syzkaller login: [ 116.518182] systemd-udevd (119) used greatest stack depth: 24152 bytes left Warning: Permanently added '[localhost]:11417' (ECDSA) to the list of known hosts. 2025/02/12 10:08:24 fuzzer started 2025/02/12 10:08:24 dialing manager at localhost:42009 [ 141.261343] cgroup: Unknown subsys name 'net' [ 141.374790] cgroup: Unknown subsys name 'cpuset' [ 141.414203] cgroup: Unknown subsys name 'rlimit' 2025/02/12 10:08:41 syscalls: 2217 2025/02/12 10:08:41 code coverage: enabled 2025/02/12 10:08:41 comparison tracing: enabled 2025/02/12 10:08:41 extra coverage: enabled 2025/02/12 10:08:41 setuid sandbox: enabled 2025/02/12 10:08:41 namespace sandbox: enabled 2025/02/12 10:08:41 Android sandbox: enabled 2025/02/12 10:08:41 fault injection: enabled 2025/02/12 10:08:41 leak checking: enabled 2025/02/12 10:08:41 net packet injection: enabled 2025/02/12 10:08:41 net device setup: enabled 2025/02/12 10:08:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/02/12 10:08:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/02/12 10:08:41 USB emulation: enabled 2025/02/12 10:08:41 hci packet injection: enabled 2025/02/12 10:08:41 wifi device emulation: enabled 2025/02/12 10:08:41 802.15.4 emulation: enabled 2025/02/12 10:08:41 fetching corpus: 0, signal 0/0 (executing program) 2025/02/12 10:08:41 fetching corpus: 0, signal 0/0 (executing program) 2025/02/12 10:08:43 starting 8 fuzzer processes 10:08:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x401, 0x0) 10:08:43 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000940)) 10:08:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b3b, 0x0) 10:08:43 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={[{@nr_blocks}]}) [ 160.148645] audit: type=1400 audit(1739354923.826:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:08:43 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 10:08:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323134393739343100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000e0f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006b1710a600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000006f20934800000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332313439373934312f66696c65302f66696c653000000000000000000000000000000000000000000000afa6093f00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009270a1b300000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000743fdfdf00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2efb56f000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) 10:08:43 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 10:08:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) [ 161.707532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.720145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.722987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.724231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.728125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.734522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.735419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.741707] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.744102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.744996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.747617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.751663] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.755008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.762671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.764509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.792040] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.796670] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.798602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.826617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.833927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.837526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.840418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.842313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.847052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.849740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.851740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.853000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.879504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.901363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.916274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.954368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.985629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.991508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.007202] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.008777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.011520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.012679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.019127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.024220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.038553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.043126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.045068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.050317] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.061985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.064250] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 162.066390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.088242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.090174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.783945] Bluetooth: hci1: command tx timeout [ 163.847148] Bluetooth: hci0: command tx timeout [ 163.912912] Bluetooth: hci3: command tx timeout [ 163.913233] Bluetooth: hci2: command tx timeout [ 163.976126] Bluetooth: hci4: command tx timeout [ 164.167074] Bluetooth: hci6: command tx timeout [ 164.167366] Bluetooth: hci5: command tx timeout [ 164.231967] Bluetooth: hci7: command tx timeout [ 165.830925] Bluetooth: hci1: command tx timeout [ 165.896752] Bluetooth: hci0: command tx timeout [ 165.958967] Bluetooth: hci3: command tx timeout [ 165.959005] Bluetooth: hci2: command tx timeout [ 166.023207] Bluetooth: hci4: command tx timeout [ 166.214986] Bluetooth: hci6: command tx timeout [ 166.215076] Bluetooth: hci5: command tx timeout [ 166.278964] Bluetooth: hci7: command tx timeout [ 167.879937] Bluetooth: hci1: command tx timeout [ 167.944465] Bluetooth: hci0: command tx timeout [ 168.006989] Bluetooth: hci2: command tx timeout [ 168.007936] Bluetooth: hci3: command tx timeout [ 168.070912] Bluetooth: hci4: command tx timeout [ 168.265228] Bluetooth: hci6: command tx timeout [ 