Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout Bluetooth: hci6: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout Bluetooth: hci2: command 0x0406 tx timeout INFO: task syz-executor.1:4162 blocked for more than 143 seconds. Not tainted 5.10.90 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27880 pid: 4162 ppid: 287 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3791 [inline] __schedule+0x848/0x1e80 kernel/sched/core.c:4540 schedule+0xcb/0x270 kernel/sched/core.c:4618 schedule_timeout+0x369/0x3f0 kernel/time/timer.c:1850 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x168/0x270 kernel/sched/completion.c:138 __flush_work+0x4c2/0xa20 kernel/workqueue.c:3047 __cancel_work_timer+0x364/0x4b0 kernel/workqueue.c:3134 p9_conn_destroy net/9p/trans_fd.c:884 [inline] p9_fd_close+0x236/0x4a0 net/9p/trans_fd.c:919 p9_client_create+0x8ef/0x1090 net/9p/client.c:1071 v9fs_session_init+0x1dd/0x1690 fs/9p/v9fs.c:406 v9fs_mount+0x79/0x8f0 fs/9p/vfs_super.c:126 legacy_get_tree+0x105/0x220 fs/fs_context.c:592 vfs_get_tree+0x8e/0x2f0 fs/super.c:1549 do_new_mount fs/namespace.c:2899 [inline] path_mount+0x13ba/0x20a0 fs/namespace.c:3229 do_mount fs/namespace.c:3242 [inline] __do_sys_mount fs/namespace.c:3450 [inline] __se_sys_mount fs/namespace.c:3427 [inline] __x64_sys_mount+0x27e/0x300 fs/namespace.c:3427 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f1f31bc8b19 RSP: 002b:00007f1f2f13e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f1f31cdbf60 RCX: 00007f1f31bc8b19 RDX: 0000000020000dc0 RSI: 0000000020000d80 RDI: 0000000000000000 RBP: 00007f1f31c22f6d R08: 0000000020000300 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffceb44a67f R14: 00007f1f2f13e300 R15: 0000000000022000 Showing all locks held in the system: 4 locks held by kworker/0:0/5: #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c58d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff8880084f7da8 ((work_completion)(&m->rq)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 #2: ffff88800e7be098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266 #3: ffffc900007ed2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xdca/0x1320 drivers/tty/n_tty.c:2174 1 lock held by khungtaskd/22: #0: ffffffff84df6960 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6379 1 lock held by in:imklog/178: #0: ffff88800c8ac5f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:934 =============================================