Bluetooth: hci6: Ignoring connect complete event for invalid link type
Bluetooth: hci6: SCO packet for unknown connection handle 0
Bluetooth: hci2: link tx timeout
Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 289, name: kworker/u5:5
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
3 locks held by kworker/u5:5/289:
#0: ffff88801a1a6938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770
#1: ffff888016b07d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770
#2: ffffffff8560c3e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480
CPU: 0 PID: 289 Comm: kworker/u5:5 Not tainted 6.5.0-rc3-next-20230724 #1
Bluetooth: hci6: Ignoring connect complete event for invalid link type
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: hci2 hci_tx_work
FAT-fs (loop3): bogus number of FAT sectors
Call Trace:
FAT-fs (loop3): Can't find a valid FAT filesystem
dump_stack_lvl+0xc1/0xf0
__might_resched+0x2f9/0x510
__mutex_lock+0x9e/0x1a30
hci_cmd_sync_submit+0x3b/0x2d0
hci_cmd_sync_queue+0x7b/0xb0
hci_disconnect+0x1c2/0x450
__check_timeout+0x2cc/0x480
hci_tx_work+0x7cb/0x1a70
process_one_work+0xabf/0x1770
worker_thread+0x64f/0x12a0
kthread+0x33f/0x440
ret_from_fork+0x2f/0x70
ret_from_fork_asm+0x1b/0x30
=============================
[ BUG: Invalid wait context ]
6.5.0-rc3-next-20230724 #1 Tainted: G W
-----------------------------
kworker/u5:5/289 is trying to lock:
ffff88801f3fc9b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2d0
other info that might help us debug this:
context-{4:4}
3 locks held by kworker/u5:5/289:
#0: ffff88801a1a6938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x99d/0x1770
#1: ffff888016b07d90 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x9d0/0x1770
#2: ffffffff8560c3e0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x171/0x480
stack backtrace:
CPU: 0 PID: 289 Comm: kworker/u5:5 Tainted: G W 6.5.0-rc3-next-20230724 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: hci2 hci_tx_work
Call Trace:
dump_stack_lvl+0x91/0xf0
__lock_acquire+0x1605/0x6340
lock_acquire+0x19a/0x4c0
__mutex_lock+0x12a/0x1a30
hci_cmd_sync_submit+0x3b/0x2d0
hci_cmd_sync_queue+0x7b/0xb0
hci_disconnect+0x1c2/0x450
__check_timeout+0x2cc/0x480
hci_tx_work+0x7cb/0x1a70
process_one_work+0xabf/0x1770
worker_thread+0x64f/0x12a0
kthread+0x33f/0x440
ret_from_fork+0x2f/0x70
loop2: detected capacity change from 0 to 40
ret_from_fork_asm+0x1b/0x30
Bluetooth: hci2: link tx timeout
Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
Bluetooth: hci2: Ignoring connect complete event for invalid link type
Bluetooth: hci6: SCO packet for unknown connection handle 0
Bluetooth: hci6: ACL packet for unknown connection handle 0
Bluetooth: hci6: Ignoring connect complete event for invalid link type
Bluetooth: hci6: SCO packet for unknown connection handle 0
Bluetooth: hci6: ACL packet for unknown connection handle 0
Bluetooth: hci6: Ignoring connect complete event for invalid link type
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 5942 Comm: syz-executor.1 Tainted: G W 6.5.0-rc3-next-20230724 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xc1/0xf0
should_fail_ex+0x4b4/0x5b0
should_failslab+0x9/0x20
__kmem_cache_alloc_node+0x66/0x310
__kmalloc+0x4d/0x160
memcg_list_lru_alloc+0x24b/0xb30
kmem_cache_alloc_lru+0x14e/0x680
mqueue_alloc_inode+0x27/0x50
alloc_inode+0x63/0x240
new_inode+0x25/0x1f0
mqueue_get_inode+0x31/0xdf0
mqueue_fill_super+0x113/0x210
vfs_get_super+0xf0/0x280
mqueue_get_tree+0xf6/0x140
vfs_get_tree+0x92/0x360
fc_mount+0x17/0xd0
mq_init_ns+0x442/0x640
copy_ipcs+0x3a4/0x640
create_new_namespaces+0x210/0xb30
unshare_nsproxy_namespaces+0xc1/0x200
ksys_unshare+0x44d/0x8e0
__x64_sys_unshare+0x31/0x40
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x6e/0xd8
RIP: 0033:0x7f18092c3b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1806839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f18093d6f60 RCX: 00007f18092c3b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040080
RBP: 00007f18068391d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007ffc7550f02f R14: 00007f1806839300 R15: 0000000000022000
loop3: detected capacity change from 0 to 40
FAT-fs (loop3): bogus number of FAT sectors
FAT-fs (loop3): Can't find a valid FAT filesystem
Bluetooth: hci6: SCO packet for unknown connection handle 0
Bluetooth: hci6: ACL packet for unknown connection handle 0
Bluetooth: hci6: SCO packet for unknown connection handle 0
Bluetooth: hci6: ACL packet for unknown connection handle 0
I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev loop3, logical block 1, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=2, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 2, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=3, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 3, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=4, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 4, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=5, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 5, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=6, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 6, async page read
systemd-udevd: attempt to access beyond end of device
loop3: rw=0, sector=7, nr_sectors = 1 limit=0
Buffer I/O error on dev loop3, logical block 7, async page read
Bluetooth: hci2: command 0x0406 tx timeout