Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 2026/08/01 20:26:39 parsed 1 programs 2026/08/01 20:26:39 serving rpc on tcp://36329 [ 75.150358][ T5782] cgroup: Unknown subsys name 'net' [ 75.283974][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.673574][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.523942][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.534559][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.542655][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.552632][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.562528][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.569860][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.777946][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.786108][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.814175][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.822228][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.839558][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.922323][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.930605][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.937831][ T5838] bridge_slave_0: entered allmulticast mode [ 79.944585][ T5838] bridge_slave_0: entered promiscuous mode [ 79.960803][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.968153][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.975415][ T5838] bridge_slave_1: entered allmulticast mode [ 79.982601][ T5838] bridge_slave_1: entered promiscuous mode [ 80.015355][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.026932][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.052249][ T5838] team0: Port device team_slave_0 added [ 80.060658][ T5838] team0: Port device team_slave_1 added [ 80.086213][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.093296][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.119778][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.132866][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.140249][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.166635][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.211527][ T5838] hsr_slave_0: entered promiscuous mode [ 80.218219][ T5838] hsr_slave_1: entered promiscuous mode [ 80.366910][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.390108][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.409819][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.419264][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.441388][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.448665][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.456324][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.463519][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.509374][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.526416][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.537237][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.566719][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.579284][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.586378][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.599931][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.607065][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.793108][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.841284][ T5838] veth0_vlan: entered promiscuous mode [ 80.853927][ T5838] veth1_vlan: entered promiscuous mode [ 80.893428][ T5838] veth0_macvtap: entered promiscuous mode [ 80.902080][ T5838] veth1_macvtap: entered promiscuous mode [ 80.928626][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.942988][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.954772][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.964769][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.975060][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.983820][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250915][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/01 20:26:49 executed programs: 0 [ 83.147402][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.155467][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.163881][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.173296][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.182072][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.189507][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.302334][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 83.352546][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.359768][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.367012][ T5887] bridge_slave_0: entered allmulticast mode [ 83.374149][ T5887] bridge_slave_0: entered promiscuous mode [ 83.381682][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.388969][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.396181][ T5887] bridge_slave_1: entered allmulticast mode [ 83.403215][ T5887] bridge_slave_1: entered promiscuous mode [ 83.425684][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.438348][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.463612][ T5887] team0: Port device team_slave_0 added [ 83.471605][ T5887] team0: Port device team_slave_1 added [ 83.492157][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.499354][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.525294][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.538539][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.545506][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.571795][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.604437][ T5887] hsr_slave_0: entered promiscuous mode [ 83.610632][ T5887] hsr_slave_1: entered promiscuous mode [ 83.616690][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.624778][ T5887] Cannot create hsr debugfs directory [ 83.707485][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.208309][ T5086] Bluetooth: hci0: command tx timeout [ 85.948290][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.022110][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.892853][ T42] cfg80211: failed to load regulatory.db [ 86.915817][ T41] hsr_slave_0: left promiscuous mode [ 86.921887][ T41] hsr_slave_1: left promiscuous mode [ 86.927792][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.935246][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.943887][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.951595][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.959557][ T41] bridge_slave_1: left allmulticast mode [ 86.965221][ T41] bridge_slave_1: left promiscuous mode [ 86.971840][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.982517][ T41] bridge_slave_0: left allmulticast mode [ 86.989173][ T41] bridge_slave_0: left promiscuous mode [ 86.994833][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.014906][ T41] veth1_macvtap: left promiscuous mode [ 87.021146][ T41] veth0_macvtap: left promiscuous mode [ 87.026693][ T41] veth1_vlan: left promiscuous mode [ 87.032343][ T41] veth0_vlan: left promiscuous mode [ 87.290775][ T5086] Bluetooth: hci0: command tx timeout [ 87.380326][ T41] team0 (unregistering): Port device team_slave_1 removed [ 87.408594][ T41] team0 (unregistering): Port device team_slave_0 removed [ 87.435525][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.468962][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.653911][ T41] bond0 (unregistering): Released all slaves [ 87.763616][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.773321][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.783968][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.802744][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.878728][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.895807][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.907210][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.914421][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.931541][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938687][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.122701][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.162603][ T5887] veth0_vlan: entered promiscuous mode [ 88.175366][ T5887] veth1_vlan: entered promiscuous mode [ 88.217006][ T5887] veth0_macvtap: entered promiscuous mode [ 88.228717][ T5887] veth1_macvtap: entered promiscuous mode [ 88.253616][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.273038][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.294294][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303140][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312692][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.323060][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/01 20:26:54 executed programs: 2 [ 88.398874][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.406944][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.433682][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.441599][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.700349][ T5929] [ 88.702697][ T5929] ====================================================== [ 88.709703][ T5929] WARNING: possible circular locking dependency detected [ 88.716737][ T5929] syzkaller #0 Not tainted [ 88.721155][ T5929] ------------------------------------------------------ [ 88.728175][ T5929] syz.0.20/5929 is trying to acquire lock: [ 88.733982][ T5929] ffff88807b126238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 88.742904][ T5929] [ 88.742904][ T5929] but task is already holding lock: [ 88.750263][ T5929] ffff8880b8f37de8 (stock_lock){..-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 88.759044][ T5929] [ 88.759044][ T5929] which lock already depends on the new lock. [ 88.759044][ T5929] [ 88.769437][ T5929] [ 88.769437][ T5929] the existing dependency chain (in reverse order) is: [ 88.778430][ T5929] [ 88.778430][ T5929] -> #1 (stock_lock){..-.}-{2:2}: [ 88.785615][ T5929] obj_cgroup_charge+0x10a/0x630 [ 88.791058][ T5929] slab_pre_alloc_hook+0x2e2/0x300 [ 88.796688][ T5929] __kmem_cache_alloc_node+0x53/0x250 [ 88.802564][ T5929] __kmalloc_node+0xa6/0x240 [ 88.807720][ T5929] bpf_map_kmalloc_node+0xbc/0x1b0 [ 88.813384][ T5929] trie_update_elem+0x172/0xd60 [ 88.818743][ T5929] bpf_map_update_value+0x64b/0x710 [ 88.824444][ T5929] map_update_elem+0x586/0x710 [ 88.829706][ T5929] __sys_bpf+0x6b5/0x890 [ 88.834446][ T5929] __x64_sys_bpf+0x7c/0x90 [ 88.839360][ T5929] do_syscall_64+0x55/0xb0 [ 88.844294][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.850687][ T5929] [ 88.850687][ T5929] -> #0 (&trie->lock){-.-.