Bluetooth: hci0: Opcode 0x1003 failed: -110
==================================================================
BUG: KCSAN: data-race in _prb_read_valid / data_alloc

write to 0xffffffff86c783a0 of 8 bytes by task 28976 on cpu 1:
 data_alloc+0x2fc/0x380 kernel/printk/printk_ringbuffer.c:1129
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1727
 vprintk_store+0x54a/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 __netdev_printk+0x310/0x370 net/core/dev.c:12972
 netdev_info+0xa6/0xd0 net/core/dev.c:13019
 __dev_set_promiscuity+0x1e5/0x3c0 net/core/dev.c:9620
 __dev_set_rx_mode+0x1e4/0x220 net/core/dev_addr_lists.c:1384
 dev_set_rx_mode+0x31/0x50 net/core/dev_addr_lists.c:1393
 __dev_open+0x4a5/0x550 net/core/dev.c:1710
 __dev_change_flags+0x1c8/0x490 net/core/dev.c:9760
 netif_change_flags+0x53/0xc0 net/core/dev.c:9823
 do_setlink+0x8fc/0x2860 net/core/rtnetlink.c:3215
 rtnl_group_changelink net/core/rtnetlink.c:3863 [inline]
 __rtnl_newlink net/core/rtnetlink.c:4031 [inline]
 rtnl_newlink+0xf51/0x1400 net/core/rtnetlink.c:4159
 rtnetlink_rcv_msg+0x64b/0x720 net/core/rtnetlink.c:7076
 netlink_rcv_skb+0x11e/0x220 net/netlink/af_netlink.c:2556
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:7103
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x5a7/0x680 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x5be/0x6f0 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec net/socket.c:775 [inline]
 __sock_sendmsg net/socket.c:790 [inline]
 ____sys_sendmsg+0x532/0x580 net/socket.c:2684
 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2738
 __sys_sendmsg net/socket.c:2770 [inline]
 __do_sys_sendmsg net/socket.c:2775 [inline]
 __se_sys_sendmsg net/socket.c:2773 [inline]
 __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2773
 x64_sys_call+0x194c/0x3020 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86c783a0 of 16 bytes by task 22321 on cpu 0:
 desc_read kernel/printk/printk_ringbuffer.c:496 [inline]
 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1934 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1982 [inline]
 _prb_read_valid+0x183/0x930 kernel/printk/printk_ringbuffer.c:2173
 prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2245
 printk_get_next_message+0xea/0x550 kernel/printk/printk.c:3052
 console_emit_next_record kernel/printk/printk.c:3137 [inline]
 console_flush_one_record kernel/printk/printk.c:3269 [inline]
 console_flush_all+0x2bc/0x6b0 kernel/printk/printk.c:3343
 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
 console_unlock+0xa1/0x280 kernel/printk/printk.c:3413
 vprintk_emit+0x3e4/0x600 kernel/printk/printk.c:2479
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 bt_err+0xa7/0xd0 net/bluetooth/lib.c:293
 __hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:271 [inline]
 __hci_cmd_sync_status net/bluetooth/hci_sync.c:287 [inline]
 hci_read_local_features_sync net/bluetooth/hci_sync.c:3768 [inline]
 hci_init_stage_sync net/bluetooth/hci_sync.c:3683 [inline]
 hci_init1_sync net/bluetooth/hci_sync.c:3815 [inline]
 hci_init_sync net/bluetooth/hci_sync.c:5002 [inline]
 hci_dev_init_sync net/bluetooth/hci_sync.c:5194 [inline]
 hci_dev_open_sync+0xf8e/0x2260 net/bluetooth/hci_sync.c:5272
 hci_dev_do_open net/bluetooth/hci_core.c:428 [inline]
 hci_power_on+0xef/0x390 net/bluetooth/hci_core.c:920
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405
 worker_thread+0x569/0x750 kernel/workqueue.c:3486
 kthread+0x221/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 22321 Comm: kworker/u9:0 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: hci0 hci_power_on
==================================================================