program: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x8000, 0x0) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x42400) pwritev2(r0, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1, 0x5, 0x40, 0x1e) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000010c0), 0x20000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000001100)) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000001140)={0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r4) getpeername$packet(r3, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000012c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r3, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000013c0)=[{}], 0x8, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000001700)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x9c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x59}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xbc}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740), 0x14581, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r8, 0x330f, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000001780)={0x4, [0x0, 0x0, 0x0, 0x0]}) r9 = socket(0x15, 0x8, 0xa) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000017c0)={0x8, r4, 'id1\x00'}) getsockopt$nfc_llcp(r10, 0x118, 0x1, &(0x7f0000001840)=""/115, 0x73) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000018c0), 0x1d00, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r9, 0x89f4, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@initdev}]}}) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001980), 0x400, 0x0) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000001bc0)={&(0x7f00000019c0), 0xc, &(0x7f0000001b80)={&(0x7f0000001a00)={0x148, 0xb, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6f4a}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x35}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x78}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_1\x00'}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbe4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008045}, 0x4000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001c00)={0x1, 0x9, 0x6}) ioctl$DRM_IOCTL_AGP_INFO(r11, 0x80386433, &(0x7f0000001c40)=""/185) ftruncate(0xffffffffffffffff, 0xa) ioctl$BSG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000001d00)=0xa) mount$tmpfs(0x0, &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80), 0x80200a, &(0x7f0000001dc0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36, 0x36]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x39, 0x38, 0x70]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x39]}}, {@inode64}], [{@audit}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wlan0\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/hpet\x00'}}, {@seclabel}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) [ 75.413422][ T5303] Bluetooth: hci0: command tx timeout [ 76.275679][ T5324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.278794][ T5324] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.285627][ T5324] [ 76.286659][ T5324] ====================================================== [ 76.289694][ T5324] WARNING: possible circular locking dependency detected [ 76.292723][ T5324] syzkaller #0 Not tainted [ 76.294469][ T5324] ------------------------------------------------------ [ 76.297243][ T5324] syz.0.0/5324 is trying to acquire lock: [ 76.299572][ T5324] ffff888042b23840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 76.304081][ T5324] [ 76.304081][ T5324] but task is already holding lock: [ 76.306970][ T5324] ffff888042b23b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 76.310607][ T5324] [ 76.310607][ T5324] which lock already depends on the new lock. [ 76.310607][ T5324] [ 76.315064][ T5324] [ 76.315064][ T5324] the existing dependency chain (in reverse order) is: [ 76.319142][ T5324] [ 76.319142][ T5324] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 76.322392][ T5324] lock_acquire+0x120/0x360 [ 76.324659][ T5324] __mutex_lock+0x187/0x1350 [ 76.326972][ T5324] l2cap_info_timeout+0x60/0xa0 [ 76.329236][ T5324] process_scheduled_works+0xae1/0x17b0 [ 76.331880][ T5324] worker_thread+0x8a0/0xda0 [ 76.334014][ T5324] kthread+0x711/0x8a0 [ 76.335982][ T5324] ret_from_fork+0x4bc/0x870 [ 76.338045][ T5324] ret_from_fork_asm+0x1a/0x30 [ 76.340194][ T5324] [ 76.340194][ T5324] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 76.344890][ T5324] validate_chain+0xb9b/0x2140 [ 76.347679][ T5324] __lock_acquire+0xab9/0xd20 [ 76.350284][ T5324] lock_acquire+0x120/0x360 [ 76.352420][ T5324] __flush_work+0x6b8/0xbc0 [ 76.354587][ T5324] __cancel_work_sync+0xbe/0x110 [ 76.356923][ T5324] l2cap_conn_del+0x4f0/0x680 [ 76.359201][ T5324] l2cap_connect_cfm+0x11d/0x1040 [ 76.361887][ T5324] hci_conn_failed+0x1ce/0x310 [ 76.364397][ T5324] hci_abort_conn_sync+0x658/0xe30 [ 76.367101][ T5324] hci_disconnect_all_sync+0x1b5/0x350 [ 76.370025][ T5324] hci_suspend_sync+0x3fc/0xc60 [ 76.372454][ T5324] hci_suspend_dev+0x28d/0x4d0 [ 76.374816][ T5324] hci_suspend_notifier+0xf2/0x290 [ 76.377272][ T5324] notifier_call_chain+0x1b6/0x3e0 [ 76.379748][ T5324] blocking_notifier_call_chain_robust+0x85/0x100 [ 76.382733][ T5324] pm_notifier_call_chain_robust+0x2c/0x60 [ 76.385848][ T5324] snapshot_open+0x19c/0x280 [ 76.388246][ T5324] misc_open+0x2d5/0x350 [ 76.390459][ T5324] chrdev_open+0x4cc/0x5e0 [ 76.392674][ T5324] do_dentry_open+0x953/0x13f0 [ 76.395124][ T5324] vfs_open+0x3b/0x340 [ 76.397272][ T5324] path_openat+0x2ee5/0x3830 [ 76.399724][ T5324] do_filp_open+0x1fa/0x410 [ 76.402043][ T5324] do_sys_openat2+0x121/0x1c0 [ 76.404467][ T5324] __x64_sys_openat+0x138/0x170 [ 76.406843][ T5324] do_syscall_64+0xfa/0xfa0 [ 76.409203][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.412014][ T5324] [ 76.412014][ T5324] other info that might help us debug this: [ 76.412014][ T5324] [ 76.416282][ T5324] Possible unsafe locking scenario: [ 76.416282][ T5324] [ 76.419381][ T5324] CPU0 CPU1 [ 76.421589][ T5324] ---- ---- [ 76.424531][ T5324] lock(&conn->lock#2); [ 76.426421][ T5324] lock((work_completion)(&(&conn->info_timer)->work)); [ 76.430430][ T5324] lock(&conn->lock#2); [ 76.433551][ T5324] lock((work_completion)(&(&conn->info_timer)->work)); [ 76.436722][ T5324] [ 76.436722][ T5324] *** DEADLOCK *** [ 76.436722][ T5324] [ 76.440385][ T5324] 8 locks held by syz.0.0/5324: [ 76.442579][ T5324] #0: ffffffff8e776fc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 76.446374][ T5324] #1: ffffffff8dded0a8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x4a/0x70 [ 76.451037][ T5324] #2: ffffffff8de107b0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 76.456242][ T5324] #3: ffff88803eb24dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_suspend_dev+0x285/0x4d0 [ 76.460673][ T5324] #4: ffff88803eb240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 76.464987][ T5324] #5: ffffffff8f437268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 76.469137][ T5324] #6: ffff888042b23b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 76.473309][ T5324] #7: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 76.477474][ T5324] [ 76.477474][ T5324] stack backtrace: [ 76.480284][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.480308][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.480323][ T5324] Call Trace: [ 76.480378][ T5324] [ 76.480385][ T5324] dump_stack_lvl+0x189/0x250 [ 76.480407][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.480424][ T5324] ? __pfx__printk+0x10/0x10 [ 76.480438][ T5324] ? print_lock_name+0xde/0x100 [ 76.480451][ T5324] print_circular_bug+0x2ee/0x310 [ 76.480469][ T5324] check_noncircular+0x134/0x160 [ 76.480484][ T5324] validate_chain+0xb9b/0x2140 [ 76.480498][ T5324] ? do_raw_spin_lock+0x121/0x290 [ 76.480515][ T5324] ? look_up_lock_class+0x74/0x170 [ 76.480529][ T5324] ? register_lock_class+0x51/0x320 [ 76.480542][ T5324] __lock_acquire+0xab9/0xd20 [ 76.480555][ T5324] ? __flush_work+0xd2/0xbc0 [ 76.480568][ T5324] lock_acquire+0x120/0x360 [ 76.480578][ T5324] ? __flush_work+0xd2/0xbc0 [ 76.480593][ T5324] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.480607][ T5324] ? __flush_work+0xd2/0xbc0 [ 76.480620][ T5324] __flush_work+0x6b8/0xbc0 [ 76.480633][ T5324] ? __flush_work+0xd2/0xbc0 [ 76.480647][ T5324] ? __flush_work+0xd2/0xbc0 [ 76.480662][ T5324] ? __pfx___flush_work+0x10/0x10 [ 76.480676][ T5324] ? __pfx_wq_barrier_func+0x10/0x10 [ 76.480697][ T5324] ? __pfx___cancel_work+0x10/0x10 [ 76.480712][ T5324] ? rcu_is_watching+0x15/0xb0 [ 76.480726][ T5324] ? trace_contention_end+0x39/0x120 [ 76.480741][ T5324] __cancel_work_sync+0xbe/0x110 [ 76.480755][ T5324] l2cap_conn_del+0x4f0/0x680 [ 76.480794][ T5324] l2cap_connect_cfm+0x11d/0x1040 [ 76.480814][ T5324] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 76.480832][ T5324] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 76.480849][ T5324] hci_conn_failed+0x1ce/0x310 [ 76.480873][ T5324] ? hci_abort_conn_sync+0x24e/0xe30 [ 76.480891][ T5324] hci_abort_conn_sync+0x658/0xe30 [ 76.480906][ T5324] ? __lock_acquire+0xab9/0xd20 [ 76.480919][ T5324] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 76.480933][ T5324] ? hci_disconnect_all_sync+0x2e/0x350 [ 76.480950][ T5324] ? hci_disconnect_all_sync+0x2e/0x350 [ 76.480966][ T5324] ? hci_disconnect_all_sync+0x2e/0x350 [ 76.480980][ T5324] hci_disconnect_all_sync+0x1b5/0x350 [ 76.480997][ T5324] hci_suspend_sync+0x3fc/0xc60 [ 76.481015][ T5324] ? __pfx___mutex_lock+0x10/0x10 [ 76.481031][ T5324] ? enable_work+0x258/0x2c0 [ 76.481046][ T5324] ? __pfx_hci_suspend_sync+0x10/0x10 [ 76.481062][ T5324] ? mgmt_pending_find+0x152/0x170 [ 76.481079][ T5324] ? hci_cmd_sync_cancel_sync+0xc9/0x190 [ 76.481091][ T5324] hci_suspend_dev+0x28d/0x4d0 [ 76.481105][ T5324] ? __pfx_hci_suspend_dev+0x10/0x10 [ 76.481122][ T5324] ? rcu_barrier+0x474/0x570 [ 76.481139][ T5324] hci_suspend_notifier+0xf2/0x290 [ 76.481153][ T5324] notifier_call_chain+0x1b6/0x3e0 [ 76.481168][ T5324] blocking_notifier_call_chain_robust+0x85/0x100 [ 76.481184][ T5324] pm_notifier_call_chain_robust+0x2c/0x60 [ 76.481197][ T5324] snapshot_open+0x19c/0x280 [ 76.481211][ T5324] ? __pfx_snapshot_open+0x10/0x10 [ 76.481222][ T5324] misc_open+0x2d5/0x350 [ 76.481248][ T5324] chrdev_open+0x4cc/0x5e0 [ 76.481269][ T5324] ? __pfx_chrdev_open+0x10/0x10 [ 76.481286][ T5324] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 76.481306][ T5324] ? __pfx_chrdev_open+0x10/0x10 [ 76.481324][ T5324] do_dentry_open+0x953/0x13f0 [ 76.481346][ T5324] vfs_open+0x3b/0x340 [ 76.481356][ T5324] ? path_openat+0x2ecd/0x3830 [ 76.481369][ T5324] path_openat+0x2ee5/0x3830 [ 76.481387][ T5324] ? __pfx_path_openat+0x10/0x10 [ 76.481404][ T5324] do_filp_open+0x1fa/0x410 [ 76.481417][ T5324] ? __lock_acquire+0xab9/0xd20 [ 76.481428][ T5324] ? __pfx_do_filp_open+0x10/0x10 [ 76.481445][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 76.481457][ T5324] ? alloc_fd+0x64c/0x6c0 [ 76.481473][ T5324] do_sys_openat2+0x121/0x1c0 [ 76.481486][ T5324] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.481498][ T5324] ? rcu_is_watching+0x15/0xb0 [ 76.481513][ T5324] __x64_sys_openat+0x138/0x170 [ 76.481526][ T5324] do_syscall_64+0xfa/0xfa0 [ 76.481541][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.481554][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.481566][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 76.481579][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.481591][ T5324] RIP: 0033:0x7f3eae38efc9 [ 76.481620][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.481632][ T5324] RSP: 002b:00007f3eaa7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.481648][ T5324] RAX: ffffffffffffffda RBX: 00007f3eae5e5fa0 RCX: 00007f3eae38efc9 [ 76.481658][ T5324] RDX: 0000000000020000 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 76.481666][ T5324] RBP: 00007f3eae411f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.481674][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.481681][ T5324] R13: 00007f3eae5e6038 R14: 00007f3eae5e5fa0 R15: 00007fffb3e785e8 [ 76.481694][ T5324] [ 76.711690][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.715262][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.563225][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 79.643632][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 81.724564][ T5303] Bluetooth: hci0: command 0x040f tx timeout