}-{2:2}: [ 88.857972][ T5929] __lock_acquire+0x37ef/0x7d80 [ 88.863351][ T5929] lock_acquire+0x19e/0x420 [ 88.868369][ T5929] _raw_spin_lock_irqsave+0xb4/0x100 [ 88.874156][ T5929] trie_delete_elem+0x94/0x630 [ 88.879428][ T5929] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 88.885410][ T5929] trace_call_bpf+0x333/0x6c0 [ 88.890586][ T5929] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 88.896634][ T5929] perf_trace_lock_acquire+0x342/0x400 [ 88.902589][ T5929] lock_acquire+0x3ef/0x420 [ 88.907590][ T5929] mod_objcg_mlstate+0xad/0x320 [ 88.912971][ T5929] mod_objcg_state+0x44b/0x8c0 [ 88.918246][ T5929] slab_post_alloc_hook+0x358/0x4d0 [ 88.923950][ T5929] __kmem_cache_alloc_node+0x194/0x250 [ 88.929911][ T5929] __kmalloc_node+0xa6/0x240 [ 88.935013][ T5929] bpf_map_area_alloc+0x5e/0x110 [ 88.940456][ T5929] trie_alloc+0x14a/0x2a0 [ 88.945301][ T5929] map_create+0x877/0x12f0 [ 88.950228][ T5929] __sys_bpf+0x651/0x890 [ 88.954975][ T5929] __x64_sys_bpf+0x7c/0x90 [ 88.959897][ T5929] do_syscall_64+0x55/0xb0 [ 88.964822][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.971245][ T5929] [ 88.971245][ T5929] other info that might help us debug this: [ 88.971245][ T5929] [ 88.981464][ T5929] Possible unsafe locking scenario: [ 88.981464][ T5929] [ 88.988894][ T5929] CPU0 CPU1 [ 88.994244][ T5929] ---- ---- [ 88.999590][ T5929] lock(stock_lock); [ 89.003555][ T5929] lock(&trie->lock); [ 89.010129][ T5929] lock(stock_lock); [ 89.016617][ T5929] lock(&trie->lock); [ 89.020681][ T5929] [ 89.020681][ T5929] *** DEADLOCK *** [ 89.020681][ T5929] [ 89.028803][ T5929] 2 locks held by syz.0.20/5929: [ 89.033719][ T5929] #0: ffff8880b8f37de8 (stock_lock){..-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 89.042921][ T5929] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 89.052206][ T5929] [ 89.052206][ T5929] stack backtrace: [ 89.058101][ T5929] CPU: 1 PID: 5929 Comm: syz.0.20 Not tainted syzkaller #0 [ 89.065299][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.075364][ T5929] Call Trace: [ 89.078640][ T5929] [ 89.081588][ T5929] dump_stack_lvl+0x18c/0x250 [ 89.086255][ T5929] ? load_image+0x420/0x420 [ 89.090759][ T5929] ? show_regs_print_info+0x20/0x20 [ 89.095948][ T5929] ? print_circular_bug+0x12b/0x1a0 [ 89.101134][ T5929] check_noncircular+0x2fc/0x400 [ 89.106077][ T5929] ? print_deadlock_bug+0x5d0/0x5d0 [ 89.111260][ T5929] ? lockdep_lock+0xf5/0x230 [ 89.115861][ T5929] ? _find_first_zero_bit+0xd6/0x100 [ 89.121144][ T5929] __lock_acquire+0x37ef/0x7d80 [ 89.126032][ T5929] ? perf_trace_buf_alloc+0x131/0x290 [ 89.131396][ T5929] ? verify_lock_unused+0x140/0x140 [ 89.136580][ T5929] ? perf_trace_lock_acquire+0x1a7/0x400 [ 89.142197][ T5929] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 89.148771][ T5929] lock_acquire+0x19e/0x420 [ 89.153256][ T5929] ? trie_delete_elem+0x94/0x630 [ 89.158207][ T5929] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 89.164777][ T5929] ? read_lock_is_recursive+0x20/0x20 [ 89.170136][ T5929] _raw_spin_lock_irqsave+0xb4/0x100 [ 89.175409][ T5929] ? trie_delete_elem+0x94/0x630 [ 89.180330][ T5929] ? _raw_spin_lock+0x40/0x40 [ 89.184993][ T5929] ? __rwlock_init+0x150/0x150 [ 89.189758][ T5929] trie_delete_elem+0x94/0x630 [ 89.194508][ T5929] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 89.199951][ T5929] trace_call_bpf+0x333/0x6c0 [ 89.204643][ T5929] ? trace_call_bpf+0xc3/0x6c0 [ 89.209394][ T5929] ? trace_call_bpf+0xc3/0x6c0 [ 89.214160][ T5929] ? __lock_acquire+0x7d80/0x7d80 [ 89.219193][ T5929] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 89.225255][ T5929] ? mark_lock+0x94/0x320 [ 89.229569][ T5929] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 89.235115][ T5929] perf_trace_lock_acquire+0x342/0x400 [ 89.240566][ T5929] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 89.247158][ T5929] ? verify_lock_unused+0x140/0x140 [ 89.252342][ T5929] ? perf_trace_lock_acquire+0x342/0x400 [ 89.257960][ T5929] lock_acquire+0x3ef/0x420 [ 89.262447][ T5929] ? mod_objcg_mlstate+0x8c/0x320 [ 89.267468][ T5929] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 89.274042][ T5929] ? read_lock_is_recursive+0x20/0x20 [ 89.279403][ T5929] mod_objcg_mlstate+0xad/0x320 [ 89.284239][ T5929] ? mod_objcg_mlstate+0x8c/0x320 [ 89.289246][ T5929] ? mod_objcg_mlstate+0x8c/0x320 [ 89.294252][ T5929] ? drain_obj_stock+0x3a0/0x3a0 [ 89.299169][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 89.305128][ T5929] ? __lock_acquire+0x7d80/0x7d80 [ 89.310139][ T5929] mod_objcg_state+0x44b/0x8c0 [ 89.314886][ T5929] ? mod_objcg_state+0x101/0x8c0 [ 89.319804][ T5929] ? __memcg_kmem_uncharge_page+0x290/0x290 [ 89.325693][ T5929] ? percpu_ref_tryget+0x15/0x180 [ 89.330712][ T5929] slab_post_alloc_hook+0x358/0x4d0 [ 89.335903][ T5929] __kmem_cache_alloc_node+0x194/0x250 [ 89.341384][ T5929] ? bpf_map_area_alloc+0x5e/0x110 [ 89.346490][ T5929] ? bpf_map_area_alloc+0x5e/0x110 [ 89.351590][ T5929] __kmalloc_node+0xa6/0x240 [ 89.356172][ T5929] bpf_map_area_alloc+0x5e/0x110 [ 89.361100][ T5929] trie_alloc+0x14a/0x2a0 [ 89.365418][ T5929] map_create+0x877/0x12f0 [ 89.369820][ T5929] __sys_bpf+0x651/0x890 [ 89.374047][ T5929] ? bpf_link_show_fdinfo+0x390/0x390 [ 89.379423][ T5929] ? lock_chain_count+0x20/0x20 [ 89.384263][ T5929] __x64_sys_bpf+0x7c/0x90 [ 89.388672][ T5929] do_syscall_64+0x55/0xb0 [ 89.393092][ T5929] ? clear_bhb_loop+0x40/0x90 [ 89.397783][ T5929] ? clear_bhb_loop+0x40/0x90 [ 89.402457][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.407962][ T5086] Bluetooth: hci0: command tx timeout [ 89.408339][ T5929] RIP: 0033:0x7fecd799e019 [ 89.418117][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.437729][ T5929] RSP: 002b:00007fff8a3d03e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.446149][ T5929] RAX: ffffffffffffffda RBX: 00007fecd7c25fa0 RCX: 00007fecd799e019 [ 89.454104][ T5929] RDX: 0000000000000048 RSI: 0000200000001d00 RDI: 0000000000000000 [ 89.462076][ T5929] RBP: 00007fecd7a3500c R08: 0000000000000000 R09: 0000000000000000 [ 89.470061][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.478017][ T5929] R13: 00007fecd7c25fac R14: 00007fecd7c25fa0 R15: 00007fecd7c25fa0 [ 89.485981][ T5929] [ 91.447834][ T5086] Bluetooth: hci0: command tx timeout 2026/08/01 20:26:59 executed programs: 78 2026/08/01 20:27:04 executed programs: 174