Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
Bluetooth: hci2: Injecting HCI hardware error event
Bluetooth: hci2: hardware error 0x00
Bluetooth: hci5: command 0x0406 tx timeout
watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.2:18095]
Modules linked in:
irq event stamp: 50938
hardirqs last  enabled at (50937): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (50938): [<ffffffff844232ff>] sysvec_apic_timer_interrupt+0xf/0xc0
softirqs last  enabled at (752): [<ffffffff81181dbb>] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (721): [<ffffffff81181dbb>] __irq_exit_rcu+0x11b/0x180
CPU: 1 PID: 18095 Comm: syz-executor.2 Not tainted 6.2.0-rc3-next-20230109 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70
Code: 81 e1 00 01 00 00 65 48 8b 14 25 80 89 03 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 14 14 00 00 85 c0 74 2b 8b 82 f0 13 00 00 <83> f8 02 75 20 48 8b 8a f8 13 00 00 8b 92 f4 13 00 00 48 8b 01 48
RSP: 0018:ffff88804b8cf960 EFLAGS: 00000246
RAX: 0000000000000002 RBX: 0000000000000004 RCX: 0000000000000000
RDX: ffff88804008d040 RSI: ffffffff842b8538 RDI: ffff8880426f96f8
RBP: 00007fb94a766fff R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: 000000000000000d R14: 0000000020ff7000 R15: ffff88804b8cfa58
FS:  00007fb94a786700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb94d320000 CR3: 000000004735c000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 mas_next_entry+0x428/0x2040
 mt_find+0x59f/0x760
 find_vma+0x110/0x1b0
 walk_page_range+0x2b3/0x4b0
 mlock_fixup+0x525/0x650
 apply_vma_lock_flags+0x23c/0x360
 do_mlock+0x25a/0x6d0
 __x64_sys_mlock+0x59/0x80
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fb94d210b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb94a786188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
RAX: ffffffffffffffda RBX: 00007fb94d323f60 RCX: 00007fb94d210b19
RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff5000
RBP: 00007fb94d26af6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffda087c6f R14: 00007fb94a786300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess):
   0:	81 e1 00 01 00 00    	and    $0x100,%ecx
   6:	65 48 8b 14 25 80 89 	mov    %gs:0x38980,%rdx
   d:	03 00
   f:	a9 00 01 ff 00       	test   $0xff0100,%eax
  14:	74 0e                	je     0x24
  16:	85 c9                	test   %ecx,%ecx
  18:	74 35                	je     0x4f
  1a:	8b 82 14 14 00 00    	mov    0x1414(%rdx),%eax
  20:	85 c0                	test   %eax,%eax
  22:	74 2b                	je     0x4f
  24:	8b 82 f0 13 00 00    	mov    0x13f0(%rdx),%eax
* 2a:	83 f8 02             	cmp    $0x2,%eax <-- trapping instruction
  2d:	75 20                	jne    0x4f
  2f:	48 8b 8a f8 13 00 00 	mov    0x13f8(%rdx),%rcx
  36:	8b 92 f4 13 00 00    	mov    0x13f4(%rdx),%edx
  3c:	48 8b 01             	mov    (%rcx),%rax
  3f:	48                   	rex.W