Bluetooth: hci0: command 0x0406 tx timeout Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci1: command 0x0406 tx timeout ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 INFO: task syz-executor.4:9853 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28232 9853 8467 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1015 [inline] __mutex_lock+0x4ba/0x1190 kernel/locking/mutex.c:1083 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1098 blkdev_put+0x25/0x470 fs/block_dev.c:1839 blkdev_close+0x88/0xd0 fs/block_dev.c:1888 __fput+0x249/0x7f0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x185/0x1e0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x413/0x4e0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41926b Code: Bad RIP value. RSP: 002b:00007ffd8740ad60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b RDX: 0000001b2cb200c0 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2cb200c4 R10: 0011c42846873da3 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000000ba91 INFO: task systemd-udevd:9856 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D25992 9856 4708 0x00000100 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 io_schedule+0x1c/0x70 kernel/sched/core.c:5181 wait_on_page_bit_common mm/filemap.c:1123 [inline] wait_on_page_bit+0x1c1/0x360 mm/filemap.c:1156 wait_on_page_locked include/linux/pagemap.h:531 [inline] wait_on_page_read mm/filemap.c:2795 [inline] do_read_cache_page.part.5+0x32b/0xc90 mm/filemap.c:2834 do_read_cache_page include/linux/pagemap.h:102 [inline] read_cache_page+0x40/0x70 mm/filemap.c:2924 read_mapping_page include/linux/pagemap.h:402 [inline] read_dev_sector+0xbd/0x430 block/partition-generic.c:671 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x109/0xd30 block/partitions/acorn.c:366 check_partition+0x317/0x5e0 block/partitions/check.c:167 rescan_partitions+0x19e/0x8c0 block/partition-generic.c:535 bdev_disk_changed+0x120/0x170 fs/block_dev.c:1435 __blkdev_get+0xcbe/0x1200 fs/block_dev.c:1561 blkdev_get+0x271/0x8c0 fs/block_dev.c:1627 blkdev_open+0x19f/0x200 fs/block_dev.c:1788 do_dentry_open+0x3f1/0x1020 fs/open.c:796 vfs_open+0x9a/0xc0 fs/open.c:902 do_last fs/namei.c:3421 [inline] path_openat+0x925/0x2900 fs/namei.c:3537 do_filp_open+0x177/0x250 fs/namei.c:3567 do_sys_open+0x1dc/0x350 fs/open.c:1085 __do_sys_open fs/open.c:1103 [inline] __se_sys_open fs/open.c:1098 [inline] __x64_sys_open+0x79/0xb0 fs/open.c:1098 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff7d7c19840 Code: Bad RIP value. RSP: 002b:00007fffc0897cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00005615742205c0 RCX: 00007ff7d7c19840 RDX: 0000561572621fe3 RSI: 00000000000a0800 RDI: 000056157421ff10 RBP: 00007fffc0897e30 R08: 0000561572621670 R09: 0000000000000010 R10: 0000561572621d0c R11: 0000000000000246 R12: 00007fffc0897d80 R13: 0000561574220df0 R14: 0000000000000003 R15: 000000000000000e INFO: task systemd-udevd:9864 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26488 9864 4708 0x00000100 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 io_schedule+0x1c/0x70 kernel/sched/core.c:5181 wait_on_page_bit_common mm/filemap.c:1123 [inline] wait_on_page_bit+0x1c1/0x360 mm/filemap.c:1156 wait_on_page_locked include/linux/pagemap.h:531 [inline] wait_on_page_read mm/filemap.c:2795 [inline] do_read_cache_page.part.5+0x32b/0xc90 mm/filemap.c:2834 do_read_cache_page include/linux/pagemap.h:102 [inline] read_cache_page+0x40/0x70 mm/filemap.c:2924 read_mapping_page include/linux/pagemap.h:402 [inline] read_dev_sector+0xbd/0x430 block/partition-generic.c:671 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x109/0xd30 block/partitions/acorn.c:366 check_partition+0x317/0x5e0 block/partitions/check.c:167 rescan_partitions+0x19e/0x8c0 block/partition-generic.c:535 bdev_disk_changed+0x120/0x170 fs/block_dev.c:1435 __blkdev_get+0xcbe/0x1200 fs/block_dev.c:1561 blkdev_get+0x271/0x8c0 fs/block_dev.c:1627 blkdev_open+0x19f/0x200 fs/block_dev.c:1788 do_dentry_open+0x3f1/0x1020 fs/open.c:796 vfs_open+0x9a/0xc0 fs/open.c:902 do_last fs/namei.c:3421 [inline] path_openat+0x925/0x2900 fs/namei.c:3537 do_filp_open+0x177/0x250 fs/namei.c:3567 do_sys_open+0x1dc/0x350 fs/open.c:1085 __do_sys_open fs/open.c:1103 [inline] __se_sys_open fs/open.c:1098 [inline] __x64_sys_open+0x79/0xb0 fs/open.c:1098 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff7d7c19840 Code: Bad RIP value. RSP: 002b:00007fffc08982a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000056157421a860 RCX: 00007ff7d7c19840 RDX: 0000561572621fe3 RSI: 00000000000a0800 RDI: 