168.265357] Bluetooth: hci5: command tx timeout [ 168.328139] Bluetooth: hci7: command tx timeout [ 169.927205] Bluetooth: hci1: command tx timeout [ 169.992338] Bluetooth: hci0: command tx timeout [ 170.055942] Bluetooth: hci3: command tx timeout [ 170.056741] Bluetooth: hci2: command tx timeout [ 170.119339] Bluetooth: hci4: command tx timeout [ 170.311547] Bluetooth: hci5: command tx timeout [ 170.311919] Bluetooth: hci6: command tx timeout [ 170.376040] Bluetooth: hci7: command tx timeout [ 221.884661] syz-executor.0 (283) used greatest stack depth: 24032 bytes left [ 224.674146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.678248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.688770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.706978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.709359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.715109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.716399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.721263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.723625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.727203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.729390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.736270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.738542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.741183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.746234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.751565] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.754578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.756752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.758074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.760226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.761328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.763086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.765618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.766996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.770211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.770217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.775571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.775886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.784739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.786668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.789570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.792004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.795410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.796695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.797838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.800610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.803329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.806579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.808182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.809827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.814324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.816069] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 224.819841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.826029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.843032] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.845386] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.854868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.871286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.758981] Bluetooth: hci2: command tx timeout [ 226.890341] Bluetooth: hci6: command tx timeout [ 226.891523] Bluetooth: hci0: command tx timeout [ 226.891875] Bluetooth: hci3: command tx timeout [ 226.951170] Bluetooth: hci5: command tx timeout [ 226.951938] Bluetooth: hci4: command tx timeout [ 226.952557] Bluetooth: hci1: command tx timeout [ 226.953270] Bluetooth: hci7: command tx timeout [ 228.807065] Bluetooth: hci2: command tx timeout [ 228.936554] Bluetooth: hci0: command tx timeout [ 228.937366] Bluetooth: hci6: command tx timeout [ 228.937517] Bluetooth: hci3: command tx timeout [ 228.999974] Bluetooth: hci4: command tx timeout [ 229.000481] Bluetooth: hci5: command tx timeout [ 229.000988] Bluetooth: hci1: command tx timeout [ 229.001427] Bluetooth: hci7: command tx timeout [ 230.856087] Bluetooth: hci2: command tx timeout [ 230.983470] Bluetooth: hci6: command tx timeout [ 230.984297] Bluetooth: hci3: command tx timeout [ 230.984352] Bluetooth: hci0: command tx timeout [ 231.047862] Bluetooth: hci1: command tx timeout [ 231.047990] Bluetooth: hci7: command tx timeout [ 231.048419] Bluetooth: hci5: command tx timeout [ 231.048770] Bluetooth: hci4: command tx timeout [ 232.902906] Bluetooth: hci2: command tx timeout [ 233.031429] Bluetooth: hci6: command tx timeout [ 233.031512] Bluetooth: hci0: command tx timeout [ 233.032246] Bluetooth: hci3: command tx timeout [ 233.095922] Bluetooth: hci5: command tx timeout [ 233.096474] Bluetooth: hci4: command tx timeout [ 233.096869] Bluetooth: hci7: command tx timeout [ 233.097005] Bluetooth: hci1: command tx timeout [ 287.168053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.169955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.171381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.197399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.211222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.215521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.469359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.475474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.488252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.523635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.539432] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.550617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.663088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.678611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.686459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.688611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.693435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.703116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.717510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.721989] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.729703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.734052] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.735626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.740462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.778109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.787499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.794486] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.829682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.844765] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.852716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.853235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.859685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.863444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.865360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.871059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.874250] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.874267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.881180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.888580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.892710] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 