[ 71.198734][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.205743][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. 2026/02/09 14:18:44 ignoring optional flag "type"="gce" 2026/02/09 14:18:45 parsed 1 programs [ 76.323053][ T1326] cfg80211: failed to load regulatory.db 2026/02/09 14:18:47 executed programs: 0 [ 78.606516][ T4443] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.739598][ T4513] chnl_net:caif_netlink_parms(): no params data found [ 78.774828][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.782537][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.790585][ T4513] device bridge_slave_0 entered promiscuous mode [ 78.798992][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.806724][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.814511][ T4513] device bridge_slave_1 entered promiscuous mode [ 78.833549][ T4513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.845329][ T4513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.867181][ T4513] team0: Port device team_slave_0 added [ 78.874574][ T4513] team0: Port device team_slave_1 added [ 78.890889][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.898335][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.925208][ T4513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.937333][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.944309][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.972421][ T4513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.000566][ T4513] device hsr_slave_0 entered promiscuous mode [ 79.007971][ T4513] device hsr_slave_1 entered promiscuous mode [ 79.596643][ T4513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.608539][ T4513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.619539][ T4513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.632847][ T4513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.668155][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.675502][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.683712][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.691208][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.751740][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.760199][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.772466][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.783429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.804452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.813261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.824134][ T4513] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.837814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.857026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.867701][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.874903][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.896684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.906886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.917197][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.924297][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.936279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.947330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.968228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.978330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.989799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.004000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.014936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.024491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.035704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.044613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.057844][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.068856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.204689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.213408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.230505][ T4513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.254739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.264437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.287158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.296725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.299395][ T4513] device veth0_vlan entered promiscuous mode [ 80.312866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.323288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.339564][ T4513] device veth1_vlan entered promiscuous mode [ 80.363726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.373307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.384213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.393799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.406287][ T4513] device veth0_macvtap entered promiscuous mode [ 80.417713][ T4513] device veth1_macvtap entered promiscuous mode [ 