Warning: Permanently added '[localhost]:33470' (ECDSA) to the list of known hosts. 2025/06/25 20:48:47 fuzzer started 2025/06/25 20:48:47 dialing manager at localhost:41253 syzkaller login: [ 93.949338] cgroup: Unknown subsys name 'net' [ 94.072323] cgroup: Unknown subsys name 'cpuset' [ 94.112163] cgroup: Unknown subsys name 'rlimit' 2025/06/25 20:49:04 syscalls: 2214 2025/06/25 20:49:04 code coverage: enabled 2025/06/25 20:49:04 comparison tracing: enabled 2025/06/25 20:49:04 extra coverage: enabled 2025/06/25 20:49:04 setuid sandbox: enabled 2025/06/25 20:49:04 namespace sandbox: enabled 2025/06/25 20:49:04 Android sandbox: enabled 2025/06/25 20:49:04 fault injection: enabled 2025/06/25 20:49:04 leak checking: enabled 2025/06/25 20:49:04 net packet injection: enabled 2025/06/25 20:49:04 net device setup: enabled 2025/06/25 20:49:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 20:49:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 20:49:04 USB emulation: enabled 2025/06/25 20:49:04 hci packet injection: enabled 2025/06/25 20:49:04 wifi device emulation: enabled 2025/06/25 20:49:04 802.15.4 emulation: enabled 2025/06/25 20:49:04 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 20:49:04 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 20:49:06 starting 8 fuzzer processes 20:49:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:49:06 executing program 1: select(0x40, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000002c0)={0x77359400}) 20:49:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000000900)={0x10}, 0x10}], 0x1, &(0x7f0000007180)=[@cred={{0x1c}}], 0x20}, 0x0) [ 112.560987] audit: type=1400 audit(1750884546.701:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:49:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={0x0}}, 0x0) 20:49:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x52, 0x0, &(0x7f0000000140)=0x47) 20:49:06 executing program 5: socket$inet(0x2, 0xa, 0x0) 20:49:06 executing program 6: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) 20:49:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 114.007159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.012325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.017045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.027726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.035414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.104130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.111134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.117390] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.139620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.146646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.160180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.163984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.166790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.169696] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.171384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.173791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.175449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.192628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.203378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.206123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.207462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.210328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.216169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.220615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.232448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.234245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.237559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.246362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.246530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.250176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.254763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.258547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.261105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.279829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.285101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.288517] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.302422] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.315775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.319720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.322229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.086797] Bluetooth: hci0: command tx timeout [ 116.213026] Bluetooth: hci1: command tx timeout [ 116.340961] Bluetooth: hci6: command tx timeout [ 116.341004] Bluetooth: hci3: command tx timeout [ 116.342093] Bluetooth: hci4: command tx timeout [ 116.342506] Bluetooth: hci2: command tx timeout [ 116.404997] Bluetooth: hci7: command tx timeout [ 116.405564] Bluetooth: hci5: command tx timeout [ 118.133768] Bluetooth: hci0: command tx timeout [ 118.262050] Bluetooth: hci1: command tx timeout [ 118.389909] Bluetooth: hci2: command tx timeout [ 118.390383] Bluetooth: hci6: command tx timeout [ 118.390799] Bluetooth: hci4: command tx timeout [ 118.391381] Bluetooth: hci3: command tx timeout [ 118.453246] Bluetooth: hci5: command tx timeout [ 118.453592] Bluetooth: hci7: command tx timeout [ 120.180926] Bluetooth: hci0: command tx timeout [ 120.308967] Bluetooth: hci1: command tx timeout [ 120.437133] Bluetooth: hci3: command tx timeout [ 120.437159] Bluetooth: hci4: command tx timeout [ 120.437621] Bluetooth: hci6: command tx timeout [ 120.438164] Bluetooth: hci2: command tx timeout [ 120.501276] Bluetooth: hci7: command tx timeout [ 120.501722] Bluetooth: hci5: command tx timeout [ 122.229240] Bluetooth: hci0: command tx timeout [ 122.357335] Bluetooth: hci1: command tx timeout [ 122.485127] Bluetooth: hci2: command tx timeout [ 122.485591] Bluetooth: hci6: command tx timeout [ 122.486737] Bluetooth: hci3: command tx timeout [ 122.487385] Bluetooth: hci4: command tx timeout [ 122.549972] Bluetooth: hci5: command tx timeout [ 122.550451] Bluetooth: hci7: command tx timeout [ 174.076167] syz-executor.7 (289) used greatest stack depth: 24784 bytes left [ 176.399464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.402757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.405277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.410494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.414038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.602338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.607458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.610000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.621194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.624813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.693388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.728764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.735594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.746618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.753067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.800314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.809585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.829189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.845205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.853454] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.861958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.867542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.870026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.885647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.893494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.948094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.954510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.958380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.965070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.973523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.975085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.012429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.019759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.035698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.066456] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.228781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.240137] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.249086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.258628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.273394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.485057] Bluetooth: hci0: command tx timeout [ 178.677004] Bluetooth: hci1: command tx timeout [ 178.805203] Bluetooth: hci2: command tx timeout [ 178.997151] Bluetooth: hci4: command tx timeout [ 178.997982] Bluetooth: hci3: command tx timeout [ 179.125114] Bluetooth: hci5: command tx timeout [ 179.193349] Bluetooth: hci6: command tx timeout [ 179.381974] Bluetooth: hci7: command tx timeout [ 180.532943] Bluetooth: hci0: command tx timeout [ 180.726173] Bluetooth: hci1: command tx timeout [ 180.853960] Bluetooth: hci2: command tx timeout [ 181.045011] Bluetooth: hci3: command tx timeout [ 181.046081] Bluetooth: hci4: command tx timeout [ 181.173989] Bluetooth: hci5: command tx timeout [ 181.237178] Bluetooth: hci6: command tx timeout [ 181.429954] Bluetooth: hci7: command tx timeout [ 182.583437] Bluetooth: hci0: command tx timeout [ 182.773935] Bluetooth: hci1: command tx timeout [ 182.901957] Bluetooth: hci2: command tx timeout [ 183.093218] Bluetooth: hci4: command tx timeout [ 183.093685] Bluetooth: hci3: command tx timeout [ 183.221173] Bluetooth: hci5: command tx timeout [ 183.285112] Bluetooth: hci6: command tx timeout [ 183.477388] Bluetooth: hci7: command tx timeout [ 184.630134] Bluetooth: hci0: command tx timeout [ 184.822151] Bluetooth: hci1: command tx timeout [ 184.950194] Bluetooth: hci2: command tx timeout [ 185.141145] Bluetooth: hci4: command tx timeout [ 185.142371] Bluetooth: hci3: command tx timeout [ 185.269105] Bluetooth: hci5: command tx timeout [ 185.333196] Bluetooth: hci6: command tx timeout [ 185.525925] Bluetooth: hci7: command tx timeout [ 239.178258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.183426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.188182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.195565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.201341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.314313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.316066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.319642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.324196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.330393] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.343278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.352600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.357481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.360143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.378610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.483761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.493169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.496726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.503553] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.507799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.572134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.587516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.590813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.595566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.603823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.606595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.606642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.613716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.618328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.628720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.675963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.679802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.685209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.695117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.702959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.705177] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.728300] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.737592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.743423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.746388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.268965] Bluetooth: hci0: command tx timeout [ 241.461901] Bluetooth: hci1: command tx timeout [ 241.462590] Bluetooth: hci2: command tx timeout [ 241.652967] Bluetooth: hci5: command tx timeout [ 241.653544] Bluetooth: hci3: command tx timeout [ 241.716961] Bluetooth: hci4: command tx timeout [ 241.781917] Bluetooth: hci6: command tx timeout [ 241.845928] Bluetooth: hci7: command tx timeout [ 243.318143] Bluetooth: hci0: command tx timeout [ 243.510043] Bluetooth: hci1: command tx timeout [ 243.510515] Bluetooth: hci2: command tx timeout [ 243.701255] Bluetooth: hci5: command tx timeout [ 243.701738] Bluetooth: hci3: command tx timeout [ 243.767193] Bluetooth: hci4: command tx timeout [ 243.831363] Bluetooth: hci6: command tx timeout [ 243.894989] Bluetooth: hci7: command tx timeout [ 245.365309] Bluetooth: hci0: command tx timeout [ 245.558009] Bluetooth: hci2: command tx timeout [ 245.558462] Bluetooth: hci1: command tx timeout [ 245.748932] Bluetooth: hci3: command tx timeout [ 245.749382] Bluetooth: hci5: command tx timeout [ 245.814911] Bluetooth: hci4: command tx timeout [ 245.876903] Bluetooth: hci6: command tx timeout [ 245.941878] Bluetooth: hci7: command tx timeout [ 247.414068] Bluetooth: hci0: command tx timeout [ 247.606155] Bluetooth: hci1: command tx timeout [ 247.606640] Bluetooth: hci2: command tx timeout [ 247.797268] Bluetooth: hci5: command tx timeout [ 247.797733] Bluetooth: hci3: command tx timeout [ 247.862048] Bluetooth: hci4: command tx timeout [ 247.924932] Bluetooth: hci6: command tx timeout [ 247.991126] Bluetooth: hci7: command tx timeout [ 301.384220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.391241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.393377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.403761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.409257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.585419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.589505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.592646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.600499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.604051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.775650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.786279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.791714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.800405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.805068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.819456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.823484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.827188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.843629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.849459] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.918605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