287.894504] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.922309] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.929043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.944204] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.969984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.970201] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.033296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.037281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.286947] Bluetooth: hci0: command tx timeout [ 289.606909] Bluetooth: hci1: command tx timeout [ 289.800875] Bluetooth: hci3: command tx timeout [ 289.863868] Bluetooth: hci2: command tx timeout [ 289.991011] Bluetooth: hci4: command tx timeout [ 289.992553] Bluetooth: hci6: command tx timeout [ 290.118901] Bluetooth: hci5: command tx timeout [ 290.183837] Bluetooth: hci7: command tx timeout [ 291.334977] Bluetooth: hci0: command tx timeout [ 291.655362] Bluetooth: hci1: command tx timeout [ 291.848135] Bluetooth: hci3: command tx timeout [ 291.913107] Bluetooth: hci2: command tx timeout [ 292.038987] Bluetooth: hci6: command tx timeout [ 292.039510] Bluetooth: hci4: command tx timeout [ 292.168074] Bluetooth: hci5: command tx timeout [ 292.232364] Bluetooth: hci7: command tx timeout [ 293.384479] Bluetooth: hci0: command tx timeout [ 293.702933] Bluetooth: hci1: command tx timeout [ 293.895829] Bluetooth: hci3: command tx timeout [ 293.960189] Bluetooth: hci2: command tx timeout [ 294.086945] Bluetooth: hci4: command tx timeout [ 294.087489] Bluetooth: hci6: command tx timeout [ 294.215933] Bluetooth: hci5: command tx timeout [ 294.280014] Bluetooth: hci7: command tx timeout [ 295.431920] Bluetooth: hci0: command tx timeout [ 295.751216] Bluetooth: hci1: command tx timeout [ 295.945859] Bluetooth: hci3: command tx timeout [ 296.008416] Bluetooth: hci2: command tx timeout [ 296.135881] Bluetooth: hci6: command tx timeout [ 296.136384] Bluetooth: hci4: command tx timeout [ 296.262914] Bluetooth: hci5: command tx timeout [ 296.327800] Bluetooth: hci7: command tx timeout [ 350.121511] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.127499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.155598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.175273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.179287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.182582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.306058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.316180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.321154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.326659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.330592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.337295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.338308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.340480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.341905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.358959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.367508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.376953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.425325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.444235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.448216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.481842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.495495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.499011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.501568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.504165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.507530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.508997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.510457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.513098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.516471] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 350.520852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.526003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.533405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.549325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.553300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.560002] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.576974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.624239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.627376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.645684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.674947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 350.679561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.687509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.688429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.705838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.711156] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 350.712720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.264374] Bluetooth: hci0: command tx timeout [ 352.393138] Bluetooth: hci1: command tx timeout [ 352.455162] Bluetooth: hci2: command tx timeout [ 352.582931] Bluetooth: hci4: command tx timeout [ 352.583830] Bluetooth: hci3: command tx timeout [ 352.646894] Bluetooth: hci5: command tx timeout [ 352.775906] Bluetooth: hci7: command tx timeout [ 352.840814] Bluetooth: hci6: command tx timeout [ 354.310930] Bluetooth: hci0: command tx timeout [ 354.439138] Bluetooth: hci1: command tx timeout [ 354.504186] Bluetooth: hci2: command tx timeout [ 354.630943] Bluetooth: hci4: command tx timeout [ 354.632883] Bluetooth: hci3: command tx timeout [ 354.695354] Bluetooth: hci5: command tx timeout [ 354.823205] Bluetooth: hci7: command tx timeout [ 354.886849] Bluetooth: hci6: command tx timeout [ 356.359081] Bluetooth: hci0: command tx timeout [ 356.486850] Bluetooth: hci1: command tx timeout [ 356.550946] Bluetooth: hci2: command tx timeout [ 356.679019] Bluetooth: hci4: command tx timeout [ 356.680900] Bluetooth: hci3: command tx timeout [ 356.742891] Bluetooth: hci5: command tx timeout [ 356.870884] Bluetooth: hci7: command tx timeout [ 356.936217] Bluetooth: hci6: command tx timeout [ 358.407298] Bluetooth: hci0: command tx timeout [ 358.536344] Bluetooth: hci1: command tx timeout [ 358.599918] Bluetooth: hci2: command tx timeout [ 358.728832] Bluetooth: hci4: command tx timeout [ 358.730877] Bluetooth: hci3: command tx timeout [ 358.790938] Bluetooth: hci5: command tx timeout [ 358.919091] Bluetooth: hci7: command tx timeout [ 358.983424] Bluetooth: hci6: command tx timeout [ 410.797141] syz-executor.3 (5463) used greatest stack depth: 23896 bytes left [ 413.123038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.128001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.132343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.134933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.141597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.145325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.147333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.153439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.155497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.158893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.160481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.173038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.349524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.354041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.366223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.375300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.391094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.397225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.400639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.403154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.406128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.408351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.415179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.418042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.421400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.433781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.444928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.460364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.462581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.487985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.493079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.504345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.505267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.531171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.544113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.545553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.566412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.573585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.580377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.619006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.632502] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 413.654186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.847841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.869965] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.925660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.953167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.985135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 413.987431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 415.239389] Bluetooth: hci0: command tx timeout [ 415.240191] Bluetooth: hci1: command tx timeout [ 415.495874] Bluetooth: hci4: command tx timeout [ 415.558868] Bluetooth: hci3: command tx timeout [ 415.560158] Bluetooth: hci2: command tx timeout [ 415.815027] Bluetooth: hci5: command tx timeout [ 415.815196] Bluetooth: hci6: command tx timeout [ 416.073719] Bluetooth: hci7: command tx timeout [ 417.286935] Bluetooth: hci0: command tx timeout [ 417.289839] Bluetooth: hci1: command tx timeout [ 417.542928] Bluetooth: hci4: command tx timeout [ 417.607193] Bluetooth: hci3: command tx timeout [ 417.607939] Bluetooth: hci2: command tx timeout [ 417.863927] Bluetooth: hci6: command tx timeout [ 417.864521] Bluetooth: hci5: command tx timeout [ 418.119211] Bluetooth: hci7: command tx timeout [ 419.335203] Bluetooth: hci1: command tx timeout [ 419.335382] Bluetooth: hci0: command tx timeout [ 419.590831] Bluetooth: hci4: command tx timeout [ 419.655045] Bluetooth: hci2: command tx timeout [ 419.655597] Bluetooth: hci3: command tx timeout [ 419.910916] Bluetooth: hci5: command tx timeout [ 419.911466] Bluetooth: hci6: command tx timeout [ 420.167826] Bluetooth: hci7: command tx timeout [ 421.384207] Bluetooth: hci0: command tx timeout [ 421.384263] Bluetooth: hci1: command tx timeout [ 421.640820] Bluetooth: hci4: command tx timeout [ 421.702862] Bluetooth: hci3: command tx timeout [ 421.703824] Bluetooth: hci2: command tx timeout [ 421.958997] Bluetooth: hci6: command tx timeout [ 421.961244] Bluetooth: hci5: command tx timeout [ 422.216370] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:13:53 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000005 RCX=ffff88806ce099b0 RDX=0000000000000005 RSI=ffffffff85c175c0 RDI=ffff8880365aa6b0 RBP=0000000000000004 RSP=ffff88806ce09928 R8 =0000000000000001 R9 =ffff8880365aa608 R10=ffffffff86403ed7 R11=00000000000213d7 R12=ffff8880365aa6b0 R13=ffffffff85c175c0 R14=ffff88806ce099b0 R15=ffff8880365a9bc0 RIP=ffffffff814f6c14 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa7f63b3540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa7f688d000 CR3=0000000035634000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000005 RCX=ffffffff8150215a RDX=fffffbfff0fe2fd9 RSI=0000000000000008 RDI=ffffffff87f17ec0 RBP=ffff8880094e0a78 RSP=ffff8880094ef118 R8 =0000000000000000 R9 =fffffbfff0fe2fd8 R10=ffffffff87f17ec7 R11=0000000000000000 R12=ffff8880094e0000 R13=0000000000000004 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81502162 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fefb5b95900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f524a1cf000 CR3=000000000eee4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000210065636976726573 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=00000000000000000000000000000000 XMM06=697665642e3130323a376963682d3769 XMM07=00000000000000000000000000000000 XMM08=732f6563696c732e6d65747379732f3a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000