syzkaller login: [ 99.056856] sshd (235) used greatest stack depth: 24064 bytes left Warning: Permanently added '[localhost]:20688' (ECDSA) to the list of known hosts. 2023/08/24 11:09:34 fuzzer started 2023/08/24 11:09:34 dialing manager at localhost:40489 [ 102.480969] cgroup: Unknown subsys name 'net' [ 102.683530] cgroup: Unknown subsys name 'rlimit' [ 115.281149] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/24 11:09:48 syscalls: 2217 2023/08/24 11:09:48 code coverage: enabled 2023/08/24 11:09:48 comparison tracing: enabled 2023/08/24 11:09:48 extra coverage: enabled 2023/08/24 11:09:48 setuid sandbox: enabled 2023/08/24 11:09:48 namespace sandbox: enabled 2023/08/24 11:09:48 Android sandbox: enabled 2023/08/24 11:09:48 fault injection: enabled 2023/08/24 11:09:48 leak checking: enabled 2023/08/24 11:09:48 net packet injection: enabled 2023/08/24 11:09:48 net device setup: enabled 2023/08/24 11:09:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/24 11:09:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/24 11:09:48 USB emulation: enabled 2023/08/24 11:09:48 hci packet injection: enabled 2023/08/24 11:09:48 wifi device emulation: enabled 2023/08/24 11:09:48 802.15.4 emulation: enabled 2023/08/24 11:09:48 fetching corpus: 0, signal 0/2000 (executing program) 2023/08/24 11:09:48 fetching corpus: 21, signal 19179/22411 (executing program) 2023/08/24 11:09:48 fetching corpus: 57, signal 32735/36788 (executing program) 2023/08/24 11:09:48 fetching corpus: 107, signal 40329/45146 (executing program) 2023/08/24 11:09:49 fetching corpus: 154, signal 51155/56095 (executing program) 2023/08/24 11:09:49 fetching corpus: 200, signal 58642/63622 (executing program) 2023/08/24 11:09:49 fetching corpus: 248, signal 64248/69243 (executing program) 2023/08/24 11:09:49 fetching corpus: 298, signal 69297/74220 (executing program) 2023/08/24 11:09:49 fetching corpus: 348, signal 73848/78543 (executing program) 2023/08/24 11:09:50 fetching corpus: 398, signal 78447/82748 (executing program) 2023/08/24 11:09:50 fetching corpus: 446, signal 80539/84792 (executing program) 2023/08/24 11:09:50 fetching corpus: 493, signal 82796/86888 (executing program) 2023/08/24 11:09:50 fetching corpus: 543, signal 84921/88804 (executing program) 2023/08/24 11:09:50 fetching corpus: 592, signal 87007/90662 (executing program) 2023/08/24 11:09:50 fetching corpus: 641, signal 90823/93617 (executing program) 2023/08/24 11:09:51 fetching corpus: 690, signal 92910/95244 (executing program) 2023/08/24 11:09:51 fetching corpus: 740, signal 96474/97802 (executing program) 2023/08/24 11:09:51 fetching corpus: 782, signal 98501/99178 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99213 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99244 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99286 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99336 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99379 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99413 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99451 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99487 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99523 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99566 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99610 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99651 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99694 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99719 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99766 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99807 (executing program) 2023/08/24 11:09:51 fetching corpus: 783, signal 98505/99844 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/99890 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/99923 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/99960 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/99992 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/100042 (executing program) 2023/08/24 11:09:51 fetching corpus: 785, signal 98519/100082 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100220 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100265 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100354 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100438 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100475 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100612 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98557/100679 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98558/100757 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98558/100829 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98558/100867 (executing program) 2023/08/24 11:09:51 fetching corpus: 786, signal 98558/100867 (executing program) 2023/08/24 11:09:54 starting 8 fuzzer processes 11:09:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001a00012b"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:09:54 executing program 1: syz_mount_image$msdos(&(0x7f0000002000), &(0x7f0000002040)='./file0\x00', 0x0, 0x0, &(0x7f00000021c0), 0x0, &(0x7f0000002200)) 11:09:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0x530e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) fsmount(r4, 0x0, 0x80) utimes(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local}, 0x10) write(r5, &(0x7f0000000140)="5293e75dd98500bd9359109789faac50ff9dff0177d66a2de2642727486354946b671c2e99a3423d804e38c4808247393a3bc48c3aa168bdf9844e25", 0x3c) 11:09:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) [ 121.739333] audit: type=1400 audit(1692875394.716:6): avc: denied { execmem } for pid=277 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:09:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x5, 0x4) 11:09:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) 11:09:54 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540)=""/230, 0xe6, 0x100) 11:09:54 executing program 7: syz_emit_ethernet(0x12, &(0x7f0000000200)={@link_local, @random="47246dfb4baf", @val={@void}, {@generic={0x88fb}}}, 0x0) [ 123.186744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.188131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.192931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.194900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.196500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.198800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.211437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.214865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.215760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.221925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.228701] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.234904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.262974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.274673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.280319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.296961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.305049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.325941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.327770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.330631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.334939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.348175] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.350666] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.354637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.365075] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.377359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.383308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.397776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.404597] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.407757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.275453] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 