Bluetooth: hci6: command 0x1003 tx timeout Bluetooth: hci6: sending frame failed (-49) Bluetooth: hci6: command 0x1001 tx timeout Bluetooth: hci6: sending frame failed (-49) Bluetooth: hci6: command 0x1009 tx timeout BUG: sleeping function called from invalid context at net/core/sock.c:2863 in_atomic(): 1, irqs_disabled(): 0, pid: 22072, name: syz-executor.5 3 locks held by syz-executor.5/22072: #0: 00000000dbe06994 (&tty->ldisc_sem){++++}, at: __tty_ldisc_lock drivers/tty/tty_ldisc.c:320 [inline] #0: 00000000dbe06994 (&tty->ldisc_sem){++++}, at: tty_ldisc_lock_pair_timeout drivers/tty/tty_ldisc.c:366 [inline] #0: 00000000dbe06994 (&tty->ldisc_sem){++++}, at: tty_ldisc_lock_pair drivers/tty/tty_ldisc.c:397 [inline] #0: 00000000dbe06994 (&tty->ldisc_sem){++++}, at: tty_ldisc_release+0x2a8/0x440 drivers/tty/tty_ldisc.c:805 #1: 00000000f254ed62 (&tty->ldisc_sem/1){+.+.}, at: __tty_ldisc_lock_nested drivers/tty/tty_ldisc.c:326 [inline] #1: 00000000f254ed62 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_lock_pair_timeout drivers/tty/tty_ldisc.c:368 [inline] #1: 00000000f254ed62 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_lock_pair drivers/tty/tty_ldisc.c:397 [inline] #1: 00000000f254ed62 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_release+0x398/0x440 drivers/tty/tty_ldisc.c:805 #2: 000000008a605569 (hci_sk_list.lock){++++}, at: hci_sock_dev_event+0x3db/0x660 net/bluetooth/hci_sock.c:756 Preemption disabled at: [<0000000000000000>] (null) CPU: 1 PID: 22072 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6192 lock_sock_nested+0x33/0x110 net/core/sock.c:2863 lock_sock include/net/sock.h:1510 [inline] hci_sock_dev_event+0x465/0x660 net/bluetooth/hci_sock.c:758 hci_unregister_dev+0x25b/0x910 net/bluetooth/hci_core.c:3292 hci_uart_tty_close+0x277/0x2e0 drivers/bluetooth/hci_ldisc.c:553 tty_ldisc_close+0xa2/0xd0 drivers/tty/tty_ldisc.c:493 tty_ldisc_kill drivers/tty/tty_ldisc.c:639 [inline] tty_ldisc_release+0xf5/0x440 drivers/tty/tty_ldisc.c:806 tty_release_struct+0x20/0xe0 drivers/tty/tty_io.c:1611 tty_release+0xc70/0x1210 drivers/tty/tty_io.c:1784 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4193fb Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007fff0fd8a980 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004193fb RDX: 0000000000570348 RSI: 0000001b2c023e2c RDI: 0000000000000005 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000001a90 R10: 00000000e8acfa93 R11: 0000000000000293 R12: 000000000005faf5 R13: 00000000000003e8 R14: 000000000056bf80 R15: 000000000005fad9 BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed netlink: 'syz-executor.4': attribute type 102 has an invalid length. audit: type=1804 audit(1628530300.459:141): pid=22219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/182/cgroup.controllers" dev="sda1" ino=14743 res=1 BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed audit: type=1804 audit(1628530301.019:142): pid=22266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/183/cgroup.controllers" dev="sda1" ino=14731 res=1 netlink: 'syz-executor.1': attribute type 10 has an invalid length. bond0: team0 is up - this may be due to an out of date ifenslave EXT4-fs (loop1): Unrecognized mount option "" or missing value EXT4-fs (loop1): failed to parse options in superblock:  netlink: 'syz-executor.1': attribute type 10 has an invalid length. batman_adv: batadv0: Adding interface: team0 [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e018, mo2=0006] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. System zones: 1-2, 19-19, 35-38, 46-46 batman_adv: batadv0: Interface activated: team0 EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue netlink: 'syz-executor.2': attribute type 102 has an invalid length. BTRFS error (device loop3): superblock checksum mismatch netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 'syz-executor.1': attribute type 10 has an invalid length. BTRFS error (device loop3): open_ctree failed batman_adv: batadv0: Interface deactivated: team0 batman_adv: batadv0: Removing interface: team0 bond0: team0 is up - this may be due to an out of date ifenslave print_req_error: 44 callbacks suppressed print_req_error: I/O error, dev loop3, sector 0 print_req_error: I/O error, dev loop3, sector 3937 print_req_error: I/O error, dev loop3, sector 3937 buffer_io_error: 34 callbacks suppressed Buffer I/O error on dev loop3p3, logical block 3712, async page read print_req_error: I/O error, dev loop3, sector 3968 print_req_error: I/O error, dev loop3, sector 3938 Buffer I/O error on dev loop3p3, logical block 3713, async page read print_req_error: I/O error, dev loop3, sector 3939 Buffer I/O error on dev loop3p3, logical block 3714, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. print_req_error: I/O error, dev loop3, sector 3940 Buffer I/O error on dev loop3p3, logical block 3715, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 3968 Buffer I/O error on dev loop3p4, logical block 496, async page read Buffer I/O error on dev loop3p2, logical block 0, async page