[ 54.391483][ T433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.449710][ T433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.492010][ T433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.094612][ T433] device hsr_slave_0 left promiscuous mode [ 55.102712][ T433] device hsr_slave_1 left promiscuous mode [ 55.111639][ T433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.119573][ T433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.130543][ T433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.138335][ T433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.147736][ T433] device bridge_slave_1 left promiscuous mode [ 55.154790][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.172474][ T433] device bridge_slave_0 left promiscuous mode [ 55.179239][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.201790][ T433] device veth1_macvtap left promiscuous mode [ 55.209556][ T433] device veth0_macvtap left promiscuous mode [ 55.216321][ T433] device veth1_vlan left promiscuous mode [ 55.222292][ T433] device veth0_vlan left promiscuous mode [ 55.362337][ T433] team0 (unregistering): Port device team_slave_1 removed [ 55.374628][ T433] team0 (unregistering): Port device team_slave_0 removed [ 55.386855][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.399691][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.447841][ T433] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. 2026/07/26 18:37:59 ignoring optional flag "type"="gce" 2026/07/26 18:37:59 parsed 1 programs 2026/07/26 18:38:01 executed programs: 0 [ 59.672242][ T4389] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.797108][ T4403] chnl_net:caif_netlink_parms(): no params data found [ 59.831460][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.838968][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.847216][ T4403] device bridge_slave_0 entered promiscuous mode [ 59.854841][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.862045][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.869713][ T4403] device bridge_slave_1 entered promiscuous mode [ 59.887751][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.898345][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.918008][ T4403] team0: Port device team_slave_0 added [ 59.924794][ T4403] team0: Port device team_slave_1 added [ 59.940182][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.947572][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.973529][ T4403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.985176][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.992307][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.018256][ T4403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.043342][ T4403] device hsr_slave_0 entered promiscuous mode [ 60.050209][ T4403] device hsr_slave_1 entered promiscuous mode [ 60.464244][ T4403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.474832][ T4403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.484530][ T4403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.494173][ T4403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.517007][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.524100][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.531501][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.538612][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.587921][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.602736][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.612038][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.620622][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.630507][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.644260][ T4403] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.656993][ T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.668912][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.676331][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.691726][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.702123][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.709222][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.729071][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.738482][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.758344][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.767091][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.775396][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.787649][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.905251][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.914665][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.922903][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.943965][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.955201][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.979106][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.988691][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.999403][ T4403] device veth0_vlan entered promiscuous mode [ 61.006236][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.014508][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.027839][ T4403] device veth1_vlan entered promiscuous mode [ 61.048859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.058517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.068117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.077951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.089981][ T4403] device veth0_macvtap entered promiscuous mode [ 61.102813][ T4403] device veth1_macvtap entered promiscuous mode [ 61.120090][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.130153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.139550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.149177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.158450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.171040][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.180987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.191471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.202398][ T4403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.213536][ T4403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.223574][ T4403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.234747][ T4403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.473206][ T4483] [ 61.475568][ T4483] ====================================================== [ 61.482577][ T4483] WARNING: possible circular locking