netlink: 5280 bytes leftover after parsing attributes in process `syz-executor.1'. Bluetooth: hci7: HCI_REQ-0x0406 Bluetooth: hci5: HCI_REQ-0x0406 ------------[ cut here ]------------ Bluetooth: hci1: HCI_REQ-0x0406 WARNING: CPU: 0 PID: 318 at net/bluetooth/hci_conn.c:646 hci_conn_timeout+0x242/0x330 Bluetooth: hci2: HCI_REQ-0x0406 Modules linked in: Bluetooth: hci3: HCI_REQ-0x0406 CPU: 0 PID: 318 Comm: kworker/u5:6 Not tainted 6.0.0-rc1-next-20220822 #1 Bluetooth: hci4: HCI_REQ-0x0406 kworker/u5:6[318] cmdline: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Workqueue: hci0 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x242/0x330 Code: ff e8 12 7f 98 fd 4c 89 e7 e8 2a 56 0b 00 0f b6 e8 e8 02 7f 98 fd 89 ee 4c 89 e7 e8 28 a4 0d 00 e9 1a ff ff ff e8 ee 7e 98 fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 0b 65 cb fd eb 89 48 RSP: 0018:ffff88804334fce8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88802213a250 RCX: 0000000000000000 RDX: ffff88801867b600 RSI: ffffffff83ad33b2 RDI: 0000000000000005 RBP: 00000000fffffffe R08: 0000000000000005 R09: 0000000000000000 R10: 00000000fffffffe R11: 0000000000000001 R12: ffff88804334fdb0 R13: ffff88802213c258 R14: ffff88800ef8c800 R15: ffff888017ddfc00 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555e34c58 CR3: 000000000d842000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600 Call Trace: process_one_work+0xa0f/0x1690 worker_thread+0x637/0x1260 kthread+0x2ed/0x3a0 ret_from_fork+0x22/0x30 irq event stamp: 7005 hardirqs last enabled at (7015): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (7028): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (6212): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (6203): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- Bluetooth: hci0: HCI_REQ-0x0406 9pnet_fd: Insufficient options for proto=fd sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.1 not setting count and/or reply_len properly netlink: 5280 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1326 audit(1661168136.571:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8747 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1290e5fb19 code=0x0 Bluetooth: hci0: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout Bluetooth: hci2: command 0x0406 tx timeout Bluetooth: hci1: command 0x0406 tx timeout Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci7: command 0x0406 tx timeout audit: type=1326 audit(1661168137.406:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8747 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1290e5fb19 code=0x0 sr 1:0:0:0: [sr0] tag#0 unaligned transfer blk_print_req_error: 46 callbacks suppressed I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 buffer_io_error: 46 callbacks suppressed Buffer I/O error on dev sr0, logical block 0, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 1, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 2, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 3, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 4, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 5, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 6, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 7, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 0, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 1, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer Bluetooth: hci0: command 0x0409 tx timeout sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer syz-executor.4 (8896) used greatest stack depth: 22640 bytes left device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode Bluetooth: hci0: command 0x0409 tx timeout device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode Bluetooth: hci0: command 0x0409 tx timeout