loop3: detected capacity change from 0 to 40 loop5: detected capacity change from 0 to 512 devpts: called with bogus options ------------[ cut here ]------------ WARNING: CPU: 0 PID: 274 at net/bluetooth/hci_conn.c:670 hci_conn_timeout+0x246/0x330 Modules linked in: CPU: 0 PID: 274 Comm: kworker/u5:1 Not tainted 6.4.0-rc2-next-20230518 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: hci1 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x246/0x330 Code: ff e8 8e 18 6e fd 4c 89 e7 e8 36 a4 0a 00 0f b6 e8 e8 7e 18 6e fd 89 ee 4c 89 e7 e8 44 f3 ff ff e9 1a ff ff ff e8 6a 18 6e fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 67 2b a3 fd eb 89 48 RSP: 0018:ffff888006b37ce8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888043402270 RCX: 0000000000000000 RDX: ffff888016eb51c0 RSI: ffffffff83ddd2f6 RDI: 0000000000000005 RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 R10: 00000000ffffffff R11: 1ffffffff0e8b99f R12: ffff888006b37db0 R13: ffff888016db4060 R14: ffff888016db4000 R15: ffff88800e09ec00 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ae3381c009 CR3: 000000000e232000 CR4: 0000000000350ef0 Call Trace: process_one_work+0xa20/0x1660 worker_thread+0x64f/0x12a0 kthread+0x33f/0x440 ret_from_fork+0x2c/0x50 irq event stamp: 6481 hardirqs last enabled at (6491): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (6502): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (6456): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (6451): [] irq_exit_rcu+0x93/0xc0 ---[ end trace 0000000000000000 ]--- syz-executor.3: attempt to access beyond end of device loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 buffer_io_error: 14 callbacks suppressed Buffer I/O error on dev loop3, logical block 10, lost async page write EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. syz-executor.3: attempt to access beyond end of device loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop3, logical block 10, lost async page write loop2: detected capacity change from 0 to 128 Bluetooth: hci1: command 0x0405 tx timeout loop2: detected capacity change from 0 to 128 EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop3: detected capacity change from 0 to 512 loop2: detected capacity change from 0 to 128 EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. Bluetooth: hci1: command 0x0406 tx timeout