program: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000900)) r3 = socket(0x1, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001600)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) write$binfmt_script(r8, &(0x7f00000000c0), 0x28) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r11, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r8, 0x0}]) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x14de, &(0x7f0000002a40)="$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") r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r12, &(0x7f0000002ec0)=""/4092, 0x691) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'vxcan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5af8c1216059d529739a9f905b7483bd756fe962d01a0e4f65b814147b30a90166dc6ecefadc8bf63de3d495d8982dd76168bff4d77ae2addfee195783765887e49e35bcd3b5116646fa6ebf7b05fc3da352c16428e61015304b8036583486f04ef400469720f703159850d838233bd0af1417b61102d4bff3fad4ed7d5e9487d7ec12ce48e7230501091bb0e33da531c1e203b56af00e932c0c44210450a9807c0ab7c46d80450fb3df42edea524145e2fdd5eac63b13b75115738938819e8139e44c71274e06a67477a09c52accb1d3a267529c70460a24dc283c31864b8db72d46200b514", 0xe6}, {&(0x7f00000002c0)="f041e1ea3f50777c1caa497c340a5bd234ec5605d023201a3ba707b5ea265b7ad2436558cd509b44aecdcb5743420792857dc6f30e882c17db71790c5429e053c96649bba118bfe34f054602581771e4ae88c17450048b541dbc958d22f5c8c7e7600f664221565d525635d4ea8f9df33a41481084ccb3739529e162aa7244de2f69ffd3e96dc478e68b0d99e5a7b11ab76c0e6c278d337a9519af6f92d5b50654494afe7b56be0e83d4d0a81623cfbee6aec06d4165b373c9cdd0b1dff169a639e583330ac8d9f72fbd2b", 0xcb}, {&(0x7f00000003c0)="fd2639f361d91dd02fc91e808316f132a83ff5f0d6e6f3ca8ec968822dec788572809ec7d6a66e25f64db16a13dfb905a25acd842babd612196b270c7fc62a18913cf17fe5dd727ccabff9c3fc3089665493fd1f68b6cdd665e6995492901e0aecdf2cadfe7cdc45349552e0daf131e6f2ea598f1a7654b06d0b179dc29b2c9e259625897209b0602e924a23296623c99f855dee59f294c068d08157f466c731fb249d16d8cc7a287c4f1f74b6", 0xad}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x0, [{@multicast1, 0xc}, {@loopback, 0x10000}, {@rand_addr=0x64010102, 0x4bb}, {@loopback, 0xfffffff7}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}], 0xe0}}, {{&(0x7f0000000580)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000005c0)="865768cdadf90a6d3f567db8494a3e79e4872b3483520fc2a59ea34ebbe0deeb119c3e985dbfcd9e77c592da1fefbd7a8d881726c29962028d228c24796a02c2adb0a6f5489c2cea0432c44ce3156136563e4af46ca88e3206f08d7017feca3dd6fd6b9ec8242be22317ce6e33b342071f753d89a540bdc7ae36ac2582caf936479c9a9370f61ba3034c240d3e314717cda7da7fe47f0513532c1fcdd338969bd2d188ff41776d40cdaa049878b3989b8c32c4d20bd3a257425b0d2ada5443c84550c8592271d279b8da7d85", 0xcc}, {&(0x7f00000006c0)="b5ed9de8f51a287ee1dc12e4d99c55ea482c3cc1c0dba96334f5244974f04fac3151b1cd03996d87a5767faa1bb9abed", 0x30}, {&(0x7f0000000700)="5b70f6e4", 0x4}, {&(0x7f0000000740)="0afd9b74d859f863b07108d13e1c1d682892ca123221b12d78ad3ae2dc226e780aad99bd083d74d1c870654cec63bcb60e4181d6860cf124dbfa9b3e818ceec1898de9a1c5fe7a61df2a3f4c5ca10f0544a9abde2f09ad6f071c5d09f17fb739ad896ce877676f46174ea23315e06d6edcac817d0c57f4bee258d17d6d33473bdd2320b410ebd654130871ed43e36e32361c69c34b3a10dd9ccd3aa1eb9cd6349185c8", 0xa3}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="087e61eb83e061d277e7d2b0a4d10011a54de0a97f557688312904f0a88c4b664fb7094e122c314699bae933495590ef2971bbec500ccb7c9244a4ca8ebd6824272c3b6bfaa88e99e7557a3688a8f63e39ab9ae3a4220124ae214568dc049f430685474635f63bc650dc2986fdc02c7f56cd9ac93e327e8935bac1d17766fde878ba4702f5609143b07d402ffa6745f0aa6551ca8d0b528b671ab39075cbe6687e7f4d812af65b6fdc7f9f9185d2caadd73857cae16682", 