Bluetooth: hci0: command 0x0401 tx timeout
Bluetooth: hci0: command 0x0401 tx timeout
watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.5:7857]
Modules linked in:
irq event stamp: 56920
hardirqs last  enabled at (56919): [<ffffffff84000cc2>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
hardirqs last disabled at (56920): [<ffffffff83e4c9fb>] sysvec_apic_timer_interrupt+0xb/0xa0 arch/x86/kernel/apic/apic.c:1094
softirqs last  enabled at (6076): [<ffffffff84001042>] asm_call_irq_on_stack+0x12/0x20
softirqs last disabled at (6035): [<ffffffff84001042>] asm_call_irq_on_stack+0x12/0x20
CPU: 0 PID: 7857 Comm: syz-executor.5 Not tainted 5.10.211 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__sanitizer_cov_trace_pc+0x55/0x60 kernel/kcov.c:207
Code: 82 d8 13 00 00 83 f8 02 75 20 48 8b 8a e0 13 00 00 8b 92 dc 13 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 34 c1 48 89 01 <e9> 76 8e df 02 66 0f 1f 44 00 00 41 55 41 54 49 89 fc 55 48 bd eb
RSP: 0018:ffff88804cd2f410 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000481f000
RDX: 0000000000040000 RSI: ffffffff814eae6b RDI: ffff88804e5cb010
RBP: ffff88804cd2f568 R08: 0000000000000001 R09: ffff88805112cdff
R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
R13: ffffed10099a5ef1 R14: ffff88804cd2f760 R15: ffffed10099a5eef
FS:  00007fcf5fe75700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000008000 CR3: 000000004bbf2000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000d0602
Call Trace:
 <IRQ>
 </IRQ>
 perf_output_read_group kernel/events/core.c:6919 [inline]
 perf_output_read+0xccb/0x14e0 kernel/events/core.c:6962
 perf_output_sample+0xfee/0x1b40 kernel/events/core.c:7009
 __perf_event_output kernel/events/core.c:7390 [inline]
 perf_event_output_forward+0x11a/0x2c0 kernel/events/core.c:7404
 __perf_event_overflow+0x213/0x5e0 kernel/events/core.c:9060
 perf_swevent_overflow kernel/events/core.c:9136 [inline]
 perf_swevent_event+0x4b2/0x550 kernel/events/core.c:9174
 perf_tp_event+0x2e5/0xc00 kernel/events/core.c:9592
 perf_trace_run_bpf_submit+0xf5/0x190 kernel/events/core.c:9566
 perf_trace_lock_acquire+0x330/0x590 include/trace/events/lock.h:13
 trace_lock_acquire include/trace/events/lock.h:13 [inline]
 lock_acquire+0x3dc/0x470 kernel/locking/lockdep.c:5537
 __might_fault mm/memory.c:5133 [inline]
 __might_fault+0xfd/0x180 mm/memory.c:5118
 _copy_from_user+0x29/0x1b0 lib/usercopy.c:14
 copy_from_user include/linux/uaccess.h:192 [inline]
 io_uring_setup+0x91/0x2a40 io_uring/io_uring.c:10505
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x62/0xc7
RIP: 0033:0x7fcf628ffb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf5fe75108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
RAX: ffffffffffffffda RBX: 00007fcf62a12f60 RCX: 00007fcf628ffb19
RDX: 0000000020ffb000 RSI: 00000000200000c0 RDI: 0000000000004cd1
RBP: 00000000200000c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000020ffb000 R14: 0000000020000000 R15: 0000000020ff9000
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:60 [inline]
NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:103 [inline]
NMI backtrace for cpu 1 skipped: idling at default_idle+0xe/0x20 arch/x86/kernel/process.c:706
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	d8 13                	fcoms  (%rbx)
   2:	00 00                	add    %al,(%rax)
   4:	83 f8 02             	cmp    $0x2,%eax
   7:	75 20                	jne    0x29
   9:	48 8b 8a e0 13 00 00 	mov    0x13e0(%rdx),%rcx
  10:	8b 92 dc 13 00 00    	mov    0x13dc(%rdx),%edx
  16:	48 8b 01             	mov    (%rcx),%rax
  19:	48 83 c0 01          	add    $0x1,%rax
  1d:	48 39 c2             	cmp    %rax,%rdx
  20:	76 07                	jbe    0x29
  22:	48 89 34 c1          	mov    %rsi,(%rcx,%rax,8)
  26:	48 89 01             	mov    %rax,(%rcx)
* 29:	e9 76 8e df 02       	jmpq   0x2df8ea4 <-- trapping instruction
  2e:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
  34:	41 55                	push   %r13
  36:	41 54                	push   %r12
  38:	49 89 fc             	mov    %rdi,%r12
  3b:	55                   	push   %rbp
  3c:	48                   	rex.W
  3d:	bd                   	.byte 0xbd
  3e:	eb                   	.byte 0xeb