Bluetooth: hci0 command 0x0406 tx timeout Bluetooth: hci2 command 0x0406 tx timeout Bluetooth: hci1 command 0x0406 tx timeout Bluetooth: hci5 command 0x0406 tx timeout Bluetooth: hci3 command 0x0406 tx timeout INFO: task syz-executor.1:9665 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28344 9665 8314 0x00000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x519/0x1490 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 blkdev_put+0x25/0x470 fs/block_dev.c:1826 blkdev_close+0x88/0xd0 fs/block_dev.c:1875 __fput+0x232/0x740 fs/file_table.c:210 ____fput+0x9/0x10 fs/file_table.c:244 task_work_run+0xe5/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x418e0b RSP: 002b:00007ffd4e174b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000418e0b RDX: 00000000000003e7 RSI: 0000001b333200f4 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b333200fc R10: 00136a7309ad30ac R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000000ab29 R14: 000000000056c9e0 R15: 000000000056bf60 INFO: task systemd-udevd:9678 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26536 9678 4621 0x00000104 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 io_schedule+0x1c/0x70 kernel/sched/core.c:5032 wait_on_page_bit_common mm/filemap.c:1025 [inline] wait_on_page_bit+0x18e/0x300 mm/filemap.c:1058 wait_on_page_locked include/linux/pagemap.h:526 [inline] wait_on_page_read mm/filemap.c:2680 [inline] do_read_cache_page+0x3eb/0xa40 mm/filemap.c:2719 read_cache_page+0x40/0x70 mm/filemap.c:2809 read_mapping_page include/linux/pagemap.h:398 [inline] read_dev_sector+0xc0/0x3b0 block/partition-generic.c:659 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x101/0xcc0 block/partitions/acorn.c:366 check_partition+0x302/0x5c0 block/partitions/check.c:167 rescan_partitions+0x199/0x8c0 block/partition-generic.c:523 __blkdev_get+0xcb7/0xff0 fs/block_dev.c:1541 blkdev_get+0x265/0x890 fs/block_dev.c:1611 blkdev_open+0x19f/0x200 fs/block_dev.c:1772 do_dentry_open+0x3e4/0xde0 fs/open.c:777 vfs_open+0xfc/0x240 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0xb6f/0x2760 fs/namei.c:3569 do_filp_open+0x16b/0x220 fs/namei.c:3603 do_sys_open+0x1d0/0x350 fs/open.c:1081 SYSC_open fs/open.c:1099 [inline] SyS_open+0x19/0x20 fs/open.c:1094 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f04d102c840 RSP: 002b:00007ffcef083fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055dcb20f1880 RCX: 00007f04d102c840 RDX: 000055dcb01e2fe3 RSI: 00000000000a0800 RDI: 000055dcb20f3210 RBP: 00007ffcef084130 R08: 000055dcb01e2670 R09: 0000000000000010 R10: 000055dcb01e2d0c R11: 0000000000000246 R12: 00007ffcef084080 R13: 000055dcb20f4070 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.3:9680 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D28344 9680 8313 0x00000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x519/0x1490 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 blkdev_put+0x25/0x470 fs/block_dev.c:1826 blkdev_close+0x88/0xd0 fs/block_dev.c:1875 __fput+0x232/0x740 fs/file_table.c:210 ____fput+0x9/0x10 fs/file_table.c:244 task_work_run+0xe5/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x418e0b RSP: 002b:00007ffdf3b9fec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000418e0b RDX: 00000000000003e7 RSI: 0000001b332200f4 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b332200fc R10: 001853195e6891a0 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000000abce R14: 000000000056c9e0 R15: 000000000056bf60 INFO: task systemd-udevd:9683 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26536 9683 4621 0x00000104 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 io_schedule+0x1c/0x70 kernel/sched/core.c:5032 wait_on_page_bit_common mm/filemap.c:1025 [inline] wait_on_page_bit+0x18e/0x300 mm/filemap.c:1058 wait_on_page_locked include/linux/pagemap.h:526 [inline] wait_on_page_read mm/filemap.c:2680 [inline] do_read_cache_page+0x3eb/0xa40 mm/filemap.c:2719 read_cache_page+0x40/0x70 mm/filemap.c:2809 