Warning: Permanently added '[localhost]:28979' (ECDSA) to the list of known hosts. 2025/04/22 21:26:25 fuzzer started 2025/04/22 21:26:26 dialing manager at localhost:42253 syzkaller login: [ 93.357782] cgroup: Unknown subsys name 'net' [ 93.501847] cgroup: Unknown subsys name 'cpuset' [ 93.533128] cgroup: Unknown subsys name 'rlimit' 2025/04/22 21:26:40 syscalls: 2214 2025/04/22 21:26:40 code coverage: enabled 2025/04/22 21:26:40 comparison tracing: enabled 2025/04/22 21:26:40 extra coverage: enabled 2025/04/22 21:26:40 setuid sandbox: enabled 2025/04/22 21:26:40 namespace sandbox: enabled 2025/04/22 21:26:40 Android sandbox: enabled 2025/04/22 21:26:40 fault injection: enabled 2025/04/22 21:26:40 leak checking: enabled 2025/04/22 21:26:40 net packet injection: enabled 2025/04/22 21:26:40 net device setup: enabled 2025/04/22 21:26:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/22 21:26:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/22 21:26:40 USB emulation: enabled 2025/04/22 21:26:40 hci packet injection: enabled 2025/04/22 21:26:40 wifi device emulation: enabled 2025/04/22 21:26:40 802.15.4 emulation: enabled 2025/04/22 21:26:40 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 21:26:40 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 21:26:42 starting 8 fuzzer processes 21:26:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000e740)=[{{&(0x7f0000001080)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000035c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 21:26:42 executing program 1: pkey_alloc(0x0, 0x0) 21:26:42 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x1a) 21:26:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getflags(r0, 0x3) [ 109.600769] audit: type=1400 audit(1745357202.745:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:26:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) 21:26:42 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 21:26:42 executing program 6: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0xd9e, 0xf) 21:26:42 executing program 7: syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) [ 111.178543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.183851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.186787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.193794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.199025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.236785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.243119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.245354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.252755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.263839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.316195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.330525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.333897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.341740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.350531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.352300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.356701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.370507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.387769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.393143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.406561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.409149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.418577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.426873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.433137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.437666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.439708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.441859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.453044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.456922] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.475959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.488071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.490680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.492095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.496128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.500953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.542675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.567418] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.582855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.600652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.256737] Bluetooth: hci0: command tx timeout [ 113.319507] Bluetooth: hci1: command tx timeout [ 113.512228] Bluetooth: hci4: command tx timeout [ 113.575471] Bluetooth: hci2: command tx timeout [ 113.575601] Bluetooth: hci3: command tx timeout [ 113.576504] Bluetooth: hci6: command tx timeout [ 113.639359] Bluetooth: hci5: command tx timeout [ 113.641017] Bluetooth: hci7: command tx timeout [ 115.304404] Bluetooth: hci0: command tx timeout [ 115.368257] Bluetooth: hci1: command tx timeout [ 115.560469] Bluetooth: hci4: command tx timeout [ 115.623599] Bluetooth: hci3: command tx timeout [ 115.625228] Bluetooth: hci6: command tx timeout [ 115.625356] Bluetooth: hci2: command tx timeout [ 115.687231] Bluetooth: hci5: command tx timeout [ 115.687289] Bluetooth: hci7: command tx timeout [ 117.351235] Bluetooth: hci0: command tx timeout [ 117.415227] Bluetooth: hci1: command tx timeout [ 117.607355] Bluetooth: hci4: command tx timeout [ 117.672384] Bluetooth: hci2: command tx timeout [ 117.672419] Bluetooth: hci6: command tx timeout [ 117.672464] Bluetooth: hci3: command tx timeout [ 117.735305] Bluetooth: hci7: command tx timeout [ 117.736467] Bluetooth: hci5: command tx timeout [ 119.399398] Bluetooth: hci0: command tx timeout [ 119.463244] Bluetooth: hci1: command tx timeout [ 119.655649] Bluetooth: hci4: command tx timeout [ 119.719241] Bluetooth: hci2: command tx timeout [ 119.719817] Bluetooth: hci3: command tx timeout [ 119.719943] Bluetooth: hci6: command tx timeout [ 119.783282] Bluetooth: hci5: command tx timeout [ 119.783819] Bluetooth: hci7: command tx timeout [ 173.431830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.433926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.435689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.439571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.442864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.676441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.679212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.681786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.691785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.696822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.698639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.701525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.702786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.706669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.708277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.710125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.715232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.718293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.721107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.722751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.727450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.730507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.739603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.744774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.748001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.751457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.751935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.757134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.768248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.774749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.776992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.784426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.788394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.806740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.819483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.957423] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.009608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.034562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.105644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.108019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.527305] Bluetooth: