syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in hci_req_sync

Status: upstream: reported C repro on 2020/08/28 04:41
Reported-by: syzbot+6a392033807765fe2d01@syzkaller.appspotmail.com
First crash: 1334d, last: 945d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in hci_req_sync bluetooth C inconclusive 1 989d 985d 20/26 fixed on 2021/11/10 00:50
linux-4.14 INFO: task hung in hci_req_sync C error 3 732d 1334d 0/1 upstream: reported C repro on 2020/08/28 10:54
▶ ▼ Fix bisection attempts (11)
Created Duration User Patch Repo Result
2021/10/21 20:18 14m bisect fix linux-4.19.y error job log (0)
2021/09/21 19:27 42m bisect fix linux-4.19.y job log (0) log
2021/08/07 13:12 39m bisect fix linux-4.19.y job log (0) log
2021/07/08 12:37 35m bisect fix linux-4.19.y job log (0) log
2021/04/29 00:55 48m bisect fix linux-4.19.y job log (0) log
2021/03/29 21:37 40m bisect fix linux-4.19.y job log (0) log
2021/02/27 20:56 41m bisect fix linux-4.19.y job log (0) log
2020/12/26 11:17 41m bisect fix linux-4.19.y job log (0) log
2020/11/26 09:53 39m bisect fix linux-4.19.y job log (0) log
2020/10/27 09:15 38m bisect fix linux-4.19.y job log (0) log
2020/09/27 08:32 40m bisect fix linux-4.19.y job log (0) log

Sample crash report:
INFO: task syz-executor826:6666 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29032  6666   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000
R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6758 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29032  6758   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000081
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6792 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D28608  6792   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: e8 fc bc 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000092
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6802 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29552  6802   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000097
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6816 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29024  6816   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000
R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:6990 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29024  6990   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000f5
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7074 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29104  7074   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000011f
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7134 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29480  7134   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000013d
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7470 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29552  7470   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001e5
R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000
INFO: task syz-executor826:7492 blocked for more than 140 seconds.
      Not tainted 4.19.142-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor826 D29032  7492   6467 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310
 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048
 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950
 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x447fd9
Code: Bad RIP value.
RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9
RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003
RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000
R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000

Showing all locks held in the system:
1 lock held by khungtaskd/1090:
 #0: 000000002ac4eae1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440
1 lock held by in:imklog/6107:
1 lock held by syz-executor826/6467:
 #0: 00000000977dd588 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1823 [inline]
 #0: 00000000977dd588 (&rq->lock){-.-.}, at: __schedule+0x1f9/0x2040 kernel/sched/core.c:3455
1 lock held by syz-executor826/6530:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6666:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6758:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6792:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6802:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6816:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6990:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7074:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7134:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7470:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7492:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7498:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7556:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7628:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7990:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8084:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8144:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8156:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8192:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8194:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8196:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8198:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8218:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8228:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8261:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8387:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8405:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8481:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8511:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8529:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8541:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8617:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8623:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8629:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8645:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8659:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8857:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9019:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9037:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9043:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9099:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9115:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9117:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9125:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9157:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9241:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9245:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9253:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9289:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9335:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9337:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9469:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9471:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9473:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9475:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9687:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9787:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9833:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9879:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9947:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9959:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9969:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10083:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10091:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10093:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10099:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10103:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10177:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10187:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10219:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10231:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10235:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10249:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10253:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10277:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10283:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10323:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10331:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10355:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10365:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10407:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10435:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10465:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10537:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10581:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10607:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10663:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10787:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10863:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10899:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10903:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10923:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10929:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10955:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11039:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11177:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11407:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11443:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11447:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11537:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11775:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11843:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12163:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12175:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12261:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12345:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12399:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12527:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12631:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12635:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12655:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12677:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12679:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12997:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13011:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13019:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13037:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13079:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13147:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13199:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13205:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13213:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13245:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13251:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13253:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13257:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13487:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13499:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13517:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13567:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13577:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13693:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13705:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13761:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13893:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13935:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14039:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14081:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14097:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14107:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14465:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14539:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14613:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14677:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15129:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15147:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15209:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15357:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15415:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15449:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15649:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15747:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16053:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16063:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16081:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16101:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16123:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16135:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16211:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16385:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16433:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16463:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16541:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16567:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16651:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16689:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16841:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17081:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17095:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17115:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17117:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17137:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17151:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17349:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17695:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18113:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18123:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18319:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18333:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18403:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18405:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18459:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18467:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18485:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18487:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18675:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18679:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19051:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19161:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19247:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19265:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19269:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19273:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19407:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19501:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19521:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19669:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19783:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19801:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19903:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20531:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20735:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20889:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20891:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21119:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21205:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21373:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21389:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21431:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21449:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21569:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21755:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21779:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22113:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22117:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22161:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22253:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22267:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22273:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22687:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22791:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23119:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23155:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23231:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23335:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23363:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23403:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23429:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23573:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/23603:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/24527:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/24869:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25415:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25491:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25497:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25613:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25699:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25725:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25735:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25885:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26195:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26235:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26269:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26483:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26503:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26553:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26609:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26619:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/26755:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27065:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27087:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27345:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27551:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27735:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27795:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/27921:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/28593:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/28747:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29159:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29209:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29273:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29299:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29417:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29527:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/29671:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30201:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30245:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30675:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30847:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30907:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/30931:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31029:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31195:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31367:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31399:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31529:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31591:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31673:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/31705:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32111:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32685:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32691:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/32723:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/393:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/395:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/491:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/565:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/671:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1185:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1328:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1353:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1431:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1465:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1624:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/1630:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2100:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2104:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2244:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2270:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2280:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2692:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2763:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2936:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/2978:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3048:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3255:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3555:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3601:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3705:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3738:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3804:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3874:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/3908:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4070:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4130:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4228:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4294:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4316:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4468:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/4951:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5023:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5195:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5245:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5391:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5441:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5475:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5477:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5777:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5779:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5955:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/5997:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6097:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6228:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6484:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6538:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/6962:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7054:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7130:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7210:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7314:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7318:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7798:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7822:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7864:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7924:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7936:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7966:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/7986:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8042:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8242:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8298:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8434:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8470:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8596:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/8762:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9026:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9176:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9412:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9642:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9710:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9872:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9890:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9900:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/9902:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10094:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10280:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10380:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10538:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10586:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10782:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/10790:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11260:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11578:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/11676:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12110:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12128:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12290:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12350:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/12414:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13140:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13182:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/13994:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14116:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14202:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14236:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14324:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14382:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14424:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14512:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14518:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14702:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14728:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/14812:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15180:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15264:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15618:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15708:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15724:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15798:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/15980:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16120:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16308:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16624:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/16908:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/17054:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18246:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18306:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18430:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18706:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18780:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18926:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/18952:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19100:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19124:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19286:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19560:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19590:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/19634:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20430:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20568:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20584:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/20932:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21010:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21374:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21712:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21800:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/21868:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22192:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22414:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22694:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22698:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22858:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/22960:
 #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278
1 lock held by syz-executor826/25099:
 #0: 00000000977dd588 (&rq->lock){-.-.}, at: idle_balance kernel/sched/fair.c:9701 [inline]
 #0: 00000000977dd588 (&rq->lock){-.-.}, at: pick_next_task_fair+0x556/0x1570 kernel/sched/fair.c:6840

