Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 1970/01/01 00:00:46 ignoring optional flag "type"="gce" 1970/01/01 00:00:46 parsed 1 programs 1970/01/01 00:00:46 executed programs: 0 [ 46.880097][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 46.896405][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.897550][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.898931][ T4300] device bridge_slave_0 entered promiscuous mode [ 46.900781][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.901885][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.903332][ T4300] device bridge_slave_1 entered promiscuous mode [ 46.910530][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.913201][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.920956][ T4300] team0: Port device team_slave_0 added [ 46.924360][ T4300] team0: Port device team_slave_1 added [ 46.931725][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.932821][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.937536][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.939936][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.940993][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.945850][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.995858][ T4300] device hsr_slave_0 entered promiscuous mode [ 47.014880][ T4300] device hsr_slave_1 entered promiscuous mode [ 47.602588][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.625836][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.675708][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.696080][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.753071][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.754255][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.755614][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.756898][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.779949][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.783827][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.785823][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.787324][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.788974][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.794391][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.801067][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.802885][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.803986][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.806157][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.807666][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.808861][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.819026][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.821074][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.822566][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.824036][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.828781][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.831809][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.867452][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.868793][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.872474][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.879400][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.880838][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.888568][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.889994][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.892021][ T4300] device veth0_vlan entered promiscuous mode [ 47.894012][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.896763][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.899566][ T4300] device veth1_vlan entered promiscuous mode [ 47.908061][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.909598][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.910939][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.912520][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.917107][ T4300] device veth0_macvtap entered promiscuous mode [ 47.919363][ T4300] device veth1_macvtap entered promiscuous mode [ 47.925487][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.926674][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.928019][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.929435][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.930866][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.933951][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.940692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.942196][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.945502][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.946873][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.948332][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.949777][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.013499][ T4445] [ 48.013893][ T4445] ====================================================== [ 48.015016][ T4445] WARNING: possible circular locking dependency detected [ 48.016165][ T4445] syzkaller #0 Not tainted [ 48.016819][ T4445] ------------------------------------------------------ [ 48.017857][ T4445] syz-executor.0/4445 is trying to acquire lock: [ 48.018852][ T4445] ffff0000c04a03f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x368 [ 48.020417][ T4445] [ 48.020417][ T4445] but task is already holding lock: [ 48.021652][ T4445] ffff0000d51863f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 48.023424][ T4445] [ 48.023424][ T4445] which lock