last executing test programs: 92.908095ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 57.18741ms ago: executing program 0 (id=1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x1c, 0x20f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000200)={{}, 0x1, 0x1c, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000240), 0x18) 25.186366ms ago: executing program 4 (id=5): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="01") nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') 0s ago: executing program 3 (id=4): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 27.658508][ T4698] cgroup: Unknown subsys name 'net' [ 27.808575][ T4698] cgroup: Unknown subsys name 'cpuset' [ 27.810639][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.988732][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.805705][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.806338][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.810156][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.811978][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.813430][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.813591][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.813766][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.813821][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.814516][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.814857][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.815098][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.815437][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.825587][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.825777][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.825948][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.830178][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.831748][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.833312][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.836477][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.840571][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.840757][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.843895][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.845566][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.845818][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.846057][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.177845][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.177911][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.177987][ T4711] bridge_slave_0: entered allmulticast mode [ 29.178454][ T4711] bridge_slave_0: entered promiscuous mode [ 29.179438][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.179461][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.179543][ T4711] bridge_slave_1: entered allmulticast mode [ 29.179934][ T4711] bridge_slave_1: entered promiscuous mode [ 29.188851][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.191010][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.224650][ T4711] team0: Port device team_slave_0 added [ 29.234121][ T4711] team0: Port device team_slave_1 added [ 29.245489][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.245520][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.245538][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.262611][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.264036][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.269334][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.283458][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.283539][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.283597][ T4720] bridge_slave_0: entered allmulticast mode [ 29.284017][ T4720] bridge_slave_0: entered promiscuous mode [ 29.285063][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.285087][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.285137][ T4720] bridge_slave_1: entered allmulticast mode [ 29.285560][ T4720] bridge_slave_1: entered promiscuous mode [ 29.294312][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.295224][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.302131][ T4720] team0: Port device team_slave_0 added [ 29.304795][ T4711] hsr_slave_0: entered promiscuous mode [ 29.306405][ T4711] hsr_slave_1: entered promiscuous mode [ 29.314096][ T4720] team0: Port device team_slave_1 added [ 29.327552][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.327637][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.327695][ T4723] bridge_slave_0: entered allmulticast mode [ 29.328101][ T4723] bridge_slave_0: entered promiscuous mode [ 29.328907][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.329048][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.329106][ T4723] bridge_slave_1: entered allmulticast mode [ 29.329558][ T4723] bridge_slave_1: entered promiscuous mode [ 29.336161][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.337061][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.341477][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.342792][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.347148][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.348121][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.348128][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.348143][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.357902][ T4720] hsr_slave_0: entered promiscuous mode [ 29.358212][ T4720] hsr_slave_1: entered promiscuous mode [ 29.358399][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 29.358432][ T4720] Cannot create hsr debugfs directory [ 29.374282][ T4723] team0: Port