Warning: Permanently added '[localhost]:56608' (ECDSA) to the list of known hosts.
2025/02/21 05:38:27 fuzzer started
2025/02/21 05:38:28 dialing manager at localhost:42127
syzkaller login: [  144.917188] cgroup: Unknown subsys name 'net'
[  145.088947] cgroup: Unknown subsys name 'cpuset'
[  145.143837] cgroup: Unknown subsys name 'rlimit'
2025/02/21 05:38:43 syscalls: 2217
2025/02/21 05:38:43 code coverage: enabled
2025/02/21 05:38:43 comparison tracing: enabled
2025/02/21 05:38:43 extra coverage: enabled
2025/02/21 05:38:43 setuid sandbox: enabled
2025/02/21 05:38:43 namespace sandbox: enabled
2025/02/21 05:38:43 Android sandbox: enabled
2025/02/21 05:38:43 fault injection: enabled
2025/02/21 05:38:43 leak checking: enabled
2025/02/21 05:38:43 net packet injection: enabled
2025/02/21 05:38:43 net device setup: enabled
2025/02/21 05:38:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/02/21 05:38:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/02/21 05:38:43 USB emulation: enabled
2025/02/21 05:38:43 hci packet injection: enabled
2025/02/21 05:38:43 wifi device emulation: enabled
2025/02/21 05:38:43 802.15.4 emulation: enabled
2025/02/21 05:38:43 fetching corpus: 0, signal 0/0 (executing program)
2025/02/21 05:38:43 fetching corpus: 0, signal 0/0 (executing program)
2025/02/21 05:38:46 starting 8 fuzzer processes
05:38:46 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f0000001140)=[{}]})

05:38:46 executing program 1:
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001900), 0x0, 0x0)

05:38:46 executing program 2:
rseq(0x0, 0x0, 0x0, 0x0)

05:38:46 executing program 3:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)

05:38:46 executing program 4:
syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0)

05:38:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x4c, &(0x7f0000000900)={@private1}, 0x14)

[  162.762711] audit: type=1400 audit(1740116326.156:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:38:46 executing program 6:
ppoll(&(0x7f0000000200), 0x23, &(0x7f0000000140), 0x0, 0x0)

05:38:46 executing program 7:
dup(0xffffffffffffffff)