read Buffer I/O error on dev loop3p2, logical block 0, async page read Buffer I/O error on dev loop3p3, logical block 3716, async page read netlink: 'syz-executor.2': attribute type 102 has an invalid length. BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed audit: type=1804 audit(1628530301.839:143): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/184/cgroup.controllers" dev="sda1" ino=14729 res=1 netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. audit: type=1804 audit(1628530302.069:144): pid=22384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/185/cgroup.controllers" dev="sda1" ino=14728 res=1 device wlan1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready device wlan1 left promiscuous mode netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed audit: type=1804 audit(1628530303.039:145): pid=22417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/186/cgroup.controllers" dev="sda1" ino=14750 res=1 netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed BTRFS error (device loop3): superblock checksum mismatch audit: type=1804 audit(1628530303.709:146): pid=22478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/187/cgroup.controllers" dev="sda1" ino=14514 res=1 BTRFS error (device loop3): open_ctree failed netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. audit: type=1804 audit(1628530304.349:147): pid=22541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/67/cgroup.controllers" dev="sda1" ino=14514 res=1 audit: type=1804 audit(1628530304.649:148): pid=22590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/189/cgroup.controllers" dev="sda1" ino=14754 res=1 audit: type=1804 audit(1628530304.959:149): pid=22541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/67/cgroup.controllers" dev="sda1" ino=14514 res=1 netlink: 'syz-executor.4': attribute type 3 has an invalid length. audit: type=1804 audit(1628530305.439:150): pid=22658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/190/cgroup.controllers" dev="sda1" ino=14748 res=1 overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value overlayfs: unrecognized mount option "loweVdir=./file0" or missing value netlink: 'syz-executor.4': attribute type 5 has an invalid length. overlayfs: unrecognized mount option "loweVdir=./file0" or missing value overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value nla_parse: 5 callbacks suppressed netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. audit: type=1804 audit(1628530306.079:151): pid=22727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/191/cgroup.controllers" dev="sda1" ino=14772 res=1 netlink: 'syz-executor.4': attribute type 12 has an invalid length. netlink: 'syz-executor.2': attribute type 3 has an invalid length. netlink: 'syz-executor.2': attribute type 12 has an invalid length. audit: type=1804 audit(1628530306.789:152): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/192/cgroup.controllers" dev="sda1" ino=14766 res=1 audit: type=1800 audit(1628530306.939:153): pid=22834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14751 res=0 audit: type=1804 audit(1628530306.989:154): pid=22834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/74/file0" dev="sda1" ino=14751 res=1 x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 audit: type=1804 audit(1628530307.099:155): pid=22850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/74/file0" dev="sda1" ino=14751 res=1 audit: type=1804 audit(1628530307.339:156): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/193/cgroup.controllers" dev="sda1" ino=14761 res=1 x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 audit: type=1804 audit(1628530307.589:157): pid=22834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/74/file0" dev="sda1" ino=14751 res=1 print_req_error: 283 callbacks suppressed print_req_error: I/O error, dev loop3, sector 0 print_req_error: I/O error, dev loop3, sector 0 buffer_io_error: 242 callbacks suppressed Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 0 Buffer I/O error on dev loop3p2, logical block 0, async page read Buffer I/O error on dev loop3p4, logical block 496, async page read BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 1 transid 7 /dev/loop3 audit: type=1800 audit(1628530308.199:158): pid=22940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14790 res=0 BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed audit: type=1804 audit(1628530308.239:159): pid=22940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266513121/syzkaller.hy7tFN/75/file0" dev="sda1" ino=14790 res=1 audit: type=1804 audit(1628530308.329:160): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir146382417/syzkaller.OL6bkJ/194/cgroup.controllers" dev="sda1" ino=14791 res=1 BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) BTRFS error (device loop3): superblock checksum mismatch FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) BTRFS error (device loop3): open_ctree failed BTRFS error (device loop3): superblock checksum mismatch BTRFS error (device loop3): open_ctree failed