last executing test programs: 775.052097ms ago: executing program 0 (id=1): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 753.917872ms ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000a00)={0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x7, 0x26, 0xffffffb9, 0x1a}, 0x9c) 716.847366ms ago: executing program 3 (id=4): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) unshare(0x20000400) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r1, 0x701}], 0x1, 0x0, 0x0, 0x0) 696.695172ms ago: executing program 0 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), 0x4) 594.383222ms ago: executing program 0 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a00000000000000000000001400053f000000000000000000000000000000000c00090008"], 0x3c}}, 0x4c810) 594.256636ms ago: executing program 0 (id=8): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}], 0x1) semop(r0, &(0x7f0000001240)=[{0x2, 0x102}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 532.794688ms ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r2 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 154.362805ms ago: executing program 4 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 154.232887ms ago: executing program 4 (id=15): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1a1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000002) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 150.905086ms ago: executing program 4 (id=16): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) clock_adjtime(0x0, 0x0) 90.192102ms ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 22.388967ms ago: executing program 4 (id=18): r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2012, r0, 0x1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 0s ago: executing program 4 (id=19): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2}, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.22' (ED25519) to the list of known hosts. [ 30.519047][ T6514] cgroup: Unknown subsys name 'net' [ 30.688421][ T6514] cgroup: Unknown subsys name 'cpuset' [ 30.690372][ T6514] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.805958][ T6514] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.920858][ T6119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.922570][ T6119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.924379][ T6119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.926039][ T6119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.928010][ T6119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.938389][ T6537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.949975][ T6536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.950146][ T6536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.950760][ T6536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.951816][ T6536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.952021][ T6536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.952966][ T6536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.954258][ T6536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.958121][ T6536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.958851][ T6536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.959684][ T6536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.959883][ T6536] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.960263][ T6536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.960651][ T6536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.961063][ T6536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.963397][ T6536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.963925][ T6526] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.964203][ T6526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.964822][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.965850][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.070255][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 32.134545][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.136069][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.137231][ T6524] bridge_slave_0: entered allmulticast mode [ 32.137726][ T6524] bridge_slave_0: entered promiscuous mode [ 32.138890][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.138910][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.138958][ T6524] bridge_slave_1: entered allmulticast mode [ 32.139401][ T6524] bridge_slave_1: entered promiscuous mode [ 32.160560][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.161471][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.164703][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 32.183077][ T6524] team0: Port device team_slave_0 added [ 32.184395][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 32.185902][ T6524] team0: Port device team_slave_1 added [ 32.221562][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 32.234357][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.234380][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.234393][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.235617][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.235624][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.235635][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.245936][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.246011][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.246063][ T6531] bridge_slave_0: entered allmulticast mode [ 32.246479][ T6531] bridge_slave_0: entered promiscuous mode [ 32.263198][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.264443][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.265723][ T6528] bridge_slave_0: entered allmulticast mode [ 32.267285][ T6528] bridge_slave_0: entered promiscuous mode [ 32.270686][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.270965][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.271048][ T6528] bridge_slave_1: entered allmulticast mode [ 32.272345][ T6528] bridge_slave_1: entered promiscuous mode [ 32.272748][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.272776][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.272833][ T6531] bridge_slave_1: entered allmulticast mode [ 32.273242][ T6531] bridge_slave_1: entered promiscuous mode [ 32.279433][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 32.306878][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.310180][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.322856][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.326742][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.330156][ T6524] hsr_slave_0: entered promiscuous mode [ 32.330493][ T6524] hsr_slave_1: entered promiscuous mode [ 32.351293][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.352590][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.353741][ T6529] bridge_slave_0: entered allmulticast mode [ 32.354181][ T6529] bridge_slave_0: entered promiscuous mode [ 32.354673][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.354688][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.354754][ T6530] bridge_slave_0: entered allmulticast mode [ 32.355135][ T6530] bridge_slave_0: entered promiscuous mode [ 32.355895][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.355916][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.355964][ T6529] bridge_slave_1: entered allmulticast mode [ 32.356336][ T6529] bridge_slave_1: entered promiscuous mode [ 32.357625][ T6531] team0: Port device team_slave_0 added [ 32.358318][ T6531] team0: Port device team_slave_1 added [ 32.370462][ T6528] team0: Port device team_slave_0 added [ 32.371198][ T6528] team0: Port device team_slave_1 added [ 32.379242][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.380484][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.381886][ T6530] bridge_slave_1: entered allmulticast mode [ 32.383433][ T6530] bridge_slave_1: entered