program: r0 = io_uring_setup(0x11f3, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0xffffffff, 0x68}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000001600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000001700)="601b86a3"}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0xfffffffffffffef9}, 0x4000000) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x100000001, 0x4, 0x8000, 0x15c, 0x155, 0x7, 0xb, 0x80, 0xabbb, 0x3, 0x1, 0xf156, 0x1, 0x0, 0x41a0, 0x7fff, 0xc, 0x3, 0xffffffffffffffc8, 0xffff, 0x987, 0x6, 0x2, 0x3}) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000001c0)='(-,\\\x00', 0x101200, &(0x7f0000000280)={@align=0x7, {0x8001, 0x8001, 0xffffcb6b, 0x4e}}, 0xfc7b, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x7f}) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x2, 0xc, 0x6, 0x3, 0x1f, 'syz0\x00', "5d805a7e0d76d717370729ac6851d087fbb9c154839d842960cab4d2e6e14db4", "92c088507cecb1ca739ec22d406a0e22c200e95e121ff8b2988c9179c19c2467", [{0xffff, 0x8001, {0x2, 0x78f6459a}}, {0x5, 0x3, {0x4, 0xfffffff8}}, {0x3, 0xc1, {0x3, 0x101}}, {0x80, 0xb9a, {0x0, 0x9}}, {0x3, 0x1057, {0x3, 0x5205}}, {0x400, 0x3, {0x0, 0x3314}}, {0x3, 0x0, {0x0, 0x9}}, {0x0, 0x2, {0x1, 0x80}}, {0x4, 0x9, {0x2, 0xffffb1f0}}, {0x1000, 0x0, {0x0, 0xa}}, {0x100, 0x4, {0x1, 0x6}}, {0x6, 0x400, {0x3, 0x240000}}, {0x614, 0x6c63, {0x1, 0xff}}, {0x2, 0x6, {0x1, 0x6}}, {0x7ff, 0x4, {0x3}}, {0x77, 0xa, {0x0, 0x7}}, {0x90, 0x2, {0x3, 0x8001}}, {0x1, 0x7f, {0x3, 0xd}}, {0x1, 0x9, {0x3, 0x4}}, {0x6, 0xfe61, {0x3, 0x193f}}, {0xd52, 0x3ff, {0x0, 0x9}}, {0x4, 0x0, {0x1}}, {0x3c3, 0x33, {0x1, 0x7}}, {0x100, 0x9, {0x3, 0x10}}, {0x1, 0x1, {0x1, 0x3}}, {0x2, 0x80, {0x2, 0x7}}, {0xffc0, 0x9, {0x1}}, {0x0, 0x6, {0x2, 0x5}}, {0x1, 0xe438, {0x1, 0xfffff1a1}}, {0x6, 0x8}, {0xe, 0x7, {0x0, 0x6}}, {0x4, 0x9, {0x0, 0x6c}}, {0x6, 0x2, {0x1, 0x5}}, {0x0, 0x1, {0x3}}, {0x6, 0xfffd, {0x2, 0x4000800}}, {0xff81, 0x6, {0x0, 0x1}}, {0xb, 0x400, {0x0, 0x9}}, {0xd1, 0x200, {0x2, 0x4}}, {0x6, 0x40, {0x2, 0x4c5}}, {0x7ff, 0x2, {0x3, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000080000000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0206e7001000000401"], 0x40) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r8, 0x52) sendmmsg$inet6(r8, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 93.293340][ T9] cfg80211: failed to load regulatory.db [ 93.331142][ C0] ------------[ cut here ]------------ [ 93.333497][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 93.336587][ C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#0: syz.0.0/5327 [ 93.340465][ C0] Modules linked in: [ 93.342241][ C0] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.345913][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.350180][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 93.352357][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 06 cd 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b4 6a a8 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 93.359965][ C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046 [ 93.362456][ C0] RAX: 1ffff1100256414e RBX: dffffc0000000000 RCX: ffff888030b12540 [ 93.365621][ C0] RDX: ffff8880440e2170 RSI: ffffffff8ac4afd0 RDI: ffffffff905ae130 [ 93.368811][ C0] RBP: 0000000000000100 R08: ffffffff9057b537 R09: 1ffffffff20af6a6 [ 93.372062][ C0] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008 [ 93.375309][ C0] R13: ffff888012b20a58 R14: ffffffff905ae130 R15: ffff8880440e2170 [ 93.378515][ C0] FS: 00007ff5cf3816c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 93.382087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.384735][ C0] CR2: 00007ff8e09de708 CR3: 00000000129c6000 CR4: 0000000000352ef0 [ 93.387828][ C0] Call Trace: [ 93.389237][ C0] [ 93.390433][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.392616][ C0] call_timer_fn+0x192/0x5e0 [ 93.394549][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 93.396878][ C0] ? call_timer_fn+0xd4/0x5e0 [ 93.398816][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 93.400936][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 93.403169][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 