INFO: task hung in hci_req_sync

14 views

Skip to first unread message

syzbot

unread,

Aug 28, 2020, 12:41:16 AM8/28/20

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: f6d5cb9e Linux 4.19.142
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12549fee900000
kernel config: https://syzkaller.appspot.com/x/.config?x=30067df04d3254aa
dashboard link: https://syzkaller.appspot.com/bug?extid=6a392033807765fe2d01
compiler: gcc (GCC) 10.1.0-syz 20200507

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6a3920...@syzkaller.appspotmail.com

INFO: task syz-executor.1:31366 blocked for more than 140 seconds.
Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1 D27912 31366 6463 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c
INFO: task syz-executor.1:31470 blocked for more than 140 seconds.
Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1 D28648 31470 6463 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c
INFO: task syz-executor.1:31579 blocked for more than 140 seconds.
Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1 D28648 31579 6463 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c
INFO: task syz-executor.1:31684 blocked for more than 140 seconds.
Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1 D28096 31684 6463 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c
INFO: task syz-executor.1:31803 blocked for more than 140 seconds.
Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1 D28648 31803 6463 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c

Showing all locks held in the system:
1 lock held by khungtaskd/1090:
#0: 00000000b178efa3 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440
2 locks held by khugepaged/1097:
1 lock held by systemd-udevd/3708:
1 lock held by in:imklog/6147:
#0: 00000000210f23c7 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
2 locks held by agetty/6162:
#0: 00000000ba172e34 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
#1: 00000000f30fb298 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154
2 locks held by syz-executor.5/6471:
3 locks held by kworker/u4:4/31070:
1 lock held by syz-executor.1/31214:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor.1/31366:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor.1/31470:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor.1/31579:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor.1/31684:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor.1/31803:
#0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Aug 28, 2020, 4:33:22 AM8/28/20

to syzkaller...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: f6d5cb9e Linux 4.19.142
git tree: linux-4.19.y

console output: https://syzkaller.appspot.com/x/log.txt?x=10dd25d5900000

kernel config: https://syzkaller.appspot.com/x/.config?x=30067df04d3254aa
dashboard link: https://syzkaller.appspot.com/bug?extid=6a392033807765fe2d01
compiler: gcc (GCC) 10.1.0-syz 20200507

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=140723b6900000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11e7d741900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6a3920...@syzkaller.appspotmail.com

INFO: task syz-executor826:6666 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29032 6666 6467 0x00000000

Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:501 [inline]
do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
__do_sys_ioctl fs/ioctl.c:712 [inline]
__se_sys_ioctl fs/ioctl.c:710 [inline]
__x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000
R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6758 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29032 6758 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000081
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6792 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D28608 6792 6467 0x00000000

RIP: 0033:0x447fd9
Code: e8 fc bc 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000092
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6802 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29552 6802 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000097
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6816 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29024 6816 6467 0x00000000

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29024 6990 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000f5
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7074 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29104 7074 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000011f
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7134 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29480 7134 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000013d
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7470 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29552 7470 6467 0x00000000

RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001e5
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7492 blocked for more than 140 seconds.

Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor826 D29032 7492 6467 0x00000000

Showing all locks held in the system:
1 lock held by khungtaskd/1090:

