no interfaces have a carrier [ 40.280479][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.289131][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. 2025/09/09 13:17:00 parsed 1 programs syzkaller login: [ 69.776600][ T4189] cgroup: Unknown subsys name 'net' [ 69.910186][ T4189] cgroup: Unknown subsys name 'rlimit' [ 71.382862][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389414][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.460433][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.612732][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.621086][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.631706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.656675][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.665226][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.675682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.478988][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 75.528021][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.536087][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.544208][ T4270] device bridge_slave_0 entered promiscuous mode [ 75.572016][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.579305][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.587573][ T4270] device bridge_slave_1 entered promiscuous mode [ 75.612736][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.624091][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.666089][ T4270] team0: Port device team_slave_0 added [ 75.673921][ T4270] team0: Port device team_slave_1 added [ 75.695255][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.702370][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.728934][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.759963][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.766936][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.793340][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.844571][ T4270] device hsr_slave_0 entered promiscuous mode [ 75.851529][ T4270] device hsr_slave_1 entered promiscuous mode [ 75.983094][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.994690][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.005687][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.015619][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.064068][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.071443][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.079827][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.086965][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.150746][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.166468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.176257][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.186362][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.201426][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.224622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.233394][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.240536][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.252113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.261213][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.268296][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.307898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.316979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.329141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.347360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.369821][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.382247][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.391070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.524624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.532871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.548011][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.574061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.583991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.606357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.618375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.630637][ T4270] device veth0_vlan entered promiscuous mode [ 76.641663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.650442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.662036][ T4270] device veth1_vlan entered promiscuous mode [ 76.690813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.699585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.710309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.719124][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.733454][ T4270] device veth0_macvtap entered promiscuous mode [ 76.746441][ T4270] device veth1_macvtap entered promiscuous mode [ 76.766552][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.778073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.787665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.798351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.807565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.823126][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.841756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.852360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.865381][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.875104][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884307][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.893304][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/09 13:17:10 executed programs: 0 [ 77.702057][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 77.763562][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.770921][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.779050][ T4297] device bridge_slave_0 entered promiscuous mode [ 77.789126][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.796374][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.804560][ T4297] device bridge_slave_1 entered promiscuous mode [ 77.831893][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.843424][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.882649][ T4297] team0: Port device team_slave_0 added [ 77.891020][ T4297] team0: Port device team_slave_1 added [ 77.922867][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.930021][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.959193][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.975846][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.984664][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.011607][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.058149][ T4297] device hsr_slave_0 entered promiscuous mode [ 78.065216][ T4297] device hsr_slave_1 entered promiscuous mode [ 78.073222][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.081477][ T4297] Cannot create hsr debugfs directory [ 78.177711][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.630765][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 81.417318][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.709832][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 82.103418][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.156174][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.422855][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.445980][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.455752][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.465216][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.525594][ T1276] device hsr_slave_0 left promiscuous mode [ 82.534006][ T1276] device hsr_slave_1 left promiscuous mode [ 82.540818][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.548271][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.557511][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.565307][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.573749][ T1276] device bridge_slave_1 left promiscuous mode [ 82.580969][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.595962][ T1276] device bridge_slave_0 left promiscuous mode [ 82.603437][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.622947][ T1276] device veth1_macvtap left promiscuous mode [ 82.629379][ T1276] device veth0_macvtap left promiscuous mode [ 82.635618][ T1276] device veth1_vlan left promiscuous mode [ 82.642311][ T1276] device veth0_vlan left promiscuous mode [ 82.806123][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 82.819018][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 82.833210][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.846445][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.906663][ T1276] bond0 (unregistering): Released all slaves [ 83.004444][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.016440][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.024641][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.035285][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.056465][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.073533][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.083066][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.090241][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.098878][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.107844][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.116558][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.123719][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.132352][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.143483][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.151811][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.169465][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.185540][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.194785][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.204111][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.214392][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.222596][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.232154][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.246086][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.263856][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.274013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.283826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.383573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.391753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.404306][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.425275][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.434629][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.458417][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.467467][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.478704][ T4297] device veth0_vlan entered promiscuous mode [ 83.485683][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.494557][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.507713][ T4297] device veth1_vlan entered promiscuous mode [ 83.533063][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.542588][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.551242][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.561354][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.572637][ T4297] device veth0_macvtap entered promiscuous mode [ 83.583864][ T4297] device veth1_macvtap entered promiscuous mode [ 83.602253][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.621990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.632883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.642631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.652093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.665181][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.673591][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.684169][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.695549][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.705092][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.714461][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.725205][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.783009][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.791299][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 