Warning: Permanently added '[localhost]:12990' (ECDSA) to the list of known hosts. 2025/05/29 16:21:38 fuzzer started 2025/05/29 16:21:39 dialing manager at localhost:35489 syzkaller login: [ 111.055666] cgroup: Unknown subsys name 'net' [ 111.185771] cgroup: Unknown subsys name 'cpuset' [ 111.220013] cgroup: Unknown subsys name 'rlimit' 2025/05/29 16:22:03 syscalls: 2214 2025/05/29 16:22:03 code coverage: enabled 2025/05/29 16:22:03 comparison tracing: enabled 2025/05/29 16:22:03 extra coverage: enabled 2025/05/29 16:22:03 setuid sandbox: enabled 2025/05/29 16:22:03 namespace sandbox: enabled 2025/05/29 16:22:03 Android sandbox: enabled 2025/05/29 16:22:03 fault injection: enabled 2025/05/29 16:22:03 leak checking: enabled 2025/05/29 16:22:03 net packet injection: enabled 2025/05/29 16:22:03 net device setup: enabled 2025/05/29 16:22:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/29 16:22:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/29 16:22:03 USB emulation: enabled 2025/05/29 16:22:03 hci packet injection: enabled 2025/05/29 16:22:03 wifi device emulation: enabled 2025/05/29 16:22:03 802.15.4 emulation: enabled 2025/05/29 16:22:03 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 16:22:03 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 16:22:06 starting 8 fuzzer processes 16:22:06 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fadvise64(r0, 0xfffffffffffffffb, 0x4, 0x0) 16:22:06 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x2}}, 0x24, 0x0) 16:22:06 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) [ 137.752986] audit: type=1400 audit(1748535726.213:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:22:06 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[], 0x2c, 0x0) 16:22:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x8, 0x0, 0x0) 16:22:06 executing program 5: rt_tgsigqueueinfo(0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 16:22:06 executing program 6: acct(0x0) 16:22:06 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5b800, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c45302a001a0000000000001a0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0xb800}, {&(0x7f0000010b00)="2200180000000000001800080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012a0020000000000000201a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xc000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xd000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10000}], 0x0, &(0x7f0000011300)) [ 139.246249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.251423] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.255089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.260373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.263319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.270439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.274125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.279678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.287286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.301754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.310493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.313545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.317583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.332057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.346349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.412158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.412744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.421295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.430193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.436464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.437595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.439280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.443496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.446135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.449008] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.451666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.456760] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.460109] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.460491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.464349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.465366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.467575] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.472965] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.483416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.489994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.492761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.500316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.506280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.546707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.571699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.376384] Bluetooth: hci0: command tx timeout [ 141.377612] Bluetooth: hci1: command tx timeout [ 141.441724] Bluetooth: hci2: command tx timeout [ 141.567904] Bluetooth: hci5: command tx timeout [ 141.632909] Bluetooth: hci6: command tx timeout [ 141.633612] Bluetooth: hci3: command tx timeout [ 141.696937] Bluetooth: hci7: command tx timeout [ 141.697556] Bluetooth: hci4: command tx timeout [ 143.425202] Bluetooth: hci0: command tx timeout [ 143.425684] Bluetooth: hci1: command tx timeout [ 143.487907] Bluetooth: hci2: command tx timeout [ 143.616854] Bluetooth: hci5: command tx timeout [ 143.680183] Bluetooth: hci3: command tx timeout [ 143.680648] Bluetooth: hci6: command tx timeout [ 143.744347] Bluetooth: hci7: command tx timeout [ 143.746017] Bluetooth: hci4: command tx timeout [ 145.473298] Bluetooth: hci0: command tx timeout [ 145.474272] Bluetooth: hci1: command tx timeout [ 145.537861] Bluetooth: hci2: command tx timeout [ 145.664061] Bluetooth: hci5: command tx timeout [ 145.729943] Bluetooth: hci6: command tx timeout [ 145.730395] Bluetooth: hci3: command tx timeout [ 145.792889] Bluetooth: hci7: command tx timeout [ 145.793347] Bluetooth: hci4: command tx timeout [ 147.520928] Bluetooth: hci1: command tx timeout [ 147.521444] Bluetooth: hci0: command tx timeout [ 147.585623] Bluetooth: hci2: command tx timeout [ 147.714002] Bluetooth: hci5: command tx timeout [ 147.777280] Bluetooth: hci3: command tx timeout [ 147.777733] Bluetooth: hci6: command tx timeout [ 147.841422] Bluetooth: hci4: command tx timeout [ 147.841912] Bluetooth: hci7: command tx timeout [ 199.042255] syz-executor.1 (284) used greatest stack depth: 24640 bytes left [ 201.946565] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.955701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.962342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.971440] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.979484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.079933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.087293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.101993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.110011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.130485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.142616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.144235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.163659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.170117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.170255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.193218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.213176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.215461] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.217151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.218692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.220466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.222545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.232772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.242573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.245175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.246022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.246765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.249313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.250870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.251202] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.256348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.259369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.259628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.264111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.273322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.273450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.281586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.290633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.296239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.300778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 204.033030] Bluetooth: hci0: command tx timeout [ 204.288163] Bluetooth: hci1: command tx timeout [ 204.352477] Bluetooth: hci3: command tx timeout [ 204.353757] Bluetooth: hci6: command tx timeout [ 204.355007] Bluetooth: hci7: command tx timeout [ 204.356055] Bluetooth: hci4: command tx timeout [ 204.416004] Bluetooth: hci5: command tx timeout [ 204.417194] Bluetooth: hci2: command tx timeout [ 206.080188] Bluetooth: hci0: command tx timeout [ 206.335860] Bluetooth: hci1: command tx timeout [ 206.400122] Bluetooth: hci4: command tx timeout [ 206.400730] Bluetooth: hci6: command tx timeout [ 206.401838] Bluetooth: hci7: command tx timeout [ 206.401891] Bluetooth: hci3: command tx timeout [ 206.464890] Bluetooth: hci2: command tx timeout [ 206.465463] Bluetooth: hci5: command tx timeout [ 208.128131] Bluetooth: hci0: command tx timeout [ 208.383865] Bluetooth: hci1: command tx timeout [ 208.447880] Bluetooth: hci3: command tx timeout [ 208.448362] Bluetooth: hci7: command tx timeout [ 208.449183] Bluetooth: hci6: command tx timeout [ 208.449606] Bluetooth: hci4: command tx timeout [ 208.513222] Bluetooth: hci5: command tx timeout [ 208.513302] Bluetooth: hci2: command tx timeout [ 210.176198] Bluetooth: hci0: command tx timeout [ 210.431914] Bluetooth: hci1: command tx timeout [ 210.497059] Bluetooth: hci4: command tx timeout [ 210.497964] Bluetooth: hci3: command tx timeout [ 210.497980] Bluetooth: hci6: command tx timeout [ 210.498433] Bluetooth: hci7: command tx timeout [ 210.560904] Bluetooth: hci5: command tx timeout [ 210.561382] Bluetooth: hci2: command tx timeout [ 264.021323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.026967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.031395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.041148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.049302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.153304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.159667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.163706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.171471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.175476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.242158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.247247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.258676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.265384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.269704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.325453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.342520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.378369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.431693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.435054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.438204] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.442617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.448184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.453365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.467411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.491441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 