promiscuous mode [ 32.393244][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.394402][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.398336][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.404087][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.404113][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.404131][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.404887][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.404898][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.404911][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.422597][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.422618][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.427883][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.437895][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.440604][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.443171][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.444184][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.472568][ T6530] team0: Port device team_slave_0 added [ 32.474250][ T6529] team0: Port device team_slave_0 added [ 32.474938][ T6529] team0: Port device team_slave_1 added [ 32.485365][ T6528] hsr_slave_0: entered promiscuous mode [ 32.486603][ T6528] hsr_slave_1: entered promiscuous mode [ 32.488356][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 32.488910][ T6528] Cannot create hsr debugfs directory [ 32.489666][ T6530] team0: Port device team_slave_1 added [ 32.498577][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.498601][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.498616][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.500011][ T6531] hsr_slave_0: entered promiscuous mode [ 32.500274][ T6531] hsr_slave_1: entered promiscuous mode [ 32.500431][ T6531] debugfs: 'hsr0' already exists in 'hsr' [ 32.500440][ T6531] Cannot create hsr debugfs directory [ 32.500949][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.500958][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.500967][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.526331][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.526368][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.526385][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.527983][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.527990][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.528001][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.564925][ T6529] hsr_slave_0: entered promiscuous mode [ 32.565217][ T6529] hsr_slave_1: entered promiscuous mode [ 32.565403][ T6529] debugfs: 'hsr0' already exists in 'hsr' [ 32.565414][ T6529] Cannot create hsr debugfs directory [ 32.574072][ T6530] hsr_slave_0: entered promiscuous mode [ 32.574382][ T6530] hsr_slave_1: entered promiscuous mode [ 32.574561][ T6530] debugfs: 'hsr0' already exists in 'hsr' [ 32.574576][ T6530] Cannot create hsr debugfs directory [ 32.616488][ T6524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.622878][ T6524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.634654][ T6524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.651978][ T6524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.693931][ T6528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.699077][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.699117][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.699272][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.699295][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.701912][ T6528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.703469][ T6528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.704582][ T6528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.722653][ T6530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.730395][ T6530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.732864][ T6530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.742023][ T6530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.759721][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.759768][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.759837][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.759860][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.770994][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.779108][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.780421][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.783482][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.784782][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.793662][ T6531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.801319][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.805001][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.805078][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.805388][ T6531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.810434][ T6531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.812805][ T6531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.825528][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.839049][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.847778][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.847823][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.862912][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.876434][ T6529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.879463][ T6529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.882676][ T6529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.885027][ T6529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.891078][ T6524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.894317][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.894366][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.895453][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.895476][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.902594][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.907986][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.908022][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.931341][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.931380][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.952188][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.968311][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.975611][ T6530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.979357][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.979401][ T1923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.985792][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.994636][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.994678][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.006970][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.026351][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.030625][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.030668][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.033517][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.033544][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.043320][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.073872][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.086657][ T6528] veth0_vlan: entered promiscuous mode [ 33.096001][ T6528] veth1_vlan: entered promiscuous mode [ 33.111179][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.113826][ T6524] veth0_vlan: entered promiscuous mode [ 33.122606][ T6528] veth0_macvtap: entered promiscuous mode [ 33.123664][ T6528] veth1_macvtap: entered promiscuous mode [ 33.141016][ T6524] veth1_vlan: entered promiscuous mode [ 33.149986][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.155864][ T6524] veth0_macvtap: entered promiscuous mode [ 33.162719][ T6530] veth0_vlan: entered promiscuous mode [ 33.165820][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.172962][ T6524] veth1_macvtap: