wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Bluetooth: hci1: command 0x040f tx timeout Bluetooth: hci4: command 0x040f tx timeout INFO: task syz-executor.2:8055 blocked for more than 143 seconds. Not tainted 5.10.79 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28040 pid: 8055 ppid: 285 flags:0x10000324 Call Trace: context_switch kernel/sched/core.c:3787 [inline] __schedule+0x848/0x1e80 kernel/sched/core.c:4536 schedule+0xcb/0x270 kernel/sched/core.c:4614 __io_uring_task_cancel+0x1ae/0x250 fs/io_uring.c:8911 io_uring_task_cancel include/linux/io_uring.h:46 [inline] bprm_execve+0x114/0x1b00 fs/exec.c:1785 do_execveat_common+0x621/0x7c0 fs/exec.c:1915 do_execveat fs/exec.c:1994 [inline] __do_sys_execveat fs/exec.c:2070 [inline] __se_sys_execveat fs/exec.c:2062 [inline] __x64_sys_execveat+0xed/0x130 fs/exec.c:2062 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f4fbbba0b19 RSP: 002b:00007f4fb9116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 00007f4fbbcb3f60 RCX: 00007f4fbbba0b19 RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff RBP: 00007f4fbbbfaf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff2791296f R14: 00007f4fb9116300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/22: #0: ffffffff84df6760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6379 2 locks held by kworker/u4:1/60: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff88800c477da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 2 locks held by kworker/u4:2/65: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff88800f15fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 1 lock held by in:imklog/179: #0: ffff8880094494f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:930 2 locks held by kworker/u4:4/323: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff888042abfda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 2 locks held by kworker/u4:7/337: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff888043067da8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 2 locks held by kworker/u4:3/7581: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2241 #1: ffff88804d40fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2245 ============================================= Bluetooth: hci1: command 0x0419 tx timeout Bluetooth: hci4: command 0x0419 tx timeout