device team_slave_0 added [ 29.378668][ T4723] team0: Port device team_slave_1 added [ 29.409855][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.409880][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.409897][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.410745][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.410753][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.410766][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.417995][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.418082][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.418193][ T4710] bridge_slave_0: entered allmulticast mode [ 29.418618][ T4710] bridge_slave_0: entered promiscuous mode [ 29.429896][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.429973][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.430025][ T4710] bridge_slave_1: entered allmulticast mode [ 29.430678][ T4710] bridge_slave_1: entered promiscuous mode [ 29.453106][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.455000][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.455080][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.455203][ T4712] bridge_slave_0: entered allmulticast mode [ 29.455617][ T4712] bridge_slave_0: entered promiscuous mode [ 29.461130][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.469103][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.470470][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.471821][ T4712] bridge_slave_1: entered allmulticast mode [ 29.473330][ T4712] bridge_slave_1: entered promiscuous mode [ 29.476304][ T4723] hsr_slave_0: entered promiscuous mode [ 29.476604][ T4723] hsr_slave_1: entered promiscuous mode [ 29.476800][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 29.476810][ T4723] Cannot create hsr debugfs directory [ 29.505747][ T4710] team0: Port device team_slave_0 added [ 29.516663][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.517995][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.518889][ T4710] team0: Port device team_slave_1 added [ 29.543345][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.543370][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.543386][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.543985][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.543993][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.544006][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.548117][ T4712] team0: Port device team_slave_0 added [ 29.549509][ T4712] team0: Port device team_slave_1 added [ 29.572868][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.572900][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.577315][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.587249][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.587270][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.587293][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.590513][ T4710] hsr_slave_0: entered promiscuous mode [ 29.590826][ T4710] hsr_slave_1: entered promiscuous mode [ 29.596872][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.596884][ T4710] Cannot create hsr debugfs directory [ 29.608751][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.611469][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.625508][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.628566][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.631829][ T4712] hsr_slave_0: entered promiscuous mode [ 29.632139][ T4712] hsr_slave_1: entered promiscuous mode [ 29.632325][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.632334][ T4712] Cannot create hsr debugfs directory [ 29.636849][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.639236][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.641039][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.643482][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.667486][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.669645][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.670251][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.671947][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.673867][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.675956][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.688290][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.690586][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.695782][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.695834][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.695986][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.696021][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.714670][ T4723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.716960][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.724457][ T4723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.726928][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.737244][ T4723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.739629][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.742400][ T4723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.744615][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.756070][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.756111][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.756189][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.756218][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.784919][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.789900][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.792371][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.793513][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.796138][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.809889][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.812147][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.813874][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.815952][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.819427][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.820775][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.823408][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.824768][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.833722][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.847110][ T848] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.847157][ T848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.850876][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.859353][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.861457][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.863067][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.865166][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.867847][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.867883][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.873320][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.875438][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.875792][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.877896][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.889000][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.906331][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.910097][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.910132][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.910583][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.910606][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.949737][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.952711][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.952754][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.961553][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.976389][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.004904][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.006814][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.015774][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.015828][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.016186][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.016203][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.017108][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.017130][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.020677][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.020697][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.043724][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.075394][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.084748][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.084790][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.085536][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.085571][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.105410][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.238182][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.248320][ T4720] veth0_vlan: entered promiscuous mode [ 30.256272][ T4711] veth0_vlan: entered promiscuous mode [ 30.262988][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.269894][ T4720] veth1_vlan: entered promiscuous mode [ 30.290899][ T4711] veth1_vlan: entered promiscuous mode [ 30.294268][ T4723] veth0_vlan: entered promiscuous mode [ 30.296772][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.299858][ T4720] veth0_macvtap: entered promiscuous mode [ 30.309442][ T4720] veth1_macvtap: entered promiscuous mode [ 30.315052][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.321930][ T4711] veth0_macvtap: entered promiscuous mode [ 30.329740][ T4723] veth1_vlan: entered promiscuous mode [ 30.331981][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.335649][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.343361][ T4711] veth1_macvtap: entered promiscuous mode [ 30.348992][ T848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.349238][ T848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.349268][ T848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.349289][ T848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.354940][ T4712] veth0_vlan: entered promiscuous mode [ 30.356832][ T4712] veth1_vlan: entered promiscuous mode [ 30.371611][ T4710] veth0_vlan: entered promiscuous mode [ 30.391958][ T4712] veth0_macvtap: entered promiscuous mode [ 30.394089][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.395754][ T4710] veth1_vlan: entered promiscuous mode [ 30.403291][ T4712] veth1_macvtap: entered promiscuous mode [ 30.411972][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.416370][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.422441][ T1469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.422494][ T1469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.422514][ T1469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.422530][ T1469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.425002][ T4723] veth0_macvtap: entered promiscuous mode [ 30.426323][ T4723] veth1_macvtap: entered promiscuous mode [ 30.438951][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.438977][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.440955][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.445607][ T4710] veth0_macvtap: entered