125.275475] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 125.339145] Bluetooth: hci1: command 0x0409 tx timeout [ 125.339166] Bluetooth: hci0: command 0x0409 tx timeout [ 125.340159] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 125.402762] Bluetooth: hci7: command 0x0409 tx timeout [ 125.402894] Bluetooth: hci4: command 0x0409 tx timeout [ 125.467523] Bluetooth: hci6: command 0x0409 tx timeout [ 127.386498] Bluetooth: hci1: command 0x041b tx timeout [ 127.386509] Bluetooth: hci0: command 0x041b tx timeout [ 127.451485] Bluetooth: hci4: command 0x041b tx timeout [ 127.451501] Bluetooth: hci7: command 0x041b tx timeout [ 127.514484] Bluetooth: hci6: command 0x041b tx timeout [ 129.434677] Bluetooth: hci0: command 0x040f tx timeout [ 129.435590] Bluetooth: hci1: command 0x040f tx timeout [ 129.499627] Bluetooth: hci7: command 0x040f tx timeout [ 129.500379] Bluetooth: hci4: command 0x040f tx timeout [ 129.562658] Bluetooth: hci6: command 0x040f tx timeout [ 131.418490] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 131.482476] Bluetooth: hci0: command 0x0419 tx timeout [ 131.482998] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 131.483017] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 131.484984] Bluetooth: hci1: command 0x0419 tx timeout [ 131.546646] Bluetooth: hci4: command 0x0419 tx timeout [ 131.546861] Bluetooth: hci7: command 0x0419 tx timeout [ 131.610438] Bluetooth: hci6: command 0x0419 tx timeout [ 136.474983] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 136.666480] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 136.730488] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 141.978503] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 142.427453] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 142.427720] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 144.581931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.594300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.596079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.608343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.614657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.616555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.539756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.547543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.560035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.568743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.599157] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.601073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.714899] Bluetooth: hci2: command 0x0409 tx timeout [ 147.611541] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 147.738500] Bluetooth: hci3: command 0x0409 tx timeout [ 148.762698] Bluetooth: hci2: command 0x041b tx timeout [ 149.788606] Bluetooth: hci3: command 0x041b tx timeout [ 150.371307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.377013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.389865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.464985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.476774] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.479113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.811454] Bluetooth: hci2: command 0x040f tx timeout [ 151.835476] Bluetooth: hci3: command 0x040f tx timeout [ 152.539533] Bluetooth: hci5: command 0x0409 tx timeout [ 152.858737] Bluetooth: hci2: command 0x0419 tx timeout [ 153.882686] Bluetooth: hci3: command 0x0419 tx timeout [ 154.586599] Bluetooth: hci5: command 0x041b tx timeout [ 156.634479] Bluetooth: hci5: command 0x040f tx timeout [ 158.682681] Bluetooth: hci5: command 0x0419 tx timeout [ 182.554353] syz-executor.0 (287) used greatest stack depth: 24008 bytes left [ 185.217776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.220853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.227220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.237887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.250869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.256020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.532285] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.536737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.540303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.547496] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.553667] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.557327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.604514] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.639675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.642992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.662930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.673867] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 185.681111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.290818] Bluetooth: hci0: command 0x0409 tx timeout [ 187.291583] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 187.482469] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 187.612865] Bluetooth: hci6: command 0x0409 tx timeout [ 187.803490] Bluetooth: hci7: command 0x0409 tx timeout [ 189.338439] Bluetooth: hci0: command 0x041b tx timeout [ 189.658629] Bluetooth: hci6: command 0x041b tx timeout [ 189.852439] Bluetooth: hci7: command 0x041b tx timeout [ 190.414032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.420799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.422220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.434480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.438172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.439068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.386702] Bluetooth: hci0: command 0x040f tx timeout [ 191.707446] Bluetooth: hci6: command 0x040f tx timeout [ 191.899866] Bluetooth: hci7: command 0x040f tx timeout [ 192.475667] Bluetooth: hci1: command 0x0409 tx timeout [ 192.539756] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 193.437688] Bluetooth: hci0: command 0x0419 tx timeout [ 193.756049] Bluetooth: hci6: command 0x0419 tx timeout [ 193.946502] Bluetooth: hci7: command 0x0419 tx timeout [ 194.524361] Bluetooth: hci1: command 0x041b tx timeout [ 196.570634] Bluetooth: hci1: command 0x040f tx timeout [ 197.597448] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 198.619448] Bluetooth: hci1: command 0x0419 tx timeout [ 202.394463] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 205.360968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.367286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.374375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.379943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.382240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.383382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.452475] Bluetooth: hci2: command 0x0409 tx timeout [ 208.347548] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 209.242616] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 209.499186] Bluetooth: hci2: command 0x041b tx timeout [ 