last executing test programs: 292.685621ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b4311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 149.379632ms ago: executing program 3: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xf8f, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f0000000200)=""/156}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 2024/06/06 22:46:12 fuzzer started 2024/06/06 22:46:13 dialing manager at 10.128.0.169:30016 [ 70.627007][ T5095] cgroup: Unknown subsys name 'net' [ 70.844137][ T5095] cgroup: Unknown subsys name 'rlimit' [ 71.722624][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.729318][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/06 22:46:14 starting 5 executor processes [ 72.228159][ T5101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.242252][ T5101] syz-executor (5101) used greatest stack depth: 18680 bytes left [ 73.413352][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.433258][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.442116][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.450815][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.459529][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.467107][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.476831][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.485041][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.492515][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.492646][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.501898][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.509473][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.522887][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.528892][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.530533][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.538858][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.546058][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.561491][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.566625][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.568712][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.576140][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.583873][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.591059][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.606935][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.619610][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.632877][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.641025][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.648627][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.656558][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.665452][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.257047][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 74.316230][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 74.446453][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 74.499643][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 74.574135][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 74.604921][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.612557][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.623065][ T5126] bridge_slave_0: entered allmulticast mode [ 74.630468][ T5126] bridge_slave_0: entered promiscuous mode [ 74.646279][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.653649][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.661041][ T5126] bridge_slave_1: entered allmulticast mode [ 74.668111][ T5126] bridge_slave_1: entered promiscuous mode [ 74.681509][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.688916][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.696116][ T5115] bridge_slave_0: entered allmulticast mode [ 74.703465][ T5115] bridge_slave_0: entered promiscuous mode [ 74.716838][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.724525][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.732288][ T5115] bridge_slave_1: entered allmulticast mode [ 74.739667][ T5115] bridge_slave_1: entered promiscuous mode [ 74.814911][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.866886][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.880421][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.914246][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.994480][ T5115] team0: Port device team_slave_0 added [ 75.020817][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.028030][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.035775][ T5125] bridge_slave_0: entered allmulticast mode [ 75.044196][ T5125] bridge_slave_0: entered promiscuous mode [ 75.069063][ T5115] team0: Port device team_slave_1 added [ 75.077802][ T5126] team0: Port device team_slave_0 added [ 75.111213][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.118647][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.125817][ T5125] bridge_slave_1: entered allmulticast mode [ 75.133444][ T5125] bridge_slave_1: entered promiscuous mode [ 75.140323][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.147445][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.155005][ T5116] bridge_slave_0: entered allmulticast mode [ 75.162727][ T5116] bridge_slave_0: entered promiscuous mode [ 75.186149][ T5126] team0: Port device team_slave_1 added [ 75.217213][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.224588][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.231952][ T5114] bridge_slave_0: entered allmulticast mode [ 75.239848][ T5114] bridge_slave_0: entered promiscuous mode [ 75.272918][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.280277][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.287467][ T5116] bridge_slave_1: entered allmulticast mode [ 75.294994][ T5116] bridge_slave_1: entered promiscuous mode [ 75.327622][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.334972][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.342330][ T5114] bridge_slave_1: entered allmulticast mode [ 75.349507][ T5114] bridge_slave_1: entered promiscuous mode [ 75.371627][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.384980][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.414186][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.421988][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.447975][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.460828][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.467817][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.494302][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.546159][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.556264][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.563808][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.590282][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.609992][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.616977][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.639372][ T5119] Bluetooth: hci1: command tx timeout [ 75.643473][ T5124] Bluetooth: hci0: command tx timeout [ 75.654497][ T5122] Bluetooth: hci2: command tx timeout [ 75.654748][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.681119][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.694395][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.718417][ T5122] Bluetooth: hci3: command tx timeout [ 75.724159][ T5122] Bluetooth: hci4: command tx timeout [ 75.724581][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.800780][ T5125] team0: Port device team_slave_0 added [ 75.811836][ T5116] team0: Port device team_slave_0 added [ 75.873303][ T5114] team0: Port device team_slave_0 added [ 75.882043][ T5125] team0: Port device team_slave_1 added [ 75.890680][ T5116] team0: Port device team_slave_1 added [ 75.912533][ T5126] hsr_slave_0: entered promiscuous mode [ 75.919926][ T5126] hsr_slave_1: entered promiscuous mode [ 75.931462][ T5115] hsr_slave_0: entered promiscuous mode [ 75.937901][ T5115] hsr_slave_1: entered promiscuous mode [ 75.944521][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.952490][ T5115] Cannot create hsr debugfs directory [ 75.960153][ T5114] team0: Port device team_slave_1 added [ 76.019449][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.026438][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.052590][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.086659][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.094133][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.120692][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.134913][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.141929][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.168981][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.181032][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.187992][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.214723][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.293225][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.300674][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.326716][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.383031][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.390162][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.416705][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.522843][ T5125] hsr_slave_0: entered promiscuous mode [ 76.530428][ T5125] hsr_slave_1: entered promiscuous mode [ 76.536905][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.545134][ T5125] Cannot create hsr debugfs directory [ 76.603197][ T5116] hsr_slave_0: entered promiscuous mode [ 76.610583][ T5116] hsr_slave_1: entered promiscuous mode [ 76.616837][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.624561][ T5116] Cannot create hsr debugfs directory [ 76.669455][ T5114] hsr_slave_0: entered promiscuous mode [ 76.675897][ T5114] hsr_slave_1: entered promiscuous mode [ 76.682448][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.690675][ T5114] Cannot create hsr debugfs directory [ 77.100865][ T5115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.113421][ T5115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.153955][ T5115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.173769][ T5115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.220335][ T5116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.232696][ T5116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.244117][ T5116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.263669][ T5116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.345664][ T5125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.361563][ T5125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.374160][ T5125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.385596][ T5125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.585229][ T5126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.597087][ T5126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.607364][ T5126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.638118][ T5126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.672628][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.718476][ T5124] Bluetooth: hci1: command tx timeout [ 77.728743][ T5124] Bluetooth: hci2: command tx timeout [ 77.729712][ T5122] Bluetooth: hci0: command tx timeout [ 