already depends on the new lock. [ 48.023424][ T4445] [ 48.025035][ T4445] [ 48.025035][ T4445] the existing dependency chain (in reverse order) is: [ 48.026389][ T4445] [ 48.026389][ T4445] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 48.027796][ T4445] __mutex_lock_common+0x194/0x1edc [ 48.028702][ T4445] mutex_lock_io_nested+0xcc/0x12c [ 48.029528][ T4445] jbd2_journal_flush+0x1e8/0x9f0 [ 48.030449][ T4445] ext4_ioctl+0x2cb4/0x3614 [ 48.031290][ T4445] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.032150][ T4445] invoke_syscall+0x98/0x2b8 [ 48.032976][ T4445] el0_svc_common+0x138/0x258 [ 48.033845][ T4445] do_el0_svc+0x58/0x14c [ 48.034700][ T4445] el0_svc+0x78/0x1e0 [ 48.035482][ T4445] el0t_64_sync_handler+0xcc/0xe4 [ 48.036383][ T4445] el0t_64_sync+0x1a0/0x1a4 [ 48.037190][ T4445] [ 48.037190][ T4445] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 48.038467][ T4445] __mutex_lock_common+0x194/0x1edc [ 48.039234][ T4445] mutex_lock_nested+0xac/0x11c [ 48.040083][ T4445] jbd2_journal_lock_updates+0x250/0x310 [ 48.041110][ T4445] ext4_change_inode_journal_flag+0x158/0x640 [ 48.042204][ T4445] ext4_fileattr_set+0xb94/0x12e4 [ 48.043102][ T4445] vfs_fileattr_set+0x674/0x8fc [ 48.043949][ T4445] do_vfs_ioctl+0x1c18/0x2370 [ 48.044737][ T4445] __arm64_sys_ioctl+0xe4/0x1c8 [ 48.045637][ T4445] invoke_syscall+0x98/0x2b8 [ 48.046505][ T4445] el0_svc_common+0x138/0x258 [ 48.047375][ T4445] do_el0_svc+0x58/0x14c [ 48.048130][ T4445] el0_svc+0x78/0x1e0 [ 48.048845][ T4445] el0t_64_sync_handler+0xcc/0xe4 [ 48.049713][ T4445] el0t_64_sync+0x1a0/0x1a4 [ 48.050553][ T4445] [ 48.050553][ T4445] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 48.051930][ T4445] percpu_down_write+0xcc/0x39c [ 48.052832][ T4445] ext4_ind_migrate+0x170/0x6bc [ 48.053781][ T4445] ext4_fileattr_set+0xc0c/0x12e4 [ 48.054646][ T4445] vfs_fileattr_set+0x674/0x8fc [ 48.055520][ T4445] do_vfs_ioctl+0x1c18/0x2370 [ 48.056385][ T4445] __arm64_sys_ioctl+0xe4/0x1c8 [ 48.057271][ T4445] invoke_syscall+0x98/0x2b8 [ 48.058068][ T4445] el0_svc_common+0x138/0x258 [ 48.058925][ T4445] do_el0_svc+0x58/0x14c [ 48.059670][ T4445] el0_svc+0x78/0x1e0 [ 48.060371][ T4445] el0t_64_sync_handler+0xcc/0xe4 [ 48.061272][ T4445] el0t_64_sync+0x1a0/0x1a4 [ 48.062121][ T4445] [ 48.062121][ T4445] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 48.063533][ T4445] __lock_acquire+0x2928/0x651c [ 48.064381][ T4445] lock_acquire+0x1f4/0x620 [ 48.065171][ T4445] down_read+0xc0/0x390 [ 48.065929][ T4445] ext4_bmap+0x54/0x368 [ 48.066696][ T4445] bmap+0xa8/0xe8 [ 48.067372][ T4445] jbd2_journal_flush+0x5e8/0x9f0 [ 48.068347][ T4445] ext4_ioctl+0x2cb4/0x3614 [ 48.069114][ T4445] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.069987][ T4445] invoke_syscall+0x98/0x2b8 [ 48.070768][ T4445] el0_svc_common+0x138/0x258 [ 48.071606][ T4445] do_el0_svc+0x58/0x14c [ 48.072329][ T4445] el0_svc+0x78/0x1e0 [ 48.073063][ T4445] el0t_64_sync_handler+0xcc/0xe4 [ 48.073977][ T4445] el0t_64_sync+0x1a0/0x1a4 [ 48.074800][ T4445] [ 48.074800][ T4445] other info that might help us debug this: [ 48.074800][ T4445] [ 48.076578][ T4445] Chain exists of: [ 48.076578][ T4445] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 48.076578][ T4445] [ 48.079181][ T4445] Possible unsafe locking scenario: [ 48.079181][ T4445] [ 48.080372][ T4445] CPU0 CPU1 [ 48.081308][ T4445] ---- ---- [ 48.082209][ T4445] lock(&journal->j_checkpoint_mutex); [ 48.083059][ T4445] lock(&journal->j_barrier); [ 48.084204][ T4445] lock(&journal->j_checkpoint_mutex); [ 48.085423][ T4445] lock(&sb->s_type->i_mutex_key#9); [ 48.086218][ T4445] [ 48.086218][ T4445] *** DEADLOCK *** [ 48.086218][ T4445] [ 48.087418][ T4445] 2 locks held by syz-executor.0/4445: [ 48.088172][ T4445] #0: ffff0000d5186170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x250/0x310 [ 48.089780][ T4445] #1: ffff0000d51863f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 48.091438][ T4445] [ 48.091438][ T4445] stack backtrace: [ 48.092270][ T4445] CPU: 1 PID: 4445 Comm: syz-executor.0 Not tainted syzkaller #0 [ 48.093538][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.095225][ T4445] Call trace: [ 48.095756][ T4445] dump_backtrace+0x0/0x43c [ 48.096482][ T4445] show_stack+0x2c/0x3c [ 48.097123][ T4445] __dump_stack+0x30/0x40 [ 48.097755][ T4445] dump_stack_lvl+0xf8/0x160 [ 48.098514][ T4445] dump_stack+0x1c/0x5c [ 48.099239][ T4445] print_circular_bug+0x148/0x1b0 [ 48.100052][ T4445] check_noncircular+0x240/0x2d4 [ 48.100873][ T4445] __lock_acquire+0x2928/0x651c [ 48.101608][ T4445] lock_acquire+0x1f4/0x620 [ 48.102333][ T4445] down_read+0xc0/0x390 [ 48.103007][ T4445] ext4_bmap+0x54/0x368 [ 48.103676][ T4445] bmap+0xa8/0xe8 [ 48.104305][ T4445] jbd2_journal_flush+0x5e8/0x9f0 [ 48.105176][ T4445] ext4_ioctl+0x2cb4/0x3614 [ 48.105923][ T4445] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.106711][ T4445] invoke_syscall+0x98/0x2b8 [ 48.107402][ T4445] el0_svc_common+0x138/0x258 [ 48.108069][ T4445] do_el0_svc+0x58/0x14c [ 48.108704][ T4445] el0_svc+0x78/0x1e0 [ 48.109341][ T4445] el0t_64_sync_handler+0xcc/0xe4 [ 48.110086][ T4445] el0t_64_sync+0x1a0/0x1a4 [ 48.905310][ T4071] Bluetooth: hci0: command 0x0409 tx timeout [ 50.974594][ T4071] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:51 executed programs: 132 [ 53.054944][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 55.134718][ T4418] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:56 executed programs: 348