read_mapping_page include/linux/pagemap.h:398 [inline] read_dev_sector+0xc0/0x3b0 block/partition-generic.c:659 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x101/0xcc0 block/partitions/acorn.c:366 check_partition+0x302/0x5c0 block/partitions/check.c:167 rescan_partitions+0x199/0x8c0 block/partition-generic.c:523 __blkdev_get+0xcb7/0xff0 fs/block_dev.c:1541 blkdev_get+0x265/0x890 fs/block_dev.c:1611 blkdev_open+0x19f/0x200 fs/block_dev.c:1772 do_dentry_open+0x3e4/0xde0 fs/open.c:777 vfs_open+0xfc/0x240 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0xb6f/0x2760 fs/namei.c:3569 do_filp_open+0x16b/0x220 fs/namei.c:3603 do_sys_open+0x1d0/0x350 fs/open.c:1081 SYSC_open fs/open.c:1099 [inline] SyS_open+0x19/0x20 fs/open.c:1094 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f04d102c840 RSP: 002b:00007ffcef0839c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055dcb20f47c0 RCX: 00007f04d102c840 RDX: 000055dcb01e2fe3 RSI: 00000000000a0800 RDI: 000055dcb20e0990 RBP: 00007ffcef083b40 R08: 000055dcb01e2670 R09: 0000000000000010 R10: 000055dcb01e2d0c R11: 0000000000000246 R12: 00007ffcef083a90 R13: 000055dcb20e24e0 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.0:9688 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.0 D28344 9688 8307 0x00000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x519/0x1490 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 blkdev_put+0x25/0x470 fs/block_dev.c:1826 blkdev_close+0x88/0xd0 fs/block_dev.c:1875 __fput+0x232/0x740 fs/file_table.c:210 ____fput+0x9/0x10 fs/file_table.c:244 task_work_run+0xe5/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x418e0b RSP: 002b:00007ffc63d174c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000418e0b RDX: 00000000000003e7 RSI: 0000001b32c200f4 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b32c200fc R10: 001cfe687581dc64 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000000ac6a R14: 000000000056c9e0 R15: 000000000056bf60 INFO: task systemd-udevd:9691 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26536 9691 4621 0x00000104 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 io_schedule+0x1c/0x70 kernel/sched/core.c:5032 wait_on_page_bit_common mm/filemap.c:1025 [inline] wait_on_page_bit+0x18e/0x300 mm/filemap.c:1058 wait_on_page_locked include/linux/pagemap.h:526 [inline] wait_on_page_read mm/filemap.c:2680 [inline] do_read_cache_page+0x3eb/0xa40 mm/filemap.c:2719 read_cache_page+0x40/0x70 mm/filemap.c:2809 read_mapping_page include/linux/pagemap.h:398 [inline] read_dev_sector+0xc0/0x3b0 block/partition-generic.c:659 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x101/0xcc0 block/partitions/acorn.c:366 check_partition+0x302/0x5c0 block/partitions/check.c:167 rescan_partitions+0x199/0x8c0 block/partition-generic.c:523 __blkdev_get+0xcb7/0xff0 fs/block_dev.c:1541 blkdev_get+0x265/0x890 fs/block_dev.c:1611 blkdev_open+0x19f/0x200 fs/block_dev.c:1772 do_dentry_open+0x3e4/0xde0 fs/open.c:777 vfs_open+0xfc/0x240 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0xb6f/0x2760 fs/namei.c:3569 do_filp_open+0x16b/0x220 fs/namei.c:3603 do_sys_open+0x1d0/0x350 fs/open.c:1081 SYSC_open fs/open.c:1099 [inline] SyS_open+0x19/0x20 fs/open.c:1094 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f04d102c840 RSP: 002b:00007ffcef0839c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055dcb20f47c0 RCX: 00007f04d102c840 RDX: 000055dcb01e2fe3 RSI: 00000000000a0800 RDI: 000055dcb20fc800 RBP: 00007ffcef083b40 R08: 000055dcb01e2670 R09: 0000000000000010 R10: 000055dcb01e2d0c R11: 0000000000000246 R12: 00007ffcef083a90 R13: 000055dcb20fc4c0 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.4:9736 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.4 D28344 9736 8309 0x00000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x519/0x1490 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 blkdev_put+0x25/0x470 fs/block_dev.c:1826 blkdev_close+0x88/0xd0 fs/block_dev.c:1875 __fput+0x232/0x740 