INFO: task kworker/u9:2:5080 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u9:2 state:D stack:23224 pid:5080 tgid:5080 ppid:2 flags:0x00004000 Workqueue: hci7 hci_cmd_sync_work Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 device_del+0x7db/0x9b0 drivers/base/core.c:3886 device_unregister+0x20/0xc0 drivers/base/core.c:3909 hci_conn_cleanup net/bluetooth/hci_conn.c:176 [inline] hci_conn_del+0x8c4/0xc40 net/bluetooth/hci_conn.c:1163 hci_abort_conn_sync+0x583/0xde0 net/bluetooth/hci_sync.c:5463 hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:323 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:22093 blocked for more than 144 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22048 pid:22093 tgid:22093 ppid:4534 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 device_lock include/linux/device.h:1009 [inline] uevent_show+0x17d/0x340 drivers/base/core.c:2743 dev_attr_show+0x55/0xc0 drivers/base/core.c:2437 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59 seq_read_iter+0x445/0xd60 fs/seq_file.c:230 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x9bd/0xbc0 fs/read_write.c:476 ksys_read+0x1a0/0x2c0 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3dcd316b6a RSP: 002b:00007ffe24d42c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 000055c0c57bb730 RCX: 00007f3dcd316b6a RDX: 0000000000001000 RSI: 000055c0c57d8930 RDI: 0000000000000008 RBP: 000055c0c57bb730 R08: 0000000000000008 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000003fff R14: 00007ffe24d43168 R15: 000000000000000a INFO: task syz.1.5177:30990 blocked for more than 145 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.5177 state:D stack:24672 pid:30990 tgid:30990 ppid:28934 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 device_remove drivers/base/dd.c:566 [inline] __device_release_driver drivers/base/dd.c:1270 [inline] device_release_driver_internal+0x4a9/0x7c0 drivers/base/dd.c:1293 driver_detach+0x1fb/0x2d0 drivers/base/dd.c:1356 bus_remove_driver+0x1f3/0x320 drivers/base/bus.c:742 usb_gadget_unregister_driver+0x4e/0x70 drivers/usb/gadget/udc/core.c:1733 raw_release+0xf9/0x1e0 drivers/usb/gadget/legacy/raw_gadget.c:462 __fput+0x24a/0x8a0 fs/file_table.c:422 task_work_run+0x24f/0x310 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x360 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f79f5175bd9 RSP: 002b:00007ffd3cba0808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00000000000c7910 RCX: 00007f79f5175bd9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000063cba0b2f R10: 00007f79f5000000 R11: 0000000000000246 R12: 00007f79f5303f6c R13: 000000000000015e R14: 00007f79f5305a60 R15: 00007f79f5303f60 INFO: task syz.3.5193:31087 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.5193 state:D stack:26816 pid:31087 tgid:31086 ppid:26763 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 gadget_bind_driver+0x5ce/0x9f0 drivers/usb/gadget/udc/core.c:1630 really_probe+0x2b8/0xad0 drivers/base/dd.c:656 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __driver_attach+0x45f/0x710 drivers/base/dd.c:1214 bus_for_each_dev+0x239/0x2b0 drivers/base/bus.c:368 bus_add_driver+0x346/0x670 drivers/base/bus.c:673 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4549b757db RSP: 002b:00007f454a9aaf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4549b757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 RBP: 00007f454a9abff0 R08: 0000000000000010 R09: 00332e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f454a9aafc0 R14: 0000000020000040 R15: 00007f4549e30320 INFO: task syz.0.5195:31092 blocked for more than 148 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.5195 state:D stack:24504 pid:31092 tgid:31088 ppid:29336 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 gadget_bind_driver+0x5ce/0x9f0 drivers/usb/gadget/udc/core.c:1630 really_probe+0x2b8/0xad0 drivers/base/dd.c:656 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __driver_attach+0x45f/0x710 drivers/base/dd.c:1214 bus_for_each_dev+0x239/0x2b0 drivers/base/bus.c:368 bus_add_driver+0x346/0x670 drivers/base/bus.c:673 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8410b757db RSP: 