[  164.336017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.339199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.340393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  164.345159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.346287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  164.351660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  164.371513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.376533] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  164.380719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  164.383854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.389778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  164.391221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  164.392421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  164.397778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  164.399549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  164.401331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  164.407838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  164.412686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  164.414884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  164.416565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  164.418284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  164.418369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  164.424002] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  164.427001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  164.427026] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  164.428013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  164.431922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  164.432971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  164.441327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  164.443379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  164.445568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  164.456459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  164.472686] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  164.478960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  164.479871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  164.486079] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  164.487995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  164.501531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  164.504809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  164.511051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  164.514476] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  164.514902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  164.528855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  164.556807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  164.577840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.586549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  164.596999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  164.617896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  166.477902] Bluetooth: hci1: command tx timeout
[  166.478064] Bluetooth: hci0: command tx timeout
[  166.603011] Bluetooth: hci2: command tx timeout
[  166.603140] Bluetooth: hci4: command tx timeout
[  166.667264] Bluetooth: hci6: command tx timeout
[  166.668022] Bluetooth: hci5: command tx timeout
[  166.668722] Bluetooth: hci3: command tx timeout
[  166.730743] Bluetooth: hci7: command tx timeout
[  168.523638] Bluetooth: hci1: command tx timeout
[  168.523713] Bluetooth: hci0: command tx timeout
[  168.650814] Bluetooth: hci2: command tx timeout
[  168.651353] Bluetooth: hci4: command tx timeout
[  168.715077] Bluetooth: hci3: command tx timeout
[  168.715309] Bluetooth: hci5: command tx timeout
[  168.715644] Bluetooth: hci6: command tx timeout
[  168.778736] Bluetooth: hci7: command tx timeout
[  170.571182] Bluetooth: hci0: command tx timeout
[  170.571478] Bluetooth: hci1: command tx timeout
[  170.699001] Bluetooth: hci4: command tx timeout
[  170.699151] Bluetooth: hci2: command tx timeout
[  170.763238] Bluetooth: hci5: command tx timeout
[  170.763991] Bluetooth: hci6: command tx timeout
[  170.764477] Bluetooth: hci3: command tx timeout
[  170.826882] Bluetooth: hci7: command tx timeout
[  172.619675] Bluetooth: hci1: command tx timeout
[  172.619844] Bluetooth: hci0: command tx timeout
[  172.746720] Bluetooth: hci2: command tx timeout
[  172.746743] Bluetooth: hci4: command tx timeout
[  172.810761] Bluetooth: hci6: command tx timeout
[  172.810806] Bluetooth: hci3: command tx timeout
[  172.811219] Bluetooth: hci5: command tx timeout
[  172.875096] Bluetooth: hci7: command tx timeout
[  224.328645] syz-executor.3 (294) used greatest stack depth: 24064 bytes left
[  226.852072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  226.857632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  226.859125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  226.865194] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  226.874434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  226.881279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  227.180041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.183089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.184689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.192317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  227.201072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  227.202512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  227.213999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.219115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  227.222510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  227.224255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.233829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.237504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.240823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  227.243959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  227.246095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.263987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.273998] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  227.279406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.335968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  227.343425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  227.348338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  227.352117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  227.356790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  227.368032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  227.387268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  227.388223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  227.394160] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  227.395965] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  227.400205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  227.402419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.510527] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  227.521301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  227.529019] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  227.540317] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  227.547113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  227.554291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  227.764994] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  227.777844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  227.817112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  227.852830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  227.883203] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  227.889796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  228.938785] Bluetooth: hci0: command tx timeout
[  229.258746] Bluetooth: hci1: command tx timeout
[  229.322993] Bluetooth: hci2: command tx timeout
[  229.387766] Bluetooth: hci3: command tx timeout
[  229.451695] Bluetooth: hci5: command tx timeout
[  229.515161] Bluetooth: hci4: command tx timeout
[  229.579156] Bluetooth: hci7: command tx timeout
[  230.026800] Bluetooth: hci6: command tx timeout