83.810803][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.821290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.829667][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.839566][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.848833][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.983189][ T4317] [ 83.985829][ T4317] ===================================================== [ 83.992856][ T4317] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 84.000460][ T4317] syzkaller #0 Not tainted [ 84.004883][ T4317] ----------------------------------------------------- [ 84.011814][ T4317] syz.0.17/4317 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 84.019314][ T4317] ffff888023f3e3b8 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 84.028147][ T4317] [ 84.028147][ T4317] and this task is already holding: [ 84.035516][ T4317] ffff888073e99018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 84.044247][ T4317] which would create a new lock dependency: [ 84.050146][ T4317] (&new->fa_lock){....}-{2:2} -> (&f->f_owner.lock){....}-{2:2} [ 84.057922][ T4317] [ 84.057922][ T4317] but this new dependency connects a HARDIRQ-irq-safe lock: [ 84.067374][ T4317] (&dev->event_lock#2){-...}-{2:2} [ 84.067407][ T4317] [ 84.067407][ T4317] ... which became HARDIRQ-irq-safe at: [ 84.080357][ T4317] lock_acquire+0x197/0x3f0 [ 84.084970][ T4317] _raw_spin_lock_irqsave+0xa4/0xf0 [ 84.090279][ T4317] input_event+0x76/0xb0 [ 84.094619][ T4317] psmouse_report_standard_packet+0x4f/0x200 [ 84.100707][ T4317] psmouse_process_byte+0x42b/0x620 [ 84.106035][ T4317] psmouse_handle_byte+0x43/0x490 [ 84.111170][ T4317] psmouse_interrupt+0x699/0x1130 [ 84.116292][ T4317] serio_interrupt+0x87/0x130 [ 84.121088][ T4317] i8042_interrupt+0x369/0x710 [ 84.125961][ T4317] __handle_irq_event_percpu+0x291/0x9b0 [ 84.131700][ T4317] handle_irq_event+0xa5/0x220 [ 84.136567][ T4317] handle_edge_irq+0x243/0xb20 [ 84.141431][ T4317] __common_interrupt+0xd7/0x1e0 [ 84.146993][ T4317] common_interrupt+0xb0/0xd0 [ 84.151787][ T4317] asm_common_interrupt+0x22/0x40 [ 84.157001][ T4317] unwind_next_frame+0x107f/0x1d90 [ 84.162304][ T4317] __unwind_start+0x5bb/0x740 [ 84.167092][ T4317] arch_stack_walk+0xda/0x140 [ 84.171855][ T4317] stack_trace_save+0x98/0xe0 [ 84.176619][ T4317] kasan_set_track+0x4b/0x70 [ 84.181299][ T4317] kasan_set_free_info+0x1f/0x40 [ 84.186321][ T4317] ____kasan_slab_free+0xd5/0x110 [ 84.191430][ T4317] slab_free_freelist_hook+0xea/0x170 [ 84.196894][ T4317] kfree+0xef/0x2a0 [ 84.200782][ T4317] kobject_uevent_env+0x368/0x890 [ 84.205890][ T4317] driver_register+0x3e2/0x430 [ 84.210746][ T4317] usb_register_driver+0x202/0x3d0 [ 84.215947][ T4317] do_one_initcall+0x1ee/0x680 [ 84.220807][ T4317] do_initcall_level+0x137/0x1f0 [ 84.225846][ T4317] do_initcalls+0x4b/0x90 [ 84.230262][ T4317] kernel_init_freeable+0x3ce/0x560 [ 84.235554][ T4317] kernel_init+0x19/0x1b0 [ 84.239981][ T4317] ret_from_fork+0x1f/0x30 [ 84.244520][ T4317] [ 84.244520][ T4317] to a HARDIRQ-irq-unsafe lock: [ 84.251532][ T4317] (tasklist_lock){.+.