.926822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.929424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.940230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.945504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.024270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.031329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.035394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.058470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.101734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.108095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.114476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.120670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.125407] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.130723] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.161613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.164070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.200826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.219712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.242819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.476929] Bluetooth: hci0: command tx timeout [ 303.669403] Bluetooth: hci1: command tx timeout [ 303.924988] Bluetooth: hci3: command tx timeout [ 303.925752] Bluetooth: hci2: command tx timeout [ 304.053313] Bluetooth: hci4: command tx timeout [ 304.309027] Bluetooth: hci6: command tx timeout [ 304.309791] Bluetooth: hci5: command tx timeout [ 304.373058] Bluetooth: hci7: command tx timeout [ 305.524919] Bluetooth: hci0: command tx timeout [ 305.717888] Bluetooth: hci1: command tx timeout [ 305.973893] Bluetooth: hci2: command tx timeout [ 305.974347] Bluetooth: hci3: command tx timeout [ 306.100955] Bluetooth: hci4: command tx timeout [ 306.357986] Bluetooth: hci5: command tx timeout [ 306.358425] Bluetooth: hci6: command tx timeout [ 306.420924] Bluetooth: hci7: command tx timeout [ 307.572929] Bluetooth: hci0: command tx timeout [ 307.764921] Bluetooth: hci1: command tx timeout [ 308.021978] Bluetooth: hci3: command tx timeout [ 308.022477] Bluetooth: hci2: command tx timeout [ 308.149101] Bluetooth: hci4: command tx timeout [ 308.405148] Bluetooth: hci6: command tx timeout [ 308.405646] Bluetooth: hci5: command tx timeout [ 308.468948] Bluetooth: hci7: command tx timeout [ 309.620949] Bluetooth: hci0: command tx timeout [ 309.813181] Bluetooth: hci1: command tx timeout [ 310.069092] Bluetooth: hci2: command tx timeout [ 310.069535] Bluetooth: hci3: command tx timeout [ 310.196919] Bluetooth: hci4: command tx timeout [ 310.453187] Bluetooth: hci5: command tx timeout [ 310.453642] Bluetooth: hci6: command tx timeout [ 310.517975] Bluetooth: hci7: command tx timeout [ 361.946569] syz-executor.4 (7830) used greatest stack depth: 24752 bytes left [ 363.847635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.850795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.859446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.875401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.882547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.047214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.059216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.061308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.065250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.067030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.072400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.079639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.089405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.104379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.108554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.203715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.225711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.238711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.275132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.281172] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.285223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.296413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.306652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.362109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.373285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.377387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.380079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.386607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.392452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.402768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.485779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.494208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.508996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.553443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.556979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.572104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.598197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.608532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.621235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.644426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.942377] Bluetooth: hci0: command tx timeout [ 366.133263] Bluetooth: hci2: command tx timeout [ 366.197901] Bluetooth: hci1: command tx timeout [ 366.388946] Bluetooth: hci3: command tx timeout [ 366.453110] Bluetooth: hci5: command tx timeout [ 366.517168] Bluetooth: hci4: command tx timeout [ 366.773021] Bluetooth: hci6: command tx timeout [ 366.836960] Bluetooth: hci7: command tx timeout [ 367.990951] Bluetooth: hci0: command tx timeout [ 368.180937] Bluetooth: hci2: command tx timeout [ 368.246897] Bluetooth: hci1: command tx timeout [ 368.436920] Bluetooth: hci3: command tx timeout [ 368.503053] Bluetooth: hci5: command tx timeout [ 368.564936] Bluetooth: hci4: command tx timeout [ 368.821531] Bluetooth: hci6: command tx timeout [ 368.884935] Bluetooth: hci7: command tx timeout [ 370.036936] Bluetooth: hci0: command tx timeout [ 370.229013] Bluetooth: hci2: command tx timeout [ 370.293774] Bluetooth: hci1: command tx timeout [ 370.484945] Bluetooth: hci3: command tx timeout [ 370.548931] Bluetooth: hci5: command tx timeout [ 370.612971] Bluetooth: hci4: command tx timeout [ 370.868929] Bluetooth: hci6: command tx timeout [ 370.933903] Bluetooth: hci7: command tx timeout [ 372.085063] Bluetooth: hci0: command tx timeout [ 372.277251] Bluetooth: hci2: command tx timeout [ 372.342202] Bluetooth: hci1: command tx timeout [ 372.533278] Bluetooth: hci3: command tx timeout [ 372.597250] Bluetooth: hci5: command tx timeout [ 372.660941] Bluetooth: hci4: command tx timeout [ 372.917531] Bluetooth: hci6: command tx timeout [ 372.982059] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:54:16 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=dba571a1562e7053 RDX=000000009bae4e5f RSI=0000000061419458 RDI=0000000077e35e19 RBP=ffffffff85c1cc40 RSP=ffff888033d9fa58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b063 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f53423ff540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562e4e9be2b0 CR3=000000002903d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81353d19 RBX=0000000000000001 RCX=ffff88806cf089cc RDX=0000000000000000 RSI=ffffffff8100148a RDI=ffff888016dc1f7c RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=00000000000c469a R12=0000000000000000 R13=ffff88806cf08ac0 R14=ffff888016dc1b80 R15=ffff88806cf08a78 RIP=ffffffff81353d19 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f61e00368 CR3=000000002cb8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000