Bluetooth: hci0 command 0x0409 tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci0 command 0x0406 tx timeout INFO: task syz-executor.0:7984 blocked for more than 140 seconds. Not tainted 4.14.302-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D25296 7984 1 0x00000004 Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3489 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 fuse_lock_inode+0xb0/0xe0 fs/fuse/inode.c:371 fuse_lookup+0xa0/0x3e0 fs/fuse/dir.c:370 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_openat+0x15e/0x2970 fs/namei.c:3570 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f122903ec38 RSP: 002b:00007ffea0df14a0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f122903ec38 RDX: 0000000000090800 RSI: 00007f1229099bc8 RDI: 00000000ffffff9c RBP: 00007ffea0df156c R08: 0000000000090800 R09: 00007f1229099bc8 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 00000000001661d3 R14: 0000000000000008 R15: 00007ffea0df15d0 INFO: task syz-executor.0:8241 blocked for more than 140 seconds. Not tainted 4.14.302-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D27712 8241 7984 0x00000004 Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 request_wait_answer+0x30d/0x620 fs/fuse/dev.c:478 __fuse_request_send+0x108/0x1a0 fs/fuse/dev.c:498 fuse_request_send fs/fuse/dev.c:511 [inline] fuse_simple_request+0x2fa/0x790 fs/fuse/dev.c:569 fuse_lookup_name+0x228/0x550 fs/fuse/dir.c:330 fuse_lookup+0x102/0x3e0 fs/fuse/dir.c:371 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_openat+0x15e/0x2970 fs/namei.c:3570 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f1228ff1254 RSP: 002b:00007f122838fec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1228ff1254 RDX: 0000000000000002 RSI: 00007f122838ffe0 RDI: 00000000ffffff9c RBP: 00007f122838ffe0 R08: 0000000000000000 R09: 00000000000010f7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 00007f122838ffdc R14: 00007f122838ffe0 R15: 0000000020001142 Showing all locks held in the system: 1 lock held by khungtaskd/1534: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548 1 lock held by in:imklog/7673: #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 fs/file.c:819 2 locks held by syz-executor.0/7984: #0: (&type->i_mutex_dir_key#8){++++}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#8){++++}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (&fi->mutex){+.+.}, at: [] fuse_lock_inode+0xb0/0xe0 fs/fuse/inode.c:371 2 locks held by syz-executor.0/8241: #0: (&type->i_mutex_dir_key#8){++++}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#8){++++}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (&fi->mutex){+.+.}, at: [] fuse_lock_inode+0xb0/0xe0 fs/fuse/inode.c:371 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1534 Comm: khungtaskd Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5b9/0xb40 kernel/hung_task.c:274 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4624 Comm: systemd-journal Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 task: ffff8880a17f4140 task.stack: ffff8880a17f8000 RIP: 0010:memset_erms+0x9/0x10 arch/x86/lib/memset_64.S:66 RSP: 0018:ffff8880a17ffa48 EFLAGS: 00010006 RAX: dffffc00000000ff RBX: 0000000000000015 RCX: 0000000000000180 RDX: 0000000000000400 RSI: 00000000000000ff RDI: ffffed1015647e80 RBP: ffffea0002ac8f80 R08: ffffed1015647c00 R09: ffffed1015647c00 R10: 0000000000000000 R11: ffff8880a17f4140 R12: 0000000000000001 R13: 0000000000000002 R14: 00000000000ab23e R15: 0000000000002000 FS: 00007fa37094e8c0(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa36dd33000 CR3: 00000000a1e88000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: free_pages_prepare mm/page_alloc.c:1070 [inline] __free_pages_ok+0x233/0xed0 mm/page_alloc.c:1262 slab_destroy mm/slab.c:1723 [inline] slabs_destroy+0x90/0xd0 mm/slab.c:1739 cache_flusharray mm/slab.c:3483 [inline] ___cache_free+0x213/0x2c0 mm/slab.c:3525 qlink_free mm/kasan/quarantine.c:147 [inline] qlist_free_all+0x79/0x140 mm/kasan/quarantine.c:166 quarantine_reduce+0x185/0x200 mm/kasan/quarantine.c:259 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:536 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc mm/slab.c:3390 [inline] kmem_cache_alloc+0x111/0x3c0 mm/slab.c:3550 prepare_creds+0x39/0x490 kernel/cred.c:255 SYSC_faccessat fs/open.c:365 [inline] SyS_faccessat+0x7b/0x680 fs/open.c:353 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fa36fc099c7 RSP: 002b:00007ffcc67560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 RAX: ffffffffffffffda RBX: 00007ffcc6758fe0 RCX: 00007fa36fc099c7 RDX: 00007fa37067aa00 RSI: 0000000000000000 RDI: 0000564cdcd349a3 RBP: 00007ffcc6756100 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007ffcc6758fe0 R15: 00007ffcc67565f0 Code: 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01