93.405603][ C0] __run_timer_base+0x67e/0x8b0 [ 93.407617][ C0] ? ktime_get+0x45/0x220 [ 93.409425][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 93.411705][ C0] ? ktime_get+0x1f5/0x220 [ 93.413521][ C0] ? lapic_next_event+0x11/0x20 [ 93.415459][ C0] run_timer_softirq+0xb7/0x170 [ 93.417359][ C0] handle_softirqs+0x225/0x840 [ 93.419269][ C0] ? __irq_exit_rcu+0xca/0x220 [ 93.421114][ C0] __irq_exit_rcu+0xca/0x220 [ 93.422981][ C0] irq_exit_rcu+0x9/0x30 [ 93.424643][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 93.426773][ C0] [ 93.427928][ C0] [ 93.429095][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.431522][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 93.433796][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f3 1b 40 0a e8 5e bc 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 93.441264][ C0] RSP: 0018:ffffc9000e02f580 EFLAGS: 00000206 [ 93.443734][ C0] RAX: 0000000000000471 RBX: ffff88801fc3bf20 RCX: 0000000080000001 [ 93.446954][ C0] RDX: 0000000000000006 RSI: ffffffff8e2303cd RDI: ffffffff8c4bec80 [ 93.450198][ C0] RBP: ffffc9000e02f5d0 R08: ffffffff9057b537 R09: 1ffffffff20af6a6 [ 93.453446][ C0] R10: dffffc0000000000 R11: fffffbfff20af6a7 R12: ffff888030b12540 [ 93.456648][ C0] R13: ffff88801fc3bef8 R14: dffffc0000000000 R15: 1ffff11003f877e4 [ 93.459787][ C0] __schedule+0x17e1/0x56c0 [ 93.461660][ C0] ? stack_trace_save+0xa9/0x100 [ 93.463698][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 93.465926][ C0] ? check_path+0x21/0x40 [ 93.467773][ C0] ? check_noncircular+0xda/0x150 [ 93.469957][ C0] ? __pfx___schedule+0x10/0x10 [ 93.472250][ C0] ? lockdep_unlock+0x5d/0xd0 [ 93.474786][ C0] ? __lock_acquire+0x13e8/0x2cf0 [ 93.477404][ C0] preempt_schedule_irq+0x4d/0xa0 [ 93.479505][ C0] irqentry_exit+0x14f/0x8f0 [ 93.481418][ C0] ? trace_irq_disable+0x3b/0x140 [ 93.483694][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.486739][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 93.489389][ C0] Code: ff ff ff e8 61 3f 30 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 1a cb 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 8e b8 [ 93.497131][ C0] RSP: 0018:ffffc9000e02f908 EFLAGS: 00000282 [ 93.499524][ C0] RAX: 3c9a165ce22f3c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 93.502521][ C0] RDX: ffffffff941c8338 RSI: ffffffff8e4b58f7 RDI: ffffffff8c4bec80 [ 93.505403][ C0] RBP: ffffffff818e1b55 R08: 0000000000000008 R09: ffffffff96947c70 [ 93.508504][ C0] R10: 00000000636f889a R11: 000000001a7d2856 R12: 0000000000000000 [ 93.511677][ C0] R13: ffff8880440e2140 R14: 0000000000000001 R15: 0000000000000246 [ 93.514915][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.516953][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.519169][ C0] touch_wq_lockdep_map+0xcb/0x180 [ 93.521209][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.523393][ C0] __flush_workqueue+0x148/0x1470 [ 93.525446][ C0] ? drain_workqueue+0xb1/0x380 [ 93.527509][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 93.529820][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 93.532031][ C0] drain_workqueue+0xce/0x380 [ 93.533912][ C0] hci_dev_close_sync+0x60e/0x10a0 [ 93.536001][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 93.538019][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 93.540307][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.542569][ C0] ? enable_work+0x1fd/0x230 [ 93.544506][ C0] hci_dev_close+0x108/0x260 [ 93.546447][ C0] sock_do_ioctl+0x101/0x320 [ 93.548315][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 93.550563][ C0] ? hook_file_ioctl+0x1f0/0x5f0 [ 93.552663][ C0] sock_ioctl+0x57a/0x7e0 [ 93.554445][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 93.556466][ C0] ? __fget_files+0x2a/0x420 [ 93.558277][ C0] ? __fget_files+0x3a2/0x420 [ 93.560111][ C0] ? __fget_files+0x2a/0x420 [ 93.561890][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.563968][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 93.565982][ C0] __se_sys_ioctl+0xfc/0x170 [ 93.567977][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.570458][ C0] do_syscall_64+0x174/0x580 [ 