#0: 000000002ac4eae1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440
1 lock held by in:imklog/6107:
1 lock held by syz-executor826/6467:
#0: 00000000977dd588 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1823 [inline]
#0: 00000000977dd588 (&rq->lock){-.-.}, at: __schedule+0x1f9/0x2040 kernel/sched/core.c:3455
1 lock held by syz-executor826/6530:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6666:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6758:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6792:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6802:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6816:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6990:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7074:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7134:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7470:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7492:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7498:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7556:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7628:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7990:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8084:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8144:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8156:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8192:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8194:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8196:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8198:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8218:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8228:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8261:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8387:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8405:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8481:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8511:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8529:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8541:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8617:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8623:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8629:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8645:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8659:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8857:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9019:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9037:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9043:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9099:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9115:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9117:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9125:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9157:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9241:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9245:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9253:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9289:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9335:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9337:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9469:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9471:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9473:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9475:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9687:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9787:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9833:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9879:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9947:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9959:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9969:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10083:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10091:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10093:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10099:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10103:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10177:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10187:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10219:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10231:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10235:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10249:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10253:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10277:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10283:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10323:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10331:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10355:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10365:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10407:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10435:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10465:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10537:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10581:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10607:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10663:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10787:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10863:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10899:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10903:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10923:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10929:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10955:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11039:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11177:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11407:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11443:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11447:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11537:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11775:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11843:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12163:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12175:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12261:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12345:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12399:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12527:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12631:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12635:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12655:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12677:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12679:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12997:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13011:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13019:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13037:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13079:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13147:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13199:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13205:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13213:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13245:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13251:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13253:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13257:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13487:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13499:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13517:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13567:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13577:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13693:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13705:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13761:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13893:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13935:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14039:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14081:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14097:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14107:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14465:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14539:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14613:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14677:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15129:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15147:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15209:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15357:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15415:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15449:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15649:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15747:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16053:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16063:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16081:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16101:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16123:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16135:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16211:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16385:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16433:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16463:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16541:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16567:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16651:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16689:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16841:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17081:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17095:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17115:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17117:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17137:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17151:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17349:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17695:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18113:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18123:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18319:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18333:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18403:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18405:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18459:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18467:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18485:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18487:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18675:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18679:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19051:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19161:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19247:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19265:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19269:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19273:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19407:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19501:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19521:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19669:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19783:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19801:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19903:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20531:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20735:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20889:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20891:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21119:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21205:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21373:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21389:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21431:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21449:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21569:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21755:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21779:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22113:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22117:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22161:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22253:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22267:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22273:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22687:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22791:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23119:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23155:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23231:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23335:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23363:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23403:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23429:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23573:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23603:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/24527:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/24869:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25415:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25491:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25497:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25613:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25699:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25725:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25735:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25885:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26195:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26235:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26269:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26483:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26503:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26553:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26609:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26619:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26755:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27065:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27087:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27345:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27551:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27735:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27795:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27921:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/28593:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/28747:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29159:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29209:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29273:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29299:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29417:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29527:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29671:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30201:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30245:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30675:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30847:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30907:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30931:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31029:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31195:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31367:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31399:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31529:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31591:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31673:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31705:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32111:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32685:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32691:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32723:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/393:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/395:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/491:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/565:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/671:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1185:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1328:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1353:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1431:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1465:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1624:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1630:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2100:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2104:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2244:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2270:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2280:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2692:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2763:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2936:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2978:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3048:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3255:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3555:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3601:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3705:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3738:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3804:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3874:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3908:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4070:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4130:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4228:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4294:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4316:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4468:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4951:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5023:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5195:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5245:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5391:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5441:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5475:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5477:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5777:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5779:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5955:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5997:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6097:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6228:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6484:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6538:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6962:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7054:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7130:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7210:
#0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held

syzbot

unread,

Aug 28, 2020, 6:54:24 AM8/28/20

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: d7e78d08 Linux 4.14.195
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=15cd8299900000
kernel config: https://syzkaller.appspot.com/x/.config?x=6608b656f49b4e8c
dashboard link: https://syzkaller.appspot.com/bug?extid=591c3e8a7725d06fb89f

compiler: gcc (GCC) 10.1.0-syz 20200507

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=175f401e900000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16c88afe900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+591c3e...@syzkaller.appspotmail.com

INFO: task syz-executor199:6753 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 6753 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000af
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6757 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 6757 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b1
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6763 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D30072 6763 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b4
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6805 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 6805 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c9
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6815 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 6815 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003

RBP: 000000000230f914 R08: 000000000230f914 R09: 0000000000000000
R10: 00007ffcc33b5290 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6841 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 6841 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000db
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7149 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 7149 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000175
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7501 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29344 7501 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000225
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7505 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D29744 7505 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000227
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7665 blocked for more than 140 seconds.
Not tainted 4.14.195-syzkaller #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

syz-executor199 D30256 7665 6368 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
sock_do_ioctl net/socket.c:974 [inline]
sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000277
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000