80.436867][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.444556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.454552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.464850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.474198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.488754][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.500111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.509507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.520284][ T4513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.530873][ T4513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.542095][ T4513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.552053][ T4513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.716319][ T4210] Bluetooth: hci0: command 0x0409 tx timeout [ 80.907451][ T4616] [ 80.909925][ T4616] ====================================================== [ 80.916963][ T4616] WARNING: possible circular locking dependency detected [ 80.923992][ T4616] syzkaller #0 Not tainted [ 80.928659][ T4616] ------------------------------------------------------ [ 80.935789][ T4616] syz-executor.0/4616 is trying to acquire lock: [ 80.942218][ T4616] ffff88814cd0e170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2d1/0x390 [ 80.952981][ T4616] [ 80.952981][ T4616] but task is already holding lock: [ 80.960538][ T4616] ffff88814cd0cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x194/0x6b0 [ 80.972345][ T4616] [ 80.972345][ T4616] which lock already depends on the new lock. [ 80.972345][ T4616] [ 80.983213][ T4616] [ 80.983213][ T4616] the existing dependency chain (in reverse order) is: [ 80.992342][ T4616] [ 80.992342][ T4616] -> #4 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 81.001056][ T4616] percpu_down_write+0x52/0x2f0 [ 81.006466][ T4616] ext4_change_inode_journal_flag+0x194/0x6b0 [ 81.013379][ T4616] ext4_fileattr_set+0xe5a/0x1750 [ 81.019050][ T4616] vfs_fileattr_set+0x859/0xb10 [ 81.024551][ T4616] do_vfs_ioctl+0x186a/0x1ef0 [ 81.030024][ T4616] __se_sys_ioctl+0x83/0x170 [ 81.035217][ T4616] do_syscall_64+0x4c/0xa0 [ 81.040335][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.047129][ T4616] [ 81.047129][ T4616] -> #3 (mapping.invalidate_lock){++++}-{3:3}: [ 81.055568][ T4616] down_write+0x38/0x60 [ 81.060422][ T4616] ext4_setattr+0xdb6/0x19e0 [ 81.065621][ T4616] notify_change+0xbcd/0xee0 [ 81.070912][ T4616] do_truncate+0x1ac/0x240 [ 81.075999][ T4616] do_sys_ftruncate+0x31b/0x3d0 [ 81.081451][ T4616] do_syscall_64+0x4c/0xa0 [ 81.086558][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.093067][ T4616] [ 81.093067][ T4616] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 81.101687][ T4616] down_read+0x44/0x2e0 [ 81.106367][ T4616] ext4_bmap+0x4d/0x3f0 [ 81.111038][ T4616] bmap+0xa2/0xd0 [ 81.115277][ T4616] jbd2_journal_flush+0x655/0xcc0 [ 81.120886][ T4616] ext4_ioctl+0x3100/0x3820 [ 81.126170][ T4616] __se_sys_ioctl+0xfa/0x170 [ 81.131366][ T4616] do_syscall_64+0x4c/0xa0 [ 81.136581][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.143263][ T4616] [ 81.143263][ T4616] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 81.152306][ T4616] __mutex_lock_common+0x1e3/0x2400 [ 81.158467][ T4616] mutex_lock_io_nested+0x43/0x60 [ 81.164114][ T4616] jbd2_journal_flush+0x284/0xcc0 [ 81.169848][ T4616] ext4_ioctl+0x3100/0x3820 [ 81.174877][ T4616] __se_sys_ioctl+0xfa/0x170 [ 81.179984][ T4616] do_syscall_64+0x4c/0xa0 [ 81.185206][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.191707][ T4616] [ 81.191707][ T4616] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 81.199792][ T4616] __lock_acquire+0x2c42/0x7d10 [ 81.205169][ T4616] lock_acquire+0x19e/0x400 [ 81.210367][ T4616] __mutex_lock_common+0x1e3/0x2400 [ 81.216203][ T4616] mutex_lock_nested+0x17/0x20 [ 81.221802][ T4616] jbd2_journal_lock_updates+0x2d1/0x390 [ 81.228146][ T4616] ext4_change_inode_journal_flag+0x19c/0x6b0 [ 81.234768][ T4616] ext4_fileattr_set+0xe5a/0x1750 [ 81.240582][ T4616] vfs_fileattr_set+0x859/0xb10 [ 81.245950][ T4616] do_vfs_ioctl+0x186a/0x1ef0 [ 81.251317][ T4616] __se_sys_ioctl+0x83/0x170 [ 81.256423][ T4616] do_syscall_64+0x4c/0xa0 [ 81.261363][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.267775][ T4616] [ 81.267775][ T4616] other info that might help us debug this: [ 81.267775][ T4616] [ 81.278303][ T4616] Chain exists of: [ 81.278303][ T4616] &journal->j_barrier --> mapping.invalidate_lock --> &sbi->s_writepages_rwsem [ 81.278303][ T4616] [ 81.293440][ T4616] Possible unsafe locking scenario: [ 81.293440][ T4616] [ 81.301074][ T4616] CPU0 CPU1 [ 81.306436][ T4616] ---- ---- [ 81.312092][ T4616] lock(&sbi->s_writepages_rwsem); [ 81.317561][ T4616] lock(mapping.invalidate_lock); [ 81.325193][ T4616] lock(&sbi->s_writepages_rwsem); [ 81.332911][ T4616] lock(&journal->j_barrier); [ 81.337674][ T4616] [ 81.337674][ T4616] *** DEADLOCK *** [ 81.337674][ T4616] [ 81.346012][ T4616] 4 locks held by syz-executor.0/4616: [ 81.351488][ T4616] #0: