Warning: Permanently added '10.128.10.60' (ED25519) to the list of known hosts. [ 103.762516][ T3568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.771437][ T3568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.779216][ T3568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.788082][ T3568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.796239][ T3568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.803534][ T3568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 105.884838][ T3568] Bluetooth: hci0: command tx timeout [ 107.964254][ T3568] Bluetooth: hci0: command tx timeout executing program [ 110.044281][ T3568] Bluetooth: hci0: command tx timeout [ 112.124241][ T3568] Bluetooth: hci0: command tx timeout executing program executing program executing program executing program executing program executing program executing program executing program [ 148.899412][ T3568] Bluetooth: hci0: link tx timeout [ 148.904784][ T3568] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.912527][ T3568] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 148.921884][ T3568] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3568, name: kworker/u5:1 [ 148.931134][ T3568] preempt_count: 0, expected: 0 [ 148.936028][ T3568] RCU nest depth: 1, expected: 0 [ 148.940978][ T3568] 3 locks held by kworker/u5:1/3568: [ 148.946414][ T3568] #0: ffff88807b865938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 148.956890][ T3568] #1: ffffc90003bdfd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 148.968355][ T3568] #2: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 148.977950][ T3568] CPU: 1 PID: 3568 Comm: kworker/u5:1 Not tainted 6.1.90-syzkaller #0 [ 148.986115][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 148.996175][ T3568] Workqueue: hci0 hci_tx_work [ 149.000867][ T3568] Call Trace: [ 149.004148][ T3568] [ 149.007079][ T3568] dump_stack_lvl+0x1e3/0x2cb [ 149.011769][ T3568] ? nf_tcp_handle_invalid+0x642/0x642 [ 149.017235][ T3568] ? panic+0x764/0x764 [ 149.021312][ T3568] __might_resched+0x5cb/0x780 [ 149.026079][ T3568] ? __wake_up_klogd+0x1c/0x100 [ 149.030930][ T3568] ? __might_sleep+0xb0/0xb0 [ 149.035534][ T3568] ? _printk+0xd1/0x111 [ 149.039711][ T3568] ? vprintk_emit+0x622/0x740 [ 149.044404][ T3568] ? printk_sprint+0x490/0x490 [ 149.049192][ T3568] ? reacquire_held_locks+0x660/0x660 [ 149.054573][ T3568] __mutex_lock+0xbd/0xd80 [ 149.058992][ T3568] ? _printk+0xd1/0x111 [ 149.063148][ T3568] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 149.068614][ T3568] ? mutex_lock_nested+0x10/0x10 [ 149.073560][ T3568] ? hci_conn_get_phy+0x370/0x370 [ 149.078590][ T3568] hci_cmd_sync_submit+0x3b/0x2e0 [ 149.083623][ T3568] hci_disconnect+0xe6/0x2c0 [ 149.088220][ T3568] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 149.094203][ T3568] ? hci_sched_esco+0x32e/0x430 [ 149.099063][ T3568] __check_timeout+0x333/0x460 [ 149.103841][ T3568] ? __check_timeout+0x181/0x460 [ 149.108783][ T3568] hci_tx_work+0x138b/0x1ec0 [ 149.113419][ T3568] ? hci_cmd_work+0x660/0x660 [ 149.118112][ T3568] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 149.124010][ T3568] ? do_raw_spin_unlock+0x137/0x8a0 [ 149.129213][ T3568] ? process_one_work+0x7a9/0x11d0 [ 149.134342][ T3568] process_one_work+0x8a9/0x11d0 [ 149.139308][ T3568] ? worker_detach_from_pool+0x260/0x260 [ 149.144948][ T3568] ? _raw_spin_lock_irqsave+0x120/0x120 [ 149.150517][ T3568] ? kthread_data+0x4e/0xc0 [ 