hci0: command tx timeout [ 175.783299] Bluetooth: hci3: command tx timeout [ 175.784085] Bluetooth: hci1: command tx timeout [ 175.848241] Bluetooth: hci4: command tx timeout [ 175.911261] Bluetooth: hci6: command tx timeout [ 175.911297] Bluetooth: hci5: command tx timeout [ 176.167348] Bluetooth: hci2: command tx timeout [ 176.231332] Bluetooth: hci7: command tx timeout [ 177.576128] Bluetooth: hci0: command tx timeout [ 177.831844] Bluetooth: hci3: command tx timeout [ 177.831868] Bluetooth: hci1: command tx timeout [ 177.895302] Bluetooth: hci4: command tx timeout [ 177.959321] Bluetooth: hci6: command tx timeout [ 177.960236] Bluetooth: hci5: command tx timeout [ 178.215408] Bluetooth: hci2: command tx timeout [ 178.281183] Bluetooth: hci7: command tx timeout [ 179.624243] Bluetooth: hci0: command tx timeout [ 179.879333] Bluetooth: hci3: command tx timeout [ 179.879812] Bluetooth: hci1: command tx timeout [ 179.943475] Bluetooth: hci4: command tx timeout [ 180.007425] Bluetooth: hci5: command tx timeout [ 180.007443] Bluetooth: hci6: command tx timeout [ 180.263318] Bluetooth: hci2: command tx timeout [ 180.327448] Bluetooth: hci7: command tx timeout [ 181.671256] Bluetooth: hci0: command tx timeout [ 181.927267] Bluetooth: hci1: command tx timeout [ 181.927305] Bluetooth: hci3: command tx timeout [ 181.991246] Bluetooth: hci4: command tx timeout [ 182.055509] Bluetooth: hci6: command tx timeout [ 182.058198] Bluetooth: hci5: command tx timeout [ 182.311306] Bluetooth: hci2: command tx timeout [ 182.375322] Bluetooth: hci7: command tx timeout [ 235.706412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.710556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.713395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.719766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.726032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.728284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.732476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.736503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.751197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.755799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.828572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.840994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.843529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.855763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.859132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.907673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.911735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.918662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.927140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.931847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.982052] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.983462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.994332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.001301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.001457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.004955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.026542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.028397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.038549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.041373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.045229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.045418] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.053277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.056240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.064007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.069301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.091954] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.093290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.097413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.104489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.800250] Bluetooth: hci0: command tx timeout [ 237.801095] Bluetooth: hci1: command tx timeout [ 237.927238] Bluetooth: hci2: command tx timeout [ 237.991208] Bluetooth: hci3: command tx timeout [ 238.119343] Bluetooth: hci4: command tx timeout [ 238.120292] Bluetooth: hci6: command tx timeout [ 238.183377] Bluetooth: hci5: command tx timeout [ 238.248313] Bluetooth: hci7: command tx timeout [ 239.849303] Bluetooth: hci0: command tx timeout [ 239.849791] Bluetooth: hci1: command tx timeout [ 239.976272] Bluetooth: hci2: command tx timeout [ 240.039218] Bluetooth: hci3: command tx timeout [ 240.167541] Bluetooth: hci6: command tx timeout [ 240.167995] Bluetooth: hci4: command tx timeout [ 240.232248] Bluetooth: hci5: command tx timeout [ 240.296400] Bluetooth: hci7: command tx timeout [ 241.896262] Bluetooth: hci0: command tx timeout [ 241.896760] Bluetooth: hci1: command tx timeout [ 242.024442] Bluetooth: hci2: command tx timeout [ 242.087505] Bluetooth: hci3: command tx timeout [ 242.216294] Bluetooth: hci4: command tx timeout [ 242.216760] Bluetooth: hci6: command tx timeout [ 242.280281] Bluetooth: hci5: command tx timeout [ 242.344241] Bluetooth: hci7: command tx timeout [ 243.944301] Bluetooth: hci1: command tx timeout [ 243.944814] Bluetooth: hci0: command tx timeout [ 244.071220] Bluetooth: hci2: command tx timeout [ 244.137231] Bluetooth: hci3: command tx timeout [ 244.263348] Bluetooth: hci6: command tx timeout [ 244.263862] Bluetooth: hci4: command tx timeout [ 244.328450] Bluetooth: hci5: command tx timeout [ 244.391249] Bluetooth: hci7: command tx timeout [ 295.866540] syz-executor.0 (5635) used greatest stack depth: 24872 bytes left [ 298.112415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.116814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.124685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.134949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.139526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.176829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.196588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.198501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.201634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.202614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.204774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.206977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.215809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.217573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.223823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.236971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.262278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.264632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.280084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.286901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.374868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.380996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.387885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.390860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.398005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.398583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.417771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.454463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.463427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.472586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.476673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.483223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.488609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.506299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.510688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.525655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.529052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.579649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.647745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.652436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.200322] Bluetooth: hci0: command tx timeout [ 300.263286] Bluetooth: hci2: command tx timeout [ 300.329204] Bluetooth: hci3: command tx timeout [ 300.329226] Bluetooth: hci1: command tx timeout [ 300.583907] Bluetooth: hci6: command tx timeout [ 300.585270] Bluetooth: hci4: command tx timeout [ 300.586274] Bluetooth: hci5: command tx timeout [ 300.775275] Bluetooth: hci7: command tx timeout [ 302.249189] Bluetooth: hci0: command tx timeout [ 302.311589] Bluetooth: hci2: command tx timeout [ 302.375337] Bluetooth: hci3: command tx timeout [ 302.377385] Bluetooth: hci1: command tx timeout [ 302.631545] Bluetooth: hci5: command tx timeout [ 302.634268] Bluetooth: hci4: command tx timeout [ 302.634316] Bluetooth: hci6: command tx timeout [ 302.823263] Bluetooth: hci7: command tx timeout [ 304.295345] Bluetooth: hci0: command tx timeout [ 304.359218] Bluetooth: hci2: command tx timeout [ 304.423481] Bluetooth: hci1: command tx timeout [ 304.423524] Bluetooth: hci3: command tx timeout [ 304.679234] Bluetooth: hci4: command tx timeout [ 304.679316] Bluetooth: hci6: command tx timeout [ 304.679751] Bluetooth: hci5: command tx timeout [ 304.872259] Bluetooth: hci7: command tx timeout [ 306.343385] Bluetooth: hci0: command tx timeout [ 306.407242] Bluetooth: hci2: command tx timeout [ 306.471428] Bluetooth: hci3: command tx timeout [ 306.471849] Bluetooth: hci1: command tx timeout [ 306.727252] Bluetooth: hci5: command tx timeout [ 306.727684] Bluetooth: hci6: command tx timeout [ 306.727732] Bluetooth: hci4: command tx timeout [ 306.919270] Bluetooth: hci7: command tx timeout [ 358.368914] syz-executor.5 (8261) used greatest stack depth: 24648 bytes left [ 360.710820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.717763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.721050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.729307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.741585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.846111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.855736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.858776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.893402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.914835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.955474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.962573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.965261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.982482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.989512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.033703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.047985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.051364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.087873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.094835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.142404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.153556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.176807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.212083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.251357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.339903] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.342727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.344988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.349005] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.353898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.359505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.366985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.372949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.378999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.412063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.413585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.440655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.454043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.461962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.468658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.791232] Bluetooth: hci0: command tx timeout [ 362.983235] Bluetooth: hci1: command tx timeout [ 363.111488] Bluetooth: hci2: command tx timeout [ 363.175234] Bluetooth: hci3: command tx timeout [ 363.432229] Bluetooth: hci4: command tx timeout [ 363.432405] Bluetooth: hci7: command tx timeout [ 363.559467] Bluetooth: hci5: command tx timeout [ 363.559517] Bluetooth: hci6: command tx timeout [ 364.839810] Bluetooth: hci0: command tx timeout [ 365.031638] Bluetooth: hci1: command tx timeout [ 365.159426] Bluetooth: hci2: command tx timeout [ 365.224461] Bluetooth: hci3: command tx timeout [ 365.480290] Bluetooth: hci4: command tx timeout [ 365.480364] Bluetooth: hci7: command tx timeout [ 365.608893] Bluetooth: hci5: command tx timeout [ 365.609008] Bluetooth: hci6: command tx timeout [ 366.887525] Bluetooth: hci0: command tx timeout [ 367.079212] Bluetooth: hci1: command tx timeout [ 367.207310] Bluetooth: hci2: command tx timeout [ 367.272187] Bluetooth: hci3: command tx timeout [ 367.528392] Bluetooth: hci4: command tx timeout [ 367.528605] Bluetooth: hci7: command tx timeout [ 367.655572] Bluetooth: hci6: command tx timeout [ 367.656305] Bluetooth: hci5: command tx timeout [ 368.935511] Bluetooth: hci0: command tx timeout [ 369.128681] Bluetooth: hci1: command tx timeout [ 369.255498] Bluetooth: hci2: command tx timeout [ 369.319443] Bluetooth: hci3: command tx timeout [ 369.575225] Bluetooth: hci7: command tx timeout [ 369.575261] Bluetooth: hci4: command tx timeout [ 369.703257] Bluetooth: hci6: command tx timeout [ 369.703760] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 21:31:44 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce08a00 RCX=ffff88806ce08954 RDX=1ffff1100d9c114b RSI=ffffffff85c1ba80 RDI=ffff88806ce08a00 RBP=ffff88806ce08a58 RSP=ffff88806ce089e8 R8 =ffffffff867f37c2 R9 =ffff88806ce08a40 R10=000000000003b0b4 R11=0000000000012ac3 R12=ffff88806ce08ac8 R13=0000000000000000 R14=ffff88800a2a0000 R15=ffff8880099cb940 RIP=ffffffff813505ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1f68c1a540 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f68d7a270 CR3=000000001654e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000000b9d4 RCX=1ffff1100148471e RDX=1ffff1100148471f RSI=0000000000000001 RDI=ffff88800a423800 RBP=ffff88800a423800 RSP=ffff88806cf08c48 R8 =00000000000de000 R9 =000000000000b9d4 R10=00000000000de000 R11=0000000000095c41 R12=ffff88800a4238c8 R13=ffff88800a4238dc R14=ffff88800a423801 R15=0000000000000001 RIP=ffffffff814cd8d3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcb14756540 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcb148f14a1 CR3=0000000016588000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000