0000561574222870 RBP: 00007fffc0898420 R08: 0000561572621670 R09: 0000000000000010 R10: 0000561572621d0c R11: 0000000000000246 R12: 00007fffc0898370 R13: 000056157421a6e0 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.0:9881 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D28232 9881 8469 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1015 [inline] __mutex_lock+0x4ba/0x1190 kernel/locking/mutex.c:1083 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1098 blkdev_put+0x25/0x470 fs/block_dev.c:1839 blkdev_close+0x88/0xd0 fs/block_dev.c:1888 __fput+0x249/0x7f0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x185/0x1e0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x413/0x4e0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41926b Code: Bad RIP value. RSP: 002b:00007fff5f09e780 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b RDX: 0000001b2cd200c0 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2cd200c4 R10: 001552714fed40b2 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000000bb09 INFO: task systemd-udevd:9905 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D25992 9905 4708 0x00000100 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 io_schedule+0x1c/0x70 kernel/sched/core.c:5181 wait_on_page_bit_common mm/filemap.c:1123 [inline] wait_on_page_bit+0x1c1/0x360 mm/filemap.c:1156 wait_on_page_locked include/linux/pagemap.h:531 [inline] wait_on_page_read mm/filemap.c:2795 [inline] do_read_cache_page.part.5+0x32b/0xc90 mm/filemap.c:2834 do_read_cache_page include/linux/pagemap.h:102 [inline] read_cache_page+0x40/0x70 mm/filemap.c:2924 read_mapping_page include/linux/pagemap.h:402 [inline] read_dev_sector+0xbd/0x430 block/partition-generic.c:671 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x109/0xd30 block/partitions/acorn.c:366 check_partition+0x317/0x5e0 block/partitions/check.c:167 rescan_partitions+0x19e/0x8c0 block/partition-generic.c:535 bdev_disk_changed+0x120/0x170 fs/block_dev.c:1435 __blkdev_get+0xcbe/0x1200 fs/block_dev.c:1561 blkdev_get+0x271/0x8c0 fs/block_dev.c:1627 blkdev_open+0x19f/0x200 fs/block_dev.c:1788 do_dentry_open+0x3f1/0x1020 fs/open.c:796 vfs_open+0x9a/0xc0 fs/open.c:902 do_last fs/namei.c:3421 [inline] path_openat+0x925/0x2900 fs/namei.c:3537 do_filp_open+0x177/0x250 fs/namei.c:3567 do_sys_open+0x1dc/0x350 fs/open.c:1085 __do_sys_open fs/open.c:1103 [inline] __se_sys_open fs/open.c:1098 [inline] __x64_sys_open+0x79/0xb0 fs/open.c:1098 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff7d7c19840 Code: Bad RIP value. RSP: 002b:00007fffc08982a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000056157420bdc0 RCX: 00007ff7d7c19840 RDX: 0000561572621fe3 RSI: 00000000000a0800 RDI: 000056157421f4f0 RBP: 00007fffc0898420 R08: 0000561572621670 R09: 0000000000000010 R10: 0000561572621d0c R11: 0000000000000246 R12: 00007fffc0898370 R13: 000056157421ec20 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.2:9906 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D28232 9906 8464 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1015 [inline] __mutex_lock+0x4ba/0x1190 kernel/locking/mutex.c:1083 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1098 blkdev_put+0x25/0x470 fs/block_dev.c:1839 blkdev_close+0x88/0xd0 fs/block_dev.c:1888 __fput+0x249/0x7f0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x185/0x1e0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x413/0x4e0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41926b Code: Bad RIP value. RSP: 002b:00007fff8974dd30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b RDX: 0000001b2c9200c0 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c9200c4 R10: 001857f14f7e89b9 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000000bb6e INFO: task systemd-udevd:9931 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D25992 9931 4708 0x00000100 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 io_schedule+0x1c/0x70 kernel/sched/core.c:5181 wait_on_page_bit_common mm/filemap.c:1123 [inline] wait_on_page_bit+0x1c1/0x360 mm/filemap.c:1156 wait_on_page_locked include/linux/pagemap.h:531 [inline] wait_on_page_read mm/filemap.c:2795 [inline] do_read_cache_page.part.5+0x32b/0xc90 mm/filemap.c:2834 do_read_cache_page include/linux/pagemap.h:102 [inline] read_cache_page+0x40/0x70 mm/filemap.c:2924 read_mapping_page include/linux/pagemap.h:402 [inline] read_dev_sector+0xbd/0x430 block/partition-generic.c:671 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x109/0xd30 block/partitions/acorn.c:366 check_partition+0x317/0x5e0 block/partitions/check.c:167 