149.155062][ T3568] ? wq_worker_running+0x97/0x190 [ 149.160114][ T3568] worker_thread+0xa47/0x1200 [ 149.164815][ T3568] ? __sched_text_start+0x8/0x8 [ 149.169696][ T3568] kthread+0x28d/0x320 [ 149.173770][ T3568] ? worker_clr_flags+0x190/0x190 [ 149.178814][ T3568] ? kthread_blkcg+0xd0/0xd0 [ 149.183414][ T3568] ret_from_fork+0x1f/0x30 [ 149.187853][ T3568] [ 149.191237][ T3568] [ 149.193578][ T3568] ============================= [ 149.198432][ T3568] [ BUG: Invalid wait context ] [ 149.203280][ T3568] 6.1.90-syzkaller #0 Tainted: G W [ 149.209778][ T3568] ----------------------------- [ 149.214644][ T3568] kworker/u5:1/3568 is trying to lock: [ 149.220095][ T3568] ffff888028a349b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0 [ 149.230212][ T3568] other info that might help us debug this: [ 149.236099][ T3568] context-{4:4} [ 149.239576][ T3568] 3 locks held by kworker/u5:1/3568: [ 149.244855][ T3568] #0: ffff88807b865938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 149.255228][ T3568] #1: ffffc90003bdfd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 149.266636][ T3568] #2: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 149.276123][ T3568] stack backtrace: [ 149.279834][ T3568] CPU: 1 PID: 3568 Comm: kworker/u5:1 Tainted: G W 6.1.90-syzkaller #0 [ 149.289466][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 149.299539][ T3568] Workqueue: hci0 hci_tx_work [ 149.304239][ T3568] Call Trace: [ 149.307516][ T3568] [ 149.310448][ T3568] dump_stack_lvl+0x1e3/0x2cb [ 149.315142][ T3568] ? nf_tcp_handle_invalid+0x642/0x642 [ 149.320620][ T3568] ? panic+0x764/0x764 [ 149.324704][ T3568] __lock_acquire+0x14b1/0x1f80 [ 149.329584][ T3568] lock_acquire+0x1f8/0x5a0 [ 149.334103][ T3568] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 149.339321][ T3568] ? read_lock_is_recursive+0x10/0x10 [ 149.344703][ T3568] ? __wake_up_klogd+0x1c/0x100 [ 149.349569][ T3568] ? __might_sleep+0xb0/0xb0 [ 149.354177][ T3568] ? _printk+0xd1/0x111 [ 149.358349][ T3568] ? vprintk_emit+0x622/0x740 [ 149.363046][ T3568] ? printk_sprint+0x490/0x490 [ 149.367821][ T3568] ? reacquire_held_locks+0x660/0x660 [ 149.373217][ T3568] __mutex_lock+0x132/0xd80 [ 149.377725][ T3568] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 149.382929][ T3568] ? _printk+0xd1/0x111 [ 149.387099][ T3568] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 149.392299][ T3568] ? mutex_lock_nested+0x10/0x10 [ 149.397260][ T3568] ? hci_conn_get_phy+0x370/0x370 [ 149.402313][ T3568] hci_cmd_sync_submit+0x3b/0x2e0 [ 149.407361][ T3568] hci_disconnect+0xe6/0x2c0 [ 149.411958][ T3568] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 149.417962][ T3568] ? hci_sched_esco+0x32e/0x430 [ 149.422824][ T3568] __check_timeout+0x333/0x460 [ 149.427586][ T3568] ? __check_timeout+0x181/0x460 [ 149.432520][ T3568] hci_tx_work+0x138b/0x1ec0 [ 149.437122][ T3568] ? hci_cmd_work+0x660/0x660 [ 149.441805][ T3568] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 149.447701][ T3568] ? do_raw_spin_unlock+0x137/0x8a0 [ 149.452903][ T3568] ? process_one_work+0x7a9/0x11d0 [ 149.458019][ T3568] process_one_work+0x8a9/0x11d0 [ 149.462965][ T3568] ? worker_detach_from_pool+0x260/0x260 [ 149.468604][ T3568] ? _raw_spin_lock_irqsave+0x120/0x120 [ 149.474179][ T3568] ? kthread_data+0x4e/0xc0 [ 149.478701][ T3568] ? wq_worker_running+0x97/0x190 [ 149.483753][ T3568] worker_thread+0xa47/0x1200 [ 149.488456][ T3568] ? __sched_text_start+0x8/0x8 [ 