fs/file_table.c:210 ____fput+0x9/0x10 fs/file_table.c:244 task_work_run+0xe5/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x418e0b RSP: 002b:00007fff159cb7d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000418e0b RDX: 00000000000003e7 RSI: 0000001b32e200f4 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b32e200fc R10: 0017d92932b099ee R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000000afa5 R14: 000000000056c9e0 R15: 000000000056bf60 INFO: task systemd-udevd:9739 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26536 9739 4621 0x00000104 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 io_schedule+0x1c/0x70 kernel/sched/core.c:5032 wait_on_page_bit_common mm/filemap.c:1025 [inline] wait_on_page_bit+0x18e/0x300 mm/filemap.c:1058 wait_on_page_locked include/linux/pagemap.h:526 [inline] wait_on_page_read mm/filemap.c:2680 [inline] do_read_cache_page+0x3eb/0xa40 mm/filemap.c:2719 read_cache_page+0x40/0x70 mm/filemap.c:2809 read_mapping_page include/linux/pagemap.h:398 [inline] read_dev_sector+0xc0/0x3b0 block/partition-generic.c:659 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x101/0xcc0 block/partitions/acorn.c:366 check_partition+0x302/0x5c0 block/partitions/check.c:167 rescan_partitions+0x199/0x8c0 block/partition-generic.c:523 __blkdev_get+0xcb7/0xff0 fs/block_dev.c:1541 blkdev_get+0x265/0x890 fs/block_dev.c:1611 blkdev_open+0x19f/0x200 fs/block_dev.c:1772 do_dentry_open+0x3e4/0xde0 fs/open.c:777 vfs_open+0xfc/0x240 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0xb6f/0x2760 fs/namei.c:3569 do_filp_open+0x16b/0x220 fs/namei.c:3603 do_sys_open+0x1d0/0x350 fs/open.c:1081 SYSC_open fs/open.c:1099 [inline] SyS_open+0x19/0x20 fs/open.c:1094 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f04d102c840 RSP: 002b:00007ffcef0839c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055dcb20f47c0 RCX: 00007f04d102c840 RDX: 000055dcb01e2fe3 RSI: 00000000000a0800 RDI: 000055dcb20f3140 RBP: 00007ffcef083b40 R08: 000055dcb01e2670 R09: 0000000000000010 R10: 000055dcb01e2d0c R11: 0000000000000246 R12: 00007ffcef083a90 R13: 000055dcb20f0a10 R14: 0000000000000003 R15: 000000000000000e INFO: task syz-executor.2:9749 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D28344 9749 8305 0x00000004 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3486 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x519/0x1490 kernel/locking/mutex.c:893 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908 blkdev_put+0x25/0x470 fs/block_dev.c:1826 blkdev_close+0x88/0xd0 fs/block_dev.c:1875 __fput+0x232/0x740 fs/file_table.c:210 ____fput+0x9/0x10 fs/file_table.c:244 task_work_run+0xe5/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x14a/0x190 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x418e0b RSP: 002b:00007ffcbcdc71b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000418e0b RDX: 00000000000003e7 RSI: 0000001b32b200f4 RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b32b200fc R10: 0018f773cc99ef14 R11: 0000000000000293 R12: 000000000056c9e0 R13: 000000000000afcb R14: 000000000056c9e0 R15: 000000000056bf60 INFO: task systemd-udevd:9751 blocked for more than 140 seconds. Not tainted 4.14.232-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. systemd-udevd D26536 9751 4621 0x00000104 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x824/0x1ee0 kernel/sched/core.c:3384 schedule+0x7f/0x1b0 kernel/sched/core.c:3428 io_schedule+0x1c/0x70 kernel/sched/core.c:5032 wait_on_page_bit_common mm/filemap.c:1025 [inline] wait_on_page_bit+0x18e/0x300 mm/filemap.c:1058 wait_on_page_locked include/linux/pagemap.h:526 [inline] wait_on_page_read mm/filemap.c:2680 [inline] do_read_cache_page+0x3eb/0xa40 mm/filemap.c:2719 read_cache_page+0x40/0x70 mm/filemap.c:2809 read_mapping_page include/linux/pagemap.h:398 [inline] read_dev_sector+0xc0/0x3b0 block/partition-generic.c:659 read_part_sector block/partitions/check.h:38 [inline] adfspart_check_ICS+0x101/0xcc0 block/partitions/acorn.c:366 