77.758117][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.766503][ T5114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.781721][ T5114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.797169][ T5114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.804436][ T5122] Bluetooth: hci4: command tx timeout [ 77.804445][ T5124] Bluetooth: hci3: command tx timeout [ 77.838013][ T5114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.881445][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.908147][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.966081][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.975692][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.983079][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.996391][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.003579][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.016980][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.024287][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.034600][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.041808][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.148567][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.185167][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.192368][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.206647][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.213899][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.360089][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.430122][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.490570][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.545257][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.552543][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.581662][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.588881][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.616826][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.677525][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.684772][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.702886][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.710115][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.937794][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.042967][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.084205][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.269192][ T5115] veth0_vlan: entered promiscuous mode [ 79.306206][ T5115] veth1_vlan: entered promiscuous mode [ 79.398210][ T5116] veth0_vlan: entered promiscuous mode [ 79.417728][ T5115] veth0_macvtap: entered promiscuous mode [ 79.435099][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.462900][ T5115] veth1_macvtap: entered promiscuous mode [ 79.483841][ T5116] veth1_vlan: entered promiscuous mode [ 79.506486][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.585691][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.616272][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.661889][ T5115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.671593][ T5115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.680910][ T5115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.690068][ T5115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701644][ T5126] veth0_vlan: entered promiscuous mode [ 79.710568][ T5116] veth0_macvtap: entered promiscuous mode [ 79.740682][ T5116] veth1_macvtap: entered promiscuous mode [ 79.777671][ T5125] veth0_vlan: entered promiscuous mode [ 79.794886][ T5126] veth1_vlan: entered promiscuous mode [ 79.800259][ T5124] Bluetooth: hci2: command tx timeout [ 79.803269][ T5122] Bluetooth: hci1: command tx timeout [ 79.805789][ T5124] Bluetooth: hci0: command tx timeout [ 79.839379][ T5125] veth1_vlan: entered promiscuous mode [ 79.879035][ T5124] Bluetooth: hci3: command tx timeout [ 79.884559][ T5119] Bluetooth: hci4: command tx timeout [ 79.929240][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.940083][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.956092][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.967780][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.979384][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.991141][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.014584][ T5114] veth0_vlan: entered promiscuous mode [ 80.034963][ T5125] veth0_macvtap: entered promiscuous mode [ 80.060107][ T5116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.069973][ T5116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.079206][ T5116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.087931][ T5116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.112759][ T5125] veth1_macvtap: entered promiscuous mode [ 80.120632][ T5114] veth1_vlan: entered promiscuous mode [ 80.195941][ T5126] veth0_macvtap: entered promiscuous mode [ 80.235160][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.246193][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.256252][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.267987][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.282709][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.295512][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.306414][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.317265][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.328865][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.341197][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.353058][ T5126] veth1_macvtap: entered promiscuous mode [ 80.380879][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.390645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.425238][ T5125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.434285][ T5125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.444905][ T5125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.454209][ T5125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.505574][ T5114] veth0_macvtap: entered promiscuous mode [ 80.534095][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.545446][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.550940][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.563720][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.566489][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.583620][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.605896][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.617017][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.631749][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.640929][ T5114] veth1_macvtap: entered promiscuous mode [ 80.683004][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.695317][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.706265][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.717207][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.727127][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.738424][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.750176][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.832257][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.845356][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.855547][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.866176][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.876709][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.887707][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.897871][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.912187][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.924463][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.940624][ T5126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.945155][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.950825][ T5126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.966317][ T5126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.968503][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.976096][ T5126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.017024][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.031248][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.042061][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.053048][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.063239][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.074075][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.087218][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.099677][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.113184][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.125663][ T5114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.147441][ T5114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.158806][ T5114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.167566][ T5114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199985][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.218348][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.363824][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.399930][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.418272][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.446682][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.488452][ T12] [ 81.490842][ T12] ====================================================== [ 81.497854][ T12] WARNING: possible circular locking dependency detected [ 81.504873][ T12] 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 Not tainted [ 81.512002][ T12] ------------------------------------------------------ [ 81.519032][ T12] kworker/u8:1/12 is trying to acquire lock: [ 81.525020][ T12] ffff8880b9529430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 81.533665][ T12] [ 81.533665][ T12] but task is already holding lock: [ 81.541024][ T12] ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 81.549644][ T12] [ 81.549644][ T12] which lock already depends on the new lock. [ 81.549644][ T12] [ 81.560049][ T12] [ 81.560049][ T12] the existing dependency chain (in reverse order) is: [ 81.569093][ T12] [ 81.569093][ T12] -> #1 (&base->lock){-.-.}-{2:2}: [ 81.576393][ T12] lock_acquire+0x1ed/0x550 [ 81.581430][ T12] _raw_spin_lock_irqsave+0xd5/0x120 [ 81.587273][ T12] lock_timer_base+0x112/0x240 [ 81.592591][ T12] __mod_timer+0x1ca/0xeb0 [ 81.597526][ T12] queue_delayed_work_on+0x1ca/0x390 [ 81.603333][ T12] kvfree_call_rcu+0x47f/0x790 [ 81.608633][ T12] rtnl_register_internal+0x482/0x590 [ 81.614544][ T12] rtnl_register+0x36/0x80 [ 81.619493][ T12] ip_rt_init+0x2f6/0x3a0 [ 81.624380][ T12] ip_init+0xe/0x20 [ 81.628724][ T12] inet_init+0x3d8/0x580 [ 81.633528][ T12] do_one_initcall+0x248/0x880 [ 81.638825][ T12] do_initcall_level+0x157/0x210 [ 81.644311][ T12] do_initcalls+0x3f/0x80 [ 81.649170][ T12] kernel_init_freeable+0x435/0x5d0 [ 81.654921][ T12] kernel_init+0x1d/0x2b0 [ 81.659800][ T12] ret_from_fork+0x4b/0x80 [ 81.664768][ T12] ret_from_fork_asm+0x1a/0x30 [ 81.670107][ T12] [ 81.670107][ T12] -> #0 (krc.lock){..-.