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 1090 Comm: khungtaskd Not tainted 4.19.142-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x991/0xe60 kernel/hung_task.c:287
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3697 Comm: systemd-journal Not tainted 4.19.142-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:cache_alloc_refill+0x78/0x340 mm/slab.c:3009
Code: 48 63 44 24 18 85 c9 49 8b ac c7 08 01 00 00 0f 85 b3 02 00 00 48 85 ed 0f 84 aa 02 00 00 48 83 7d 78 00 48 8b 85 88 00 00 00 <75> 13 48 85 c0 0f 84 cf 01 00 00 8b 10 85 d2 0f 84 c5 01 00 00 48
RSP: 0018:ffff8880946f7d68 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 00000000006000c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007
RBP: ffff8880aa00b600 R08: ffffffff8b40f3b0 R09: 0000000000000000
R10: 0000000000000007 R11: 00000000a2cc2d2c R12: 0000000000000004
R13: ffff8880aa00ab40 R14: ffff8880ae736f88 R15: ffff8880aa00ab40
FS:  00007f5b0cb7b8c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5b09fa4000 CR3: 000000009472c000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ____cache_alloc mm/slab.c:3132 [inline]
 __do_cache_alloc mm/slab.c:3354 [inline]
 slab_alloc mm/slab.c:3389 [inline]
 kmem_cache_alloc+0x346/0x370 mm/slab.c:3557
 getname_flags+0xce/0x590 fs/namei.c:140
 user_path_at_empty+0x2a/0x50 fs/namei.c:2609
 user_path_at include/linux/namei.h:57 [inline]
 do_faccessat+0x248/0x7a0 fs/open.c:397
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5b0be379c7
Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc1a7a0d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
RAX: ffffffffffffffda RBX: 00007ffc1a7a3ca0 RCX: 00007f5b0be379c7
RDX: 00007f5b0c8a8a00 RSI: 0000000000000000 RDI: 0000559f3f9d39a3
RBP: 00007ffc1a7a0dc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ffc1a7a3ca0 R15: 00007ffc1a7a12b0

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/28 08:32 linux-4.19.y f6d5cb9e2c06 816e0689 .config console log report syz C ci2-linux-4-19
2021/08/22 16:44 linux-4.19.y 59456c9cc40c b599f2fc .config console log report info ci2-linux-4-19 INFO: task hung in hci_req_sync
2021/06/08 12:36 linux-4.19.y 1722257b8ece 5c2fe346 .config console log report info ci2-linux-4-19 INFO: task hung in hci_req_sync
2021/05/09 19:37 linux-4.19.y 3c8c23092588 bc5434be .config console log report info ci2-linux-4-19 INFO: task hung in hci_req_sync
2021/01/28 20:13 linux-4.19.y c4ff839de17f 7df34f59 .config console log report info ci2-linux-4-19 INFO: task hung in hci_req_sync
2021/01/07 19:48 linux-4.19.y 4143d798313f c104d4a3 .config console log report info ci2-linux-4-19
2020/08/28 04:41 linux-4.19.y f6d5cb9e2c06 816e0689 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.