[  230.986773] Bluetooth: hci0: command tx timeout
[  231.306855] Bluetooth: hci1: command tx timeout
[  231.370764] Bluetooth: hci2: command tx timeout
[  231.435980] Bluetooth: hci3: command tx timeout
[  231.498814] Bluetooth: hci5: command tx timeout
[  231.563145] Bluetooth: hci4: command tx timeout
[  231.626710] Bluetooth: hci7: command tx timeout
[  232.074751] Bluetooth: hci6: command tx timeout
[  233.034747] Bluetooth: hci0: command tx timeout
[  233.355237] Bluetooth: hci1: command tx timeout
[  233.418731] Bluetooth: hci2: command tx timeout
[  233.483276] Bluetooth: hci3: command tx timeout
[  233.547309] Bluetooth: hci5: command tx timeout
[  233.611110] Bluetooth: hci4: command tx timeout
[  233.674746] Bluetooth: hci7: command tx timeout
[  234.122768] Bluetooth: hci6: command tx timeout
[  235.082738] Bluetooth: hci0: command tx timeout
[  235.402710] Bluetooth: hci1: command tx timeout
[  235.467006] Bluetooth: hci2: command tx timeout
[  235.530764] Bluetooth: hci3: command tx timeout
[  235.594863] Bluetooth: hci5: command tx timeout
[  235.658998] Bluetooth: hci4: command tx timeout
[  235.722722] Bluetooth: hci7: command tx timeout
[  236.170744] Bluetooth: hci6: command tx timeout
[  289.730656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.745762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.775944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.872713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.904561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  289.907744] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  289.909497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.918105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  289.919982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  289.925783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  289.929087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  289.931099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.217361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.226821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.232062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.243330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.248146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  290.251454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.289394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  290.295355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  290.297850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  290.327855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  290.334877] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  290.345960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  290.370204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  290.376198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  290.387833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  290.409304] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  290.410985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  290.412353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  290.415907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  290.416877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  290.419256] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  290.423862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  290.424346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  290.427032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  290.434148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  290.438325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  290.440688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  290.443064] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  290.446946] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  290.449746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  290.454009] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  290.460344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  290.472708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  290.476514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  290.478244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  290.501810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  291.980319] Bluetooth: hci1: command tx timeout
[  291.981644] Bluetooth: hci0: command tx timeout
[  292.362687] Bluetooth: hci2: command tx timeout
[  292.427072] Bluetooth: hci3: command tx timeout
[  292.490762] Bluetooth: hci5: command tx timeout
[  292.554861] Bluetooth: hci7: command tx timeout
[  292.554912] Bluetooth: hci6: command tx timeout
[  292.618706] Bluetooth: hci4: command tx timeout
[  294.026701] Bluetooth: hci1: command tx timeout
[  294.029980] Bluetooth: hci0: command tx timeout
[  294.410997] Bluetooth: hci2: command tx timeout
[  294.476090] Bluetooth: hci3: command tx timeout
[  294.539623] Bluetooth: hci5: command tx timeout
[  294.602788] Bluetooth: hci6: command tx timeout
[  294.604321] Bluetooth: hci7: command tx timeout
[  294.666719] Bluetooth: hci4: command tx timeout
[  296.075312] Bluetooth: hci0: command tx timeout
[  296.075342] Bluetooth: hci1: command tx timeout
[  296.458916] Bluetooth: hci2: command tx timeout
[  296.522687] Bluetooth: hci3: command tx timeout
[  296.587192] Bluetooth: hci5: command tx timeout
[  296.652779] Bluetooth: hci7: command tx timeout
[  296.653084] Bluetooth: hci6: command tx timeout
[  296.714694] Bluetooth: hci4: command tx timeout
[  298.124027] Bluetooth: hci1: command tx timeout
[  298.124358] Bluetooth: hci0: command tx timeout
[  298.508674] Bluetooth: hci2: command tx timeout
[  298.571401] Bluetooth: hci3: command tx timeout
[  298.634793] Bluetooth: hci5: command tx timeout
[  298.698698] Bluetooth: hci6: command tx timeout
[  298.700163] Bluetooth: hci7: command tx timeout
[  298.763103] Bluetooth: hci4: command tx timeout
[  352.800397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  352.803122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  352.813349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  352.837663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  352.841093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  352.842725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  352.953350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.960237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.964800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.966147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  352.969754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.992128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.995934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  353.001821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  353.012495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.032996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.062534] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  353.068783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.218963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  353.222152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  353.223815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  353.243733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  353.245112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  353.246142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  353.249863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  353.250550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  353.256515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  353.268549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  353.278422] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  353.284158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  353.314378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  353.326206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  353.348850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  353.348879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  353.351426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  353.353228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  353.357483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  353.360408] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  353.361192] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  353.362175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  353.369092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  353.371054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  353.453325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  353.460103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  353.504934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  353.540161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  353.594194] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  353.599892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  354.890992] Bluetooth: hci0: command tx timeout
