Bluetooth: hci6: command 0x1003 tx timeout Bluetooth: hci6: sending frame failed (-49) Bluetooth: hci6: command 0x1001 tx timeout Bluetooth: hci6: sending frame failed (-49) Bluetooth: hci6: command 0x1009 tx timeout BUG: sleeping function called from invalid context at net/core/sock.c:2863 in_atomic(): 1, irqs_disabled(): 0, pid: 4327, name: syz-executor.5 3 locks held by syz-executor.5/4327: #0: 0000000018cd814a (&tty->ldisc_sem){++++}, at: __tty_ldisc_lock drivers/tty/tty_ldisc.c:320 [inline] #0: 0000000018cd814a (&tty->ldisc_sem){++++}, at: tty_ldisc_lock_pair_timeout drivers/tty/tty_ldisc.c:376 [inline] #0: 0000000018cd814a (&tty->ldisc_sem){++++}, at: tty_ldisc_lock_pair drivers/tty/tty_ldisc.c:397 [inline] #0: 0000000018cd814a (&tty->ldisc_sem){++++}, at: tty_ldisc_release+0x240/0x440 drivers/tty/tty_ldisc.c:805 #1: 00000000504b2ae9 (&tty->ldisc_sem/1){+.+.}, at: __tty_ldisc_lock_nested drivers/tty/tty_ldisc.c:326 [inline] #1: 00000000504b2ae9 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_lock_pair_timeout drivers/tty/tty_ldisc.c:378 [inline] #1: 00000000504b2ae9 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_lock_pair drivers/tty/tty_ldisc.c:397 [inline] #1: 00000000504b2ae9 (&tty->ldisc_sem/1){+.+.}, at: tty_ldisc_release+0x354/0x440 drivers/tty/tty_ldisc.c:805 #2: 000000004065c848 (hci_sk_list.lock){++++}, at: hci_sock_dev_event+0x3db/0x660 net/bluetooth/hci_sock.c:756 Preemption disabled at: [<0000000000000000>] (null) CPU: 0 PID: 4327 Comm: syz-executor.5 Not tainted 4.19.202-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6192 lock_sock_nested+0x33/0x110 net/core/sock.c:2863 lock_sock include/net/sock.h:1510 [inline] hci_sock_dev_event+0x465/0x660 net/bluetooth/hci_sock.c:758 hci_unregister_dev+0x25b/0x910 net/bluetooth/hci_core.c:3292 hci_uart_tty_close+0x277/0x2e0 drivers/bluetooth/hci_ldisc.c:553 tty_ldisc_close+0xa2/0xd0 drivers/tty/tty_ldisc.c:493 tty_ldisc_kill drivers/tty/tty_ldisc.c:639 [inline] tty_ldisc_release+0xf5/0x440 drivers/tty/tty_ldisc.c:806 tty_release_struct+0x20/0xe0 drivers/tty/tty_io.c:1611 tty_release+0xc70/0x1210 drivers/tty/tty_io.c:1784 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4193fb Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007ffcce0f7080 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004193fb RDX: 0000000000000000 RSI: ffffffff8167a8ca RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31921fa0 R10: 0000000000000d08 R11: 0000000000000293 R12: 000000000056cb00 R13: 000000000056cb00 R14: 000000000056bf80 R15: 00000000000aa996 secmark_tg_check: 53 callbacks suppressed xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 audit: type=1804 audit(1628738553.091:256): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir417558555/syzkaller.zgtYF1/541/bus" dev="sda1" ino=14627 res=1 audit: type=1804 audit(1628738553.815:257): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir417558555/syzkaller.zgtYF1/541/bus" dev="sda1" ino=14627 res=1 netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. audit: type=1804 audit(1628738555.939:258): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir417558555/syzkaller.zgtYF1/546/bus" dev="sda1" ino=14507 res=1 audit: type=1804 audit(1628738556.664:259): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir417558555/syzkaller.zgtYF1/546/bus" dev="sda1" ino=14507 res=1 secmark_tg_check: 93 callbacks suppressed xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 IPVS: ftp: loaded support on port[0] = 21 overlayfs: unrecognized mount option "werdir=./file0" or missing value overlayfs: 'file0' not a directory overlayfs: unrecognized mount option "werdir=./file0" or missing value