last executing test programs: 192.681252ms ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) 79.79073ms ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0xfffffe8b, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) 44.605197ms ago: executing program 0 (id=6): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 2 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 31.837473][ T6516] cgroup: Unknown subsys name 'net' [ 31.959871][ T6516] cgroup: Unknown subsys name 'cpuset' [ 31.961665][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.079970][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.220551][ T6530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.220912][ T6530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.223851][ T6530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.223962][ T6530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.228250][ T6534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.228894][ T6534] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.229098][ T6534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.229680][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.230064][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.230249][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.249589][ T6540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.251173][ T6544] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.252932][ T6544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.256185][ T6544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.256219][ T6530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.256412][ T6530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.262231][ T6544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.262509][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.266077][ T6530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.269726][ T6530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.270684][ T6530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.271412][ T6530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.271561][ T6530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.272978][ T6530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.274110][ T6530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.416262][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 34.426052][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 34.489865][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 34.492678][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.492996][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.493073][ T6526] bridge_slave_0: entered allmulticast mode [ 34.493524][ T6526] bridge_slave_0: entered promiscuous mode [ 34.494628][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.494652][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.494695][ T6526] bridge_slave_1: entered allmulticast mode [ 34.495099][ T6526] bridge_slave_1: entered promiscuous mode [ 34.502415][ T6537] chnl_net:caif_netlink_parms(): no params data found [ 34.504683][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.504719][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.504778][ T6527] bridge_slave_0: entered allmulticast mode [ 34.505178][ T6527] bridge_slave_0: entered promiscuous mode [ 34.505914][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.505935][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.505979][ T6527] bridge_slave_1: entered allmulticast mode [ 34.506349][ T6527] bridge_slave_1: entered promiscuous mode [ 34.526027][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.545595][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.554885][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.555841][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.582365][ T6526] team0: Port device team_slave_0 added [ 34.584287][ T6526] team0: Port device team_slave_1 added [ 34.587393][ T6527] team0: Port device team_slave_0 added [ 34.589195][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 34.595540][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.596919][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.598324][ T6536] bridge_slave_0: entered allmulticast mode [ 34.600084][ T6536] bridge_slave_0: entered promiscuous mode [ 34.606240][ T6527] team0: Port device team_slave_1 added [ 34.617869][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.617893][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.617905][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.618554][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.618613][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.618675][ T6536] bridge_slave_1: entered allmulticast mode [ 34.619452][ T6536] bridge_slave_1: entered promiscuous mode [ 34.644591][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.644621][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.644639][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.657068][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.657364][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.657370][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.657383][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.658311][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.658321][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.658335][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.659603][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.659673][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.659741][ T6537] bridge_slave_0: entered allmulticast mode [ 34.660276][ T6537] bridge_slave_0: entered promiscuous mode [ 34.661272][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.661294][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.661345][ T6537] bridge_slave_1: entered allmulticast mode [ 34.661790][ T6537] bridge_slave_1: entered promiscuous mode [ 34.687946][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.691168][ T6527] hsr_slave_0: entered promiscuous mode [ 34.692517][ T6527] hsr_slave_1: entered promiscuous mode [ 34.716283][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.716335][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.716405][ T6535] bridge_slave_0: entered allmulticast mode [ 34.716823][ T6535] bridge_slave_0: entered promiscuous mode [ 34.717424][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.717438][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.717496][ T6535] bridge_slave_1: entered allmulticast mode [ 34.717870][ T6535] bridge_slave_1: entered promiscuous mode [ 34.736105][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.742307][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.742887][ T6536] team0: Port device team_slave_0 added [ 34.743563][ T6536] team0: Port device team_slave_1 added [ 34.753826][ T6526] hsr_slave_0: entered promiscuous mode [ 34.754112][ T6526] hsr_slave_1: entered promiscuous mode [ 34.754282][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 34.754323][ T6526] Cannot create hsr debugfs directory [ 34.755535][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.756346][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.765871][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.765897][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.765911][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.780454][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.780482][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.780497][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.799344][ T6535] team0: Port device team_slave_0 added [ 34.802892][ T6537] team0: Port device team_slave_0 added [ 34.804212][ T6537] team0: Port device team_slave_1 added [ 34.809830][ T6535] team0: Port device team_slave_1 added [ 34.826471][ T6536] hsr_slave_0: entered promiscuous mode [ 34.826779][ T6536] hsr_slave_1: entered promiscuous mode [ 34.826969][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 34.826981][ T6536] Cannot create hsr debugfs directory [ 34.832765][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.832791][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.833117][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.834474][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.834487][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.834503][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.840897][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.840907][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.840921][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.854336][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.854360][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.854378][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.900897][ T6535] hsr_slave_0: entered promiscuous mode [ 34.901245][ T6535] hsr_slave_1: entered promiscuous mode [ 34.901430][ T6535] debugfs: 'hsr0' already exists in 'hsr' [ 34.901440][ T6535] Cannot create hsr debugfs directory [ 34.915789][ T6537] hsr_slave_0: entered promiscuous mode [ 34.916109][ T6537] hsr_slave_1: entered promiscuous mode [ 34.916290][ T6537] debugfs: 'hsr0' already exists in 'hsr' [ 34.916299][ T6537] Cannot create hsr debugfs directory [ 34.934641][ T6527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.949587][ T6527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.963555][ T6527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.965968][ T6527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.012435][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.012485][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.012649][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.012676][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.019777][ T6526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.022351][ T6526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.025429][ T6526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.034947][ T6526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.065923][ T6536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.074111][ T6536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.076521][ T6536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.083178][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.083227][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.083374][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.083398][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.087656][ T6536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.103059][ T6537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.120081][ T6537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.122462][ T6537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.125047][ T6537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.133100][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.137862][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.145048][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.147254][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.165395][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.167665][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.167708][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.167777][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.167805][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.174165][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.174204][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.174274][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.174300][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.184306][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.191227][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.191267][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.191333][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.191356][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.197461][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.202436][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.203843][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.205324][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.210492][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.211736][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.213179][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.214358][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.216192][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.217395][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.225369][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.237684][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.237743][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.240559][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.240591][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.252824][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.257345][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.257394][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.280438][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.294773][ T6537] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.300270][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.305404][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.313230][ T6535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.314926][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.322651][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.335485][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.335537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.335893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.335914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.337699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.337716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.348288][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.348502][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.349432][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.349458][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.365467][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.365518][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.371835][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.402640][ T6536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.429262][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.441501][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.449924][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.462821][ T6527] veth0_vlan: entered promiscuous mode [ 35.464131][ T6526] veth0_vlan: entered promiscuous mode [ 35.466985][ T6526] veth1_vlan: entered promiscuous mode [ 35.476594][ T6526] veth0_macvtap: entered promiscuous mode [ 35.480806][ T6526] veth1_macvtap: entered promiscuous mode [ 35.483946][ T6527] veth1_vlan: entered promiscuous mode [ 35.490187][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.492407][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.504444][ T5384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.515033][ T5337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.515082][ T5337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.515107][ T5337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.542623][ T6527] veth0_macvtap: entered promiscuous mode [ 35.543620][ T6527] veth1_macvtap: entered promiscuous mode [ 35.553721][ T1822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.553754][ T1822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.558006][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.562695][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.568284][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.576805][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.593591][ T1822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.593621][ T1822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.604260][ T4453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.604310][ T4453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.604330][ T4453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.604344][ T4453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.624175][ T6537] veth0_vlan: entered promiscuous mode [ 35.633606][ T6536] veth0_vlan: entered promiscuous mode [ 35.634361][ T6526] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.657469][ T6535] veth0_vlan: entered promiscuous mode [ 35.664400][ T6537] veth1_vlan: entered promiscuous mode [ 35.667534][ T6535] veth1_vlan: entered promiscuous mode [ 35.684590][ T5337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.684623][ T5337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.687441][ T6536] veth1_vlan: entered promiscuous mode [ 35.698697][ T6537] veth0_macvtap: entered promiscuous mode [ 35.701671][ T6537] veth1_macvtap: entered promiscuous mode [ 35.714187][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.714216][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.723043][ T6535] veth0_macvtap: entered promiscuous mode [ 35.725537][ T6536] veth0_macvtap: entered promiscuous mode [ 35.729900][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.730927][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.733071][ T6643] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 35.736195][ T6535] veth1_macvtap: entered promiscuous mode [ 35.742405][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.742527][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.742550][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.742569][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.748301][ T6536] veth1_macvtap: entered promiscuous mode [ 35.752928][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.757050][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.773334][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.784479][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.786820][ T5337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786877][ T5337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786895][ T5337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786909][ T5337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.810904][ T5337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811024][ T5337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811048][ T5337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811063][ T5337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.827498][ T6647] loop0: detected capacity change from 0 to 512 [ 35.854974][ T6647] [ 35.855414][ T6647] ====================================================== [ 35.856482][ T6647] WARNING: possible circular locking dependency detected [ 35.857524][ T6647] syzkaller #0 Not tainted [ 35.858205][ T6647] ------------------------------------------------------ [ 35.859378][ T6647] syz.0.6/6647 is trying to acquire lock: [ 35.860261][ T6647] ffff0000d479cb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 35.861915][ T6647] [ 35.861915][ T6647] but task is already holding lock: [ 35.863151][ T6647] ffff0000dccfd6d8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 35.864621][ T6647] [ 35.864621][ T6647] which lock already depends on the new lock. [ 35.864621][ T6647] [ 35.866257][ T6647] [ 35.866257][ T6647] the existing dependency chain (in reverse order) is: [ 35.867799][ T6647] [ 35.867799][ T6647] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 35.868958][ T6647] down_write+0x50/0xc0 [ 35.869704][ T6647] ext4_xattr_set_handle+0x11c/0x1260 [ 35.870664][ T6647] ext4_initxattrs+0xa4/0x11c [ 35.871553][ T6647] security_inode_init_security+0x6dc/0x7f4 [ 35.872565][ T6647] ext4_init_security+0x44/0x58 [ 35.873375][ T6647] __ext4_new_inode+0x27f4/0x3190 [ 35.874319][ T6647] ext4_create+0x1f8/0x3fc [ 35.875182][ T6647] path_openat+0x12d8/0x2c40 [ 35.876026][ T6647] do_filp_open+0x18c/0x36c [ 35.876902][ T6647] do_sys_openat2+0x11c/0x1b4 [ 35.877807][ T6647] __arm64_sys_openat+0x120/0x158 [ 35.878710][ T6647] invoke_syscall+0x98/0x2b8 [ 35.879545][ T6647] el0_svc_common+0x130/0x23c [ 35.880408][ T6647] do_el0_svc+0x48/0x58 [ 35.881155][ T6647] el0_svc+0x58/0x180 [ 35.881843][ T6647] el0t_64_sync_handler+0x84/0x12c [ 35.882763][ T6647] el0t_64_sync+0x198/0x19c [ 35.883556][ T6647] [ 35.883556][ T6647] -> #1 (jbd2_handle){++++}-{0:0}: [ 35.884790][ T6647] start_this_handle+0xe74/0x10dc [ 35.885687][ T6647] jbd2__journal_start+0x288/0x51c [ 35.886642][ T6647] __ext4_journal_start_sb+0x378/0x88c [ 35.887643][ T6647] ext4_do_writepages+0xb94/0x39b4 [ 35.888550][ T6647] ext4_writepages+0x178/0x2a0 [ 35.889421][ T6647] do_writepages+0x270/0x468 [ 35.890196][ T6647] file_write_and_wait_range+0x1d0/0x2c4 [ 35.891105][ T6647] ext4_sync_file+0x274/0xb44 [ 35.891874][ T6647] __arm64_sys_fsync+0x170/0x1d4 [ 35.892684][ T6647] invoke_syscall+0x98/0x2b8 [ 35.893511][ T6647] el0_svc_common+0x130/0x23c [ 35.894391][ T6647] do_el0_svc+0x48/0x58 [ 35.895127][ T6647] el0_svc+0x58/0x180 [ 35.895809][ T6647] el0t_64_sync_handler+0x84/0x12c [ 35.896672][ T6647] el0t_64_sync+0x198/0x19c [ 35.897470][ T6647] [ 35.897470][ T6647] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 35.898930][ T6647] __lock_acquire+0x1774/0x30a4 [ 35.899761][ T6647] lock_acquire+0x14c/0x2e0 [ 35.900559][ T6647] percpu_down_read_internal+0x5c/0x298 [ 35.901577][ T6647] ext4_writepages+0x150/0x2a0 [ 35.902382][ T6647] do_writepages+0x270/0x468 [ 35.903203][ T6647] __writeback_single_inode+0x15c/0x13e8 [ 35.904182][ T6647] writeback_single_inode+0x18c/0x54c [ 35.905218][ T6647] write_inode_now+0x13c/0x1a4 [ 35.906152][ T6647] iput+0x570/0x83c [ 35.906816][ T6647] ext4_xattr_block_set+0x13dc/0x24bc [ 35.907722][ T6647] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 35.908761][ T6647] __ext4_expand_extra_isize+0x2a0/0x37c [ 35.909812][ T6647] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 35.910776][ T6647] ext4_evict_inode+0x930/0x1084 [ 35.911696][ T6647] evict+0x414/0x928 [ 35.912385][ T6647] iput+0x6e4/0x83c [ 35.913127][ T6647] ext4_process_orphan+0x240/0x2b4 [ 35.914043][ T6647] ext4_orphan_cleanup+0x930/0x107c [ 35.914978][ T6647] ext4_fill_super+0x4724/0x4ea4 [ 35.915861][ T6647] get_tree_bdev_flags+0x360/0x414 [ 35.916798][ T6647] get_tree_bdev+0x2c/0x3c [ 35.917563][ T6647] ext4_get_tree+0x28/0x38 [ 35.918362][ T6647] vfs_get_tree+0x90/0x28c [ 35.919141][ T6647] do_new_mount+0x278/0x7f4 [ 35.919932][ T6647] path_mount+0x5b4/0xde0 [ 35.920754][ T6647] __arm64_sys_mount+0x3e8/0x468 [ 35.921572][ T6647] invoke_syscall+0x98/0x2b8 [ 35.922361][ T6647] el0_svc_common+0x130/0x23c [ 35.923203][ T6647] do_el0_svc+0x48/0x58 [ 35.923987][ T6647] el0_svc+0x58/0x180 [ 35.924813][ T6647] el0t_64_sync_handler+0x84/0x12c [ 35.925759][ T6647] el0t_64_sync+0x198/0x19c [ 35.926609][ T6647] [ 35.926609][ T6647] other info that might help us debug this: [ 35.926609][ T6647] [ 35.928344][ T6647] Chain exists of: [ 35.928344][ T6647] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 35.928344][ T6647] [ 35.930602][ T6647] Possible unsafe locking scenario: [ 35.930602][ T6647] [ 35.931821][ T6647] CPU0 CPU1 [ 35.932694][ T6647] ---- ---- [ 35.933530][ T6647] lock(&ei->xattr_sem); [ 35.934219][ T6647] lock(jbd2_handle); [ 35.935269][ T6647] lock(&ei->xattr_sem); [ 35.936330][ T6647] rlock(&sbi->s_writepages_rwsem); [ 35.937130][ T6647] [ 35.937130][ T6647] *** DEADLOCK *** [ 35.937130][ T6647] [ 35.938423][ T6647] 3 locks held by syz.0.6/6647: [ 35.939287][ T6647] #0: ffff0000d479a0e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1a0/0x80c [ 35.941034][ T6647] #1: ffff0000d479a618 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 35.942562][ T6647] #2: ffff0000dccfd6d8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 35.944310][ T6647] [ 35.944310][ T6647] stack backtrace: [ 35.945199][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 35.946644][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 35.948281][ T6647] Call trace: [ 35.948812][ T6647] show_stack+0x2c/0x3c (C) [ 35.949507][ T6647] __dump_stack+0x30/0x40 [ 35.950231][ T6647] dump_stack_lvl+0xd8/0x12c [ 35.950946][ T6647] dump_stack+0x1c/0x28 [ 35.951596][ T6647] print_circular_bug+0x324/0x32c [ 35.952426][ T6647] check_noncircular+0x154/0x174 [ 35.953226][ T6647] __lock_acquire+0x1774/0x30a4 [ 35.954062][ T6647] lock_acquire+0x14c/0x2e0 [ 35.954737][ T6647] percpu_down_read_internal+0x5c/0x298 [ 35.955615][ T6647] ext4_writepages+0x150/0x2a0 [ 35.956359][ T6647] do_writepages+0x270/0x468 [ 35.957074][ T6647] __writeback_single_inode+0x15c/0x13e8 [ 35.957972][ T6647] writeback_single_inode+0x18c/0x54c [ 35.958859][ T6647] write_inode_now+0x13c/0x1a4 [ 35.959649][ T6647] iput+0x570/0x83c [ 35.960351][ T6647] ext4_xattr_block_set+0x13dc/0x24bc [ 35.961257][ T6647] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 35.962190][ T6647] __ext4_expand_extra_isize+0x2a0/0x37c [ 35.963122][ T6647] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 35.964456][ T6647] ext4_evict_inode+0x930/0x1084 [ 35.965286][ T6647] evict+0x414/0x928 [ 35.965904][ T6647] iput+0x6e4/0x83c [ 35.966551][ T6647] ext4_process_orphan+0x240/0x2b4 [ 35.967373][ T6647] ext4_orphan_cleanup+0x930/0x107c [ 35.968203][ T6647] ext4_fill_super+0x4724/0x4ea4 [ 35.968979][ T6647] get_tree_bdev_flags+0x360/0x414 [ 35.969792][ T6647] get_tree_bdev+0x2c/0x3c [ 35.970503][ T6647] ext4_get_tree+0x28/0x38 [ 35.971187][ T6647] vfs_get_tree+0x90/0x28c [ 35.971886][ T6647] do_new_mount+0x278/0x7f4 [ 35.972595][ T6647] path_mount+0x5b4/0xde0 [ 35.973316][ T6647] __arm64_sys_mount+0x3e8/0x468 [ 35.974104][ T6647] invoke_syscall+0x98/0x2b8 [ 35.974883][ T6647] el0_svc_common+0x130/0x23c [ 35.975683][ T6647] do_el0_svc+0x48/0x58 [ 35.976397][ T6647] el0_svc+0x58/0x180 [ 35.977063][ T6647] el0t_64_sync_handler+0x84/0x12c [ 35.977974][ T6647] el0t_64_sync+0x198/0x19c [ ** replaying previous printk message ** [ 35.982993][ T6647] ------------[ cut here ]------------ [ 35.983020][ T6647] EA inode 11 i_nlink=2 [ 35.983113][ T6647] WARNING: CPU: 1 PID: 6647 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 35.986706][ T6647] Modules linked in: [ 35.987256][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 35.989329][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 35.990933][ T6647] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.992099][ T6647] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 35.993149][ T6647] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 35.994117][ T6647] sp : ffff8000a3b36dc0 [ 35.994746][ T6647] x29: ffff8000a3b36e50 x28: 0000000000000000 x27: 1fffe0001b99fee9 [ 35.996109][ T6647] x26: dfff800000000000 x25: ffff8000a3b36dc0 x24: ffff700014766db8 [ 35.997396][ T6647] x23: ffff800092e12000 x22: ffff0000dccff598 x21: 0000000000000002 [ 35.998714][ T6647] x20: 0000000000000001 x19: ffff0000dccff558 x18: 1fffe0003379be88 [ 35.999989][ T6647] x17: ffff80008f7de000 x16: ffff80008b0141e8 x15: 0000000000000001 [ 36.001398][ T6647] x14: 1ffff00014766d28 x13: 0000000000000000 x12: 0000000000000000 [ 36.002728][ T6647] x11: 0000000000080000 x10: 0000000000066b01 x9 : bbdd66ca2e287400 [ 36.004112][ T6647] x8 : bbdd66ca2e287400 x7 : 0000000000000000 x6 : ffff800080563d30 [ 36.005412][ T6647] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de9b0 [ 36.006672][ T6647] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 36.007958][ T6647] Call trace: [ 36.008479][ T6647] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 36.010192][ T6647] ext4_xattr_set_entry+0x928/0x15c0 [ 36.011028][ T6647] ext4_xattr_ibody_set+0x204/0x5fc [ 36.011874][ T6647] ext4_expand_extra_isize_ea+0xefc/0x182c [ 36.012886][ T6647] __ext4_expand_extra_isize+0x2a0/0x37c [ 36.013849][ T6647] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 36.014720][ T6647] ext4_evict_inode+0x930/0x1084 [ 36.015525][ T6647] evict+0x414/0x928 [ 36.016174][ T6647] iput+0x6e4/0x83c [ 36.016790][ T6647] ext4_process_orphan+0x240/0x2b4 [ 36.017567][ T6647] ext4_orphan_cleanup+0x930/0x107c [ 36.019002][ T6647] ext4_fill_super+0x4724/0x4ea4 [ 36.019793][ T6647] get_tree_bdev_flags+0x360/0x414 [ 36.020642][ T6647] get_tree_bdev+0x2c/0x3c [ 36.021359][ T6647] ext4_get_tree+0x28/0x38 [ 36.022093][ T6647] vfs_get_tree+0x90/0x28c [ 36.022837][ T6647] do_new_mount+0x278/0x7f4 [ 36.023552][ T6647] path_mount+0x5b4/0xde0 [ 36.024280][ T6647] __arm64_sys_mount+0x3e8/0x468 [ 36.025094][ T6647] invoke_syscall+0x98/0x2b8 [ 36.025828][ T6647] el0_svc_common+0x130/0x23c [ 36.026596][ T6647] do_el0_svc+0x48/0x58 [ 36.027238][ T6647] el0_svc+0x58/0x180 [ 36.027871][ T6647] el0t_64_sync_handler+0x84/0x12c [ 36.028659][ T6647] el0t_64_sync+0x198/0x19c [ 36.029419][ T6647] irq event stamp: 2153 [ 36.030030][ T6647] hardirqs last enabled at (2153): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 36.031563][ T6647] hardirqs last disabled at (2152): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 36.033166][ T6647] softirqs last enabled at (1450): [] handle_softirqs+0xaf8/0xc88 [ 36.034724][ T6647] softirqs last disabled at (1333): [] __do_softirq+0x14/0x20 [ 36.036204][ T6647] ---[ end trace 0000000000000000 ]--- [ 36.038957][ T6647] EXT4-fs (loop0): 1 orphan inode deleted [ 36.039167][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.046774][ T6535] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 36.051652][ T6527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.062166][ T1822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.062190][ T1822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.066902][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.066929][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.067436][ T6535] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 36.076256][ T5384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.076285][ T5384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.079493][ T6536] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 36.093079][ T6537] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 36.096465][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.096497][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.100834][ T6536] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 36.106144][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.106175][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.107017][ T1822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.107027][ T1822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.278635][ T6533] Bluetooth: hci0: command tx timeout [ 36.279570][ T6544] Bluetooth: hci1: command tx timeout [ 36.358667][ T6533] Bluetooth: hci4: command tx timeout [ 36.358695][ T6533] Bluetooth: hci3: command tx timeout [ 36.360515][ T6544] Bluetooth: hci2: command tx timeout [ 38.348486][ T6534] Bluetooth: hci0: command tx timeout [ 38.349489][ T6544] Bluetooth: hci1: command tx timeout [ 38.428866][ T6534] Bluetooth: hci3: command tx timeout [ 38.428978][ T6534] Bluetooth: hci4: command tx timeout [ 38.430775][ T6544] Bluetooth: hci2: command tx timeout [ 40.428461][ T6533] Bluetooth: hci1: command tx timeout [ 40.428494][ T6533] Bluetooth: hci0: command tx timeout [ 40.508967][ T6544] Bluetooth: hci2: command tx timeout [ 40.508996][ T6544] Bluetooth: hci4: command tx timeout [ 40.509013][ T6544] Bluetooth: hci3: command tx timeout [ 42.508508][ T6533] Bluetooth: hci1: command tx timeout [ 42.518497][ T6533] Bluetooth: hci0: command tx timeout [ 42.588462][ T6533] Bluetooth: hci3: command tx timeout [ 42.588491][ T6533] Bluetooth: hci4: command tx timeout [ 42.588513][ T6533] Bluetooth: hci2: command tx timeout