syz-executor.6: attempt to access beyond end of device
loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop6, logical block 10, lost async page write
Bluetooth: hci6: HCI_REQ-0x0406
------------[ cut here ]------------
WARNING: CPU: 0 PID: 874 at net/bluetooth/hci_conn.c:646 hci_conn_timeout+0x242/0x330
Modules linked in:
CPU: 0 PID: 874 Comm: kworker/u5:6 Not tainted 6.0.0-rc1-next-20220818 #1
kworker/u5:6[874] cmdline:
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Workqueue: hci5 hci_conn_timeout
RIP: 0010:hci_conn_timeout+0x242/0x330
Code: ff e8 a2 59 98 fd 4c 89 e7 e8 2a 56 0b 00 0f b6 e8 e8 92 59 98 fd 89 ee 4c 89 e7 e8 28 a4 0d 00 e9 1a ff ff ff e8 7e 59 98 fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 db 46 cb fd eb 89 48
RSP: 0018:ffff88803839fce8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88800f6b2250 RCX: 0000000000000000
RDX: ffff88801a61b600 RSI: ffffffff83ad4842 RDI: 0000000000000005
RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffffb R11: 0000000000000001 R12: ffff88803839fdb0
R13: ffff8880370f1060 R14: ffff8880370f1000 R15: ffff88800df04300
FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555555d39c98 CR3: 000000001d6ea000 CR4: 0000000000350ef0
Call Trace:
process_one_work+0xa0f/0x1690
worker_thread+0x637/0x1260
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 3237
hardirqs last enabled at (3249): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (3260): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (2922): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (2913): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
Bluetooth: hci5: HCI_REQ-0x0406
syz-executor.1: attempt to access beyond end of device
loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop1, logical block 10, lost async page write
syz-executor.2: attempt to access beyond end of device
loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop2, logical block 10, lost async page write
loop6: detected capacity change from 0 to 40
loop1: detected capacity change from 0 to 40
loop2: detected capacity change from 0 to 40
loop5: detected capacity change from 0 to 40
loop7: detected capacity change from 0 to 40
loop4: detected capacity change from 0 to 256
loop0: detected capacity change from 0 to 256
FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
syz-executor.2: attempt to access beyond end of device
loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop2, logical block 10, lost async page write
syz-executor.5: attempt to access beyond end of device
loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop5, logical block 10, lost async page write
syz-executor.7: attempt to access beyond end of device
loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop7, logical block 10, lost async page write
loop3: detected capacity change from 0 to 256
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop6: detected capacity change from 0 to 40
loop1: detected capacity change from 0 to 40
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop2: detected capacity change from 0 to 256
FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
syz-executor.7 (6786) used greatest stack depth: 23568 bytes left
syz-executor.5 (6787) used greatest stack depth: 23464 bytes left
loop3: detected capacity change from 0 to 256
loop2: detected capacity change from 0 to 256
sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
sr 1:0:0:0: [sr0] tag#0 CDB: Read(16) 88 d7 38 8e 5b 00 00 6f f8 4a 11 d5
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
sr 1:0:0:0: [sr0] tag#0 CDB: Read(16) 88 d7 38 8e 5b 00 00 6f f8 4a 11 d5
audit: type=1400 audit(1660819961.234:12): avc: denied { read } for pid=6795 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
sr 1:0:0:0: [sr0] tag#0 CDB: Read(16) 88 d7 38 8e 5b 00 00 6f f8 4a 11 d5
Bluetooth: hci6: command 0x0406 tx timeout
loop3: detected capacity change from 0 to 256
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
Bluetooth: hci5: command 0x0406 tx timeout
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop2: detected capacity change from 0 to 256
loop0: detected capacity change from 0 to 256
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
syz-executor.6 (6919) used greatest stack depth: 23192 bytes left
audit: type=1400 audit(1660819968.067:13): avc: denied { watch_reads } for pid=6959 comm="syz-executor.3" path="/syzkaller-testdir385597529/syzkaller.Q2Ven9/129/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
loop4: detected capacity change from 0 to 512
EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
EXT4-fs (loop4): unmounting filesystem.