}-{2:2}: [ 81.677171][ T12] validate_chain+0x18e0/0x5900 [ 81.682552][ T12] __lock_acquire+0x1346/0x1fd0 [ 81.687932][ T12] lock_acquire+0x1ed/0x550 [ 81.692956][ T12] _raw_spin_lock+0x2e/0x40 [ 81.697983][ T12] kvfree_call_rcu+0x18a/0x790 [ 81.703279][ T12] trie_delete_elem+0x546/0x6a0 [ 81.708682][ T12] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 81.714675][ T12] bpf_trace_run2+0x2ec/0x540 [ 81.719888][ T12] __traceiter_timer_start+0x75/0xc0 [ 81.725719][ T12] enqueue_timer+0x3ce/0x570 [ 81.730839][ T12] __mod_timer+0xa0e/0xeb0 [ 81.735859][ T12] mod_delayed_work_on+0x153/0x370 [ 81.741492][ T12] ipv6_mc_dad_complete+0x2a2/0x490 [ 81.747219][ T12] addrconf_dad_completed+0x712/0xcd0 [ 81.753125][ T12] addrconf_dad_work+0xdc2/0x16f0 [ 81.758684][ T12] process_scheduled_works+0xa2c/0x1830 [ 81.764768][ T12] worker_thread+0x86d/0xd70 [ 81.769888][ T12] kthread+0x2f0/0x390 [ 81.774482][ T12] ret_from_fork+0x4b/0x80 [ 81.779432][ T12] ret_from_fork_asm+0x1a/0x30 [ 81.784747][ T12] [ 81.784747][ T12] other info that might help us debug this: [ 81.784747][ T12] [ 81.794978][ T12] Possible unsafe locking scenario: [ 81.794978][ T12] [ 81.802440][ T12] CPU0 CPU1 [ 81.807868][ T12] ---- ---- [ 81.813235][ T12] lock(&base->lock); [ 81.817308][ T12] lock(krc.lock); [ 81.823645][ T12] lock(&base->lock); [ 81.830237][ T12] lock(krc.lock); [ 81.834046][ T12] [ 81.834046][ T12] *** DEADLOCK *** [ 81.834046][ T12] [ 81.842229][ T12] 6 locks held by kworker/u8:1/12: [ 81.847418][ T12] #0: ffff888029df3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 81.859099][ T12] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 81.871935][ T12] #2: ffffffff8f5e7208 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 81.878838][ T5124] Bluetooth: hci0: command tx timeout [ 81.881459][ T12] #3: ffff88805d60d538 (&idev->mc_lock){+.+.}-{3:3}, at: ipv6_mc_dad_complete+0x31/0x490 [ 81.896790][ T12] #4: ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 81.905804][ T12] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 81.915366][ T12] [ 81.915366][ T12] stack backtrace: [ 81.921434][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc1-syzkaller-00199-gb0c9a2643541 #0 [ 81.931525][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 81.941582][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 81.947584][ T12] Call Trace: [ 81.950896][ T12] [ 81.953839][ T12] dump_stack_lvl+0x241/0x360 [ 81.958371][ T5124] Bluetooth: hci3: command tx timeout [ 81.958526][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.963904][ T5124] Bluetooth: hci4: command tx timeout [ 81.969152][ T12] ? print_circular_bug+0x130/0x1a0 [ 81.969185][ T12] check_noncircular+0x36a/0x4a0 [ 81.969217][ T12] ? __pfx_check_noncircular+0x10/0x10 [ 81.969246][ T12] ? lockdep_lock+0x123/0x2b0 [ 81.969269][ T12] ? mark_lock+0x9a/0x350 [ 81.969298][ T12] validate_chain+0x18e0/0x5900 [ 81.969346][ T12] ? __pfx_validate_chain+0x10/0x10 [ 82.009348][ T12] ? stack_depot_save_flags+0x6e4/0x830 [ 82.014936][ T12] ? do_raw_spin_lock+0x14f/0x370 [ 82.020082][ T12] ? __pfx_lock_release+0x10/0x10 [ 82.025147][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 82.030394][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 82.036410][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.042768][ T12] ? stack_trace_save+0x118/0x1d0 [ 82.047826][ T12] ? mark_lock+0x9a/0x350 [ 82.052187][ T12] __lock_acquire+0x1346/0x1fd0 [ 82.057076][ T12] lock_acquire+0x1ed/0x550 [ 82.061602][ T12] ? kvfree_call_rcu+0x18a/0x790 [ 82.066568][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 82.071626][ T12] ? __phys_addr+0xba/0x170 [ 82.076164][ T12] _raw_spin_lock+0x2e/0x40 [ 82.080692][ T12] ? kvfree_call_rcu+0x18a/0x790 [ 82.085655][ T12] kvfree_call_rcu+0x18a/0x790 [ 82.090449][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 82.096372][ T12] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 82.101860][ T12] ? longest_prefix_match+0x49f/0x650 [ 82.107309][ T12] trie_delete_elem+0x546/0x6a0 [ 82.112208][ T12] ? bpf_trace_run2+0x1fc/0x540 [ 82.117089][ T12] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 82.122571][ T12] bpf_trace_run2+0x2ec/0x540 [ 82.127285][ T12] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.132523][ T12] ? debug_object_activate+0x3e4/0x510 [ 82.138016][ T12] ? __pfx_debug_object_activate+0x10/0x10 [ 82.143964][ T12] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.149982][ T12] __traceiter_timer_start+0x75/0xc0 [ 82.155300][ T12] enqueue_timer+0x3ce/0x570 [ 82.159927][ T12] __mod_timer+0xa0e/0xeb0 [ 82.164433][ T12] ? work_grab_pending+0x4dd/0xac0 [ 82.169582][ T12] ? __pfx___mod_timer+0x10/0x10 [ 82.174546][ T12] ? __pfx_work_grab_pending+0x10/0x10 [ 82.180043][ T12] ? __queue_delayed_work+0x1ae/0x250 [ 82.185441][ T12] mod_delayed_work_on+0x153/0x370 [ 82.190586][ T12] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 82.196322][ T12] ipv6_mc_dad_complete+0x2a2/0x490 [ 82.201535][ T12] addrconf_dad_completed+0x712/0xcd0 [ 82.206922][ T12] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 82.212832][ T12] ? addrconf_dad_work+0x58a/0x16f0 [ 82.218037][ T12] addrconf_dad_work+0xdc2/0x16f0 [ 82.223113][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 82.228591][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.234973][ T12] ? process_scheduled_works+0x945/0x1830 [ 82.240706][ T12] process_scheduled_works+0xa2c/0x1830 [ 82.246314][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.252309][ T12] ? assign_work+0x364/0x3d0 [ 82.256910][ T12] worker_thread+0x86d/0xd70 [ 82.261531][ T12] ? __kthread_parkme+0x169/0x1d0 [ 82.266585][ T12] ? __pfx_worker_thread+0x10/0x10 [ 82.271716][ T12] kthread+0x2f0/0x390 [ 82.275819][ T12] ? __pfx_worker_thread+0x10/0x10 [ 82.280933][ T12] ? __pfx_kthread+0x10/0x10 [ 82.285540][ T12] ret_from_fork+0x4b/0x80 2024/06/06 22:46:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 82.290070][ T12] ? __pfx_kthread+0x10/0x10 [ 82.294678][ T12] ret_from_fork_asm+0x1a/0x30 [ 82.299473][ T12] [ 82.307109][ T5119] Bluetooth: hci2: command tx timeout [ 82.312652][ T5124] Bluetooth: hci1: command tx timeout