UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted misc raw-gadget: fail, usb_gadget_register_driver returned -16 Oops: general protection fault, probably for non-canonical address 0xfc587a001fea7e03: 0000 [#1] SMP KASAN NOPTI KASAN: maybe wild-memory-access in range [0xe2c3f000ff53f018-0xe2c3f000ff53f01f] CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:kasan_byte_accessible+0x15/0x30 Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 7e 15 0e 03 66 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffff888017e1f600 EFLAGS: 00010086 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff84bddf4b RDI: fc587a001fea7e03 RBP: e2c3f000ff53f018 R08: 0000000000000001 R09: 0000000000000000 R10: ffff888008cd5003 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff84bddf4b R14: 0000000000000000 R15: ffff888017fab800 FS: 00005555665bd400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2db21000 CR3: 00000000344fc000 CR4: 0000000000350ef0 Call Trace: __kasan_check_byte+0x14/0x50 lock_acquire+0xec/0x2f0 _raw_spin_lock+0x2b/0x40 __queue_work+0xb6e/0x1240 queue_work_on+0xd0/0xe0 loop_queue_rq+0x5c8/0x1180 __blk_mq_issue_directly+0xd5/0x260 blk_mq_request_issue_directly+0x11c/0x1e0 blk_mq_issue_direct+0x192/0x640 blk_mq_dispatch_queue_requests+0x4b0/0x7c0 blk_mq_flush_plug_list+0x1ec/0x5b0 __blk_flush_plug+0x25c/0x460 __submit_bio+0x480/0x5b0 submit_bio_noacct_nocheck+0x68e/0xcb0 submit_bio_noacct+0x359/0x1350 __sync_dirty_buffer+0x176/0x380 fat_set_state+0x22f/0x360 fat_put_super+0x3f/0xc0 generic_shutdown_super+0x15a/0x4a0 kill_block_super+0x3b/0x90 deactivate_locked_super+0xbf/0x1a0 deactivate_super+0xb1/0xd0 cleanup_mnt+0x2df/0x430 task_work_run+0x172/0x280 exit_to_user_mode_loop+0xef/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa431e3ef87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:kasan_byte_accessible+0x15/0x30 Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 7e 15 0e 03 66 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffff888017e1f600 EFLAGS: 00010086 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff84bddf4b RDI: fc587a001fea7e03 RBP: e2c3f000ff53f018 R08: 0000000000000001 R09: 0000000000000000 R10: ffff888008cd5003 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff84bddf4b R14: 0000000000000000 R15: ffff888017fab800 FS: 00005555665bd400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2db21000 CR3: 00000000344fc000 CR4: 0000000000350ef0 note: syz-executor.2[277] exited with irqs disabled note: syz-executor.2[277] exited with preempt_count 2 ------------[ cut here ]------------ WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: syz-executor.2/277 Modules linked in: CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:do_exit+0x1c36/0x2970 Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 bf a4 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 ab a4 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 9d a4 38 00 4c 89 e6 bf 05 06 00 00 e8 RSP: 0018:ffff888017e1fe40 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff813b2727 RDX: ffff888017ed9b80 RSI: ffffffff813b42d5 RDI: ffff888017edad68 RBP: ffff888017ed9b80 R08: 0000000000000001 R09: fffffbfff0f11cd8 R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b R13: 0000000000002710 R14: fc587a001fea7e03 R15: 0000000000000000 FS: 00005555665bd400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2db21000 CR3: 00000000344fc000 CR4: 0000000000350ef0 Call Trace: make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 irq event stamp: 229552 hardirqs last enabled at (229551): [] ktime_get+0x1c7/0x270 loop5: detected capacity change from 0 to 512 hardirqs last disabled at (229552): [] _raw_spin_lock_irq+0x42/0x50 softirqs last enabled at (229440): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (229363): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 277, name: syz-executor.2 preempt_count: 0, expected: 0 RCU nest depth: 