INFO: task syz-executor199:6753 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 6753 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000af R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:6757 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 6757 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b1 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:6763 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D30072 6763 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b4 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:6805 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 6805 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c9 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:6815 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 6815 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 000000000230f914 R08: 000000000230f914 R09: 0000000000000000 R10: 00007ffcc33b5290 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000016 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:6841 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 6841 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000db R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:7149 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 7149 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000175 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:7501 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29344 7501 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000225 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:7505 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D29744 7505 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000227 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 INFO: task syz-executor199:7665 blocked for more than 140 seconds. Not tainted 4.14.195-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor199 D30256 7665 6368 0x00000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3384 schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893 hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 hci_inquiry+0x5e1/0x810 net/bluetooth/hci_core.c:1272 hci_sock_ioctl+0x15a/0x650 net/bluetooth/hci_sock.c:1043 sock_do_ioctl net/socket.c:974 [inline] sock_ioctl+0x2cc/0x4c0 net/socket.c:1071 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x447fd9 RSP: 002b:00007ffcc33b5288 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000447fd9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000277 R13: 0000000000000000 R14: 000000000230f914 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/1067: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548 1 lock held by syz-executor199/6551: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6753: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6757: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6763: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6805: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6815: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6841: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7149: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7501: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7505: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7665: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8069: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8141: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8163: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8237: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8243: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8253: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8255: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8257: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8259: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8261: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8265: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8301: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8303: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8350: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8392: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8702: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8776: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8874: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8890: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8892: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9260: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9892: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9930: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10024: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10156: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10294: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10376: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10378: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10468: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10502: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10566: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10906: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11170: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11340: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11524: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12198: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12596: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12672: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12690: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13288: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13444: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13526: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14140: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14272: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14604: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14754: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14946: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15066: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15148: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15548: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15612: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15670: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15812: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15906: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15910: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16502: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16952: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17478: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17492: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17816: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17834: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17976: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17992: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18040: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18060: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18754: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18756: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18776: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19140: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19584: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19892: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20672: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21864: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22046: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22438: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23764: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23958: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25030: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25140: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25374: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25804: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26546: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27010: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27064: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27246: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27262: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27724: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28312: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28354: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28356: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28366: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28636: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28642: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28662: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28674: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28686: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28738: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28846: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29100: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29532: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29534: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29538: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30148: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30394: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30932: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31280: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31510: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31698: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31704: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31706: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31956: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32066: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32116: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32180: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32432: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32540: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32646: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/483: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/589: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1093: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1297: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1759: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1761: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1765: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2107: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2205: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2207: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2347: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3262: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3278: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3521: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3633: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3808: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4066: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4196: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4362: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4519: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4543: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4807: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4841: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4909: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5005: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5007: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5197: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5849: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5901: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6200: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6282: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6771: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6951: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7171: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7403: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7461: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7485: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7493: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7497: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7503: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7951: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8035: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8129: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8223: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8437: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8537: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8559: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8663: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8881: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8947: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8949: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9023: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9311: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9711: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9723: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9829: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9847: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10557: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12065: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12161: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12347: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12405: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12647: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12787: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12881: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13089: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13221: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13379: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13409: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13543: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13673: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13863: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14099: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14453: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15331: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15375: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16531: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16645: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17557: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17623: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17869: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18065: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18261: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18265: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18417: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18831: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18885: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18939: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18943: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19391: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19399: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19507: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19519: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19525: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19529: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19655: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19723: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19959: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19987: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19995: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21119: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21191: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21199: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21201: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21231: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21251: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21659: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22059: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22087: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22317: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23523: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24675: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24825: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25015: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25639: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25989: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26585: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27461: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27591: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/27999: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28031: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28401: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28447: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/28851: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29065: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29147: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29481: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29555: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/29703: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30229: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30285: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30287: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30469: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30507: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30687: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/30977: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31319: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31483: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/31521: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32383: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/32689: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/402: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1084: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1244: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1312: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1428: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/1696: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2144: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2176: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2334: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2429: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2434: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2454: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2560: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2590: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2683: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/2703: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/3945: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4161: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4598: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4750: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/4796: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5060: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5650: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/5722: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6149: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6315: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6802: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/6854: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7340: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7366: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7576: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7642: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7840: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/7958: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8042: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8420: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/8474: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9160: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9468: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9502: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9514: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9554: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9558: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9594: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9630: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9672: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/9942: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10144: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10354: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10462: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10472: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10550: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10558: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10614: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10816: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10830: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10846: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10872: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/10874: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11150: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11176: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11676: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11740: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/11868: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12310: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12426: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12530: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12566: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12598: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12662: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12696: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12704: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12722: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12826: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/12852: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13240: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13468: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13502: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13518: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13756: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13800: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13822: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13846: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13918: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13926: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/13928: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14248: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14348: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14446: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14610: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14678: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/14866: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15158: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15294: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15302: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15524: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15570: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15594: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/15654: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16016: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16090: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16162: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16598: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/16636: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17592: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17676: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17694: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/17932: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18074: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18144: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18190: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18218: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18438: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18722: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18914: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18944: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/18966: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19142: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19164: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19166: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19262: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19284: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19324: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19386: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19416: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19452: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19628: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19834: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19890: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19894: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/19966: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20126: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20212: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20374: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20402: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20464: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20558: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20772: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20808: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/20922: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21004: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21076: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21078: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21544: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21588: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/21972: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22444: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22522: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22574: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22656: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22700: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22778: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/22786: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23216: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23240: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23378: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23600: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/23708: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24486: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24556: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24562: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24616: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24744: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24840: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/24886: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25100: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25144: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25292: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/25834: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26122: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26182: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26290: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26326: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26416: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26530: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 1 lock held by syz-executor199/26532: #0: (&hdev->req_lock){+.+.}, at: [] hci_req_sync+0x5d/0xa0 net/bluetooth/hci_request.c:284 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1067 Comm: khungtaskd Not tainted 4.14.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x5b9/0xb40 kernel/hung_task.c:274 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 3644 Comm: systemd-journal Not tainted 4.14.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888094562140 task.stack: ffff888094568000 RIP: 0010:___bpf_prog_run+0xb0/0x5a70 kernel/bpf/core.c:959 RSP: 0018:ffff88809456fa48 EFLAGS: 00000246 RAX: 1ffffffff0d5e6f1 RBX: dffffc0000000000 RCX: ffff88809456fe68 RDX: 0000000000000000 RSI: ffffc900018fa030 RDI: ffffffff86af3788 RBP: ffff88809456fb58 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff86af36e0 R13: 1ffff110128adf50 R14: ffffc900018fa138 R15: 0000000000000015 FS: 00007f96629298c0(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f965fcfe000 CR3: 0000000094594000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Code: 03 83 e2 07 0f b6 04 18 38 d0 7f 08 84 c0 0f 85 10 42 00 00 45 0f b6 3e 4a 8d 3c fd e0 36 af 86 48 89 f8 48 c1 e8 03 80 3c 18 00 <0f> 85 ea 41 00 00 43 ff 24 fc e8 b1 d3 f6 ff 48 c7 c6 60 36 af