[  355.083649] Bluetooth: hci2: command tx timeout
[  355.146871] Bluetooth: hci1: command tx timeout
[  355.402788] Bluetooth: hci6: command tx timeout
[  355.402849] Bluetooth: hci5: command tx timeout
[  355.404496] Bluetooth: hci3: command tx timeout
[  355.466684] Bluetooth: hci4: command tx timeout
[  355.660224] Bluetooth: hci7: command tx timeout
[  356.941009] Bluetooth: hci0: command tx timeout
[  357.131084] Bluetooth: hci2: command tx timeout
[  357.196629] Bluetooth: hci1: command tx timeout
[  357.450685] Bluetooth: hci5: command tx timeout
[  357.452780] Bluetooth: hci6: command tx timeout
[  357.453203] Bluetooth: hci3: command tx timeout
[  357.515852] Bluetooth: hci4: command tx timeout
[  357.707172] Bluetooth: hci7: command tx timeout
[  358.986720] Bluetooth: hci0: command tx timeout
[  359.179709] Bluetooth: hci2: command tx timeout
[  359.242943] Bluetooth: hci1: command tx timeout
[  359.499679] Bluetooth: hci6: command tx timeout
[  359.500157] Bluetooth: hci5: command tx timeout
[  359.500224] Bluetooth: hci3: command tx timeout
[  359.563639] Bluetooth: hci4: command tx timeout
[  359.754656] Bluetooth: hci7: command tx timeout
[  361.035055] Bluetooth: hci0: command tx timeout
[  361.228644] Bluetooth: hci2: command tx timeout
[  361.291021] Bluetooth: hci1: command tx timeout
[  361.548029] Bluetooth: hci6: command tx timeout
[  361.548112] Bluetooth: hci3: command tx timeout
[  361.548518] Bluetooth: hci5: command tx timeout
[  361.611654] Bluetooth: hci4: command tx timeout
[  361.802715] Bluetooth: hci7: command tx timeout
[  413.137555] syz-executor.4 (5819) used greatest stack depth: 23896 bytes left
[  415.461859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  415.488413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  415.491713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  415.502687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  415.508388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  415.511091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  415.602817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  415.614992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  415.620649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  415.636252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  415.644317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  415.651466] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  415.763260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  415.772255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  415.779130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  415.798837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  415.807444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  415.816075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  415.939351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  415.954267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  415.974828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  415.992424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  416.000024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  416.006924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  416.066262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  416.070875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  416.072300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  416.080881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  416.080937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  416.086150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  416.096109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  416.108152] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  416.116238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  416.122661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  416.127322] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  416.129545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  416.131605] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  416.135624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  416.160076] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  416.162199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  416.163742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  416.165528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  416.172766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  416.191263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  416.217175] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  416.218765] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  416.241431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  416.271108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  417.546749] Bluetooth: hci0: command tx timeout
[  417.804714] Bluetooth: hci1: command tx timeout
[  417.866711] Bluetooth: hci2: command tx timeout
[  418.059732] Bluetooth: hci3: command tx timeout
[  418.187896] Bluetooth: hci4: command tx timeout
[  418.252301] Bluetooth: hci5: command tx timeout
[  418.378849] Bluetooth: hci6: command tx timeout
[  418.380126] Bluetooth: hci7: command tx timeout
[  419.595727] Bluetooth: hci0: command tx timeout
[  419.852678] Bluetooth: hci1: command tx timeout
[  419.916036] Bluetooth: hci2: command tx timeout
[  420.109965] Bluetooth: hci3: command tx timeout
[  420.236090] Bluetooth: hci4: command tx timeout
[  420.300651] Bluetooth: hci5: command tx timeout
[  420.428537] Bluetooth: hci7: command tx timeout
[  420.429118] Bluetooth: hci6: command tx timeout
[  421.644425] Bluetooth: hci0: command tx timeout
[  421.900214] Bluetooth: hci1: command tx timeout
[  421.962959] Bluetooth: hci2: command tx timeout
[  422.155957] Bluetooth: hci3: command tx timeout
[  422.285612] Bluetooth: hci4: command tx timeout
[  422.347203] Bluetooth: hci5: command tx timeout
[  422.477645] Bluetooth: hci6: command tx timeout
[  422.478130] Bluetooth: hci7: command tx timeout
[  423.691718] Bluetooth: hci0: command tx timeout
[  423.947966] Bluetooth: hci1: command tx timeout
[  424.011697] Bluetooth: hci2: command tx timeout
[  424.202671] Bluetooth: hci3: command tx timeout
[  424.331323] Bluetooth: hci4: command tx timeout
[  424.395687] Bluetooth: hci5: command tx timeout
[  424.522711] Bluetooth: hci7: command tx timeout
[  424.523251] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:43:57  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffffffff815eff00 RCX=0000000000000000 RDX=1ffff110062a1eb5
RSI=ffffffff85c19780 RDI=ffff88803150f5a8 RBP=ffff88803150f640 RSP=ffff88803150f590
R8 =0000000000000001 R9 =ffff888014502608 R10=ffffffff864040d7 R11=0000000000022b91
R12=ffff88803150f670 R13=0000000000000000 R14=ffff888014501bc0 R15=0000000000092cc0
RIP=ffffffff8134a4d7 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcd9f4da540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f984c63f6f4 CR3=0000000009c10000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82220727 RDX=ffff88802ea11bc0
RSI=ffffffff82220848 RDI=0000000000000005 RBP=ffff88800b9bc048 RSP=ffff88802b1cf8f8
R8 =0000000000000000 R9 =ffff88802ea12608 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000010000000 R14=1ffff11005639f22 R15=0000000000000000
RIP=ffffffff8171e3e8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0a574d5540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe4ed68ff8 CR3=000000002ea0e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000