Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 72.897444][ T29] audit: type=1400 audit(1772048516.499:62): avc: denied { execmem } for pid=5806 comm="syz-executor257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.933200][ T29] audit: type=1400 audit(1772048516.509:63): avc: denied { mounton } for pid=5806 comm="syz-executor257" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.959178][ T29] audit: type=1400 audit(1772048516.509:64): avc: denied { mount } for pid=5806 comm="syz-executor257" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.987709][ T29] audit: type=1400 audit(1772048516.519:65): avc: denied { create } for pid=5809 comm="syz-executor257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.008381][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.010847][ T29] audit: type=1400 audit(1772048516.519:66): avc: denied { read write } for pid=5809 comm="syz-executor257" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.039459][ T29] audit: type=1400 audit(1772048516.519:67): avc: denied { open } for pid=5809 comm="syz-executor257" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.039543][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.063409][ T29] audit: type=1400 audit(1772048516.529:68): avc: denied { ioctl } for pid=5814 comm="syz-executor257" path="socket:[4509]" dev="sockfs" ino=4509 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.072388][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.102954][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.110641][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.117729][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.120983][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.125524][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.132201][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.139118][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.145654][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.152977][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.159468][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.167122][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.180366][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.181101][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.188059][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.194506][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.208596][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.208977][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.223671][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.231905][ T29] audit: type=1400 audit(1772048516.809:69): avc: denied { mounton } for pid=5820 comm="syz-executor257" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.254049][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.261353][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.261603][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.276519][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.449567][ T29] audit: type=1400 audit(1772048517.049:70): avc: denied { mounton } for pid=5821 comm="syz-executor257" path="/root/syzkaller.btpCha/syz-tmp" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.479248][ T29] audit: type=1400 audit(1772048517.049:71): avc: denied { mount } for pid=5821 comm="syz-executor257" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 executing program [ 75.431881][ T5835] Bluetooth: hci3: command tx timeout [ 75.441946][ T5818] Bluetooth: hci1: command tx timeout [ 75.441953][ T51] Bluetooth: hci0: command tx timeout [ 75.442127][ T51] Bluetooth: hci4: command tx timeout [ 75.447718][ T5822] Bluetooth: hci2: command tx timeout [ 76.665980][ T1815] cfg80211: failed to load regulatory.db [ 76.722226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.730732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.670887][ T5822] Bluetooth: hci4: command tx timeout [ 77.671275][ T5129] Bluetooth: hci1: command tx timeout [ 77.676290][ T5822] Bluetooth: hci0: command tx timeout [ 77.681999][ T5129] Bluetooth: hci2: command tx timeout [ 77.692557][ T51] Bluetooth: hci3: command tx timeout executing program [ 184.660481][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 184.667468][ C0] rcu: (detected by 0, t=10502 jiffies, g=7429, q=29 ncpus=2) [ 184.675006][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294955636-4294945134), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 184.688353][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g7429 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 184.699439][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 184.709389][ C0] rcu: RCU grace-period kthread stack dump: [ 184.715253][ C0] task:rcu_preempt state:R running task stack:28032 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 184.728742][ C0] Call Trace: [ 184.732005][ C0] [ 184.734923][ C0] __schedule+0xfee/0x60e0 [ 184.739355][ C0] ? __lock_acquire+0x4a5/0x2630 [ 184.744297][ C0] ? __pfx___schedule+0x10/0x10 [ 184.749139][ C0] ? find_held_lock+0x2b/0x80 [ 184.753808][ C0] ? schedule+0x2bf/0x390 [ 184.758132][ C0] schedule+0xdd/0x390 [ 184.762195][ C0] schedule_timeout+0x127/0x280 [ 184.767035][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 184.772396][ C0] ? __pfx_process_timeout+0x10/0x10 [ 184.777673][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 184.783472][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 184.788926][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 184.793684][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 184.798966][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 184.803902][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 184.809092][ C0] ? rcu_is_watching+0x12/0xc0 [ 184.813846][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 184.819651][ C0] rcu_gp_kthread+0x179/0x230 [ 184.824322][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 184.829513][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 184.835317][ C0] ? __kthread_parkme+0x18c/0x230 [ 184.840336][ C0] ? kthread+0x13a/0x450 [ 184.844562][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 184.849754][ C0] kthread+0x370/0x450 [ 184.853811][ C0] ? __pfx_kthread+0x10/0x10 [ 184.858386][ C0] ret_from_fork+0x754/0xd80 [ 184.862966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 184.868064][ C0] ? __switch_to+0x7b4/0x1120 [ 184.872737][ C0] ? __pfx_kthread+0x10/0x10 [ 184.877319][ C0] ret_from_fork_asm+0x1a/0x30 [ 184.882081][ C0] [ 184.885086][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 184.891389][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 184.900306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.910345][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 184.915975][ C0] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0c 1c 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 184.935568][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 184.941619][ C0] RAX: 00000000000d4833 RBX: ffffffff8e4975c0 RCX: ffffffff8b8f7c75 [ 184.949573][ C0] RDX: 0000000000000000 RSI: ffffffff8de71ed4 RDI: ffffffff8c1aefa0 [ 184.957530][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 184.965482][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 184.973437][ C0] R13: 0000000000000000 R14: ffffffff90d96410 R15: 0000000000000000 [ 184.981391][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 184.990309][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.996879][ C0] CR2: 00007fe20544d000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 185.004841][ C0] Call Trace: [ 185.008106][ C0] [ 185.011020][ C0] default_idle+0x9/0x10 [ 185.015255][ C0] default_idle_call+0x6c/0xb0 [ 185.020008][ C0] do_idle+0x35b/0x4b0 [ 185.024068][ C0] ? __pfx_do_idle+0x10/0x10 [ 185.028647][ C0] ? rest_init+0x23d/0x260 [ 185.033059][ C0] cpu_startup_entry+0x4f/0x60 [ 185.037817][ C0] rest_init+0x251/0x260 [ 185.042051][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 185.047602][ C0] start_kernel+0x47f/0x480 [ 185.052093][ C0] x86_64_start_reservations+0x24/0x30 [ 185.057539][ C0] x86_64_start_kernel+0x12b/0x130 [ 185.062639][ C0] common_startup_64+0x13e/0x148 [ 185.067574][ C0] [ 186.021283][ T51] Bluetooth: hci3: command tx timeout [ 186.021293][ T5822] Bluetooth: hci0: command tx timeout [ 186.021320][ T5822] Bluetooth: hci1: command tx timeout [ 186.026685][ T51] Bluetooth: hci4: command tx timeout [ 186.120818][ T5129] Bluetooth: hci2: command tx timeout [ 194.300539][ T5129] Bluetooth: hci1: command tx timeout