Showing all locks held in the system:

1 lock held by khungtaskd/1067:
#0: (tasklist_lock){.+.+}, at: [<ffffffff814777f4>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
1 lock held by syz-executor199/6551:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/6753:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/6757:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6763:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6805:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6815:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6841:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/7149:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7501:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7505:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7665:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8069:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8141:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8163:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8237:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8243:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8253:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8255:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8257:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8259:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8261:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8265:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8301:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8303:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8350:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8392:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8702:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8776:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8874:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8890:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8892:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9260:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9892:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9930:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10024:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10156:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10294:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10376:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10378:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10468:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10502:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10566:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10906:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11170:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11340:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/11524:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12198:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12596:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12672:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12690:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/13288:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13444:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/13526:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14140:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14272:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/14604:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/14754:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14946:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15066:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15148:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/15548:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/15612:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/15670:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15812:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15906:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15910:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16502:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16952:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17478:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17492:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17816:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17834:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17976:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17992:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18040:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18060:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18754:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18756:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18776:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19140:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19584:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19892:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20672:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21864:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/22046:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22438:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23764:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23958:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25030:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25140:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25374:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25804:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26546:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27010:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27064:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27246:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27262:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27724:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28312:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/28354:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28356:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28366:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28636:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28642:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28662:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28674:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28686:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28738:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28846:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29100:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29532:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29534:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29538:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30148:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30394:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/30932:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31280:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31510:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31698:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31704:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31706:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31956:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/32066:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32116:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32180:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32432:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32540:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32646:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/483:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/589:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1093:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1297:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1759:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1761:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/1765:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2107:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/2205:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2207:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2347:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3262:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3278:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3521:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3633:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3808:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4066:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4196:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4362:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/4519:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4543:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/4807:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4841:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/4909:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5005:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/5007:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5197:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5849:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5901:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6200:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6282:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6771:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6951:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/7171:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7403:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7461:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7485:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7493:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7497:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7503:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7951:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8035:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8129:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8223:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8437:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8537:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/8559:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8663:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8881:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8947:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8949:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9023:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9311:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9711:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9723:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9829:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9847:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10557:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12065:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12161:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12347:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12405:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12647:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12787:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12881:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13089:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13221:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13379:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/13409:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13543:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13673:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/13863:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14099:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14453:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15331:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15375:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16531:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16645:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17557:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17623:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17869:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18065:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/18261:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18265:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18417:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18831:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18885:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18939:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18943:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19391:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19399:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19507:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/19519:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/19525:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19529:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19655:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19723:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19959:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19987:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19995:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/21119:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/21191:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21199:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21201:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21231:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/21251:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21659:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/22059:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22087:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22317:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23523:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24675:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24825:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25015:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25639:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25989:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26585:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27461:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27591:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27999:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28031:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28401:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28447:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28851:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29065:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29147:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29481:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29555:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29703:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30229:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30285:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30287:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30469:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/30507:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30687:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30977:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/31319:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/31483:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31521:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32383:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/32689:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/402:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1084:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/1244:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/1312:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1428:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1696:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2144:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2176:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/2334:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2429:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2434:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2454:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/2560:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2590:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/2683:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2703:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3945:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4161:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4598:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4750:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4796:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5060:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5650:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5722:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/6149:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6315:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6802:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6854:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7340:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7366:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7576:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7642:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7840:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7958:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8042:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8420:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8474:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9160:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9468:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9502:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9514:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9554:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9558:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9594:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9630:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9672:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9942:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10144:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10354:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10462:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10472:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10550:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10558:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10614:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10816:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10830:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10846:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10872:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/10874:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11150:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/11176:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/11676:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/11740:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/11868:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12310:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12426:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12530:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

1 lock held by syz-executor199/12566:

#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12598:
#0: (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor1

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches

Reply all

Reply to author

Forward

0 new messages