entered promiscuous mode [ 33.179847][ T6530] veth1_vlan: entered promiscuous mode [ 33.185151][ T6530] veth0_macvtap: entered promiscuous mode [ 33.188886][ T6530] veth1_macvtap: entered promiscuous mode [ 33.202192][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.203576][ T1923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.203794][ T1923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.203812][ T1923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.203828][ T1923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.205097][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.211777][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.218862][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.222794][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.232830][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232882][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232903][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232918][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.242136][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.265154][ T1923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265216][ T1923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265235][ T1923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265251][ T1923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306602][ T6531] veth0_vlan: entered promiscuous mode [ 33.313251][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.313287][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.322444][ T6531] veth1_vlan: entered promiscuous mode [ 33.325238][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.326723][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.340337][ T5791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.340368][ T5791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.350855][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.350884][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.358893][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.358926][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.373925][ T6529] veth0_vlan: entered promiscuous mode [ 33.375369][ T6529] veth1_vlan: entered promiscuous mode [ 33.389171][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.389202][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.396030][ T6531] veth0_macvtap: entered promiscuous mode [ 33.400104][ T6530] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.409635][ T6529] veth0_macvtap: entered promiscuous mode [ 33.419681][ T6531] veth1_macvtap: entered promiscuous mode [ 33.421852][ T6529] veth1_macvtap: entered promiscuous mode [ 33.433336][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.437775][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.440162][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.443989][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.446917][ T1923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464034][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464092][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464110][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464124][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464137][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464149][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464161][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523852][ T6645] sctp: [Deprecated]: syz.0.6 (pid 6645) Use of int in maxseg socket option. [ 33.523852][ T6645] Use struct sctp_assoc_value instead [ 33.562664][ T1923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.562694][ T1923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.584146][ T1923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.584184][ T1923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.602243][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.602275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.615714][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.615743][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.710586][ T6663] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 33.710586][ T6663] The task syz.0.8 (6663) triggered the difference, watch for misbehavior. [ 33.958965][ T6669] loop4: detected capacity change from 0 to 764 [ 34.007575][ T6541] Bluetooth: hci3: command tx timeout [ 34.007578][ T6537] Bluetooth: hci2: command tx timeout [ 34.018476][ T6537] Bluetooth: hci4: command tx timeout [ 34.018486][ T6541] Bluetooth: hci1: command tx timeout [ 34.018790][ T6537] Bluetooth: hci0: command tx timeout [ ** replaying previous printk message ** [ 34.185280][ T6681] ------------[ cut here ]------------ [ 34.185308][ T6681] verifier bug: not inlined functions bpf_probe_read_user#112 is missing func(1) [ 34.185359][ T6681] WARNING: CPU: 1 PID: 6681 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 34.189949][ T6681] Modules linked in: [ 34.190609][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT [ 34.192008][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 34.193504][ T6681] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.194611][ T6681] pc : bpf_check+0x1559c/0x15d8c [ 34.195357][ T6681] lr : bpf_check+0x1559c/0x15d8c [ 34.196096][ T6681] sp : ffff8000a22d7480 [ 34.196721][ T6681] x29: ffff8000a22d7980 x28: dfff800000000000 x27: 0000000000000006 [ 34.197956][ T6681] x26: 1ffff00012ff7c12 x25: ffff800097fbe094 x24: ffff0000d8718008 [ 34.199255][ T6681] x23: ffff800097fbe090 x22: ffff80008b154800 x21: ffff800092e12000 [ 34.200569][ T6681] x20: ffff800097fbe094 x19: 1ffff00012ff7c12 x18: 0000000085000000 [ 34.201888][ T6681] x17: 0000000000000000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 34.203107][ T6681] x14: 1fffe0003379bef2 x13: 0000000000000000 x12: 0000000000000000 [ 34.204321][ T6681] x11: 0000000000080000 x10: 0000000000006521 x9 : ad61de2754ba6a00 [ 34.205518][ T6681] x8 : ad61de2754ba6a00 x7 : ffff800080563530 x6 : 0000000000000000 [ 34.206737][ T6681] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de30c [ 34.207902][ T6681] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 34.209068][ T6681] Call trace: [ 34.209496][ T6681] bpf_check+0x1559c/0x15d8c (P) [ 34.210222][ T6681] bpf_prog_load+0xec8/0x13fc [ 34.210990][ T6681] __sys_bpf+0x450/0x628 [ 34.211716][ T6681] __arm64_sys_bpf+0x80/0x98 [ 34.212474][ T6681] invoke_syscall+0x98/0x2b8 [ 34.213227][ T6681] el0_svc_common+0x130/0x23c [ 34.214009][ T6681] do_el0_svc+0x48/0x58 [ 34.214702][ T6681] el0_svc+0x5c/0x254 [ 34.215353][ T6681] el0t_64_sync_handler+0x84/0x12c [ 34.216162][ T6681] el0t_64_sync+0x198/0x19c [ 34.216885][ T6681] irq event stamp: 352 [ 34.217530][ T6681] hardirqs last enabled at (351): [] vprintk_store+0x898/0xac8 [ 34.219050][ T6681] hardirqs last disabled at (352): [] el1_brk64+0x20/0x54 [ 34.220511][ T6681] softirqs last enabled at (200): [] local_bh_enable+0x10/0x34 [ 34.221940][ T6681] softirqs last disabled at (198): [] local_bh_disable+0x10/0x34 [ 34.223252][ T6681] ---[ end trace 0000000000000000 ]--- [ 36.087043][ T6119] Bluetooth: hci1: command tx timeout [ 36.088497][ T6119] Bluetooth: hci4: command tx timeout [ 36.088544][ T6119] Bluetooth: hci3: command tx timeout [ 36.097239][ T6119] Bluetooth: hci2: command tx timeout [ 36.097326][ T6537] Bluetooth: hci0: command tx timeout [ 38.167620][ T6119] Bluetooth: hci2: command tx timeout [ 38.167670][ T6539] Bluetooth: hci4: command tx timeout [ 38.167672][ T6119] Bluetooth: hci1: command tx timeout [ 38.167765][ T6537] Bluetooth: hci0: command tx timeout [ 38.168338][ T6541] Bluetooth: hci3: command tx timeout [ 40.247341][ T6526] Bluetooth: hci3: command tx timeout [ 40.247382][ T6539] Bluetooth: hci2: command tx timeout [ 40.247385][ T6526] Bluetooth: hci0: command tx timeout [ 40.247403][ T6539] Bluetooth: hci1: command tx timeout [ 40.247411][ T6526] Bluetooth: hci4: command tx timeout