264.496413] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.505167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.528653] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 264.535127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.535485] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 264.541386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.543331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.568759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.579363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.591546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 264.619325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.676452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 264.681116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.702040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.112460] Bluetooth: hci0: command tx timeout [ 266.241569] Bluetooth: hci1: command tx timeout [ 266.431874] Bluetooth: hci2: command tx timeout [ 266.560853] Bluetooth: hci3: command tx timeout [ 266.625212] Bluetooth: hci4: command tx timeout [ 266.687934] Bluetooth: hci5: command tx timeout [ 266.751932] Bluetooth: hci7: command tx timeout [ 266.879876] Bluetooth: hci6: command tx timeout [ 268.160049] Bluetooth: hci0: command tx timeout [ 268.288930] Bluetooth: hci1: command tx timeout [ 268.479898] Bluetooth: hci2: command tx timeout [ 268.607956] Bluetooth: hci3: command tx timeout [ 268.671905] Bluetooth: hci4: command tx timeout [ 268.736006] Bluetooth: hci5: command tx timeout [ 268.800417] Bluetooth: hci7: command tx timeout [ 268.927865] Bluetooth: hci6: command tx timeout [ 270.209542] Bluetooth: hci0: command tx timeout [ 270.335940] Bluetooth: hci1: command tx timeout [ 270.528072] Bluetooth: hci2: command tx timeout [ 270.655908] Bluetooth: hci3: command tx timeout [ 270.720145] Bluetooth: hci4: command tx timeout [ 270.783913] Bluetooth: hci5: command tx timeout [ 270.847969] Bluetooth: hci7: command tx timeout [ 270.977849] Bluetooth: hci6: command tx timeout [ 272.256175] Bluetooth: hci0: command tx timeout [ 272.384113] Bluetooth: hci1: command tx timeout [ 272.575868] Bluetooth: hci2: command tx timeout [ 272.705962] Bluetooth: hci3: command tx timeout [ 272.768876] Bluetooth: hci4: command tx timeout [ 272.831876] Bluetooth: hci5: command tx timeout [ 272.895926] Bluetooth: hci7: command tx timeout [ 273.024175] Bluetooth: hci6: command tx timeout [ 324.141749] syz-executor.2 (5416) used greatest stack depth: 24616 bytes left [ 326.295942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.305479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.311290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.321185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.332908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.438343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.440699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.445602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.454487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.465944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.549783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.552764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.555396] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.560523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.565444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.621492] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.626983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.646501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.658290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.672332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.684074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.690351] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.694578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.710314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.717179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.812619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.823274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.837419] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.865174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.882384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.899386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.913578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.959286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.962193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.970086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.974459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.987015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.994204] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.009193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.069474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 328.384827] Bluetooth: hci0: command tx timeout [ 328.512911] Bluetooth: hci1: command tx timeout [ 328.641434] Bluetooth: hci2: command tx timeout [ 328.769045] Bluetooth: hci3: command tx timeout [ 328.833096] Bluetooth: hci4: command tx timeout [ 329.152998] Bluetooth: hci5: command tx timeout [ 329.215953] Bluetooth: hci6: command tx timeout [ 329.216664] Bluetooth: hci7: command tx timeout [ 330.431903] Bluetooth: hci0: command tx timeout [ 330.559905] Bluetooth: hci1: command tx timeout [ 330.687993] Bluetooth: hci2: command tx timeout [ 330.816306] Bluetooth: hci3: command tx timeout [ 330.880322] Bluetooth: hci4: command tx timeout [ 331.200145] Bluetooth: hci5: command tx timeout [ 331.263949] Bluetooth: hci7: command tx timeout [ 331.264894] Bluetooth: hci6: command tx timeout [ 332.479900] Bluetooth: hci0: command tx timeout [ 332.608068] Bluetooth: hci1: command tx timeout [ 332.736018] Bluetooth: hci2: command tx timeout [ 332.864246] Bluetooth: hci3: command tx timeout [ 332.928958] Bluetooth: hci4: command tx timeout [ 333.248591] Bluetooth: hci5: command tx timeout [ 333.311879] Bluetooth: hci6: command tx timeout [ 333.311915] Bluetooth: hci7: command tx timeout [ 334.528897] Bluetooth: hci0: command tx timeout [ 334.658380] Bluetooth: hci1: command tx timeout [ 334.783852] Bluetooth: hci2: command tx timeout [ 334.912886] Bluetooth: hci3: command tx timeout [ 334.976875] Bluetooth: hci4: command tx timeout [ 335.296171] Bluetooth: hci5: command tx timeout [ 335.359941] Bluetooth: hci6: command tx timeout [ 335.360416] Bluetooth: hci7: command tx timeout [ 388.828467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.836488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.844170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.854272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.860731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.960079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.970109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.973758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.982080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.991690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.089075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.095422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.101660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.111580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.115691] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.171616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.174467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.194548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.220567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.225341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.232343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.245525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.247584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.260329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.269560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.309674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 389.323514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 389.330771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.376524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 389.384495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 389.389132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.421704] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.427213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 389.432305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 389.436713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.438218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 389.469674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 389.491396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 389.493283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.528353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.912896] Bluetooth: hci0: command tx timeout [ 391.040074] Bluetooth: hci1: command tx timeout [ 391.168896] Bluetooth: hci2: command tx timeout [ 391.359894] Bluetooth: hci4: command tx timeout [ 391.359918] Bluetooth: hci3: command tx timeout [ 391.424884] Bluetooth: hci6: command tx timeout [ 391.551983] Bluetooth: hci7: command tx timeout [ 391.616263] Bluetooth: hci5: command tx timeout [ 392.960124] Bluetooth: hci0: command tx timeout [ 393.087961] Bluetooth: hci1: command tx timeout [ 393.215938] Bluetooth: hci2: command tx timeout [ 393.408173] Bluetooth: hci3: command tx timeout [ 393.408425] Bluetooth: hci4: command tx timeout [ 393.471886] Bluetooth: hci6: command tx timeout [ 393.599895] Bluetooth: hci7: command tx timeout [ 393.664245] Bluetooth: hci5: command tx timeout [ 395.009927] Bluetooth: hci0: command tx timeout [ 395.137957] Bluetooth: hci1: command tx timeout [ 395.263863] Bluetooth: hci2: command tx timeout [ 395.455865] Bluetooth: hci4: command tx timeout [ 395.456356] Bluetooth: hci3: command tx timeout [ 395.520838] Bluetooth: hci6: command tx timeout [ 395.648860] Bluetooth: hci7: command tx timeout [ 395.712673] Bluetooth: hci5: command tx timeout [ 397.057183] Bluetooth: hci0: command tx timeout [ 397.184856] Bluetooth: hci1: command tx timeout [ 397.311868] Bluetooth: hci2: command tx timeout [ 397.505829] Bluetooth: hci3: command tx timeout [ 397.505890] Bluetooth: hci4: command tx timeout [ 397.569275] Bluetooth: hci6: command tx timeout [ 397.697941] Bluetooth: hci7: command tx timeout [ 397.761066] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 16:27:07 Registers: info registers vcpu 0 RAX=ffffffff86c383ae RBX=0000000000000001 RCX=ffffffff86c383ae RDX=0000000000000000 RSI=ffffffff86c383ae RDI=ffffffff86772f7c RBP=ffff88806ce08ad0 RSP=ffff88806ce08a08 R8 =ffffffff86c383ae R9 =0000000000000000 R10=000000000003b6bd R11=00000000000c505f R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08ab9 R15=ffff88806ce08a78 RIP=ffffffff81353e9c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f1e4dd820 CR3=000000001ce51000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000066f9419b RBX=ffff888036493700 RCX=f038391266f9419b RDX=00000000a30f9eef RSI=00000000c0c1d7e8 RDI=00000000ddfbc25e RBP=ffff888036494158 RSP=ffff8880382d7260 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888036494180 R13=0000000063d176d7 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8151930a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc38b4854a1 CR3=000000002ebfb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000