2, expected: 0 INFO: lockdep is turned off. CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __might_resched+0x2f3/0x510 exit_signals+0x25/0x940 do_exit+0x2db/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. ================================================================== BUG: KASAN: stack-out-of-bounds in blk_mq_flush_plug_list+0x4d6/0x5b0 Read of size 2 at addr ffff888017e1fb42 by task syz-executor.2/277 CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 print_report+0xcb/0x610 kasan_report+0xca/0x100 blk_mq_flush_plug_list+0x4d6/0x5b0 __blk_flush_plug+0x25c/0x460 schedule+0x2b9/0x390 synchronize_rcu_expedited+0x353/0x420 namespace_unlock+0x4b6/0x810 put_mnt_ns+0xf5/0x120 free_nsproxy+0x3a/0x400 switch_task_namespaces+0xe2/0x100 do_exit+0x841/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: Unable to access opcode bytes at 0x7fa431e3ef5d. RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 The buggy address belongs to stack of task syz-executor.2/277 and is located at offset 26 in frame: __blk_flush_plug+0x0/0x460 This frame has 1 object: [32, 48) 'callbacks' The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17e1f flags: 0x100000000000000(node=0|zone=1) page_type: f9(unknown) raw: 0100000000000000 0000000000000000 ffffea00005f87c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000f9000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888017e1fa00: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 ffff888017e1fa80: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff888017e1fb00: 00 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 ^ ffff888017e1fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 ffff888017e1fc00: f1 00 00 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 ================================================================== BUG: unable to handle page fault for address: ffffffff81522048 #PF: supervisor write access in kernel mode #PF: error_code(0x0003) - permissions violation PGD 5a8b067 P4D 5a8b067 PUD 5a8c063 PMD 14001a1 Oops: Oops: 0003 [#2] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:blk_mq_dispatch_list+0x257/0x12c0 Code: 64 37 ff 4c 89 e2 48 8b 44 24 70 48 c1 ea 03 4c 89 64 24 70 80 3c 2a 00 0f 85 60 0e 00 00 48 8d 7b 50 48 8d 4c 24 68 48 89 fa <48> 89 4b 48 48 c1 ea 03 80 3c 2a 00 0f 85 2e 0e 00 00 48 89 c2 48 RSP: 0018:ffff888017e1f920 EFLAGS: 00010246 RAX: ffff888017e1f988 RBX: ffffffff81522000 RCX: ffff888017e1f988 RDX: ffffffff81522050 RSI: ffffffff823c8320 RDI: ffffffff81522050 RBP: dffffc0000000000 R08: 0000000000000001 R09: fffffbfff0f11c90 R10: 00000000000000d9 R11: 0000000000000001 R12: ffffffff81522048 R13: 8948535554415541 R14: ffff888017e1fb18 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff81522048 CR3: 0000000040ef3000 CR4: 0000000000350ef0 Call Trace: blk_mq_flush_plug_list+0x12a/0x5b0 __blk_flush_plug+0x25c/0x460 schedule+0x2b9/0x390 synchronize_rcu_expedited+0x353/0x420 namespace_unlock+0x4b6/0x810 put_mnt_ns+0xf5/0x120 free_nsproxy+0x3a/0x400 switch_task_namespaces+0xe2/0x100 do_exit+0x841/0x2970 make_task_dead+0x174/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: Unable to access opcode bytes at 0x7fa431e3ef5d. RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 Modules linked in: CR2: ffffffff81522048 ---[ end trace 0000000000000000 ]--- RIP: 0010:kasan_byte_accessible+0x15/0x30 Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 7e 15 0e 03 66 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffff888017e1f600 EFLAGS: 00010086 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff84bddf4b RDI: fc587a001fea7e03 RBP: e2c3f000ff53f018 R08: 0000000000000001 R09: 0000000000000000 R10: ffff888008cd5003 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff84bddf4b R14: 0000000000000000 R15: ffff888017fab800 FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff81522048 CR3: 0000000040ef3000 CR4: 0000000000350ef0 note: syz-executor.2[277] exited