0xb7}, {&(0x7f00000009c0)="1ca9ed349b3ba0b018b42556dcfb444dc663790b85afac6200b3573300b7cb713a87e57dd6081a6bdf70c169c7029c8ab7d29986fa09500d192ee8a0f783ff7f2482914e28913ae2301ea3c7c1019cc6c7b73c80f3347f2ca9440e9aafd0062a29d9cf190e89b7e50aa858b5019c0bfc223a374427ded645d3ac525e513f84ca020001f12f10d3a977cf3f7c2b984fcada409c604568659f9a7b39a4ac26119bee15c3ba6dc94a0c4df226ff302bfe03650dad2dcdf8657857c0ff0f73c093220cdf739aa9229a7e4b7ca5511758268aa40afeb427bdc3221d7cf719a90534ff297180ab35488a17edf7410db56e45120885a47a2756", 0xf6}, {&(0x7f00000014c0)="112534f3f6e3b5d998f43543d37f1654743209f84d0f2617ced666e2d61e7cd2872c300375b94c8a3a34417ceafb99c5bd6a6675", 0x34}, {&(0x7f0000000ac0)="7e2cabc17771479cf7ce314bf7b1a36289323378b13956adaf29332c4aa3612f88d1f1986a859a2b62e85751502ee9142d36fd53cf9667940d16b2eb47314d12821e98b271e007251952e436d822511be7f9", 0x52}], 0x4, &(0x7f0000000b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="03d102f495ca305dc833174ee6c78a1d5c9a76230ee44b92e6c3cc12162bb6cc479c88615403f30d9af8931cb06fc769ed30560d7b7d5556340489d393566a9b8871cea99cca5433c766d84fea", 0x4d}, {&(0x7f0000000c40)="2485b2915bae36b11a76ea6ef425fb92194231638f8a7b", 0x17}, {&(0x7f0000000c80)="bd2edba6a8690861fb44d20d3bd65921b599a019e093a6b1922d07d0f88f34d34f5a90657ec8e8bd73b4f2f97b85a2793126504d6353c8bcf2dc9c41e2f3f79129f5f195", 0x44}, {&(0x7f0000000d00)="8cbad33143f40f05fd268871ad77908fb62a3d997dd976068dd40b36b3e0873f344d957bb077a64283037cf86847654ab3a312a28899689b6eba8c4be695dabcac3875ad08ed807f88549da6e44711e2d70c7a3b27529761052ff94ce2dcea15c5d29fba5c816dddbb67967b8f0b99b80c6b7c4e38bd1bacf54d84f720d40f824839945e773d2a51c1d66962831c19c73f70dad87e7e574764145d7c0a25aa18b4091e73770bf1930dcf3dee847ac6bcd1acc42c4ac3f96c8740357b42172192496e3066f4", 0xc5}, {&(0x7f0000000e00)="573d23a73367a7797c218f66dfecae710243", 0x12}], 0x5}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000ec0)="09b8b8acdbf6435b91127caee176e192c3a7b41c6bfc31d8c2bc3e3d44a4607d2b37efa4c6876d1fe8885826a64356b8839e880adbe94548d0a59fc621aa9a88033964b04bafdde863f287093b0cb742a906e106ebace8bf6dfe15be25b1cbc034316520b4452913df022843b5c625b35ddbd7363a21f930c2aa4b560d7b3e2c7a6daac4f9432fcb8bca25afcb343b65f3bcb4e8937ec1ad51cf2a88a6bd84ff3db98ed15655cd1ed654a91173b8455a6a8aaf4570cb759e5aa2838cc5", 0xbd}, {&(0x7f0000000f80)="fb73aadd915cf506cec61bc358297c1ba89ee8a4d4d325aa5bb50579a2d66132f5bba878dcaabd389a5661320f5ebe1aabc2335a013222a574ed926e9d55d8cf899d", 0x42}], 0x2, &(0x7f0000001040)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x31}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xea, 0x1, 0x8, [{@multicast1, 0x7f}, {@broadcast, 0x8}, {@multicast1, 0x5}, {@loopback, 0x80000001}, {@empty, 0x8}, {@private=0xa010100, 0xffffffff}, {@multicast2, 0x4}, {@multicast2, 0xfffffff0}, {@loopback, 0x8}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0xd8}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001180)="14eb833b00d104d6c17d05360a6988fa6f6c2c8ed601c4294a3872eef1712712e042283af2c488aa223b3feb2f647dd017929dc6f054c93c0186cb9da7d3afbd369bfc74f26124ff1ba8f8ad6dee4ebb62fb6912b28f8c41d64510135be2ccaf44f3669489a00abd9277", 