93.572357][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.574102][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.576509][ C0] RIP: 0033:0x7ff5ce59de99 [ 93.578344][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.585956][ C0] RSP: 002b:00007ff5cf380fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.589314][ C0] RAX: ffffffffffffffda RBX: 00007ff5ce825fa0 RCX: 00007ff5ce59de99 [ 93.592478][ C0] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009 [ 93.595648][ C0] RBP: 00007ff5ce633eaf R08: 0000000000000000 R09: 0000000000000000 [ 93.598735][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.601840][ C0] R13: 00007ff5ce826038 R14: 00007ff5ce825fa0 R15: 00007ffcb2f63cf8 [ 93.605044][ C0] [ 93.606411][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.609331][ C0] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.612890][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.617028][ C0] Call Trace: [ 93.618469][ C0] [ 93.619656][ C0] vpanic+0x56c/0xa60 [ 93.621346][ C0] ? __pfx__printk+0x10/0x10 [ 93.623219][ C0] ? __pfx_vpanic+0x10/0x10 [ 93.624983][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 93.627020][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 93.628983][ C0] panic+0xc5/0xd0 [ 93.630452][ C0] ? __pfx_panic+0x10/0x10 [ 93.632133][ C0] __warn+0x315/0x4c0 [ 93.633638][ C0] ? __queue_work+0xd4a/0x10a0 [ 93.635457][ C0] ? __queue_work+0xd4a/0x10a0 [ 93.637301][ C0] __report_bug+0x276/0x570 [ 93.639150][ C0] ? __queue_work+0xd4a/0x10a0 [ 93.641149][ C0] ? __pfx___report_bug+0x10/0x10 [ 93.643138][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 93.645306][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.647366][ C0] ? look_up_lock_class+0x57/0x110 [ 93.649553][ C0] ? register_lock_class+0x31/0x2e0 [ 93.651735][ C0] report_bug_entry+0x19a/0x290 [ 93.653689][ C0] ? __queue_work+0xd66/0x10a0 [ 93.655607][ C0] ? __queue_work+0xd6b/0x10a0 [ 93.657550][ C0] handle_bug+0xce/0x200 [ 93.659334][ C0] exc_invalid_op+0x1a/0x50 [ 93.661197][ C0] asm_exc_invalid_op+0x1a/0x20 [ 93.663219][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 93.665314][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 06 cd 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 b4 6a a8 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 93.672929][ C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046 [ 93.675358][ C0] RAX: 1ffff1100256414e RBX: dffffc0000000000 RCX: ffff888030b12540 [ 93.678462][ C0] RDX: ffff8880440e2170 RSI: ffffffff8ac4afd0 RDI: ffffffff905ae130 [ 93.681630][ C0] RBP: 0000000000000100 R08: ffffffff9057b537 R09: 1ffffffff20af6a6 [ 93.684675][ C0] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008 [ 93.687852][ C0] R13: ffff888012b20a58 R14: ffffffff905ae130 R15: ffff8880440e2170 [ 93.691207][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 93.693576][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 93.695733][ C0] ? __queue_work+0xd25/0x10a0 [ 93.697676][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.699933][ C0] call_timer_fn+0x192/0x5e0 [ 93.701795][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 93.704151][ C0] ? call_timer_fn+0xd4/0x5e0 [ 93.706002][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 93.708279][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 93.710407][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 93.713203][ C0] __run_timer_base+0x67e/0x8b0 [ 93.715689][ C0] ? ktime_get+0x45/0x220 [ 93.717951][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 93.720726][ C0] ? ktime_get+0x1f5/0x220 [ 93.722846][ C0] ? lapic_next_event+0x11/0x20 [ 93.724794][ C0] run_timer_softirq+0xb7/0x170 [ 93.726730][ C0] handle_softirqs+0x225/0x840 [ 93.728583][ C0] ? __irq_exit_rcu+0xca/0x220 [ 93.730399][ C0] __irq_exit_rcu+0xca/0x220 [ 93.732271][ C0] irq_exit_rcu+0x9/0x30 [ 93.733992][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 93.736263][ C0] [ 93.737475][ C0] [ 93.738710][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.741173][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 93.743594][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f3 1b 40 0a e8 5e bc 