promiscuous mode [ 30.449406][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.452476][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.464768][ T1469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464882][ T1469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464901][ T1469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464927][ T1469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464945][ T1469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464960][ T1469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464976][ T1469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464990][ T1469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.480274][ T4710] veth1_macvtap: entered promiscuous mode [ 30.486385][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.489377][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.489615][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.489626][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.521735][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.522453][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.523065][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.523089][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.530041][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.530071][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.534729][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.534758][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.562835][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.562866][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.570592][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.576550][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.576585][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.584421][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.584452][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.601607][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.601631][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.658730][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.658767][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.683254][ T4893] input: syz0 as /devices/virtual/input/input2 [ 30.693398][ T4891] loop0: detected capacity change from 0 to 32768 [ 30.702956][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.711519][ T11] [ 30.711963][ T11] ====================================================== [ 30.713081][ T11] WARNING: possible circular locking dependency detected [ 30.714146][ T11] syzkaller #0 Not tainted [ 30.714841][ T11] ------------------------------------------------------ [ 30.716068][ T11] kworker/0:1/11 is trying to acquire lock: [ 30.717097][ T11] ffff0000cb1462c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x2c/0xa4 [ 30.718905][ T11] [ 30.718905][ T11] but task is already holding lock: [ 30.720274][ T11] ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 30.721919][ T11] [ 30.721919][ T11] which lock already depends on the new lock. [ 30.721919][ T11] [ 30.723986][ T11] [ 30.723986][ T11] the existing dependency chain (in reverse order) is: [ 30.725537][ T11] [ 30.725537][ T11] -> #4 (&buf->lock){+.+.}-{4:4}: [ 30.726818][ T11] __mutex_lock+0x164/0xf14 [ 30.727703][ T11] mutex_lock_nested+0x24/0x30 [ 30.728628][ T11] tty_buffer_flush+0x78/0x2b4 [ 30.729562][ T11] tty_ldisc_flush+0x30/0x7c [ 30.730454][ T11] __do_SAK+0x21c/0x604 [ 30.731296][ T11] vc_SAK+0x74/0xa4 [ 30.732061][ T11] process_scheduled_works+0x788/0x10b8 [ 30.733166][ T11] worker_thread+0x798/0xbd0 [ 30.734088][ T11] kthread+0x304/0x3d4 [ 30.734933][ T11] ret_from_fork+0x10/0x20 [ 30.735849][ T11] [ 30.735849][ T11] -> #3 (console_lock){+.+.}-{0:0}: [ 30.737268][ T11] console_lock+0x8c/0xac [ 30.738136][ T11] console_call_setup+0x54/0xa4 [ 30.739114][ T11] try_enable_preferred_console+0x444/0x5a4 [ 30.740299][ T11] register_console+0x3a0/0xb98 [ 30.741249][ T11] univ8250_console_init+0x5c/0x84 [ 30.742282][ T11] console_init+0x14c/0x89c [ 30.743194][ T11] start_kernel+0x25c/0x3c0 [ 30.744089][ T11] __primary_switched+0x8c/0x94 [ 30.745056][ T11] [ 30.745056][ T11] -> #2 (console_mutex){+.+.}-{4:4}: [ 30.746226][ T4891] loop1: detected capacity change from 0 to 32768 [ 30.747588][ T11] __mutex_lock+0x164/0xf14 [ 30.748545][ T11] mutex_lock_nested+0x24/0x30 [ 30.749495][ T11] console_list_lock+0x90/0xa8 [ 30.750464][ T11] serial_core_register_port+0x1284/0x1b0c [ 30.751638][ T11] serial_ctrl_register_port+0x28/0x38 [ 30.752731][ T11] uart_add_one_port+0x28/0x38 [ 30.753716][ T11] pl011_register_port+0x194/0x2ec [ 30.754765][ T11] sbsa_uart_probe+0x334/0x46c [ 30.755741][ T11] platform_probe+0x100/0x1a4 [ 30.756656][ T11] really_probe+0x29c/0x800 [ 30.757524][ T11] __driver_probe_device+0x1e0/0x350 [ 30.758566][ T11] driver_probe_device+0x6c/0x19c [ 30.759555][ T11] __device_attach_driver+0x198/0x2f8 [ 30.760609][ T11] bus_for_each_drv+0x144/0x1dc [ 30.760953][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.762826][ T11] __device_attach+0x248/0x390 [ 30.763809][ T11] device_initial_probe+0x90/0xc8 [ 30.764786][ T11] bus_probe_device+0x58/0x120 [ 30.765721][ T11] device_add+0x6cc/0x9e0 [ 30.766563][ T11] platform_device_add+0x3dc/0x6f0 [ 30.767606][ T11] platform_device_register_full+0x4fc/0x5ac [ 30.768764][ T11] acpi_create_platform_device+0x50c/0x6e4 [ 30.769893][ T11] acpi_default_enumeration+0x200/0x438 [ 30.770991][ T11] acpi_bus_attach+0x64c/0x7e0 [ 30.771916][ T11] acpi_dev_for_one_check+0xa0/0xb4 [ 30.772951][ T11] device_for_each_child+0xf4/0x184 [ 30.773913][ T11] acpi_dev_for_each_child+0x98/0xe4 [ 30.774945][ T11] acpi_bus_attach+0x20c/0x7e0 [ 30.775843][ T11] acpi_dev_for_one_check+0xa0/0xb4 [ 30.776814][ T11] device_for_each_child+0xf4/0x184 [ 30.777799][ T11] acpi_dev_for_each_child+0x98/0xe4 [ 30.778806][ T11] acpi_bus_attach+0x20c/0x7e0 [ 30.779755][ T11] acpi_bus_scan+0x104/0x310 [ 30.780681][ T11] acpi_scan_init+0x168/0x3cc [ 30.781608][ T11] acpi_init+0x15c/0x1f4 [ 30.782289][ T848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.782320][ T848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.785097][ T11] do_one_initcall+0x274/0xc38 [ 30.786025][ T11] do_initcall_level+0x12c/0x1c4 [ 30.786995][ T11] do_initcalls+0x70/0xd0 [ 30.787886][ T11] do_basic_setup+0x7c/0x90 [ 30.788851][ T11] kernel_init_freeable+0x268/0x3a8 [ 30.789916][ T11] kernel_init+0x24/0x1dc [ 30.790835][ T11] ret_from_fork+0x10/0x20 [ 30.791699][ T11] [ 30.791699][ T11] -> #1 (&port->mutex){+.+.}-{4:4}: [ 30.793028][ T11] __mutex_lock+0x164/0xf14 [ 30.793935][ T11] mutex_lock_nested+0x24/0x30 [ 30.794866][ T11] uart_set_termios+0x74/0x58c [ 30.795806][ T11] tty_set_termios+0x3b0/0x6d0 [ 30.796708][ T11] set_termios+0x428/0x618 [ 30.797557][ T11] tty_mode_ioctl+0x45c/0x7f4 [ 30.798459][ T11] n_tty_ioctl_helper+0xa8/0x2d8 [ 30.799420][ T11] n_tty_ioctl+0x190/0x434 [ 30.800263][ T11] tty_ioctl+0x900/0xd50 [ 30.801095][ T11] __arm64_sys_ioctl+0x154/0x1cc [ 30.802055][ T11] invoke_syscall+0x98/0x244 [ 30.802950][ T11] el0_svc_common+0xec/0x23c [ 30.803856][ T11] do_el0_svc+0x4c/0x5c [ 30.804702][ T11] el0_svc+0x64/0x260 [ 30.805504][ T11] el0t_64_sync_handler+0x48/0x148 [ 30.806521][ T11] el0t_64_sync+0x198/0x19c [ 30.807435][ T11] [ 30.807435][ T11] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 30.808828][ T11] __lock_acquire+0x17c0/0x2ebc [ 30.809722][ T11] lock_acquire+0x140/0x364 [ 30.810636][ T11] down_write+0x50/0xc0 [ 30.811410][ T11] n_tty_flush_buffer+0x2c/0xa4 [ 30.812359][ T11] tty_buffer_flush+0x1b8/0x2b4 [ 30.813329][ T11] tty_ldisc_flush+0x30/0x7c [ 30.814291][ T11] __do_SAK+0x21c/0x604 [ 30.815159][ T11] vc_SAK+0x74/0xa4 [ 30.815946][ T11] process_scheduled_works+0x788/0x10b8 [ 30.816994][ T11] worker_thread+0x798/0xbd0 [ 30.817883][ T11] kthread+0x304/0x3d4 [ 30.818687][ T11] ret_from_fork+0x10/0x20 [ 30.819555][ T11] [ 30.819555][ T11] other info that might help us debug this: [ 30.819555][ T11] [ 30.821286][ T11] Chain exists of: [ 30.821286][ T11] &tty->termios_rwsem --> console_lock --> &buf->lock [ 30.821286][ T11] [ 30.823417][ T11] Possible unsafe locking scenario: [ 30.823417][ T11] [ 30.824751][ T11] CPU0 CPU1 [ 30.825727][ T11] ---- ---- [ 30.826697][ T11] lock(&buf->lock); [ 30.827450][ T11] lock(console_lock); [ 30.828596][ T11] lock(&buf->lock); [ 30.829778][ T11] lock(&tty->termios_rwsem); [ 30.830608][ T11] [ 30.830608][ T11] *** DEADLOCK *** [ 30.830608][ T11] [ 30.832035][ T11] 5 locks held by kworker/0:1/11: [ 30.832934][ T11] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 30.834867][ T11] #1: ffff80008ec47c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 30.837241][ T11] #2: ffff800088cec860 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x2c/0xa4 [ 30.838692][ T11] #3: ffff0000cb1460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x20/0x90 [ 30.840398][ T11] #4: ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 30.842013][ T11] [ 30.842013][ T11] stack backtrace: [ 30.843070][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT [ 30.844630][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 30.846425][ T11] Workqueue: events vc_SAK [ 30.847230][ T11] Call trace: [ 30.847824][ T11] show_stack+0x2c/0x3c (C) [ 30.848682][ T11] __dump_stack+0x30/0x40 [ 30.849497][ T11] dump_stack_lvl+0xd8/0x12c [ 30.850365][ T11] dump_stack+0x1c/0x28 [ 30.851107][ T11] print_circular_bug+0x328/0x330 [ 30.851999][ T11] check_noncircular+0x158/0x174 [ 30.852886][ T11] __lock_acquire+0x17c0/0x2ebc [ 30.853797][ T11] lock_acquire+0x140/0x364 [ 30.854660][ T11] down_write+0x50/0xc0 [ 30.855381][ T11] n_tty_flush_buffer+0x2c/0xa4 [ 30.856252][ T11] tty_buffer_flush+0x1b8/0x2b4 [ 30.857131][ T11] tty_ldisc_flush+0x30/0x7c [ 30.857966][ T11] __do_SAK+0x21c/0x604 [ 30.858701][ T11] vc_SAK+0x74/0xa4 [ 30.859370][ T11] process_scheduled_works+0x788/0x10b8 [ 30.860349][ T11] worker_thread+0x798/0xbd0 [ 30.861192][ T11] kthread+0x304/0x3d4 [ 30.861935][ T11] ret_from_fork+0x10/0x20 [ 30.865337][ T4719] Bluetooth: hci1: command tx timeout [ 30.910439][ T4719] Bluetooth: hci3: command tx timeout [ 30.910471][ T4719] Bluetooth: hci2: command tx timeout [ 30.910643][ T4724] Bluetooth: hci4: command tx timeout [ 30.910664][ T4724] Bluetooth: hci0: command tx timeout [ 31.005338][ T4897] UBIFS error (pid: 4897): cannot open "ubi0_0", error -19 [ 32.907166][ T4714] Bluetooth: hci1: command tx timeout [ 32.987128][ T4714] Bluetooth: hci2: command tx timeout [ 32.997189][ T4714] Bluetooth: hci0: command tx timeout [ 32.997204][ T4719] Bluetooth: hci4: command tx timeout [ 32.997213][ T4714] Bluetooth: hci3: command tx timeout [ 34.987239][ T4724] Bluetooth: hci1: command tx timeout [ 35.067342][ T4724] Bluetooth: hci3: command tx timeout [ 35.067537][ T4719] Bluetooth: hci0: command tx timeout [ 35.067539][ T4724] Bluetooth: hci4: command tx timeout [ 35.067555][ T4719] Bluetooth: hci2: command tx timeout [ 37.067124][ T4719] Bluetooth: hci1: command tx timeout [ 37.147173][ T4719] Bluetooth: hci4: command tx timeout [ 37.147199][ T4719] Bluetooth: hci0: command tx timeout [ 37.147221][ T4719] Bluetooth: hci3: command tx timeout [ 37.147237][ T4719] Bluetooth: hci2: command tx timeout