Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low!
turning off the locking correctness validator.
CPU: 1 PID: 10831 Comm: kworker/u5:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
Workqueue: hci1 hci_rx_work
Call trace:
 dump_backtrace+0x1c4/0x1f0 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 add_chain_cache kernel/locking/lockdep.c:-1 [inline]
 lookup_chain_cache_add kernel/locking/lockdep.c:3777 [inline]
 validate_chain kernel/locking/lockdep.c:3798 [inline]
 __lock_acquire+0x1864/0x6634 kernel/locking/lockdep.c:5063
 lock_acquire+0x20c/0x638 kernel/locking/lockdep.c:5676
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x6c/0xb0 kernel/locking/spinlock.c:162
 debug_object_activate+0x80/0x4c0 lib/debugobjects.c:747
 debug_work_activate kernel/workqueue.c:510 [inline]
 __queue_work+0xcec/0x1280 kernel/workqueue.c:1519
 queue_work_on+0xc0/0x164 kernel/workqueue.c:1548
 queue_work include/linux/workqueue.h:512 [inline]
 hci_send_cmd+0xb4/0x170 net/bluetooth/hci_core.c:3081
 hci_conn_request_evt+0x554/0x96c net/bluetooth/hci_event.c:3380
 hci_event_func net/bluetooth/hci_event.c:7429 [inline]
 hci_event_packet+0x698/0xe60 net/bluetooth/hci_event.c:7481
 hci_rx_work+0x320/0xa94 net/bluetooth/hci_core.c:4109
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Bluetooth: hci1: command 0x040f tx timeout
Bluetooth: hci1: command 0x0419 tx timeout