+}-{2:2} [ 84.251554][ T4317] [ 84.251554][ T4317] ... which became HARDIRQ-irq-unsafe at: [ 84.264266][ T4317] ... [ 84.264271][ T4317] lock_acquire+0x197/0x3f0 [ 84.271550][ T4317] _raw_read_lock+0x32/0x40 [ 84.276244][ T4317] do_wait+0x293/0xac0 [ 84.280402][ T4317] kernel_wait+0xa8/0x160 [ 84.284943][ T4317] call_usermodehelper_exec_work+0xb5/0x220 [ 84.290927][ T4317] process_one_work+0x863/0x1000 [ 84.295949][ T4317] worker_thread+0xaa8/0x12a0 [ 84.300711][ T4317] kthread+0x436/0x520 [ 84.304866][ T4317] ret_from_fork+0x1f/0x30 [ 84.309368][ T4317] [ 84.309368][ T4317] other info that might help us debug this: [ 84.309368][ T4317] [ 84.319593][ T4317] Chain exists of: [ 84.319593][ T4317] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 84.319593][ T4317] [ 84.332547][ T4317] Possible interrupt unsafe locking scenario: [ 84.332547][ T4317] [ 84.340865][ T4317] CPU0 CPU1 [ 84.346222][ T4317] ---- ---- [ 84.351618][ T4317] lock(tasklist_lock); [ 84.355868][ T4317] local_irq_disable(); [ 84.362632][ T4317] lock(&dev->event_lock#2); [ 84.369861][ T4317] lock(&new->fa_lock); [ 84.377005][ T4317] [ 84.380468][ T4317] lock(&dev->event_lock#2); [ 84.385597][ T4317] [ 84.385597][ T4317] *** DEADLOCK *** [ 84.385597][ T4317] [ 84.393748][ T4317] 8 locks held by syz.0.17/4317: [ 84.398688][ T4317] #0: ffff888148229110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x177/0x470 [ 84.407837][ T4317] #1: ffff8881468be230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0x9e/0x2c0 [ 84.418032][ T4317] #2: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 84.427348][ T4317] #3: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 84.436654][ T4317] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 84.445979][ T4317] #5: ffff88807f289028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 84.456165][ T4317] #6: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 84.465901][ T4317] #7: ffff888073e99018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 84.475215][ T4317] [ 84.475215][ T4317] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 84.485641][ T4317] -> (&dev->event_lock#2){-...}-{2:2} { [ 84.491379][ T4317] IN-HARDIRQ-W at: [ 84.495527][ T4317] lock_acquire+0x197/0x3f0 [ 84.502034][ T4317] _raw_spin_lock_irqsave+0xa4/0xf0 [ 84.509237][ T4317] input_event+0x76/0xb0 [ 84.515487][ T4317] psmouse_report_standard_packet+0x4f/0x200 [ 84.523557][ T4317] psmouse_process_byte+0x42b/0x620 [ 84.530763][ T4317] psmouse_handle_byte+0x43/0x490 [ 84.537813][ T4317] psmouse_interrupt+0x699/0x1130 [ 84.544841][ T4317] serio_interrupt+0x87/0x130 [ 84.551528][ T4317] i8042_interrupt+0x369/0x710 [ 84.558294][ T4317] __handle_irq_event_percpu+0x291/0x9b0 [ 84.565936][ T4317] handle_irq_event+0xa5/0x220 [ 84.572710][ T4317] handle_edge_irq+0x243/0xb20 [ 84.579486][ T4317] __common_interrupt+0xd7/0x1e0 [ 84.586431][ T4317] common_interrupt+0xb0/0xd0 [ 84.593127][ T4317] asm_common_interrupt+0x22/0x40 [ 84.600182][ T4317] unwind_next_frame+0x107f/0x1d90 [ 84.607302][ T4317] __unwind_start+0x5bb/0x740 [ 84.613978][ T4317] arch_stack_walk+0xda/0x140 [ 84.620659][ T4317] stack_trace_save+0x98/0xe0 [ 84.627422][ T4317] kasan_set_track+0x4b/0x70 [ 84.634009][ T4317] kasan_set_free_info+0x1f/0x40 [ 84.641034][ T4317] ____kasan_slab_free+0xd5/0x110 [ 84.648073][ T4317] slab_free_freelist_hook+0xea/0x170 [ 84.655444][ T4317] kfree+0xef/0x2a0 [ 84.661247][ T4317] kobject_uevent_env+0x368/0x890 [ 84.668271][ T4317] driver_register+0x3e2/0x430 [ 84.675242][ T4317] usb_register_driver+0x202/0x3d0 [ 84.682361][ T4317] do_one_initcall+0x1ee/0x680 [ 84.689129][ T4317] do_initcall_level+0x137/0x1f0 [ 84.696149][ T4317] do_initcalls+0x4b/0x90 [ 84.702477][ T4317] kernel_init_freeable+0x3ce/0x560 [ 84.709675][ T4317] kernel_init+0x19/0x1b0 [ 84.716004][ T4317] ret_from_fork+0x1f/0x30 [ 84.722516][ T4317] INITIAL USE at: [ 84.726674][ T4317] lock_acquire+0x197/0x3f0 [ 84.733090][ T4317] _raw_spin_lock_irqsave+0xa4/0xf0 [ 84.740206][ T4317] input_inject_event+0x9e/0x2c0 [ 84.747061][ T4317] led_trigger_event+0x10a/0x1e0 [ 84.754148][ T4317] kbd_led_trigger_activate+0xb9/0x100 [ 84.761657][ T4317] led_trigger_set+0x504/0x900 [ 84.768439][ T4317] led_trigger_set_default+0x19c/0x1e0 [ 84.775821][ T4317] led_classdev_register_ext+0x68f/0x870 [ 84.783368][ T4317] input_leds_connect+0x51d/0x750 [ 84.790311][ T4317] input_register_device+0xda7/0x1140 [ 