INFO: task syz-executor826:6666 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29032 6666 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000 R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:6758 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29032 6758 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000081 R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:6792 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D28608 6792 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: e8 fc bc 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000092 R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:6802 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29552 6802 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000097 R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:6816 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29024 6816 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000 R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:6990 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29024 6990 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000f5 R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:7074 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29104 7074 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000011f R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:7134 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29480 7134 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000013d R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:7470 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29552 7470 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001e5 R13: 0000000000000000 R14: 00000000016b2914 R15: 0000000000000000 INFO: task syz-executor826:7492 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor826 D29032 7492 6467 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x447fd9 Code: Bad RIP value. RSP: 002b:00007fff89570ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 00000000016b2914 R08: 00000000016b2914 R09: 0000000000000000 R10: 00007fff89570cf0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000016 R14: 00000000016b2914 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/1090: #0: 000000002ac4eae1 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440 1 lock held by in:imklog/6107: 1 lock held by syz-executor826/6467: #0: 00000000977dd588 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1823 [inline] #0: 00000000977dd588 (&rq->lock){-.-.}, at: __schedule+0x1f9/0x2040 kernel/sched/core.c:3455 1 lock held by syz-executor826/6530: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6666: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6758: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6792: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6802: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6816: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6990: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7074: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7134: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7470: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7492: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7498: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7556: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7628: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7990: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8084: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8144: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8156: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8192: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8194: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8196: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8198: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8218: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8228: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8261: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8387: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8405: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8481: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8511: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8529: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8541: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8617: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8623: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8629: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8645: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8659: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8857: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9019: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9037: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9043: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9099: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9115: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9117: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9125: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9157: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9241: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9245: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9253: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9289: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9335: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9337: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9469: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9471: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9473: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9475: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9687: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9787: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9833: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9879: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9947: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9959: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9969: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10083: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10091: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10093: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10099: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10103: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10177: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10187: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10219: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10231: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10235: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10249: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10253: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10277: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10283: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10323: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10331: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10355: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10365: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10407: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10435: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10465: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10537: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10581: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10607: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10663: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10787: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10863: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10899: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10903: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10923: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10929: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10955: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11039: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11177: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11407: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11443: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11447: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11537: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11775: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11843: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12163: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12175: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12261: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12345: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12399: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12527: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12631: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12635: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12655: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12677: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12679: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12997: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13011: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13019: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13037: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13079: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13147: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13199: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13205: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13213: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13245: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13251: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13253: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13257: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13487: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13499: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13517: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13567: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13577: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13693: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13705: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13761: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13893: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13935: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14039: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14081: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14097: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14107: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14465: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14539: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14613: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14677: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15129: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15147: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15209: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15357: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15415: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15449: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15649: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15747: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16053: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16063: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16081: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16101: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16123: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16135: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16211: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16385: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16433: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16463: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16541: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16567: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16651: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16689: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16841: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17081: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17095: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17115: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17117: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17137: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17151: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17349: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17695: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18113: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18123: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18319: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18333: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18403: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18405: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18459: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18467: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18485: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18487: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18675: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18679: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19051: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19161: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19247: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19265: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19269: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19273: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19407: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19501: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19521: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19669: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19783: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19801: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19903: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20531: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20735: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20889: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20891: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21119: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21205: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21373: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21389: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21431: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21449: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21569: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21755: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21779: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22113: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22117: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22161: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22253: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22267: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22273: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22687: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22791: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23119: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23155: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23231: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23335: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23363: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23403: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23429: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23573: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/23603: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/24527: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/24869: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25415: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25491: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25497: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25613: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25699: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25725: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25735: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25885: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26195: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26235: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26269: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26483: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26503: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26553: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26609: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26619: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/26755: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27065: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27087: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27345: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27551: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27735: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27795: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/27921: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/28593: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/28747: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29159: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29209: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29273: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29299: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29417: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29527: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/29671: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30201: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30245: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30675: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30847: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30907: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/30931: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31029: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31195: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31367: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31399: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31529: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31591: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31673: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/31705: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/32111: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/32685: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/32691: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/32723: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/393: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/395: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/491: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/565: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/671: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1185: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1328: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1353: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1431: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1465: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1624: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/1630: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2100: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2104: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2244: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2270: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2280: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2692: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2763: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2936: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/2978: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3048: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3255: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3555: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3601: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3705: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3738: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3804: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3874: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/3908: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4070: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4130: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4228: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4294: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4316: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4468: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/4951: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5023: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5195: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5245: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5391: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5441: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5475: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5477: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5777: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5779: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5955: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/5997: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6097: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6228: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6484: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6538: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/6962: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7054: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7130: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7210: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7314: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7318: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7798: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7822: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7864: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7924: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7936: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7966: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/7986: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8042: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8242: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8298: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8434: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8470: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8596: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/8762: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9026: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9176: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9412: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9642: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9710: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9872: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9890: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9900: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/9902: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10094: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10280: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10380: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10538: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10586: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10782: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/10790: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11260: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11578: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/11676: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12110: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12128: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12290: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12350: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/12414: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13140: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13182: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/13994: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14116: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14202: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14236: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14324: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14382: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14424: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14512: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14518: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14702: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14728: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/14812: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15180: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15264: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15618: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15708: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15724: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15798: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/15980: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16120: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16308: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16624: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/16908: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/17054: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18246: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18306: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18430: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18706: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18780: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18926: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/18952: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19100: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19124: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19286: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19560: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19590: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/19634: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20430: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20568: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20584: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/20932: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21010: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21374: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21712: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21800: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/21868: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22192: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22414: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22694: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22698: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22858: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/22960: #0: 000000005c7d4fc2 (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor826/25099: #0: 00000000977dd588 (&rq->lock){-.-.}, at: idle_balance kernel/sched/fair.c:9701 [inline] #0: 00000000977dd588 (&rq->lock){-.-.}, at: pick_next_task_fair+0x556/0x1570 kernel/sched/fair.c:6840 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1090 Comm: khungtaskd Not tainted 4.19.142-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 3697 Comm: systemd-journal Not tainted 4.19.142-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:cache_alloc_refill+0x78/0x340 mm/slab.c:3009 Code: 48 63 44 24 18 85 c9 49 8b ac c7 08 01 00 00 0f 85 b3 02 00 00 48 85 ed 0f 84 aa 02 00 00 48 83 7d 78 00 48 8b 85 88 00 00 00 <75> 13 48 85 c0 0f 84 cf 01 00 00 8b 10 85 d2 0f 84 c5 01 00 00 48 RSP: 0018:ffff8880946f7d68 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 00000000006000c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 RBP: ffff8880aa00b600 R08: ffffffff8b40f3b0 R09: 0000000000000000 R10: 0000000000000007 R11: 00000000a2cc2d2c R12: 0000000000000004 R13: ffff8880aa00ab40 R14: ffff8880ae736f88 R15: ffff8880aa00ab40 FS: 00007f5b0cb7b8c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5b09fa4000 CR3: 000000009472c000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x346/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 user_path_at_empty+0x2a/0x50 fs/namei.c:2609 user_path_at include/linux/namei.h:57 [inline] do_faccessat+0x248/0x7a0 fs/open.c:397 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5b0be379c7 Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 RSP: 002b:00007ffc1a7a0d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 RAX: ffffffffffffffda RBX: 00007ffc1a7a3ca0 RCX: 00007f5b0be379c7 RDX: 00007f5b0c8a8a00 RSI: 0000000000000000 RDI: 0000559f3f9d39a3 RBP: 00007ffc1a7a0dc0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007ffc1a7a3ca0 R15: 00007ffc1a7a12b0