last executing test programs: 670.444745ms ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@tcx}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 282.585457ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) ftruncate(r0, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sync_file_range(r0, 0x0, 0x0, 0x6) 258.542369ms ago: executing program 1 (id=2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0), 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 142.061358ms ago: executing program 1 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="efffffffffff00000000000008"], 0x0) 48.845096ms ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="cdebce4f4e740b9b932b52fe8207323394811cc7517d3db13ae28348ba9bbadc2cc6bf1773883bd87752c113001d44883cb85540738a517dd5068ef449d477ff47d3f647fac8ea240235466461496fce07140f8adb99d843ca86a890f6e1f8341530ac3a3b0d18266c314fe1f24626a1358f5e0e9e68e0e19baa42adab2bec0b5b17abf89cd50e00dee4c5f6692840f98577d9c8231b2090a7f20a0ec5f289722718c153d94f2ea8ff628435c40d66b48a5e397ffaa4ac36a1a9a68a42b80477e66545540ccf0a1513014a76d1d208e53ab806a4c06fbc4c8732591435c2c817d122a6a12713fdea7b8a479773cc90ceda7147fc24453090a16d3a6667bbef06d0bad2595cdbb78e16d47ef55b24278041e39e421f7aa02ca8106383aabf360ec5df8cc163f51bc0c85b2b1f394bb7c7a5a679983a1c23be4c801483040d38357904b1daf2b292d2fbbecf23deec4e9a77ba80f4cc2876581638510e3fc2321688661b4a729afa9b0ee0723c4ca6dc1569c055d5b00961d2188fe201a61fe69c5bb2584e74890d3122000000004a8550251d8eeb8b6c53a4b38691af9aa31fac72d7fd71e8f7e9298bef6255be7666571c9e7512d819f67dddeb62705e428dd00040954197ddbad9237aa9a2c414c11d24c8cba1461c59e7c42203580e90d3b30ed98081802359fe8a950fb1bfabac8e3fe89ef139c0bbee11f8924d3226e6ea2e90bfd286e77c2a3501bf45c81660bed7c040d8d25f35802f2f27d3be5d18b44d429e6bd8b15f46b6fa877777d766e91cee348cc762549c5c516f3248d8783e7a2f68f4adca16a639c042f8fda37a555636a5bc9440b583d5c9e2b435d56a7398c0caf620a12f1c8c32e2c50bdbcc408c9a1ae7b1fceba8d332119406ac1100c8f79c234d9594db972f24c80d4f4e14e088d3c0289d6f50ff8b8a972cf03fe7f00d2e702a48dd8b6531cc6129d2c2599db93f517b1fd3bb763963664be4ff72fa39dc6613cac63ed18dbeb30d38aa56dcff21d94490fa1b8338628088f9b16166acf9b495a983c22e2c4e450ae5acbba95b8004fe1dcd63e7a3e8fce797706c155641067ad582c9e14cda059c5d3b1d7f4810056a0d61ea7e5da1ed84a7168c19136ae7bf6256a0b54e82314e9b34407e1b97d6a6687566e5dc9817657323910464549a421ede9274d4fa36c317b3e9867754ad243d6b84e1a027fde704733527af92809f3382d5fd75f58bc498591532cece8fd6ad639311a8f2aa2137fb058c4361", 0x383}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 1 (id=7): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 37.456136][ T3961] cgroup: Unknown subsys name 'net' [ 37.739702][ T3961] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.109492][ T3961] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.835062][ T3983] chnl_net:caif_netlink_parms(): no params data found [ 39.892938][ T3981] chnl_net:caif_netlink_parms(): no params data found [ 39.984079][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.986029][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.989492][ T3983] device bridge_slave_0 entered promiscuous mode [ 39.997785][ T3977] chnl_net:caif_netlink_parms(): no params data found [ 40.024544][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.026514][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.029340][ T3983] device bridge_slave_1 entered promiscuous mode [ 40.044143][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.046106][ T3981] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.048864][ T3981] device bridge_slave_0 entered promiscuous mode [ 40.057380][ T3973] chnl_net:caif_netlink_parms(): no params data found [ 40.076844][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.078787][ T3981] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.081429][ T3981] device bridge_slave_1 entered promiscuous mode [ 40.094187][ T3983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.122758][ T3983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.142906][ T3981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.159783][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.161790][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.165959][ T3977] device bridge_slave_0 entered promiscuous mode [ 40.170406][ T3981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.185961][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.187808][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.190343][ T3977] device bridge_slave_1 entered promiscuous mode [ 40.212173][ T3983] team0: Port device team_slave_0 added [ 40.214188][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.216110][ T3973] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.218724][ T3973] device bridge_slave_0 entered promiscuous mode [ 40.236950][ T3981] team0: Port device team_slave_0 added [ 40.238841][ T3972] chnl_net:caif_netlink_parms(): no params data found [ 40.243410][ T3981] team0: Port device team_slave_1 added [ 40.252035][ T3983] team0: Port device team_slave_1 added [ 40.254166][ T3973] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.256087][ T3973] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.258795][ T3973] device bridge_slave_1 entered promiscuous mode [ 40.277212][ T3981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.279100][ T3981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.286604][ T3981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.309221][ T3977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.322438][ T3973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.326259][ T3981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.328083][ T3981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.335373][ T3981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.351928][ T3977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.356195][ T3973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.374056][ T3983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.375976][ T3983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.382856][ T3983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.410581][ T3983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.412658][ T3983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.420318][ T3983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.425672][ T3977] team0: Port device team_slave_0 added [ 40.443782][ T3973] team0: Port device team_slave_0 added [ 40.446802][ T3977] team0: Port device team_slave_1 added [ 40.449897][ T3973] team0: Port device team_slave_1 added [ 40.515562][ T3981] device hsr_slave_0 entered promiscuous mode [ 40.563813][ T3981] device hsr_slave_1 entered promiscuous mode [ 40.657131][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.659786][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.669673][ T3977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.687199][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.689195][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.698171][ T3973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.701543][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.703827][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.706371][ T3972] device bridge_slave_0 entered promiscuous mode [ 40.709606][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.711468][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.719347][ T3977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.785303][ T3983] device hsr_slave_0 entered promiscuous mode [ 40.826142][ T3983] device hsr_slave_1 entered promiscuous mode [ 40.863404][ T3983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.865673][ T3983] Cannot create hsr debugfs directory [ 40.867628][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.869496][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.877026][ T3973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.880677][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.882709][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.885676][ T3972] device bridge_slave_1 entered promiscuous mode [ 40.954736][ T3972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.983880][ T3972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.025262][ T3977] device hsr_slave_0 entered promiscuous mode [ 41.073717][ T3977] device hsr_slave_1 entered promiscuous mode [ 41.123407][ T3977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.125519][ T3977] Cannot create hsr debugfs directory [ 41.195387][ T3973] device hsr_slave_0 entered promiscuous mode [ 41.253700][ T3973] device hsr_slave_1 entered promiscuous mode [ 41.293385][ T3973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.295390][ T3973] Cannot create hsr debugfs directory [ 41.311726][ T3972] team0: Port device team_slave_0 added [ 41.317435][ T3972] team0: Port device team_slave_1 added [ 41.381767][ T3972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.391572][ T3972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.398649][ T3972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.412559][ T3972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.415219][ T3972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.422069][ T3972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.565307][ T3972] device hsr_slave_0 entered promiscuous mode [ 41.603739][ T3972] device hsr_slave_1 entered promiscuous mode [ 41.634105][ T1528] Bluetooth: hci1: command 0x0409 tx timeout [ 41.636523][ T1528] Bluetooth: hci0: command 0x0409 tx timeout [ 41.653494][ T3972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.655661][ T3972] Cannot create hsr debugfs directory [ 41.703353][ T3766] Bluetooth: hci3: command 0x0409 tx timeout [ 41.703392][ T1528] Bluetooth: hci2: command 0x0409 tx timeout [ 41.705212][ T3766] Bluetooth: hci4: command 0x0409 tx timeout [ 41.724997][ T3981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.755398][ T3981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.806388][ T3981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.855992][ T3981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.935634][ T3983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.985760][ T3983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.057592][ T3983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.101608][ T3983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.189699][ T3973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.221007][ T3973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.255273][ T3973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.311755][ T3973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.421316][ T3977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.495330][ T3977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.546008][ T3977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.623772][ T3981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.626093][ T3977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.673007][ T3981] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.678117][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.681494][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.693636][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.696503][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.699312][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.701431][ T3766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.722341][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.725413][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.728255][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.730820][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.732563][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.735767][ T3972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.790047][ T3972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.835822][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.838786][ T3972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.887147][ T3972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.958216][ T3973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.964018][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.967477][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.970851][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.980234][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.983012][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.007922][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.010724][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.014116][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.025562][ T3983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.033969][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.036491][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.041570][ T3973] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.047681][ T3983] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.067033][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.069682][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.072819][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.077921][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.082455][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.116622][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.119447][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.122015][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.124085][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.128081][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.131936][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.139030][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.140977][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.148024][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.151165][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.157210][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.160262][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.162315][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.165242][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.168047][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.171531][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.173523][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.176398][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.186440][ T3977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.205826][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.208414][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.211026][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.214556][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.217714][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.220484][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.228514][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.231366][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.235426][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.238307][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.241852][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.265704][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.268741][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.271562][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.275495][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.278074][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.290686][ T3983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.295844][ T3983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.303121][ T3973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.309254][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.317013][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.319978][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.322945][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.326290][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.329241][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.331986][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.336165][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.339948][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.342956][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.346768][ T3977] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.361323][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.364153][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.366940][ T1954] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.368969][ T1954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.371267][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.390342][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.409805][ T3981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.418349][ T3972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.430108][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.432860][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.437542][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.440131][ T1954] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.442089][ T1954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.445607][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.486422][ T3972] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.507091][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.516273][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.520044][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.522787][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.528284][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.530916][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.534677][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.537473][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.540288][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.543123][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.546409][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.548970][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.551718][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.554486][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.556758][ T3766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.559290][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.561389][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.569367][ T3977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.573081][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.581458][ T3983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.588520][ T3981] device veth0_vlan entered promiscuous mode [ 43.596873][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.603286][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.606586][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.609400][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.611966][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.614019][ T3766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.616903][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.619618][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.622275][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.625649][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.628257][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.631766][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.635705][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.645646][ T3981] device veth1_vlan entered promiscuous mode [ 43.669033][ T3983] device veth0_vlan entered promiscuous mode [ 43.697494][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.701904][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.703720][ T1954] Bluetooth: hci0: command 0x041b tx timeout [ 43.706157][ T1954] Bluetooth: hci1: command 0x041b tx timeout [ 43.712360][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.723737][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.732810][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.736435][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.739260][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.742174][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.745891][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.748848][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.751699][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.754959][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.757563][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.760173][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.762903][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.767580][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.770098][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.772603][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.781876][ T3973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.784126][ T4022] Bluetooth: hci4: command 0x041b tx timeout [ 43.785880][ T4022] Bluetooth: hci2: command 0x041b tx timeout [ 43.787498][ T4022] Bluetooth: hci3: command 0x041b tx timeout [ 43.799099][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.812793][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.815768][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.828532][ T3983] device veth1_vlan entered promiscuous mode [ 43.834675][ T3981] device veth0_macvtap entered promiscuous mode [ 43.840963][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.845789][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.848584][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.866762][ T3981] device veth1_macvtap entered promiscuous mode [ 43.870021][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.872701][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.876469][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.878972][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.881591][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.911825][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.914564][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.919914][ T3981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.928025][ T3973] device veth0_vlan entered promiscuous mode [ 43.936948][ T3981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.939025][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.941839][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.946100][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.948661][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.951543][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.954795][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.965042][ T3977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.969290][ T3981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.971713][ T3981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.977682][ T3981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.979968][ T3981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.991314][ T3973] device veth1_vlan entered promiscuous mode [ 43.999729][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.002395][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.005489][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.008088][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.010808][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.020142][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.027595][ T3983] device veth0_macvtap entered promiscuous mode [ 44.032452][ T3983] device veth1_macvtap entered promiscuous mode [ 44.067928][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.070727][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.079849][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.082693][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.092060][ T3972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.111550][ T3983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.115079][ T3983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.119254][ T3983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.134030][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.136199][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.138303][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.141075][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.146289][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.149049][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.152505][ T3973] device veth0_macvtap entered promiscuous mode [ 44.182573][ T3983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.186291][ T3983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.189974][ T3983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.192636][ T3973] device veth1_macvtap entered promiscuous mode [ 44.204737][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.207451][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.211293][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.214773][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.238501][ T3983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.241261][ T3983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.244535][ T3983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.246907][ T3983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.251178][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.258827][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.261458][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.266142][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.270120][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.274854][ T3977] device veth0_vlan entered promiscuous mode [ 44.284382][ T3977] device veth1_vlan entered promiscuous mode [ 44.291769][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.294079][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.297899][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.300496][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.303721][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.306259][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.309035][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.311815][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.316782][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.319187][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.327846][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.330739][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.342150][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.346438][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.350338][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.378599][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.381187][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.384607][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.387393][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.390206][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.402933][ T3973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.407358][ T3973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.409801][ T3973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.412169][ T3973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.434556][ T3977] device veth0_macvtap entered promiscuous mode [ 44.443981][ T3977] device veth1_macvtap entered promiscuous mode [ 44.456953][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.459436][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.462074][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.465744][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.469275][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.471810][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.476331][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.529206][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.532112][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.536053][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.546233][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.555631][ T3972] device veth0_vlan entered promiscuous mode [ 44.562959][ T3972] device veth1_vlan entered promiscuous mode [ 44.578768][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.581668][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.598895][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.602205][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.612825][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.616736][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.625068][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.664340][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.666887][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.669671][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.674371][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.677204][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.680220][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.683067][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.686766][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.688920][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.695291][ T3977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.698230][ T3977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.702518][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.727981][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.730750][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.733645][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.736706][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.743941][ T3977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.746297][ T3977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.748620][ T3977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.751053][ T3977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.778969][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.783009][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.795095][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.797853][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.800526][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.808770][ T3972] device veth0_macvtap entered promiscuous mode [ 44.830745][ T3972] device veth1_macvtap entered promiscuous mode [ 44.848306][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.852482][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.857064][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.859729][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.862182][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.880619][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.882941][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.887935][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.911232][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.915973][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.918611][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.921393][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.926302][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.929004][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.931580][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.935394][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.940001][ T3972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.953020][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.956814][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.980508][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.982761][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.010583][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.020953][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.025551][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.028322][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.030903][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.040516][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.046650][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.049449][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.055728][ T3972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.062312][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.066149][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.069004][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.081847][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.084884][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.095310][ T4056] loop2: detected capacity change from 0 to 1024 [ 45.106775][ T3972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.114583][ T3972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.117002][ T3972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.119277][ T3972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.127265][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.318816][ T4062] ================================================================== [ 45.321124][ T4062] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x170/0x1ac [ 45.323305][ T4062] Read of size 2 at addr ffff0000d62dcd40 by task syz.3.4/4062 [ 45.325465][ T4062] [ 45.326056][ T4062] CPU: 1 PID: 4062 Comm: syz.3.4 Not tainted 5.15.163-syzkaller #0 [ 45.328238][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.331222][ T4062] Call trace: [ 45.332080][ T4062] dump_backtrace+0x0/0x530 [ 45.333291][ T4062] show_stack+0x2c/0x3c [ 45.334466][ T4062] dump_stack_lvl+0x108/0x170 [ 45.335754][ T4062] print_address_description+0x7c/0x3f0 [ 45.337299][ T4062] kasan_report+0x174/0x1e4 [ 45.338450][ T4062] __asan_report_load2_noabort+0x44/0x50 [ 45.339969][ T4062] cfg80211_wext_freq+0x170/0x1ac [ 45.341301][ T4062] cfg80211_wext_siwscan+0x45c/0xe0c [ 45.342798][ T4062] ioctl_standard_iw_point+0x82c/0xe24 [ 45.344394][ T4062] ioctl_standard_call+0xcc/0x264 [ 45.345790][ T4062] wext_ioctl_dispatch+0x16c/0x3ec [ 45.347205][ T4062] wext_handle_ioctl+0x224/0x448 [ 45.348538][ T4062] sock_ioctl+0x140/0x8ac [ 45.349811][ T4062] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.351134][ T4062] invoke_syscall+0x98/0x2b8 [ 45.352394][ T4062] el0_svc_common+0x138/0x258 [ 45.353699][ T4062] do_el0_svc+0x58/0x14c [ 45.354915][ T4062] el0_svc+0x7c/0x1f0 [ 45.355998][ T4062] el0t_64_sync_handler+0x84/0xe4 [ 45.357341][ T4062] el0t_64_sync+0x1a0/0x1a4 [ 45.358565][ T4062] [ 45.359149][ T4062] Allocated by task 4062: [ 45.360346][ T4062] ____kasan_kmalloc+0xbc/0xfc [ 45.361610][ T4062] __kasan_kmalloc+0x10/0x1c [ 45.362800][ T4062] __kmalloc+0x29c/0x4c8 [ 45.363891][ T4062] ioctl_standard_iw_point+0x3b8/0xe24 [ 45.365333][ T4062] ioctl_standard_call+0xcc/0x264 [ 45.366611][ T4062] wext_ioctl_dispatch+0x16c/0x3ec [ 45.367971][ T4062] wext_handle_ioctl+0x224/0x448 [ 45.369256][ T4062] sock_ioctl+0x140/0x8ac [ 45.370413][ T4062] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.371713][ T4062] invoke_syscall+0x98/0x2b8 [ 45.372971][ T4062] el0_svc_common+0x138/0x258 [ 45.374331][ T4062] do_el0_svc+0x58/0x14c [ 45.375449][ T4062] el0_svc+0x7c/0x1f0 [ 45.376528][ T4062] el0t_64_sync_handler+0x84/0xe4 [ 45.377847][ T4062] el0t_64_sync+0x1a0/0x1a4 [ 45.379052][ T4062] [ 45.379666][ T4062] The buggy address belongs to the object at ffff0000d62dcc00 [ 45.379666][ T4062] which belongs to the cache kmalloc-512 of size 512 [ 45.383405][ T4062] The buggy address is located 320 bytes inside of [ 45.383405][ T4062] 512-byte region [ffff0000d62dcc00, ffff0000d62dce00) [ 45.387038][ T4062] The buggy address belongs to the page: [ 45.388496][ T4062] page:00000000da7c20bf refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d62df800 pfn:0x1162dc [ 45.391594][ T4062] head:00000000da7c20bf order:2 compound_mapcount:0 compound_pincount:0 [ 45.393885][ T4062] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 45.396043][ T4062] raw: 05ffc00000010200 fffffc0003702a00 0000000300000003 ffff0000c0002600 [ 45.398248][ T4062] raw: ffff0000d62df800 0000000080100008 00000001ffffffff 0000000000000000 [ 45.400536][ T4062] page dumped because: kasan: bad access detected [ 45.402239][ T4062] [ 45.402826][ T4062] Memory state around the buggy address: [ 45.404273][ T4062] ffff0000d62dcc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.406345][ T4062] ffff0000d62dcc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.408475][ T4062] >ffff0000d62dcd00: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 45.410586][ T4062] ^ [ 45.412168][ T4062] ffff0000d62dcd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.414282][ T4062] ffff0000d62dce00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.416450][ T4062] ================================================================== [ 45.418593][ T4062] Disabling lock debugging due to kernel taint [ 45.430498][ T4056] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.432541][ T4056] EXT4-fs (loop2): Ignoring removed orlov option [ 45.435373][ T4062] ================================================================================ [ 45.438350][ T4062] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:2829:8 [ 45.441179][ T4062] index 33 is out of range for type 'struct iw_freq[32]' [ 45.443401][ T4062] CPU: 1 PID: 4062 Comm: syz.3.4 Tainted: G B 5.15.163-syzkaller #0 [ 45.445914][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.448558][ T4062] Call trace: [ 45.449447][ T4062] dump_backtrace+0x0/0x530 [ 45.450685][ T4062] show_stack+0x2c/0x3c [ 45.451806][ T4062] dump_stack_lvl+0x108/0x170 [ 45.453038][ T4062] dump_stack+0x1c/0x58 [ 45.454162][ T4062] __ubsan_handle_out_of_bounds+0x108/0x15c [ 45.455762][ T4062] cfg80211_wext_siwscan+0x4cc/0xe0c [ 45.457156][ T4062] ioctl_standard_iw_point+0x82c/0xe24 [ 45.458617][ T4062] ioctl_standard_call+0xcc/0x264 [ 45.459935][ T4062] wext_ioctl_dispatch+0x16c/0x3ec [ 45.461237][ T4062] wext_handle_ioctl+0x224/0x448 [ 45.462542][ T4062] sock_ioctl+0x140/0x8ac [ 45.463639][ T4062] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.464991][ T4062] invoke_syscall+0x98/0x2b8 [ 45.466170][ T4062] el0_svc_common+0x138/0x258 [ 45.467381][ T4062] do_el0_svc+0x58/0x14c [ 45.468472][ T4062] el0_svc+0x7c/0x1f0 [ 45.469458][ T4062] el0t_64_sync_handler+0x84/0xe4 [ 45.470752][ T4062] el0t_64_sync+0x1a0/0x1a4 [ 45.478243][ T4062] ================================================================================ [ 45.481776][ T4056] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 45.575111][ T4056] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 45.603486][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.605561][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.628013][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.645089][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.647282][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.649533][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.783876][ T4022] Bluetooth: hci1: command 0x040f tx timeout [ 45.785588][ T4022] Bluetooth: hci0: command 0x040f tx timeout [ 45.863933][ T4022] Bluetooth: hci3: command 0x040f tx timeout [ 45.865620][ T4022] Bluetooth: hci2: command 0x040f tx timeout [ 45.867136][ T4022] Bluetooth: hci4: command 0x040f tx timeout [ 47.863569][ T4027] Bluetooth: hci0: command 0x0419 tx timeout [ 47.865256][ T4027] Bluetooth: hci1: command 0x0419 tx timeout [ 47.943608][ T4027] Bluetooth: hci4: command 0x0419 tx timeout [ 47.945314][ T4027] Bluetooth: hci2: command 0x0419 tx timeout [ 47.946989][ T4027] Bluetooth: hci3: command 0x0419 tx timeout