84.797606][ T4317] atkbd_connect+0x759/0xa10 [ 84.804193][ T4317] serio_driver_probe+0x76/0x90 [ 84.810954][ T4317] really_probe+0x284/0xc80 [ 84.817365][ T4317] __driver_probe_device+0x18c/0x330 [ 84.824561][ T4317] driver_probe_device+0x4f/0x420 [ 84.831500][ T4317] __driver_attach+0x46b/0x670 [ 84.838174][ T4317] bus_for_each_dev+0x175/0x1e0 [ 84.844942][ T4317] serio_handle_event+0x29c/0x840 [ 84.851899][ T4317] process_one_work+0x863/0x1000 [ 84.858831][ T4317] worker_thread+0xaa8/0x12a0 [ 84.865421][ T4317] kthread+0x436/0x520 [ 84.871411][ T4317] ret_from_fork+0x1f/0x30 [ 84.877750][ T4317] } [ 84.880513][ T4317] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 84.889713][ T4317] -> (&client->buffer_lock){....}-{2:2} { [ 84.895538][ T4317] INITIAL USE at: [ 84.899605][ T4317] lock_acquire+0x197/0x3f0 [ 84.905851][ T4317] _raw_spin_lock+0x2a/0x40 [ 84.912178][ T4317] evdev_pass_values+0xcb/0xab0 [ 84.918766][ T4317] evdev_events+0x1c0/0x2f0 [ 84.925019][ T4317] input_pass_values+0x880/0x1220 [ 84.931897][ T4317] input_handle_event+0xb3f/0x1490 [ 84.938833][ T4317] input_inject_event+0x1b9/0x2c0 [ 84.945601][ T4317] evdev_write+0x326/0x470 [ 84.951758][ T4317] vfs_write+0x300/0xd00 [ 84.958039][ T4317] ksys_write+0x14d/0x250 [ 84.964107][ T4317] do_syscall_64+0x4c/0xa0 [ 84.970279][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.978006][ T4317] } [ 84.980588][ T4317] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 84.989003][ T4317] ... acquired at: [ 84.992887][ T4317] _raw_spin_lock+0x2a/0x40 [ 84.997566][ T4317] evdev_pass_values+0xcb/0xab0 [ 85.002775][ T4317] evdev_events+0x1c0/0x2f0 [ 85.007768][ T4317] input_pass_values+0x880/0x1220 [ 85.012985][ T4317] input_handle_event+0xb3f/0x1490 [ 85.018288][ T4317] input_inject_event+0x1b9/0x2c0 [ 85.023504][ T4317] evdev_write+0x326/0x470 [ 85.028134][ T4317] vfs_write+0x300/0xd00 [ 85.033046][ T4317] ksys_write+0x14d/0x250 [ 85.037582][ T4317] do_syscall_64+0x4c/0xa0 [ 85.042190][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.048361][ T4317] [ 85.050681][ T4317] -> (&new->fa_lock){....}-{2:2} { [ 85.055817][ T4317] INITIAL READ USE at: [ 85.060236][ T4317] lock_acquire+0x197/0x3f0 [ 85.066744][ T4317] _raw_read_lock_irqsave+0xac/0xf0 [ 85.073949][ T4317] kill_fasync+0x16d/0x490 [ 85.080451][ T4317] evdev_pass_values+0x54b/0xab0 [ 85.087388][ T4317] evdev_events+0x1c0/0x2f0 [ 85.093887][ T4317] input_pass_values+0x880/0x1220 [ 85.100908][ T4317] input_handle_event+0xb3f/0x1490 [ 85.108018][ T4317] input_inject_event+0x1b9/0x2c0 [ 85.115044][ T4317] evdev_write+0x326/0x470 [ 85.121552][ T4317] vfs_write+0x300/0xd00 [ 85.127964][ T4317] ksys_write+0x14d/0x250 [ 85.134291][ T4317] do_syscall_64+0x4c/0xa0 [ 85.140794][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.148684][ T4317] } [ 85.151183][ T4317] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 85.159881][ T4317] ... acquired at: [ 85.163698][ T4317] _raw_read_lock_irqsave+0xac/0xf0 [ 85.169082][ T4317] kill_fasync+0x16d/0x490 [ 85.173698][ T4317] evdev_pass_values+0x54b/0xab0 [ 85.178821][ T4317] evdev_events+0x1c0/0x2f0 [ 85.183503][ T4317] input_pass_values+0x880/0x1220 [ 85.188707][ T4317] input_handle_event+0xb3f/0x1490 [ 85.194003][ T4317] input_inject_event+0x1b9/0x2c0 [ 85.199222][ T4317] evdev_write+0x326/0x470 [ 85.203817][ T4317] vfs_write+0x300/0xd00 [ 85.208244][ T4317] ksys_write+0x14d/0x250 [ 85.212746][ T4317] do_syscall_64+0x4c/0xa0 [ 85.217332][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.223402][ T4317] [ 85.225723][ T4317] [ 85.225723][ T4317] the dependencies between the lock to be acquired [ 85.225730][ T4317] and HARDIRQ-irq-unsafe lock: [ 85.239248][ T4317] -> (tasklist_lock){.+.