syzbot


INFO: task hung in hci_req_sync

Status: upstream: reported C repro on 2020/08/28 10:54
Reported-by: syzbot+591c3e8a7725d06fb89f@syzkaller.appspotmail.com
First crash: 1562d, last: 960d
Fix bisection: failed (error log, bisect log)
  
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in hci_req_sync bluetooth C inconclusive 1 1217d 1213d 20/28 fixed on 2021/11/10 00:50
linux-4.19 INFO: task hung in hci_req_sync C error 7 1172d 1562d 0/1 upstream: reported C repro on 2020/08/28 04:41
Last patch testing requests (2)
Created Duration User Patch Repo Result
2023/02/26 23:32 11m retest repro linux-4.14.y report log
2022/11/08 04:30 10m retest repro linux-4.14.y report log
Fix bisection attempts (20)
Created Duration User Patch Repo Result
2022/05/22 10:53 21m bisect fix linux-4.14.y error job log
2022/04/22 06:58 31m bisect fix linux-4.14.y OK (0) job log log
2022/03/23 06:01 31m bisect fix linux-4.14.y OK (0) job log log
2022/02/20 22:30 43m bisect fix linux-4.14.y OK (0) job log log
2022/01/21 21:56 34m bisect fix linux-4.14.y OK (0) job log log
2021/12/22 21:19 35m bisect fix linux-4.14.y OK (0) job log log
2021/11/22 20:47 32m bisect fix linux-4.14.y OK (0) job log log
2021/10/23 20:15 31m bisect fix linux-4.14.y OK (0) job log log
2021/09/22 23:14 31m bisect fix linux-4.14.y OK (0) job log log
2021/08/23 20:05 37m bisect fix linux-4.14.y OK (0) job log log
2021/07/24 19:30 31m bisect fix linux-4.14.y OK (0) job log log
2021/06/24 18:53 32m bisect fix linux-4.14.y OK (0) job log log
2021/05/25 15:26 37m bisect fix linux-4.14.y OK (0) job log log
2021/03/29 09:02 38m bisect fix linux-4.14.y OK (0) job log log
2021/02/27 08:17 42m bisect fix linux-4.14.y OK (0) job log log
2021/01/25 15:51 38m bisect fix linux-4.14.y OK (0) job log log
2020/12/26 15:11 39m bisect fix linux-4.14.y OK (0) job log log
2020/11/26 14:32 39m bisect fix linux-4.14.y OK (0) job log log
2020/10/27 13:53 38m bisect fix linux-4.14.y OK (0) job log log
2020/09/27 13:09 38m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
INFO: task syz-executor199:6753 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  6753   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000af
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6757 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  6757   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b1
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6763 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D30072  6763   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b4
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6805 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  6805   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c9
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6815 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  6815   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 000000000230f914 R08: 000000000230f914 R09: 0000000000000000
R10: 00007ffcc33b5290 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:6841 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  6841   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000db
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7149 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  7149   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000175
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7501 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29344  7501   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000225
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7505 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D29744  7505   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000227
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000
INFO: task syz-executor199:7665 blocked for more than 140 seconds.
      Not tainted 4.14.195-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor199 D30256  7665   6368 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272
 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043
 sock_do_ioctl net/socket.c:974 [inline]
 sock_ioctl+0x2cc/0x4c0 net/socket.c:1071
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x447fd9
RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000277
R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000