check_partition+0x302/0x5c0 block/partitions/check.c:167 rescan_partitions+0x199/0x8c0 block/partition-generic.c:523 __blkdev_get+0xcb7/0xff0 fs/block_dev.c:1541 blkdev_get+0x265/0x890 fs/block_dev.c:1611 blkdev_open+0x19f/0x200 fs/block_dev.c:1772 do_dentry_open+0x3e4/0xde0 fs/open.c:777 vfs_open+0xfc/0x240 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0xb6f/0x2760 fs/namei.c:3569 do_filp_open+0x16b/0x220 fs/namei.c:3603 do_sys_open+0x1d0/0x350 fs/open.c:1081 SYSC_open fs/open.c:1099 [inline] SyS_open+0x19/0x20 fs/open.c:1094 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f04d102c840 RSP: 002b:00007ffcef083fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 000055dcb20f3140 RCX: 00007f04d102c840 RDX: 000055dcb01e2fe3 RSI: 00000000000a0800 RDI: 000055dcb20f1630 RBP: 00007ffcef084130 R08: 000055dcb01e2670 R09: 0000000000000010 R10: 000055dcb01e2d0c R11: 0000000000000246 R12: 00007ffcef084080 R13: 000055dcb20ec170 R14: 0000000000000003 R15: 000000000000000e Showing all locks held in the system: 1 lock held by khungtaskd/1524: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4548 1 lock held by in:imklog/7636: #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x8e/0xc0 fs/file.c:769 1 lock held by syz-executor.1/9665: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9678: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 1 lock held by syz-executor.3/9680: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9683: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 1 lock held by syz-executor.0/9688: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9691: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 1 lock held by syz-executor.4/9736: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9739: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 1 lock held by syz-executor.2/9749: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9751: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 1 lock held by syz-executor.5/9766: #0: (&bdev->bd_mutex){+.+.}, at: [] blkdev_put+0x25/0x470 fs/block_dev.c:1826 1 lock held by systemd-udevd/9768: #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x185/0xff0 fs/block_dev.c:1455 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1524 Comm: khungtaskd Not tainted 4.14.232-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x14b/0x1e7 lib/dump_stack.c:58 nmi_cpu_backtrace.cold.0+0x3c/0x78 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0xf6/0x120 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline] watchdog+0x51b/0xa70 kernel/hung_task.c:274 kthread+0x338/0x400 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 8 Comm: rcu_preempt Not tainted 4.14.232-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8880b5470200 task.stack: ffff8880b5478000 RIP: 0010:hlist_add_head include/linux/list.h:702 [inline] RIP: 0010:free_object+0x115/0x250 lib/debugobjects.c:230 RSP: 0018:ffff8880b547fbf8 EFLAGS: 00000087 RAX: 0000000000000286 RBX: ffff88809c5d9460 RCX: ffff88809c5d9460 RDX: dffffc0000000000 RSI: ffff8880b5470a88 RDI: ffffffff893d3a64 RBP: ffff8880b547fc28 R08: 0000000000000ff8 R09: ffffffff8aa80900 R10: 0000000000000000 R11: ffff8880b5470200 R12: ffffffff8b14bd08 R13: 0000000000000364 R14: ffff888096d11460 R15: 1ffffffff11c1b30 FS: 0000000000000000(0000) GS:ffff8880ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f90ae1c7000 CR3: 00000000a1c47000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: debug_object_free lib/debugobjects.c:614 [inline] debug_object_free+0x235/0x390 lib/debugobjects.c:586 destroy_timer_on_stack kernel/time/timer.c:724 [inline] schedule_timeout+0x441/0xcc0 kernel/time/timer.c:1751 rcu_gp_kthread+0xb69/0x1df0 kernel/rcu/tree.c:2255 kthread+0x338/0x400 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: 85 ff 0f 85 a8 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 d9 4c 8b 35 15 84 eb 07 48 ba 00 00 00 00 00 fc ff df <48> c1 e9 03 80 3c 11 00 0f 85 d1 00 00 00 8b 35 b7 83 eb 07 41