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 93.751234][ C0] RSP: 0018:ffffc9000e02f580 EFLAGS: 00000206 [ 93.753744][ C0] RAX: 0000000000000471 RBX: ffff88801fc3bf20 RCX: 0000000080000001 [ 93.756724][ C0] RDX: 0000000000000006 RSI: ffffffff8e2303cd RDI: ffffffff8c4bec80 [ 93.759728][ C0] RBP: ffffc9000e02f5d0 R08: ffffffff9057b537 R09: 1ffffffff20af6a6 [ 93.763081][ C0] R10: dffffc0000000000 R11: fffffbfff20af6a7 R12: ffff888030b12540 [ 93.766271][ C0] R13: ffff88801fc3bef8 R14: dffffc0000000000 R15: 1ffff11003f877e4 [ 93.769300][ C0] __schedule+0x17e1/0x56c0 [ 93.771248][ C0] ? stack_trace_save+0xa9/0x100 [ 93.773264][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 93.775445][ C0] ? check_path+0x21/0x40 [ 93.777198][ C0] ? check_noncircular+0xda/0x150 [ 93.779179][ C0] ? __pfx___schedule+0x10/0x10 [ 93.781244][ C0] ? lockdep_unlock+0x5d/0xd0 [ 93.783167][ C0] ? __lock_acquire+0x13e8/0x2cf0 [ 93.785165][ C0] preempt_schedule_irq+0x4d/0xa0 [ 93.787146][ C0] irqentry_exit+0x14f/0x8f0 [ 93.788983][ C0] ? trace_irq_disable+0x3b/0x140 [ 93.791025][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.793312][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 93.795392][ C0] Code: ff ff ff e8 61 3f 30 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 1a cb 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 8e b8 [ 93.802907][ C0] RSP: 0018:ffffc9000e02f908 EFLAGS: 00000282 [ 93.805263][ C0] RAX: 3c9a165ce22f3c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 93.808364][ C0] RDX: ffffffff941c8338 RSI: ffffffff8e4b58f7 RDI: ffffffff8c4bec80 [ 93.811707][ C0] RBP: ffffffff818e1b55 R08: 0000000000000008 R09: ffffffff96947c70 [ 93.814931][ C0] R10: 00000000636f889a R11: 000000001a7d2856 R12: 0000000000000000 [ 93.818172][ C0] R13: ffff8880440e2140 R14: 0000000000000001 R15: 0000000000000246 [ 93.821415][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.823612][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.825796][ C0] touch_wq_lockdep_map+0xcb/0x180 [ 93.828002][ C0] ? touch_wq_lockdep_map+0xb5/0x180 [ 93.830198][ C0] __flush_workqueue+0x148/0x1470 [ 93.832242][ C0] ? drain_workqueue+0xb1/0x380 [ 93.834224][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 93.836460][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 93.838750][ C0] drain_workqueue+0xce/0x380 [ 93.840704][ C0] hci_dev_close_sync+0x60e/0x10a0 [ 93.842790][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 93.844921][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 93.847175][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.849373][ C0] ? enable_work+0x1fd/0x230 [ 93.851335][ C0] hci_dev_close+0x108/0x260 [ 93.853280][ C0] sock_do_ioctl+0x101/0x320 [ 93.855247][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 93.857408][ C0] ? hook_file_ioctl+0x1f0/0x5f0 [ 93.859449][ C0] sock_ioctl+0x57a/0x7e0 [ 93.861214][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 93.863224][ C0] ? __fget_files+0x2a/0x420 [ 93.865099][ C0] ? __fget_files+0x3a2/0x420 [ 93.867063][ C0] ? __fget_files+0x2a/0x420 [ 93.868911][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.870995][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 93.873009][ C0] __se_sys_ioctl+0xfc/0x170 [ 93.874906][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.877333][ C0] do_syscall_64+0x174/0x580 [ 93.879257][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.881200][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.883676][ C0] RIP: 0033:0x7ff5ce59de99 [ 93.885540][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.893227][ C0] RSP: 002b:00007ff5cf380fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.896614][ C0] RAX: ffffffffffffffda RBX: 00007ff5ce825fa0 RCX: 00007ff5ce59de99 [ 93.899754][ C0] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009 [ 93.902959][ C0] RBP: 00007ff5ce633eaf R08: 0000000000000000 R09: 0000000000000000 [ 93.906224][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.909451][ C0] R13: 00007ff5ce826038 R14: 00007ff5ce825fa0 R15: 00007ffcb2f63cf8 [ 93.912716][ C0] [ 93.914372][ C0] Kernel Offset: disabled [ 93.916181][ C0] Rebooting in 86400 seconds..