Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci6: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout Bluetooth: hci1: command 0x0406 tx timeout ------------[ cut here ]------------ WARNING: CPU: 0 PID: 277 at net/bluetooth/hci_conn.c:619 hci_conn_timeout+0x81/0x130 Modules linked in: CPU: 0 PID: 277 Comm: kworker/u5:0 Not tainted 6.5.0-rc3-next-20230728 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: hci2 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x81/0x130 Code: ee e8 83 6a 64 fd 85 ed 78 1b e8 da 6e 64 fd 31 ff 89 ee e8 71 6a 64 fd 85 ed 74 10 5b 5d 41 5c e9 c4 6e 64 fd e8 bf 6e 64 fd <0f> 0b e8 b8 6e 64 fd 48 8d bb c9 fd ff ff 48 b8 00 00 00 00 00 fc RSP: 0018:ffff8880146efce0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88800ff46270 RCX: 0000000000000000 RDX: ffff8880180ad1c0 RSI: ffffffff83e85781 RDI: 0000000000000005 RBP: 00000000fffffffe R08: 0000000000000005 R09: 0000000000000000 R10: 00000000fffffffe R11: 1ffffffff0e80a03 R12: ffff8880146efd90 R13: ffff888008f49e00 R14: ffff88800f65f000 R15: ffff88800fe5b700 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f41bee52ac0 CR3: 0000000010324000 CR4: 0000000000350ef0 Call Trace: process_one_work+0xabf/0x1770 worker_thread+0x64f/0x12a0 kthread+0x33f/0x440 ret_from_fork+0x2f/0x70 ret_from_fork_asm+0x1b/0x30 irq event stamp: 10429 hardirqs last enabled at (10441): [] console_unlock+0x2a8/0x2e0 hardirqs last disabled at (10452): [] console_unlock+0x28d/0x2e0 softirqs last enabled at (9998): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (9845): [] irq_exit_rcu+0x93/0xc0 ---[ end trace 0000000000000000 ]--- Bluetooth: hci3: command 0x0406 tx timeout loop6: detected capacity change from 0 to 39 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 audit: type=1400 audit(1690708807.975:10): avc: denied { module_load } for pid=4361 comm="syz-executor.0" path=2F6D656D66643A42DB2F89036CDE62CBB534EDBE4C4BA4673F4B29A0F09B3859B55AE11253F547CCF3E902680BCA2896E143DF1CEA8543FB1013FA0316CD05202864656C6574656429 dev="hugetlbfs" ino=16118 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 Invalid ELF header magic: != ELF syz-executor.4 (4376) used greatest stack depth: 23040 bytes left loop6: detected capacity change from 0 to 39 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write Invalid ELF header magic: != ELF loop6: detected capacity change from 0 to 39 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write tmpfs: Bad value for 'mpol' tmpfs: Bad value for 'mpol' loop6: detected capacity change from 0 to 39 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO loop6: detected capacity change from 0 to 39 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 Buffer I/O error on dev loop6, logical block 31, lost async page write loop5: detected capacity change from 0 to 15 loop5: detected capacity change from 0 to 15 Bluetooth: hci7: command 0x0406 tx timeout Bluetooth: hci0: command 0x0406 tx timeout