+}-{2:2} { [ 85.244465][ T4317] HARDIRQ-ON-R at: [ 85.248530][ T4317] lock_acquire+0x197/0x3f0 [ 85.254868][ T4317] _raw_read_lock+0x32/0x40 [ 85.261197][ T4317] do_wait+0x293/0xac0 [ 85.267187][ T4317] kernel_wait+0xa8/0x160 [ 85.273345][ T4317] call_usermodehelper_exec_work+0xb5/0x220 [ 85.281070][ T4317] process_one_work+0x863/0x1000 [ 85.287832][ T4317] worker_thread+0xaa8/0x12a0 [ 85.294347][ T4317] kthread+0x436/0x520 [ 85.300246][ T4317] ret_from_fork+0x1f/0x30 [ 85.306484][ T4317] SOFTIRQ-ON-R at: [ 85.310547][ T4317] lock_acquire+0x197/0x3f0 [ 85.316958][ T4317] _raw_read_lock+0x32/0x40 [ 85.323286][ T4317] do_wait+0x293/0xac0 [ 85.329185][ T4317] kernel_wait+0xa8/0x160 [ 85.335340][ T4317] call_usermodehelper_exec_work+0xb5/0x220 [ 85.343058][ T4317] process_one_work+0x863/0x1000 [ 85.349825][ T4317] worker_thread+0xaa8/0x12a0 [ 85.356346][ T4317] kthread+0x436/0x520 [ 85.362237][ T4317] ret_from_fork+0x1f/0x30 [ 85.368506][ T4317] INITIAL USE at: [ 85.372493][ T4317] lock_acquire+0x197/0x3f0 [ 85.378940][ T4317] _raw_write_lock_irq+0x9f/0xe0 [ 85.385623][ T4317] copy_process+0x234a/0x3e00 [ 85.392131][ T4317] kernel_clone+0x219/0x930 [ 85.398372][ T4317] kernel_thread+0xc8/0x120 [ 85.404613][ T4317] rest_init+0x21/0x330 [ 85.410510][ T4317] start_kernel+0x486/0x530 [ 85.416754][ T4317] secondary_startup_64_no_verify+0xb1/0xbb [ 85.424391][ T4317] INITIAL READ USE at: [ 85.428821][ T4317] lock_acquire+0x197/0x3f0 [ 85.435523][ T4317] _raw_read_lock+0x32/0x40 [ 85.442201][ T4317] do_wait+0x293/0xac0 [ 85.448444][ T4317] kernel_wait+0xa8/0x160 [ 85.454944][ T4317] call_usermodehelper_exec_work+0xb5/0x220 [ 85.463014][ T4317] process_one_work+0x863/0x1000 [ 85.470210][ T4317] worker_thread+0xaa8/0x12a0 [ 85.477066][ T4317] kthread+0x436/0x520 [ 85.483322][ T4317] ret_from_fork+0x1f/0x30 [ 85.489910][ T4317] } [ 85.492490][ T4317] ... key at: [] tasklist_lock+0x18/0x40 [ 85.500321][ T4317] ... acquired at: [ 85.504239][ T4317] _raw_read_lock+0x32/0x40 [ 85.508932][ T4317] send_sigurg+0xcb/0x390 [ 85.513444][ T4317] sk_send_sigurg+0x6b/0xc0 [ 85.518212][ T4317] tcp_urg+0x2bc/0xb10 [ 85.522455][ T4317] tcp_rcv_established+0xac5/0x1cb0 [ 85.527830][ T4317] tcp_v6_do_rcv+0x539/0x1180 [ 85.532682][ T4317] __release_sock+0x1b9/0x420 [ 85.537530][ T4317] release_sock+0x5b/0x1b0 [ 85.542122][ T4317] sk_stream_wait_memory+0x6d8/0xe50 [ 85.547582][ T4317] tcp_sendmsg_locked+0x1c9f/0x3590 [ 85.552959][ T4317] tcp_sendmsg+0x2b/0x40 [ 85.557380][ T4317] __sys_sendto+0x423/0x580 [ 85.562053][ T4317] __x64_sys_sendto+0xda/0xf0 [ 85.566903][ T4317] do_syscall_64+0x4c/0xa0 [ 85.571489][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.577553][ T4317] [ 85.579876][ T4317] -> (&f->f_owner.lock){....}-{2:2} { [ 85.585271][ T4317] INITIAL USE at: [ 85.589169][ T4317] lock_acquire+0x197/0x3f0 [ 85.595237][ T4317] _raw_write_lock_irq+0x9f/0xe0 [ 85.601734][ T4317] __f_setown+0x37/0x330 [ 85.607538][ T4317] f_setown+0x120/0x1c0 [ 85.613345][ T4317] do_fcntl+0x192/0x12d0 [ 85.619165][ T4317] __se_sys_fcntl+0xcc/0x190 [ 85.625332][ T4317] do_syscall_64+0x4c/0xa0 [ 85.631310][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.638770][ T4317] INITIAL READ USE at: [ 85.643189][ T4317] lock_acquire+0x197/0x3f0 [ 85.649698][ T4317] _raw_read_lock_irqsave+0xac/0xf0 [ 85.656908][ T4317] send_sigurg+0x25/0x390 [ 85.663333][ T4317] sk_send_sigurg+0x6b/0xc0 [ 85.669830][ T4317] tcp_urg+0x2bc/0xb10 [ 85.675893][ T4317] tcp_rcv_established+0xac5/0x1cb0 [ 85.683087][ T4317] tcp_v6_do_rcv+0x539/0x1180 [ 85.689771][ T4317] __release_sock+0x1b9/0x420 [ 85.696725][ T4317] release_sock+0x5b/0x1b0 [ 85.703139][ T4317] sk_stream_wait_memory+0x6d8/0xe50 [ 85.710422][ T4317] tcp_sendmsg_locked+0x1c9f/0x3590 [ 85.717708][ T4317] tcp_sendmsg+0x2b/0x40 [ 85.724038][ T4317] __sys_sendto+0x423/0x580 [ 85.730540][ T4317] __x64_sys_sendto+0xda/0xf0 [ 85.737214][ T4317] do_syscall_64+0x4c/0xa0 [ 85.743631][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.751530][ T4317] } [ 85.754023][ T4317] ... key at: [] __alloc_file.