211.024919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.037667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.044581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.070399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.104655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.105642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.547429] Bluetooth: hci2: command 0x040f tx timeout [ 212.109006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.112276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.129684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.134663] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.137835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.138836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.210534] Bluetooth: hci3: command 0x0409 tx timeout [ 213.594671] Bluetooth: hci2: command 0x0419 tx timeout [ 214.234502] Bluetooth: hci4: command 0x0409 tx timeout [ 214.234778] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 215.259580] Bluetooth: hci3: command 0x041b tx timeout [ 216.285906] Bluetooth: hci4: command 0x041b tx timeout [ 217.029961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.031571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.033217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.045725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.049081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.055829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.306504] Bluetooth: hci3: command 0x040f tx timeout [ 218.330468] Bluetooth: hci4: command 0x040f tx timeout [ 219.162858] Bluetooth: hci5: command 0x0409 tx timeout [ 219.356013] Bluetooth: hci3: command 0x0419 tx timeout [ 220.379482] Bluetooth: hci4: command 0x0419 tx timeout [ 221.212433] Bluetooth: hci5: command 0x041b tx timeout [ 223.259648] Bluetooth: hci5: command 0x040f tx timeout [ 225.306453] Bluetooth: hci5: command 0x0419 tx timeout [ 248.097649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.107123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.133862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.161813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.169791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.173834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.249446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.252533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.254811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.264294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.268799] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 248.273012] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.472430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.475267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.481856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.494790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.504905] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 248.508856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.267562] Bluetooth: hci0: command 0x0409 tx timeout [ 250.330538] Bluetooth: hci6: command 0x0409 tx timeout [ 250.650847] Bluetooth: hci7: command 0x0409 tx timeout [ 252.314548] Bluetooth: hci0: command 0x041b tx timeout [ 252.379025] Bluetooth: hci6: command 0x041b tx timeout [ 252.699169] Bluetooth: hci7: command 0x041b tx timeout [ 254.363467] Bluetooth: hci0: command 0x040f tx timeout [ 254.426846] Bluetooth: hci6: command 0x040f tx timeout [ 254.748440] Bluetooth: hci7: command 0x040f tx timeout [ 254.810548] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 256.410693] Bluetooth: hci0: command 0x0419 tx timeout [ 256.474478] Bluetooth: hci6: command 0x0419 tx timeout [ 256.796952] Bluetooth: hci7: command 0x0419 tx timeout [ 258.060168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.069667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.070619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.075983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.087157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.125007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.250768] Bluetooth: hci1: command 0x0409 tx timeout [ 262.298475] Bluetooth: hci1: command 0x041b tx timeout [ 264.346813] Bluetooth: hci1: command 0x040f tx timeout [ 266.396028] Bluetooth: hci1: command 0x0419 tx timeout [ 267.155429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.157250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.166651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.185086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.194811] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.204631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.274501] Bluetooth: hci2: command 0x0409 tx timeout [ 271.323893] Bluetooth: hci2: command 0x041b tx timeout [ 273.283945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.288813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.293557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.298234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.316894] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.318302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.370470] Bluetooth: hci2: command 0x040f tx timeout [ 273.935994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.940603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.946539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.966670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.977739] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.988769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.354706] Bluetooth: hci3: command 0x0409 tx timeout [ 275.419837] Bluetooth: hci2: command 0x0419 tx timeout [ 276.058510] Bluetooth: hci4: command 0x0409 tx timeout [ 277.402998] Bluetooth: hci3: command 0x041b tx timeout [ 278.108443] Bluetooth: hci4: command 0x041b tx timeout [ 279.451726] Bluetooth: hci3: command 0x040f tx timeout [ 280.154697] Bluetooth: hci4: command 0x040f tx timeout [ 280.603463] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 281.499832] Bluetooth: hci3: command 0x0419 tx timeout [ 282.203427] Bluetooth: hci4: command 0x0419 tx timeout [ 285.531589] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 290.650501] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 295.515535] Bluetooth: hci5: Opcode 0x c03 failed: -110 2023/08/24 11:12:48 executor 5 failed 11 times: executor 5: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 11:12:49 Registers: info registers vcpu 0 RAX=1ffff1100170e483 RBX=ffff88800b872400 RCX=0000000000000100 RDX=ffff888008d99b40 RSI=ffffffff8456fbdc RDI=ffff88800b872418 RBP=ffff88806ce2c290 RSP=ffff88806ce09de0 R8 =0000000000000006 R9 =ffff88806ce2c290 R10=ffff88806ce2c290 R11=0000000000000001 R12=dffffc0000000000 R13=00000044e1cbb580 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8456fbec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d706596f4 CR3=000000002a3c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802e7cf900 RCX=ffffffff8113bd9f RDX=ffff888013600000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8615dc38 RSP=ffff88802e7cf880 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000002 R11=0000000000000000 R12=0000000000000001 R13=ffff88802e7cfc58 R14=0000000000000002 R15=ffffffff8615dc3c RIP=ffffffff8113bd9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdd05c3e540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd0611ff88 CR3=0000000037122000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000