with irqs disabled Fixing recursive fault but reboot is needed! BUG: scheduling while atomic: syz-executor.2/277/0x00000000 INFO: lockdep is turned off. Modules linked in: CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xfa/0x120 __schedule_bug+0xb9/0x100 __schedule+0x24f3/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: Unable to access opcode bytes at 0x7fa431e3ef5d. RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 ------------[ cut here ]------------ Voluntary context switch within RCU read-side critical section! WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xa96/0x1b00, CPU#0: syz-executor.2/277 Modules linked in: CPU: 0 UID: 0 PID: 277 Comm: syz-executor.2 Tainted: G B D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:rcu_note_context_switch+0xa96/0x1b00 Code: 00 00 00 65 48 8b 3d 41 8c 27 06 e8 84 11 fd ff e9 1a f8 ff ff c6 05 9a 42 e4 04 01 90 48 c7 c7 a0 8a c9 84 e8 0b 39 dd ff 90 <0f> 0b 90 90 e9 3a f6 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea RSP: 0018:ffff888017e1fd38 EFLAGS: 00010082 RAX: 0000000000000000 RBX: ffff88806ce37d00 RCX: ffffffff8139de70 RDX: ffff888017ed9b80 RSI: ffffffff8139de7e RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d9c4801 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888017ed9b80 R13: 0000000000000000 R14: ffff888017ed9b80 R15: ffffffff84c5d520 FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff81522048 CR3: 0000000040ef3000 CR4: 0000000000350ef0 Call Trace: __schedule+0x217/0x3590 do_task_dead+0xdc/0x110 make_task_dead+0x373/0x3b0 rewind_stack_and_make_dead+0x16/0x20 RIP: 0033:0x7fa431e3ef87 Code: Unable to access opcode bytes at 0x7fa431e3ef5d. RSP: 002b:00007fff87bcdb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000000002b RCX: 00007fa431e3ef87 RDX: 00007fff87bcdbfa RSI: 000000000000000a RDI: 00007fff87bcdbf0 RBP: 00007fff87bcdbf0 R08: 00000000ffffffff R09: 00007fff87bcd9c0 R10: 00005555665bec7b R11: 0000000000000246 R12: 00007fa431e97105 R13: 00007fff87bcecb0 R14: 00005555665bec20 R15: 00007fff87bcecf0 irq event stamp: 229552 hardirqs last enabled at (229551): [] ktime_get+0x1c7/0x270 hardirqs last disabled at (229552): [] _raw_spin_lock_irq+0x42/0x50 softirqs last enabled at (229440): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (229363): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- Bluetooth: hci0: command 0x0c1a tx timeout Bluetooth: hci2: command 0x0c1a tx timeout Bluetooth: hci7: command 0x0c1a tx timeout Bluetooth: hci6: command 0x0c1a tx timeout Bluetooth: hci5: command 0x0c1a tx timeout Bluetooth: hci4: command 0x0c1a tx timeout Bluetooth: hci3: command 0x0c1a tx timeout Bluetooth: hci1: command 0x0c1a tx timeout Bluetooth: hci0: command 0x0c1a tx timeout Bluetooth: hci1: command 0x0c1a tx timeout Bluetooth: hci3: command 0x0c1a tx timeout Bluetooth: hci4: command 0x0c1a tx timeout Bluetooth: hci5: command 0x0c1a tx timeout Bluetooth: hci6: command 0x0c1a tx timeout Bluetooth: hci7: command 0x0c1a tx timeout Bluetooth: hci2: command 0x0c1a tx timeout Bluetooth: hci0: command 0x0c1a tx timeout Bluetooth: hci2: command 0x0c1a tx timeout Bluetooth: hci7: command 0x0c1a tx timeout Bluetooth: hci6: command 0x0c1a tx timeout Bluetooth: hci5: command 0x0c1a tx timeout Bluetooth: hci4: command 0x0c1a tx timeout Bluetooth: hci3: command 0x0c1a tx timeout Bluetooth: hci1: command 0x0c1a tx timeout ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 0f 1f 00 nopl (%rax) 5: 90 nop 6: 90 nop 7: 90 nop 8: 90 nop 9: 90 nop a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 66 0f 1f 00 nopw (%rax) 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 c1 ef 03 shr $0x3,%rdi 27: 48 01 c7 add %rax,%rdi * 2a: 0f b6 07 movzbl (%rdi),%eax <-- trapping instruction 2d: 3c 07 cmp $0x7,%al 2f: 0f 96 c0 setbe %al 32: e9 7e 15 0e 03 jmpq 0x30e15b5 37: 66 data16 38: 66 data16 39: 2e cs 3a: 0f .byte 0xf 3b: 1f (bad) 3c: 84 00 test %al,(%rax)