__key+0x0/0x10 [ 85.762100][ T4317] ... acquired at: [ 85.765987][ T4317] _raw_read_lock_irqsave+0xac/0xf0 [ 85.771361][ T4317] send_sigio+0x2f/0x330 [ 85.776125][ T4317] kill_fasync+0x20a/0x490 [ 85.780734][ T4317] evdev_pass_values+0x54b/0xab0 [ 85.785844][ T4317] evdev_events+0x1c0/0x2f0 [ 85.790523][ T4317] input_pass_values+0x880/0x1220 [ 85.795988][ T4317] input_handle_event+0xb3f/0x1490 [ 85.801271][ T4317] input_inject_event+0x1b9/0x2c0 [ 85.806474][ T4317] evdev_write+0x326/0x470 [ 85.811092][ T4317] vfs_write+0x300/0xd00 [ 85.815515][ T4317] ksys_write+0x14d/0x250 [ 85.820012][ T4317] do_syscall_64+0x4c/0xa0 [ 85.824688][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.830753][ T4317] [ 85.833074][ T4317] [ 85.833074][ T4317] stack backtrace: [ 85.838961][ T4317] CPU: 0 PID: 4317 Comm: syz.0.17 Not tainted syzkaller #0 [ 85.846156][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.856313][ T4317] Call Trace: [ 85.859618][ T4317] [ 85.862553][ T4317] dump_stack_lvl+0x168/0x230 [ 85.867249][ T4317] ? load_image+0x3b0/0x3b0 [ 85.871753][ T4317] ? show_regs_print_info+0x20/0x20 [ 85.876949][ T4317] ? load_image+0x3b0/0x3b0 [ 85.881456][ T4317] ? print_shortest_lock_dependencies+0xf0/0x160 [ 85.887901][ T4317] __lock_acquire+0x65dd/0x7c60 [ 85.892766][ T4317] ? verify_lock_unused+0x140/0x140 [ 85.897987][ T4317] lock_acquire+0x197/0x3f0 [ 85.902490][ T4317] ? send_sigio+0x2f/0x330 [ 85.906947][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 85.912408][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 85.917787][ T4317] _raw_read_lock_irqsave+0xac/0xf0 [ 85.923103][ T4317] ? send_sigio+0x2f/0x330 [ 85.927520][ T4317] ? _raw_read_lock+0x40/0x40 [ 85.932207][ T4317] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 85.937672][ T4317] ? _raw_read_lock+0x40/0x40 [ 85.942353][ T4317] ? do_raw_spin_lock+0x11d/0x280 [ 85.947464][ T4317] send_sigio+0x2f/0x330 [ 85.951713][ T4317] kill_fasync+0x20a/0x490 [ 85.956201][ T4317] evdev_pass_values+0x54b/0xab0 [ 85.961160][ T4317] ? evdev_pass_values+0x591/0xab0 [ 85.966276][ T4317] evdev_events+0x1c0/0x2f0 [ 85.970782][ T4317] ? evdev_event+0xd0/0xd0 [ 85.975199][ T4317] input_pass_values+0x880/0x1220 [ 85.980232][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 85.985611][ T4317] input_handle_event+0xb3f/0x1490 [ 85.990728][ T4317] input_inject_event+0x1b9/0x2c0 [ 85.995757][ T4317] evdev_write+0x326/0x470 [ 86.000176][ T4317] ? evdev_read+0xb50/0xb50 [ 86.004679][ T4317] ? end_current_label_crit_section+0x14b/0x170 [ 86.010922][ T4317] ? common_file_perm+0x171/0x1c0 [ 86.015955][ T4317] ? fsnotify_perm+0x5d/0x560 [ 86.020630][ T4317] ? security_file_permission+0x75/0xa0 [ 86.026193][ T4317] ? evdev_read+0xb50/0xb50 [ 86.030712][ T4317] vfs_write+0x300/0xd00 [ 86.035065][ T4317] ? file_end_write+0x250/0x250 [ 86.039922][ T4317] ? __fget_files+0x40f/0x480 [ 86.044700][ T4317] ? __fdget_pos+0x1e2/0x370 [ 86.049307][ T4317] ? ksys_write+0x71/0x250 [ 86.053826][ T4317] ksys_write+0x14d/0x250 [ 86.058175][ T4317] ? __ia32_sys_read+0x80/0x80 [ 86.062967][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 86.068179][ T4317] do_syscall_64+0x4c/0xa0 [ 86.072605][ T4317] ? clear_bhb_loop+0x30/0x80 [ 86.077282][ T4317] ? clear_bhb_loop+0x30/0x80 [ 86.081965][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.088071][ T4317] RIP: 0033:0x7fb33a123be9 [ 86.092577][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.112187][ T4317] RSP: 002b:00007fb339772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.120610][ T4317] RAX: ffffffffffffffda RBX: 00007fb33a35b090 RCX: 00007fb33a123be9 [ 86.128589][ T4317] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000005 [ 86.136571][ T4317] RBP: 00007fb33a1a6e19 R08: 0000000000000000 R09: 0000000000000000 [ 86.144704][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.152688][ T4317] R13: 00007fb33a35b128 R14: 00007fb33a35b090 R15: 00007ffe2137a7d8 [ 86.160675][ T4317] [ 86.168152][ T4260] Bluetooth: hci0: command 0x0419 tx timeout