program: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001340)='f2fs_truncate_data_blocks_range\x00'}, 0x10) pipe(&(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0408"], 0x7) (rerun: 32) [ 58.487500][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.494318][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.497723][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.514623][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.518506][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.523084][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.526116][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.529408][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.532508][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.536656][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.540328][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.544304][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.547435][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.550724][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.554125][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.557309][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.560605][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.563824][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.567021][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.571175][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.574359][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.577384][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.580491][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.583692][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.587781][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.593297][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.596938][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.600321][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.603579][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.606889][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.610258][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.613340][ T4662] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 58.618797][ T4662] ------------[ cut here ]------------ [ 58.620924][ T4662] WARNING: CPU: 0 PID: 4662 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290 [ 58.624473][ T4662] Modules linked in: [ 58.625967][ T4662] CPU: 0 UID: 0 PID: 4662 Comm: kworker/u5:1 Not tainted 6.13.0-rc3-syzkaller #0 [ 58.629471][ T4662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.633333][ T4662] Workqueue: hci0 hci_conn_timeout [ 58.635310][ T4662] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 58.637343][ T4662] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 50 57 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 36 57 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 58.644233][ T4662] RSP: 0018:ffffc9000e537b90 EFLAGS: 00010293 [ 58.646338][ T4662] RAX: ffffffff8aba1cba RBX: ffff888042c748e8 RCX: ffff888000b58000 [ 58.649266][ T4662] RDX: 0000000000000000 RSI: 00000000ffffffe0 RDI: 0000000000000000 [ 58.651963][ T4662] RBP: 00000000ffffffe0 R08: ffffffff8aba1c23 R09: 1ffff1100858e802 [ 58.654786][ T4662] R10: dffffc0000000000 R11: ffffed100858e803 R12: dffffc0000000000 [ 58.657551][ T4662] R13: ffffffff8168ee96 R14: ffff888042c74000 R15: 0000000001400000 [ 58.660559][ T4662] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.663837][ T4662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.666342][ T4662] CR2: 00007fcbc214c538 CR3: 000000001f612000 CR4: 0000000000352ef0 [ 58.669437][ T4662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.672425][ T4662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.675364][ T4662] Call Trace: [ 58.676629][ T4662] [ 58.677743][ T4662] ? __warn+0x165/0x4d0 [ 58.679359][ T4662] ? hci_conn_timeout+0xfb/0x290 [ 58.681217][ T4662] ? report_bug+0x2b3/0x500 [ 58.682978][ T4662] ? hci_conn_timeout+0xfb/0x290 [ 58.684835][ T4662] ? handle_bug+0x60/0x90 [ 58.686419][ T4662] ? exc_invalid_op+0x1a/0x50 [ 58.688272][ T4662] ? asm_exc_invalid_op+0x1a/0x20 [ 58.690181][ T4662] ? process_scheduled_works+0x976/0x1840 [ 58.692297][ T4662] ? hci_conn_timeout+0x63/0x290 [ 58.694084][ T4662] ? hci_conn_timeout+0xfa/0x290 [ 58.695930][ T4662] ? hci_conn_timeout+0xfb/0x290 [ 58.697777][ T4662] process_scheduled_works+0xa66/0x1840 [ 58.699971][ T4662] ? __pfx_process_scheduled_works+0x10/0x10 [ 58.702251][ T4662] ? assign_work+0x364/0x3d0 [ 58.703978][ T4662] worker_thread+0x870/0xd30 [ 58.705684][ T4662] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 58.707874][ T4662] ? __kthread_parkme+0x169/0x1d0 [ 58.709818][ T4662] ? __pfx_worker_thread+0x10/0x10 [ 58.711686][ T4662] kthread+0x2f0/0x390 [ 58.713218][ T4662] ? __pfx_worker_thread+0x10/0x10 [ 58.715113][ T4662] ? __pfx_kthread+0x10/0x10 [ 58.716830][ T4662] ret_from_fork+0x4b/0x80 [ 58.718599][ T4662] ? __pfx_kthread+0x10/0x10 [ 58.720355][ T4662] ret_from_fork_asm+0x1a/0x30 [ 58.722232][ T4662] [ 58.723412][ T4662] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.726066][ T4662] CPU: 0 UID: 0 PID: 4662 Comm: kworker/u5:1 Not tainted 6.13.0-rc3-syzkaller #0 [ 58.729370][ T4662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.733223][ T4662] Workqueue: hci0 hci_conn_timeout [ 58.735047][ T4662] Call Trace: [ 58.736256][ T4662] [ 58.737367][ T4662] dump_stack_lvl+0x241/0x360 [ 58.739020][ T4662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.740864][ T4662] ? __pfx__printk+0x10/0x10 [ 58.742568][ T4662] ? vscnprintf+0x5d/0x90 [ 58.744163][ T4662] panic+0x349/0x880 [ 58.745490][ T4662] ? __warn+0x174/0x4d0 [ 58.746778][ T4662] ? __pfx_panic+0x10/0x10 [ 58.748136][ T4662] ? ret_from_fork_asm+0x1a/0x30 [ 58.749906][ T4662] __warn+0x344/0x4d0 [ 58.751244][ T4662] ? hci_conn_timeout+0xfb/0x290 [ 58.752937][ T4662] report_bug+0x2b3/0x500 [ 58.754396][ T4662] ? hci_conn_timeout+0xfb/0x290 [ 58.756174][ T4662] handle_bug+0x60/0x90 [ 58.757695][ T4662] exc_invalid_op+0x1a/0x50 [ 58.759248][ T4662] asm_exc_invalid_op+0x1a/0x20 [ 58.760976][ T4662] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 58.762920][ T4662] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 50 57 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 36 57 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 58.769480][ T4662] RSP: 0018:ffffc9000e537b90 EFLAGS: 00010293 [ 58.771740][ T4662] RAX: ffffffff8aba1cba RBX: ffff888042c748e8 RCX: ffff888000b58000 [ 58.774777][ T4662] RDX: 0000000000000000 RSI: 00000000ffffffe0 RDI: 0000000000000000 [ 58.777707][ T4662] RBP: 00000000ffffffe0 R08: ffffffff8aba1c23 R09: 1ffff1100858e802 [ 58.780565][ T4662] R10: dffffc0000000000 R11: ffffed100858e803 R12: dffffc0000000000 [ 58.783463][ T4662] R13: ffffffff8168ee96 R14: ffff888042c74000 R15: 0000000001400000 [ 58.786387][ T4662] ? process_scheduled_works+0x976/0x1840 [ 58.788490][ T4662] ? hci_conn_timeout+0x63/0x290 [ 58.790301][ T4662] ? hci_conn_timeout+0xfa/0x290 [ 58.792209][ T4662] process_scheduled_works+0xa66/0x1840 [ 58.794223][ T4662] ? __pfx_process_scheduled_works+0x10/0x10 [ 58.796449][ T4662] ? assign_work+0x364/0x3d0 [ 58.798138][ T4662] worker_thread+0x870/0xd30 [ 58.799822][ T4662] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 58.802079][ T4662] ? __kthread_parkme+0x169/0x1d0 [ 58.803928][ T4662] ? __pfx_worker_thread+0x10/0x10 [ 58.805802][ T4662] kthread+0x2f0/0x390 [ 58.807294][ T4662] ? __pfx_worker_thread+0x10/0x10 [ 58.809151][ T4662] ? __pfx_kthread+0x10/0x10 [ 58.810841][ T4662] ret_from_fork+0x4b/0x80 [ 58.812552][ T4662] ? __pfx_kthread+0x10/0x10 [ 58.814237][ T4662] ret_from_fork_asm+0x1a/0x30 [ 58.816071][ T4662] [ 58.817488][ T4662] Kernel Offset: disabled [ 58.819095][ T4662] Rebooting in 86400 seconds..