002b:00007f841198bf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8410b757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 RBP: 00007f841198cff0 R08: 0000000000000010 R09: 00302e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f841198bfc0 R14: 00000000200002c0 R15: 00007f8410e30320 INFO: task syz.2.5208:31124 blocked for more than 149 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.5208 state:D stack:23800 pid:31124 tgid:31123 ppid:17360 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 gadget_bind_driver+0x5ce/0x9f0 drivers/usb/gadget/udc/core.c:1630 really_probe+0x2b8/0xad0 drivers/base/dd.c:656 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:798 driver_probe_device+0x50/0x430 drivers/base/dd.c:828 __driver_attach+0x45f/0x710 drivers/base/dd.c:1214 bus_for_each_dev+0x239/0x2b0 drivers/base/bus.c:368 bus_add_driver+0x346/0x670 drivers/base/bus.c:673 driver_register+0x23a/0x320 drivers/base/driver.c:246 usb_gadget_register_driver_owner+0xdd/0x230 drivers/usb/gadget/udc/core.c:1701 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:595 [inline] raw_ioctl+0x13ae/0x3ce0 drivers/usb/gadget/legacy/raw_gadget.c:1306 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f16927757db RSP: 002b:00007f16934f3f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f16927757db RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 RBP: 00007f16934f4ff0 R08: 0000000000000010 R09: 00322e6364755f79 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f16934f3fc0 R14: 00000000200002c0 R15: 00007f1692a30320 INFO: task syz-executor:31126 blocked for more than 150 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:26816 pid:31126 tgid:31126 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 device_add+0x63b/0xbf0 drivers/base/core.c:3660 hci_register_dev+0x382/0x8b0 net/bluetooth/hci_core.c:2637 __vhci_create_device drivers/bluetooth/hci_vhci.c:430 [inline] vhci_create_device+0x389/0x6d0 drivers/bluetooth/hci_vhci.c:472 vhci_get_user drivers/bluetooth/hci_vhci.c:529 [inline] vhci_write+0x3cb/0x480 drivers/bluetooth/hci_vhci.c:609 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7eff65374720 RSP: 002b:00007ffe4787ffc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007eff65374720 RDX: 0000000000000002 RSI: 00007ffe4787ffda RDI: 00000000000000ca RBP: 00007eff65504a18 R08: 0000000000000000 R09: 00007eff6603d6c0 R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 INFO: task syz-executor:31130 blocked for more than 151 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:26816 pid:31130 tgid:31130 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 device_add+0x63b/0xbf0 drivers/base/core.c:3660 hci_register_dev+0x382/0x8b0 net/bluetooth/hci_core.c:2637 __vhci_create_device drivers/bluetooth/hci_vhci.c:430 [inline] vhci_create_device+0x389/0x6d0 drivers/bluetooth/hci_vhci.c:472 vhci_get_user drivers/bluetooth/hci_vhci.c:529 [inline] vhci_write+0x3cb/0x480 drivers/bluetooth/hci_vhci.c:609 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f89d4f74720 RSP: 002b:00007ffdefc9e248 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f89d4f74720 RDX: 0000000000000002 RSI: 00007ffdefc9e25a RDI: 00000000000000ca RBP: 00007f89d5104a18 R08: 0000000000000000 R09: 00007f89d5c3d6c0 R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 INFO: task syz-executor:31131 blocked for more than 152 seconds. Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:26816 pid:31131 tgid:31131 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6897 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 uevent_net_broadcast_untagged lib/kobject_uevent.c:317 [inline] kobject_uevent_net_broadcast+0x280/0x580 lib/kobject_uevent.c:410 kobject_uevent_env+0x57d/0x8e0 lib/kobject_uevent.c:593 device_add+0x63b/0xbf0 drivers/base/core.c:3660 hci_register_dev+0x382/0x8b0 net/bluetooth/hci_core.c:2637 __vhci_create_device drivers/bluetooth/hci_vhci.c:430 [inline] vhci_create_device+0x389/0x6d0 drivers/bluetooth/hci_vhci.c:472 vhci_get_user drivers/bluetooth/hci_vhci.c:529 [inline] vhci_write+0x3cb/0x480 drivers/bluetooth/hci_vhci.c:609 new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa72/0xc90 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f