ffff88814cd0a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 81.361251][ T4616] #1: ffff888066e6bfc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x150/0xb10 [ 81.372132][ T4616] #2: ffff888066e6c160 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x116/0x6b0 [ 81.384188][ T4616] #3: ffff88814cd0cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x194/0x6b0 [ 81.396726][ T4616] [ 81.396726][ T4616] stack backtrace: [ 81.402607][ T4616] CPU: 0 PID: 4616 Comm: syz-executor.0 Not tainted syzkaller #0 [ 81.410597][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 81.420949][ T4616] Call Trace: [ 81.424326][ T4616] [ 81.427255][ T4616] dump_stack_lvl+0x188/0x250 [ 81.432115][ T4616] ? load_image+0x400/0x400 [ 81.436623][ T4616] ? show_regs_print_info+0x20/0x20 [ 81.441994][ T4616] ? print_circular_bug+0x12b/0x1a0 [ 81.447192][ T4616] check_noncircular+0x296/0x330 [ 81.452240][ T4616] ? add_chain_block+0x940/0x940 [ 81.457194][ T4616] ? add_chain_block+0x940/0x940 [ 81.462125][ T4616] ? lockdep_lock+0xf1/0x1f0 [ 81.466817][ T4616] ? mark_lock+0x94/0x320 [ 81.471235][ T4616] __lock_acquire+0x2c42/0x7d10 [ 81.476285][ T4616] ? verify_lock_unused+0x140/0x140 [ 81.481564][ T4616] ? verify_lock_unused+0x140/0x140 [ 81.486945][ T4616] ? verify_lock_unused+0x140/0x140 [ 81.492239][ T4616] ? __lock_acquire+0x28ac/0x7d10 [ 81.497270][ T4616] lock_acquire+0x19e/0x400 [ 81.501786][ T4616] ? jbd2_journal_lock_updates+0x2d1/0x390 [ 81.507597][ T4616] ? __might_sleep+0xf0/0xf0 [ 81.512632][ T4616] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 81.518830][ T4616] ? read_lock_is_recursive+0x10/0x10 [ 81.524306][ T4616] ? lock_chain_count+0x20/0x20 [ 81.529348][ T4616] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 81.535008][ T4616] ? lockdep_hardirqs_off+0x70/0x100 [ 81.540482][ T4616] ? jbd2_journal_lock_updates+0x2d1/0x390 [ 81.546493][ T4616] __mutex_lock_common+0x1e3/0x2400 [ 81.551969][ T4616] ? jbd2_journal_lock_updates+0x2d1/0x390 [ 81.558024][ T4616] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.564112][ T4616] ? jbd2_journal_lock_updates+0x2c0/0x390 [ 81.570091][ T4616] ? mutex_lock_io_nested+0x60/0x60 [ 81.575593][ T4616] ? init_wait_entry+0xd0/0xd0 [ 81.580469][ T4616] ? do_raw_read_unlock+0x70/0x70 [ 81.585492][ T4616] ? rcu_sync_enter+0x22f/0x350 [ 81.590439][ T4616] mutex_lock_nested+0x17/0x20 [ 81.595200][ T4616] jbd2_journal_lock_updates+0x2d1/0x390 [ 81.600835][ T4616] ? jbd2_journal_wait_updates+0x270/0x270 [ 81.606884][ T4616] ? rwsem_write_trylock+0x135/0x1c0 [ 81.612360][ T4616] ? cpumask_next+0xb3/0xd0 [ 81.617038][ T4616] ? percpu_down_write+0x20d/0x2f0 [ 81.622518][ T4616] ext4_change_inode_journal_flag+0x19c/0x6b0 [ 81.628593][ T4616] ext4_fileattr_set+0xe5a/0x1750 [ 81.633620][ T4616] ? verify_lock_unused+0x140/0x140 [ 81.639022][ T4616] ? ext4_fileattr_get+0x200/0x200 [ 81.644138][ T4616] ? rwsem_write_trylock+0x135/0x1c0 [ 81.649421][ T4616] ? memset+0x1e/0x40 [ 81.653594][ T4616] ? fileattr_fill_flags+0x1cc/0x300 [ 81.658876][ T4616] ? fscrypt_prepare_setflags+0x5e/0x210 [ 81.664527][ T4616] vfs_fileattr_set+0x859/0xb10 [ 81.669475][ T4616] ? copy_fsxattr_to_user+0x230/0x230 [ 81.675127][ T4616] ? sb_start_write+0x112/0x1c0 [ 81.680044][ T4616] do_vfs_ioctl+0x186a/0x1ef0 [ 81.684822][ T4616] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 81.690522][ T4616] ? rcu_lock_release+0x5/0x20 [ 81.695658][ T4616] ? __lock_acquire+0x7d10/0x7d10 [ 81.700694][ T4616] ? kfree+0xef/0x2a0 [ 81.704781][ T4616] ? tomoyo_path_number_perm+0x5b4/0x660 [ 81.710598][ T4616] ? verify_lock_unused+0x140/0x140 [ 81.715894][ T4616] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 81.721605][ T4616] ? bpf_lsm_file_ioctl+0x5/0x10 [ 81.726635][ T4616] ? security_file_ioctl+0x7c/0xa0 [ 81.732020][ T4616] __se_sys_ioctl+0x83/0x170 [ 81.736701][ T4616] do_syscall_64+0x4c/0xa0 [ 81.741115][ T4616] ? clear_bhb_loop+0x30/0x80 [ 81.745794][ T4616] ? clear_bhb_loop+0x30/0x80 [ 81.750567][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.756722][ T4616] RIP: 0033:0x7f1816bd83b9 [ 81.761232][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 81.781749][ T4616] RSP: 002b:00007f1815f680b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.790182][ T4616] RAX: ffffffffffffffda RBX: 00007f1816d15f80 RCX: 00007f1816bd83b9 [ 81.798341][ T4616] RDX: 0000000020000180 RSI: 0000000040086602 RDI: 0000000000000005 [ 81.806405][ T4616] RBP: 00007f1816c39498 R08: 0000000000000000 R09: 0000000000000000 [ 81.814647][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.822660][ T4616] R13: 000000000000000b R14: 00007f1816d15f80 R15: 00007ffce735e2d8 [ 81.830836][ T4616] [ 82.795509][ T4210] Bluetooth: hci0: command 0x041b tx timeout 2026/02/09 14:18:52 executed programs: 27 [ 84.876033][ T4210] Bluetooth: hci0: command 0x040f tx timeout [ 86.955489][ T1326] Bluetooth: hci0: command 0x0419 tx timeout 2026/02/09 14:18:57 executed programs: 124