rescan_partitions+0x19e/0x8c0 block/partition-generic.c:535 bdev_disk_changed+0x120/0x170 fs/block_dev.c:1435 __blkdev_get+0xcbe/0x1200 fs/block_dev.c:1561 blkdev_get+0x271/0x8c0 fs/block_dev.c:1627 blkdev_open+0x19f/0x200 fs/block_dev.c:1788 do_dentry_open+0x3f1/0x1020 fs/open.c:796 vfs_open+0x9a/0xc0 fs/open.c:902 do_last fs/namei.c:3421 [inline] path_openat+0x925/0x2900 fs/namei.c:3537 do_filp_open+0x177/0x250 fs/namei.c:3567 do_sys_open+0x1dc/0x350 fs/open.c:1085 __do_sys_open fs/open.c:1103 [inline] __se_sys_open fs/open.c:1098 [inline] __x64_sys_open+0x79/0xb0 fs/open.c:1098 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff7d7c19840 Code: Bad RIP value. RSP: 002b:00007fffc08982a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000056157421eef0 RCX: 00007ff7d7c19840 RDX: 0000561572621fe3 RSI: 00000000000a0800 RDI: 000056157420bdc0 RBP: 00007fffc0898420 R08: 0000561572621670 R09: 0000000000000010 R10: 0000561572621d0c R11: 0000000000000246 R12: 00007fffc0898370 R13: 000056157421d880 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.1:9941 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28232 9941 8471 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1015 [inline] __mutex_lock+0x4ba/0x1190 kernel/locking/mutex.c:1083 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1098 blkdev_put+0x25/0x470 fs/block_dev.c:1839 blkdev_close+0x88/0xd0 fs/block_dev.c:1888 __fput+0x249/0x7f0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x185/0x1e0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x413/0x4e0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41926b Code: Bad RIP value. RSP: 002b:00007ffc365e67f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b RDX: 0000001b2d0200c0 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d0200c4 R10: 001c4af068b245c9 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000000bbf3 INFO: task systemd-udevd:9942 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D25992 9942 4708 0x00000100 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 io_schedule+0x1c/0x70 kernel/sched/core.c:5181 wait_on_page_bit_common mm/filemap.c:1123 [inline] wait_on_page_bit+0x1c1/0x360 mm/filemap.c:1156 wait_on_page_locked include/linux/pagemap.h:531 [inline] wait_on_page_read mm/filemap.c:2795 [inline] do_read_cache_page.part.5+0x32b/0xc90 mm/filemap.c:2834 do_read_cache_page include/linux/pagemap.h:102 [inline] read_cache_page+0x40/0x70 mm/filemap.c:2924 read_mapping_page include/linux/pagemap.h:402 [inline] read_dev_sector+0xbd/0x430 block/partition-generic.c:671 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x109/0xd30 block/partitions/acorn.c:366 check_partition+0x317/0x5e0 block/partitions/check.c:167 rescan_partitions+0x19e/0x8c0 block/partition-generic.c:535 bdev_disk_changed+0x120/0x170 fs/block_dev.c:1435 __blkdev_get+0xcbe/0x1200 fs/block_dev.c:1561 blkdev_get+0x271/0x8c0 fs/block_dev.c:1627 blkdev_open+0x19f/0x200 fs/block_dev.c:1788 do_dentry_open+0x3f1/0x1020 fs/open.c:796 vfs_open+0x9a/0xc0 fs/open.c:902 do_last fs/namei.c:3421 [inline] path_openat+0x925/0x2900 fs/namei.c:3537 do_filp_open+0x177/0x250 fs/namei.c:3567 do_sys_open+0x1dc/0x350 fs/open.c:1085 __do_sys_open fs/open.c:1103 [inline] __se_sys_open fs/open.c:1098 [inline] __x64_sys_open+0x79/0xb0 fs/open.c:1098 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff7d7c19840 Code: Bad RIP value. RSP: 002b:00007fffc08982a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000056157420c760 RCX: 00007ff7d7c19840 RDX: 0000561572621fe3 RSI: 00000000000a0800 RDI: 0000561574225b90 RBP: 00007fffc0898420 R08: 0000561572621670 R09: 0000000000000010 R10: 0000561572621d0c R11: 0000000000000246 R12: 00007fffc0898370 R13: 000056157421d880 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.5:9955 blocked for more than 140 seconds. Not tainted 4.19.206-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D27784 9955 8462 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x80c/0x1f70 kernel/sched/core.c:3517 schedule+0x7f/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1015 [inline] __mutex_lock+0x4ba/0x1190 kernel/locking/mutex.c:1083 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1098 blkdev_put+0x25/0x470 fs/block_dev.c:1839 blkdev_close+0x88/0xd0 fs/block_dev.c:1888 __fput+0x249/0x7f0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x108/0x180 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x185/0x1e0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x413/0x4e0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41926b Code: Bad RIP value. RSP: 002b:00007ffe092c6e60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b RDX: 0000001b2c8200c0 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c8200c4 R10: 000145394d76d6b9 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000000bc50 Showing all locks held in the system: 1 lock held by khungtaskd/1569: #0: 00000000ee75faed (rcu_read_lock){....