1] ? prepare_to_swait_event+0x335/0x350 [ 292.247841][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 292.252755][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 292.257658][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.263701][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 292.268516][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 292.273449][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.278709][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 292.283973][ C1] rcu_gp_kthread+0x99/0x3b0 [ 292.288620][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 292.293791][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 292.299766][ C1] ? __kthread_parkme+0x162/0x1c0 [ 292.304867][ C1] kthread+0x29d/0x330 [ 292.308982][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 292.314148][ C1] ? kthread_blkcg+0xd0/0xd0 [ 292.318810][ C1] ret_from_fork+0x1f/0x30 [ 292.323304][ C1] [ 292.326376][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 292.332754][ C1] Sending NMI from CPU 1 to CPUs 0: [ 292.338052][ C0] NMI backtrace for cpu 0 [ 292.338073][ C0] CPU: 0 PID: 4322 Comm: syz-executor177 Not tainted syzkaller #0 [ 292.338091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.338101][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 292.338129][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 5f c7 01 03 66 2e 0f 1f 84 00 00 00 00 00 [ 292.338144][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00000046 [ 292.338160][ C0] RAX: 0000000000041f66 RBX: 0000000000041f66 RCX: 0000000000000838 [ 292.338172][ C0] RDX: 0000000000000000 RSI: 0000000000041f66 RDI: 0000000000000838 [ 292.338183][ C0] RBP: 0000000000000000 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 292.338196][ C0] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 [ 292.338210][ C0] R13: 00000000100053e2 R14: ffffffff8c658b40 R15: dffffc0000000000 [ 292.338223][ C0] FS: 0000555564664480(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 292.338240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.338252][ C0] CR2: 0000200000000058 CR3: 0000000023cf3000 CR4: 00000000003506f0 [ 292.338268][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.338279][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.338290][ C0] Call Trace: [ 292.338297][ C0] [ 292.338302][ C0] lapic_next_event+0x5b/0x70 [ 292.338330][ C0] clockevents_program_event+0x1bc/0x310 [ 292.338358][ C0] hrtimer_interrupt+0x59d/0x9c0 [ 292.338392][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 executing program [ 292.338421][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 292.338446][ C0] [ 292.338451][ C0] [ 292.338456][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 292.338486][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 292.338510][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 52 2b f7 48 89 df e8 d6 1a 2c f7 e8 21 75 4f f7 fb bf 01 00 00 00 26 7f 1f f7 65 8b 05 f7 fe c8 75 85 c0 74 02 5b c3 e8 44 13 c7 [ 292.338525][ C0] RSP: 0018:ffffc900043f7b98 EFLAGS: 00000282 [ 292.338539][ C0] RAX: 615e4ec8caeb5300 RBX: ffff88802e16ca00 RCX: 615e4ec8caeb5300 [ 292.338552][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: 0000000000000001 [ 292.338565][ C0] RBP: ffff88802e16ce98 R08: ffff88802e16ca03 R09: 1ffff11005c2d940 [ 292.338578][ C0] R10: dffffc0000000000 R11: ffffed1005c2d941 R12: 1ffff11005c2d9d3 [ 292.338592][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 292.338612][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.338635][ C0] get_signal+0x1163/0x1350 [ 292.338683][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 292.338711][ C0] ? __ia32_sys_rt_sigreturn+0x619/0x760 [ 292.338738][ C0] ? load_gs_index+0x130/0x130 [ 292.338760][ C0] ? get_sigframe_size+0x10/0x10 [ 292.338801][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 292.338832][ C0] exit_to_user_mode_loop+0x70/0x110 [ 292.338860][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 292.338906][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 292.338931][ C0] do_syscall_64+0x58/0xa0 [ 292.338948][ C0] ? clear_bhb_loop+0x60/0xb0 [ 292.338975][ C0] ? clear_bhb_loop+0x60/0xb0 [ 292.339003][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.339030][ C0] RIP: 0033:0x7f526df4a06e [ 292.339053][ C0] Code: 08 0f 85 15 ec ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 292.339066][ C0] RSP: 002b:00007fff8d3eac58 EFLAGS: 00000246 [ 292.339080][ C0] RAX: fffffffffffffff7 RBX: 0000555564664480 RCX: 00007f526df4a06e [ 292.339093][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d [ 292.339103][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.339113][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d3eacdc [ 292.339125][ C0] R13: 00007fff8d3ead10 R14: 00007fff8d3eacf0 R15: 0000000000000001 [ 292.339145][ C0] [ 292.339152][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.108 msecs [ 292.542466][ C0] sched: RT throttling activated [ 292.569919][ T4314] Bluetooth: hci2: command 0x041b tx timeout