149.493333][ T3568] kthread+0x28d/0x320 [ 149.497411][ T3568] ? worker_clr_flags+0x190/0x190 [ 149.502445][ T3568] ? kthread_blkcg+0xd0/0xd0 [ 149.507038][ T3568] ret_from_fork+0x1f/0x30 [ 149.511470][ T3568] [ 151.564223][ T3568] Bluetooth: hci0: command 0x0406 tx timeout executing program [ 153.901029][ T48] Bluetooth: hci0: link tx timeout [ 153.906200][ T48] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.913822][ T48] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 153.923147][ T48] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 48, name: kworker/u5:0 [ 153.932201][ T48] preempt_count: 0, expected: 0 [ 153.937093][ T48] RCU nest depth: 1, expected: 0 [ 153.942059][ T48] INFO: lockdep is turned off. [ 153.946843][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Tainted: G W 6.1.90-syzkaller #0 [ 153.956307][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 153.966379][ T48] Workqueue: hci0 hci_tx_work [ 153.971066][ T48] Call Trace: [ 153.974340][ T48] [ 153.977265][ T48] dump_stack_lvl+0x1e3/0x2cb [ 153.981961][ T48] ? nf_tcp_handle_invalid+0x642/0x642 [ 153.987455][ T48] ? panic+0x764/0x764 [ 153.991524][ T48] ? console_unlock+0x281/0x7c0 [ 153.996385][ T48] ? console_unlock+0x781/0x7c0 [ 154.001255][ T48] ? console_unlock+0x281/0x7c0 [ 154.006120][ T48] __might_resched+0x5cb/0x780 [ 154.010892][ T48] ? __wake_up_klogd+0x1c/0x100 [ 154.015742][ T48] ? __might_sleep+0xb0/0xb0 [ 154.020333][ T48] ? _printk+0xd1/0x111 [ 154.024494][ T48] ? vprintk_emit+0x622/0x740 [ 154.029181][ T48] ? printk_sprint+0x490/0x490 [ 154.033955][ T48] ? lock_repin_lock+0x410/0x410 [ 154.038909][ T48] __mutex_lock+0xbd/0xd80 [ 154.043331][ T48] ? _printk+0xd1/0x111 [ 154.047489][ T48] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 154.052690][ T48] ? mutex_lock_nested+0x10/0x10 [ 154.057632][ T48] ? rcu_is_watching+0x11/0xb0 [ 154.062396][ T48] ? hci_conn_get_phy+0x370/0x370 [ 154.067426][ T48] hci_cmd_sync_submit+0x3b/0x2e0 [ 154.072457][ T48] hci_disconnect+0xe6/0x2c0 [ 154.077051][ T48] ? lock_acquire+0xfa/0x5a0 [ 154.081648][ T48] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 154.087631][ T48] ? hci_sched_esco+0x32e/0x430 [ 154.092497][ T48] ? rcu_is_watching+0x11/0xb0 [ 154.097262][ T48] __check_timeout+0x333/0x460 [ 154.102044][ T48] ? __check_timeout+0x181/0x460 [ 154.107002][ T48] hci_tx_work+0xce2/0x1ec0 [ 154.111516][ T48] ? do_raw_spin_unlock+0x137/0x8a0 [ 154.116805][ T48] ? hci_cmd_work+0x660/0x660 [ 154.121492][ T48] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 154.127393][ T48] ? do_raw_spin_unlock+0x137/0x8a0 [ 154.132594][ T48] ? read_word_at_a_time+0xe/0x20 [ 154.137621][ T48] ? process_one_work+0x7a9/0x11d0 [ 154.142733][ T48] process_one_work+0x8a9/0x11d0 [ 154.147723][ T48] ? worker_detach_from_pool+0x260/0x260 [ 154.153379][ T48] ? _raw_spin_lock_irqsave+0x120/0x120 [ 154.158944][ T48] ? kthread_data+0x4e/0xc0 [ 154.163470][ T48] ? wq_worker_running+0x97/0x190 [ 154.168525][ T48] worker_thread+0xa47/0x1200 [ 154.173223][ T48] ? __sched_text_start+0x8/0x8 [ 154.178101][ T48] kthread+0x28d/0x320 [ 154.182186][ T48] ? worker_clr_flags+0x190/0x190 [ 154.187216][ T48] ? kthread_blkcg+0xd0/0xd0 [ 154.191808][ T48] ret_from_fork+0x1f/0x30 [ 154.196240][ T48] [ 154.199419][ T48] Bluetooth: hci0: link tx timeout [ 154.204578][ T48] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.284214][ T3568] Bluetooth: hci0: command 0x0406 tx timeout executing program