}, at: debug_show_all_locks+0x5b/0x27a kernel/locking/lockdep.c:4443 3 locks held by kworker/u4:3/2885: #0: 00000000b5a81ba6 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1824 [inline] #0: 00000000b5a81ba6 (&rq->lock){-.-.}, at: __schedule+0x1f6/0x1f70 kernel/sched/core.c:3455 #1: 00000000ee75faed (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:428 [inline] #1: 00000000ee75faed (rcu_read_lock){....}, at: update_curr+0x2cf/0x870 kernel/sched/fair.c:857 #2: 000000004c88fc12 (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:977 [inline] #2: 000000004c88fc12 (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x8b/0xdb0 net/mac80211/ibss.c:1675 2 locks held by in:imklog/7758: #0: 000000001278da43 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xa7/0xd0 fs/file.c:767 #1: 00000000aa944a44 (logbuf_lock){....}, at: is_bpf_text_address+0x0/0xe0 kernel/bpf/core.c:532 1 lock held by syz-executor.4/9853: #0: 00000000373bd1b3 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by systemd-udevd/9856: #0: 00000000373bd1b3 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 1 lock held by systemd-udevd/9864: #0: 0000000076bb19eb (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 1 lock held by syz-executor.0/9881: #0: 0000000076bb19eb (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by systemd-udevd/9905: #0: 000000001923cc59 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 1 lock held by syz-executor.2/9906: #0: 000000001923cc59 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by systemd-udevd/9931: #0: 00000000cd4db35b (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 1 lock held by syz-executor.1/9941: #0: 000000009e2f4c93 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by systemd-udevd/9942: #0: 000000009e2f4c93 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 1 lock held by syz-executor.5/9955: #0: 00000000cd4db35b (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by syz-executor.3/9965: #0: 00000000fad383a3 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x25/0x470 fs/block_dev.c:1839 1 lock held by systemd-udevd/9968: #0: 00000000fad383a3 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19a/0x1200 fs/block_dev.c:1478 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1569 Comm: khungtaskd Not tainted 4.19.206-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 nmi_cpu_backtrace.cold.0+0x3c/0x78 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0xf6/0x120 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x5c3/0xb40 kernel/hung_task.c:287 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10 Comm: rcu_preempt Not tainted 4.19.206-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:debug_object_assert_init+0x0/0x370 lib/debugobjects.c:666 Code: fe 48 8b 45 c8 e9 35 fe ff ff 4c 89 f7 e8 48 64 44 fe 48 8b 45 c8 e9 44 ff ff ff e8 5a 64 44 fe e9 6b ff ff ff 0f 1f 44 00 00 <55> 48 89 e5 41 57 49 bf 00 00 00 00 00 fc ff df 41 56 41 55 41 54 RSP: 0018:ffff8880b59bfb78 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 1ffff11016b37f70 RCX: 0000000000000000 RDX: 1ffffffff13224a9 RSI: ffffffff89989120 RDI: ffff8880b59bfcc8 RBP: ffff8880b59bfc00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282 R13: ffff8880b59bfcc8 R14: dffffc0000000000 R15: ffff8880ba222b40 FS: 0000000000000000(0000) GS:ffff8880ba200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7e1b1e7000 CR3: 00000000b4d4f000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: del_timer_sync+0x156/0x1e0 kernel/time/timer.c:1305 schedule_timeout+0x3a0/0xd20 kernel/time/timer.c:1819 rcu_gp_kthread+0xd2b/0x23e0 kernel/rcu/tree.c:2202 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 48 8b 45 c8 mov -0x38(%rbp),%rax 4: e9 35 fe ff ff jmpq 0xfffffe3e 9: 4c 89 f7 mov %r14,%rdi c: e8 48 64 44 fe callq 0xfe446459 11: 48 8b 45 c8 mov -0x38(%rbp),%rax 15: e9 44 ff ff ff jmpq 0xffffff5e 1a: e8 5a 64 44 fe callq 0xfe446479 1f: e9 6b ff ff ff jmpq 0xffffff8f 24: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) * 29: 55 push %rbp <-- trapping instruction 2a: 48 89 e5 mov %rsp,%rbp 2d: 41 57 push %r15 2f: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 36: fc ff df 39: 41 56 push %r14 3b: 41 55 push %r13 3d: 41 54 push %r12