0x6a}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000100000009000000000000007c000000000000000000000007000000862b000000020010137c84c65852e2cb2da0d201d1da020e506819e43a0eb351c2faf85cf0b24994a4c626a3cd93a19bf6600207949ba8084e0001443474737f00000100010000e0000002000001007f000001000000062a010101fffffffcac1414bb03000000e000000180000001890b66ac1414bb64010100000000001c00000000000000000000000800000009c1b005f2b728acf4a171e19739ab850262d95e1e394bf079847ec0896646b4b3eef08ef088829d2effbbc034c41c29", @ANYRES32=r13, @ANYBLOB="0a010101ac1414bb00000000"], 0xb8}}], 0x6, 0xc080) [ 87.063521][ T4682] Bluetooth: hci0: command tx timeout [ 87.089965][ T5338] [ 87.091038][ T5338] ====================================================== [ 87.093874][ T5338] WARNING: possible circular locking dependency detected [ 87.098355][ T5338] syzkaller #0 Not tainted [ 87.105886][ T5338] ------------------------------------------------------ [ 87.111890][ T5338] syz.0.0/5338 is trying to acquire lock: [ 87.115728][ T5338] ffff888011ca7840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 87.120605][ T5338] [ 87.120605][ T5338] but task is already holding lock: [ 87.123741][ T5338] ffff888011ca7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 87.127947][ T5338] [ 87.127947][ T5338] which lock already depends on the new lock. [ 87.127947][ T5338] [ 87.132494][ T5338] [ 87.132494][ T5338] the existing dependency chain (in reverse order) is: [ 87.136277][ T5338] [ 87.136277][ T5338] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 87.139473][ T5338] __mutex_lock+0x187/0x1350 [ 87.141791][ T5338] l2cap_info_timeout+0x60/0xa0 [ 87.144191][ T5338] process_scheduled_works+0xad1/0x1770 [ 87.146823][ T5338] worker_thread+0x8a0/0xda0 [ 87.149102][ T5338] kthread+0x711/0x8a0 [ 87.151074][ T5338] ret_from_fork+0x599/0xb30 [ 87.153298][ T5338] ret_from_fork_asm+0x1a/0x30 [ 87.155622][ T5338] [ 87.155622][ T5338] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 87.159952][ T5338] __lock_acquire+0x15a6/0x2cf0 [ 87.162406][ T5338] lock_acquire+0x117/0x340 [ 87.164645][ T5338] __flush_work+0x6b8/0xbc0 [ 87.166884][ T5338] __cancel_work_sync+0xbe/0x110 [ 87.169242][ T5338] l2cap_conn_del+0x402/0x5b0 [ 87.171622][ T5338] hci_conn_hash_flush+0x10d/0x260 [ 87.174049][ T5338] hci_dev_close_sync+0x821/0x1100 [ 87.176519][ T5338] hci_dev_close+0x108/0x270 [ 87.178847][ T5338] sock_do_ioctl+0xdc/0x300 [ 87.180925][ T5338] sock_ioctl+0x576/0x790 [ 87.183112][ T5338] __se_sys_ioctl+0xfc/0x170 [ 87.185398][ T5338] do_syscall_64+0xfa/0xf80 [ 87.187620][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.190385][ T5338] [ 87.190385][ T5338] other info that might help us debug this: [ 87.190385][ T5338] [ 87.194998][ T5338] Possible unsafe locking scenario: [ 87.194998][ T5338] [ 87.198353][ T5338] CPU0 CPU1 [ 87.200877][ T5338] ---- ---- [ 87.203285][ T5338] lock(&conn->lock#2); [ 87.205241][ T5338] lock((work_completion)(&(&conn->info_timer)->work)); [ 87.209643][ T5338] lock(&conn->lock#2); [ 87.212620][ T5338] lock((work_completion)(&(&conn->info_timer)->work)); [ 87.215701][ T5338] [ 87.215701][ T5338] *** DEADLOCK *** [ 87.215701][ T5338] [ 87.219025][ T5338] 5 locks held by syz.0.0/5338: [ 87.221121][ T5338] #0: ffff88804127cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_close+0x100/0x270 [ 87.225217][ T5338] #1: ffff88804127c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 87.229174][ T5338] #2: ffffffff8f685688 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 87.233205][ T5338] #3: ffff888011ca7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 87.237068][ T5338] #4: ffffffff8e1419e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 87.240519][ T5338] [ 87.240519][ T5338] stack backtrace: [ 87.243053][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.243070][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.243078][ T5338] Call Trace: [ 87.243084][ T5338] [ 87.243088][ T5338] dump_stack_lvl+0x189/0x250 [ 87.243101][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.243111][ T5338] ? __pfx__printk+0x10/0x10 [ 87.243122][ T5338] ? print_lock_name+0xde/0x100 [ 87.243132][ T5338] print_circular_bug+0x2e2/0x300 [ 87.243142][ T5338] check_noncircular+0x12e/0x150 [ 87.243152][ T5338] __lock_acquire+0x15a6/0x2cf0 [ 87.243162][ T5338] ? do_raw_spin_unlock+0x4d/0x240 [ 87.243175][ T5338] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.243189][ T5338] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.243205][ T5338] ? __flush_work+0xd2/0xbc0 [ 87.243219][ T5338] lock_acquire+0x117/0x340 [ 87.243228][ T5338] ? __flush_work+0xd2/0xbc0 [ 87.243240][ T5338] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.243259][ T5338] ? __flush_work+0xd2/0xbc0 [ 87.243271][ T5338] __flush_work+0x6b8/0xbc0 [ 87.243279][ T5338] ? __flush_work+0xd2/0xbc0 [ 87.243286][ T5338] ? __flush_work+0xd2/0xbc0 [ 87.243292][ T5338] ? __pfx___flush_work+0x10/0x10 [ 87.243300][ T5338] ? __pfx_wq_barrier_func+0x10/0x10 [ 87.243307][ T5338] ? __pfx___cancel_work+0x10/0x10 [ 87.243316][ T5338] ? l2cap_conn_del+0x379/0x5b0 [ 87.243330][ T5338] ? __cancel_work_sync+0x5c/0x110 [ 87.243340][ T5338] __cancel_work_sync+0xbe/0x110 [ 87.243351][ T5338] l2cap_conn_del+0x402/0x5b0 [ 87.243363][ T5338] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 87.243377][ T5338] hci_conn_hash_flush+0x10d/0x260 [ 87.243392][ T5338] hci_dev_close_sync+0x821/0x1100 [ 87.243406][ T5338] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 87.243418][ T5338] ? __cancel_work_sync+0x5c/0x110 [ 87.243429][ T5338] hci_dev_close+0x108/0x270 [ 87.243442][ T5338] sock_do_ioctl+0xdc/0x300 [ 87.243456][ T5338] ? __pfx_sock_do_ioctl+0x10/0x10 [ 87.243468][ T5338] ? do_futex+0x395/0x420 [ 87.243480][ T5338] sock_ioctl+0x576/0x790 [ 87.243488][ T5338] ? __pfx_sock_ioctl+0x10/0x10 [ 87.243498][ T5338] ? __fget_files+0x3a0/0x420 [ 87.243507][ T5338] ? __fget_files+0x2a/0x420 [ 87.243517][ T5338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.243526][ T5338] ? __pfx_sock_ioctl+0x10/0x10 [ 87.243538][ T5338] __se_sys_ioctl+0xfc/0x170 [ 87.243556][ T5338] do_syscall_64+0xfa/0xf80 [ 87.243567][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.243578][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 87.243590][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.243597][ T5338] RIP: 0033:0x7f657778f7c9 [ 87.243606][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.243611][ T5338] RSP: 002b:00007f65786c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.243621][ T5338] RAX: ffffffffffffffda RBX: 00007f65779e5fa0 RCX: 00007f657778f7c9 [ 87.243626][ T5338] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000c [ 87.243630][ T5338] RBP: 00007f6577813f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.243634][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.243639][ T5338] R13: 00007f65779e6038 R14: 00007f65779e5fa0 R15: 00007ffed9cf7af8 [ 87.243647][ T5338] [ 87.515889][ T5339] loop0: detected capacity change from 0 to 256 [ 87.583327][ T5339] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 89.079376][ T4682] Bluetooth: hci0: command tx timeout [ 91.160006][ T4682] Bluetooth: hci0: command tx timeout [ 91.642373][ T787] cfg80211: failed to load regulatory.db