INFO: task syz-executor.1:31366 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D27912 31366 6463 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c INFO: task syz-executor.1:31470 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28648 31470 6463 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c INFO: task syz-executor.1:31579 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28648 31579 6463 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c INFO: task syz-executor.1:31684 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28096 31684 6463 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c INFO: task syz-executor.1:31803 blocked for more than 140 seconds. Not tainted 4.19.142-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D28648 31803 6463 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072 hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 hci_inquiry+0x6bc/0x920 net/bluetooth/hci_core.c:1310 hci_sock_ioctl+0x198/0x7a0 net/bluetooth/hci_sock.c:1048 sock_do_ioctl+0xcb/0x2d0 net/socket.c:950 sock_ioctl+0x2ef/0x5d0 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d5b9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f7758e85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000000f2c0 RCX: 000000000045d5b9 RDX: 0000000020000200 RSI: 00000000800448f0 RDI: 0000000000000004 RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c R13: 00007ffc8d2d411f R14: 00007f7758e869c0 R15: 000000000118cf4c Showing all locks held in the system: 1 lock held by khungtaskd/1090: #0: 00000000b178efa3 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440 2 locks held by khugepaged/1097: 1 lock held by systemd-udevd/3708: 1 lock held by in:imklog/6147: #0: 00000000210f23c7 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767 2 locks held by agetty/6162: #0: 00000000ba172e34 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 #1: 00000000f30fb298 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154 2 locks held by syz-executor.5/6471: 3 locks held by kworker/u4:4/31070: 1 lock held by syz-executor.1/31214: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor.1/31366: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor.1/31470: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor.1/31579: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor.1/31684: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278 1 lock held by syz-executor.1/31803: #0: 00000000c99a95dd (&hdev->req_lock){+.+.}, at: hci_req_sync+0x69/0xb0 net/bluetooth/hci_request.c:278