Showing all locks held in the system:
1 lock held by khungtaskd/1067:
 #0:  (tasklist_lock){.+.+}, at: [<ffffffff814777f4>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
1 lock held by syz-executor199/6551:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6753:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6757:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6763:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6805:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6815:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6841:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7149:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7501:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7505:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7665:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8069:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8141:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8163:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8237:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8243:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8253:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8255:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8257:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8259:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8261:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8265:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8301:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8303:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8350:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8392:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8702:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8776:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8874:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8890:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8892:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9260:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9892:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9930:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10024:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10156:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10294:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10376:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10378:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10468:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10502:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10566:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10906:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11170:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11340:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11524:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12198:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12596:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12672:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12690:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13288:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13444:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13526:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14140:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14272:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14604:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14754:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14946:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15066:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15148:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15548:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15612:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15670:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15812:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15906:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15910:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16502:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16952:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17478:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17492:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17816:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17834:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17976:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17992:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18040:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18060:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18754:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18756:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18776:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19140:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19584:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19892:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20672:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21864:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22046:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22438:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23764:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23958:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25030:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25140:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25374:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25804:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26546:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27010:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27064:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27246:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27262:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27724:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28312:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28354:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28356:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28366:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28636:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28642:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28662:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28674:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28686:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28738:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28846:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29100:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29532:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29534:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29538:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30148:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30394:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30932:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31280:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31510:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31698:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31704:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31706:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31956:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32066:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32116:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32180:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32432:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32540:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32646:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/483:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/589:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1093:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1297:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1759:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1761:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1765:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2107:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2205:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2207:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2347:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3262:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3278:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3521:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3633:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3808:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4066:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4196:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4362:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4519:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4543:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4807:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4841:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4909:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5005:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5007:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5197:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5849:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5901:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6200:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6282:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6771:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6951:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7171:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7403:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7461:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7485:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7493:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7497:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7503:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7951:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8035:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8129:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8223:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8437:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8537:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8559:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8663:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8881:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8947:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8949:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9023:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9311:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9711:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9723:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9829:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9847:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10557:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12065:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12161:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12347:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12405:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12647:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12787:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12881:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13089:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13221:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13379:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13409:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13543:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13673:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13863:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14099:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14453:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15331:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15375:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16531:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16645:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17557:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17623:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17869:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18065:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18261:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18265:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18417:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18831:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18885:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18939:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18943:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19391:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19399:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19507:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19519:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19525:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19529:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19655:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19723:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19959:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19987:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19995:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21119:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21191:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21199:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21201:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21231:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21251:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21659:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22059:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22087:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22317:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23523:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24675:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24825:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25015:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25639:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25989:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26585:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27461:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27591:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/27999:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28031:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28401:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28447:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/28851:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29065:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29147:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29481:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29555:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/29703:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30229:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30285:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30287:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30469:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30507:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30687:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/30977:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31319:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31483:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/31521:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32383:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/32689:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/402:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1084:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1244:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1312:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1428:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/1696:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2144:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2176:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2334:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2429:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2434:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2454:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2560:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2590:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2683:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/2703:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/3945:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4161:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4598:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4750:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/4796:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5060:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5650:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/5722:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6149:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6315:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6802:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/6854:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7340:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7366:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7576:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7642:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7840:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/7958:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8042:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8420:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/8474:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9160:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9468:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9502:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9514:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9554:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9558:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9594:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9630:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9672:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/9942:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10144:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10354:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10462:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10472:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10550:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10558:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10614:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10816:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10830:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10846:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10872:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/10874:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11150:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11176:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11676:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11740:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/11868:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12310:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12426:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12530:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12566:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12598:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12662:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12696:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12704:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12722:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12826:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/12852:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13240:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13468:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13502:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13518:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13756:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13800:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13822:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13846:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13918:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13926:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/13928:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14248:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14348:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14446:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14610:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14678:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/14866:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15158:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15294:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15302:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15524:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15570:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15594:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/15654:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16016:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16090:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16162:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16598:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/16636:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17592:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17676:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17694:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/17932:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18074:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18144:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18190:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18218:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18438:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18722:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18914:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18944:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/18966:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19142:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19164:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19166:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19262:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19284:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19324:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19386:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19416:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19452:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19628:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19834:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19890:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19894:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/19966:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20126:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20212:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20374:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20402:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20464:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20558:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20772:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20808:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/20922:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21004:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21076:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21078:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21544:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21588:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/21972:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22444:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22522:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22574:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22656:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22700:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22778:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/22786:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23216:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23240:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23378:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23600:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/23708:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24486:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24556:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24562:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24616:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24744:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24840:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/24886:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25100:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25144:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25292:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/25834:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26122:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26182:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26290:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26326:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26416:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26530:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284
1 lock held by syz-executor199/26532:
 #0:  (&hdev->req_lock){+.+.}, at: [<ffffffff85ba909d>] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1067 Comm: khungtaskd Not tainted 4.14.195-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
 watchdog+0x5b9/0xb40 kernel/hung_task.c:274
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 3644 Comm: systemd-journal Not tainted 4.14.195-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888094562140 task.stack: ffff888094568000
RIP: 0010:___bpf_prog_run+0xb0/0x5a70 kernel/bpf/core.c:959
RSP: 0018:ffff88809456fa48 EFLAGS: 00000246
RAX: 1ffffffff0d5e6f1 RBX: dffffc0000000000 RCX: ffff88809456fe68
RDX: 0000000000000000 RSI: ffffc900018fa030 RDI: ffffffff86af3788
RBP: ffff88809456fb58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff86af36e0
R13: 1ffff110128adf50 R14: ffffc900018fa138 R15: 0000000000000015
FS:  00007f96629298c0(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f965fcfe000 CR3: 0000000094594000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
Code: 03 83 e2 07 0f b6 04 18 38 d0 7f 08 84 c0 0f 85 10 42 00 00 45 0f b6 3e 4a 8d 3c fd e0 36 af 86 48 89 f8 48 c1 e8 03 80 3c 18 00 <0f> 85 ea 41 00 00 43 ff 24 fc e8 b1 d3 f6 ff 48 c7 c6 60 36 af 

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/28 10:53 linux-4.14.y d7e78d08fa77 816e0689 .config console log report syz C ci2-linux-4-14
2021/04/25 14:02 linux-4.14.y cf256fbcbe34 36c88236 .config console log report info ci2-linux-4-14 INFO: task hung in hci_req_sync
2021/01/28 08:00 linux-4.14.y 2d2791fce891 eefc07f2 .config console log report info ci2-linux-4-14 INFO: task hung in hci_req_sync
* Struck through repros no longer work on HEAD.