Bluetooth: hci6: HCI_REQ-0x0406 Bluetooth: hci4: HCI_REQ-0x0406 Bluetooth: hci2: HCI_REQ-0x0406 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 884 at net/bluetooth/hci_conn.c:646 hci_conn_timeout+0x242/0x330 Modules linked in: CPU: 0 PID: 884 Comm: kworker/u5:10 Not tainted 5.19.0-next-20220811 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Workqueue: hci5 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x242/0x330 Code: ff e8 72 ae 98 fd 4c 89 e7 e8 3a 55 0b 00 0f b6 e8 e8 62 ae 98 fd 89 ee 4c 89 e7 e8 38 a3 0d 00 e9 1a ff ff ff e8 4e ae 98 fd <0f> 0b e9 36 fe ff ff 84 c0 74 93 4c 89 ef e8 1b 72 cb fd eb 89 48 RSP: 0018:ffff888038877ce8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888038882250 RCX: 0000000000000000 RDX: ffff888038823600 RSI: ffffffff83ad01e2 RDI: 0000000000000005 RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000 R10: 00000000fffffffb R11: 0000000000000001 R12: ffff888038877db0 R13: ffff888038886258 R14: ffff88800d65d800 R15: ffff88800dbc2500 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6772cdb7a0 CR3: 000000003f23a000 CR4: 0000000000350ef0 Call Trace: process_one_work+0xa0f/0x1690 worker_thread+0x637/0x1260 Bluetooth: hci7: HCI_REQ-0x0406 Bluetooth: hci3: HCI_REQ-0x0406 kthread+0x2ed/0x3a0 Bluetooth: hci1: HCI_REQ-0x0406 Bluetooth: hci0: HCI_REQ-0x0406 ret_from_fork+0x22/0x30 irq event stamp: 7347 hardirqs last enabled at (7357): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (7368): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (6394): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (6301): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- Bluetooth: hci5: HCI_REQ-0x0406 raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! Bluetooth: hci0: command 0x0406 tx timeout Bluetooth: hci1: command 0x0406 tx timeout Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout Bluetooth: hci7: command 0x0406 tx timeout Bluetooth: hci2: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout Bluetooth: hci6: command 0x0406 tx timeout loop1: detected capacity change from 0 to 40 bio_check_eod: 8 callbacks suppressed syz-executor.1: attempt to access beyond end of device loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 buffer_io_error: 8 callbacks suppressed Buffer I/O error on dev loop1, logical block 10, lost async page write syz-executor.1: attempt to access beyond end of device loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop1, logical block 10, lost async page write loop1: detected capacity change from 0 to 40 loop7: detected capacity change from 0 to 40 syz-executor.1: attempt to access beyond end of device loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop1, logical block 10, lost async page write loop6: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write syz-executor.7: attempt to access beyond end of device loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop7, logical block 10, lost async page write loop1: detected capacity change from 0 to 40 loop0: detected capacity change from 0 to 40 loop6: detected capacity change from 0 to 40 loop4: detected capacity change from 0 to 40 loop3: detected capacity change from 0 to 40 loop7: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write syz-executor.1: attempt to access beyond end of device loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop1, logical block 10, lost async page write syz-executor.7: attempt to access beyond end of device loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop7, logical block 10, lost async page write syz-executor.3: attempt to access beyond end of device loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop3, logical block 10, lost async page write loop7: detected capacity change from 0 to 40 syz-executor.4: attempt to access beyond end of device loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop4, logical block 10, lost async page write loop3: detected capacity change from 0 to 40 loop4: detected capacity change from 0 to 40 loop6: detected capacity change from 0 to 40 loop0: detected capacity change from 0 to 40 loop0: detected capacity change from 0 to 40