dependency detected [ 61.489604][ T4483] syzkaller #0 Not tainted [ 61.494011][ T4483] ------------------------------------------------------ [ 61.501023][ T4483] syz-executor.0/4483 is trying to acquire lock: [ 61.507344][ T4483] ffff8881408f03f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x4f/0x3f0 [ 61.516955][ T4483] [ 61.516955][ T4483] but task is already holding lock: [ 61.524323][ T4483] ffff88814ca903f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x317/0xcd0 [ 61.534948][ T4483] [ 61.534948][ T4483] which lock already depends on the new lock. [ 61.534948][ T4483] [ 61.545346][ T4483] [ 61.545346][ T4483] the existing dependency chain (in reverse order) is: [ 61.554360][ T4483] [ 61.554360][ T4483] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 61.563142][ T4483] __mutex_lock_common+0x1e5/0x2400 [ 61.568886][ T4483] mutex_lock_io_nested+0x43/0x60 [ 61.574442][ T4483] jbd2_journal_flush+0x285/0xcd0 [ 61.580012][ T4483] ext4_ioctl+0x31f7/0x3840 [ 61.585044][ T4483] __se_sys_ioctl+0xfa/0x170 [ 61.590160][ T4483] do_syscall_64+0x4c/0xa0 [ 61.595101][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.601522][ T4483] [ 61.601522][ T4483] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 61.609518][ T4483] __mutex_lock_common+0x1e5/0x2400 [ 61.615244][ T4483] mutex_lock_nested+0x17/0x20 [ 61.620532][ T4483] jbd2_journal_lock_updates+0x2ce/0x390 [ 61.626685][ T4483] ext4_change_inode_journal_flag+0x18e/0x710 [ 61.633274][ T4483] ext4_fileattr_set+0xe61/0x1750 [ 61.638833][ T4483] vfs_fileattr_set+0x859/0xb10 [ 61.644204][ T4483] do_vfs_ioctl+0x1881/0x1f40 [ 61.649401][ T4483] __se_sys_ioctl+0x83/0x170 [ 61.654511][ T4483] do_syscall_64+0x4c/0xa0 [ 61.659447][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.665862][ T4483] [ 61.665862][ T4483] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 61.674284][ T4483] percpu_down_write+0x52/0x2f0 [ 61.679664][ T4483] ext4_ind_migrate+0x247/0x8e0 [ 61.685036][ T4483] ext4_fileattr_set+0xf53/0x1750 [ 61.690578][ T4483] vfs_fileattr_set+0x859/0xb10 [ 61.695951][ T4483] do_vfs_ioctl+0x1881/0x1f40 [ 61.701145][ T4483] __se_sys_ioctl+0x83/0x170 [ 61.706253][ T4483] do_syscall_64+0x4c/0xa0 [ 61.711191][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.717609][ T4483] [ 61.717609][ T4483] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 61.726223][ T4483] __lock_acquire+0x2c66/0x7b50 [ 61.731603][ T4483] lock_acquire+0x19e/0x400 [ 61.736637][ T4483] down_read+0x44/0x2e0 [ 61.741325][ T4483] ext4_bmap+0x4f/0x3f0 [ 61.746007][ T4483] bmap+0xa2/0xd0 [ 61.750165][ T4483] jbd2_journal_flush+0x7e0/0xcd0 [ 61.755712][ T4483] ext4_ioctl+0x31f7/0x3840 [ 61.760745][ T4483] __se_sys_ioctl+0xfa/0x170 [ 61.765854][ T4483] do_syscall_64+0x4c/0xa0 [ 61.771236][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.776410][ T4214] Bluetooth: hci0: command 0x0409 tx timeout [ 61.777654][ T4483] [ 61.777654][ T4483] other info that might help us debug this: [ 61.777654][ T4483] [ 61.777661][ T4483] Chain exists of: [ 61.777661][ T4483] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 61.777661][ T4483] [ 61.809400][ T4483] Possible unsafe locking scenario: [ 61.809400][ T4483] [ 61.816969][ T4483] CPU0 CPU1 [ 61.822349][ T4483] ---- ---- [ 61.827711][ T4483] lock(&journal->j_checkpoint_mutex); [ 61.833270][ T4483] lock(&journal->j_barrier); [ 61.840562][ T4483] lock(&journal->j_checkpoint_mutex); [ 61.848636][ T4483] lock(&sb->s_type->i_mutex_key#9); [ 61.854017][ T4483] [ 61.854017][ T4483] *** DEADLOCK *** [ 61.854017][ T4483] [ 61.862167][ T4483] 2 locks held by syz-executor.0/4483: [ 61.867642][ T4483] #0: ffff88814ca90170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2ce/0x390 [ 61.878518][ T4483] #1: ffff88814ca903f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x317/0xcd0 [ 61.889578][ T4483] [ 61.889578][ T4483] stack backtrace: [ 61.895486][ T4483] CPU: 0 PID: 4483 Comm: syz-executor.0 Not tainted syzkaller #0 [ 61.903251][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 61.913368][ T4483] Call Trace: [ 61.916647][ T4483] [ 61.919581][ T4483] dump_stack_lvl+0x188/0x250 [ 61.924269][ T4483] ? load_image+0x410/0x410 [ 61.928775][ T4483] ? show_regs_print_info+0x20/0x20 [ 61.933979][ T4483] ? print_circular_bug+0x12b/0x1a0 [ 61.939195][ T4483] check_noncircular+0x296/0x330 [ 61.944146][ T4483] ? lockdep_hardirqs_on+0x94/0x140 [ 61.949397][ T4483] ? add_chain_block+0x9b0/0x9b0 [ 61.954345][ T4483] ? lockdep_lock+0xf1/0x1f0 [ 61.958939][ T4483] ? mark_lock+0x94/0x320 [ 61.963268][ T4483] ? _find_first_zero_bit+0xd1/0xf0 [ 61.968468][ T4483] __lock_acquire+0x2c66/0x7b50 [ 61.973333][ T4483] ? release_firmware_map_entry+0x190/0x190 [ 61.979232][ T4483] ? verify_lock_unused+0x140/0x140 [ 61.984464][ T4483] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 61.990362][ T4483] ? lockdep_hardirqs_on+0x94/0x140 [ 61.995572][ T4483] ? verify_lock_unused+0x140/0x140 [ 62.000776][ T4483] ? schedule+0x132/0x1e0 [ 62.005109][ T4483] ? io_schedule+0x7c/0xd0 [ 62.009538][ T4483] lock_acquire+0x19e/0x400 [ 62.014042][ T4483] ? ext4_bmap+0x4f/0x3f0 [ 62.018378][ T4483] ? __might_sleep+0xf0/0xf0 [ 62.023005][ T4483] ? read_lock_is_recursive+0x10/0x10 [ 62.028383][ T4483] ? jbd2_journal_flush+0x37d/0xcd0 [ 62.033589][ T4483] down_read+0x44/0x2e0 [ 62.037749][ T4483] ? ext4_bmap+0x4f/0x3f0 [ 62.042086][ T4483] ext4_bmap+0x4f/0x3f0 [ 62.046260][ T4483] ? ext4_journalled_write_end+0xf10/0xf10 [ 62.052070][ T4483] bmap+0xa2/0xd0 [ 62.055718][ T4483] jbd2_journal_flush+0x7e0/0xcd0 [ 62.060757][ T4483] ? jbd2_journal_wait_updates+0x270/0x270 [ 62.066569][ T4483] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 62.073440][ T4483] ? bpf_lsm_capable+0x5/0x10 [ 62.078126][ T4483] ? security_capable+0x85/0xb0 [ 62.083076][ T4483] ext4_ioctl+0x31f7/0x3840 [ 62.087596][ T4483] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 62.092449][ T4483] ? ext4_fileattr_set+0x1750/0x1750 [ 62.097780][ T4483] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 62.103421][ T4483] ? rcu_lock_release+0x5/0x20 [ 62.108195][ T4483] ? __lock_acquire+0x7b50/0x7b50 [ 62.113231][ T4483] ? kfree+0xef/0x2a0 [ 62.117215][ T4483] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 62.122852][ T4483] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 62.128329][ T4483] ? bpf_lsm_file_ioctl+0x5/0x10 [ 62.133268][ T4483] ? security_file_ioctl+0x7c/0xa0 [ 62.138391][ T4483] ? ext4_fileattr_set+0x1750/0x1750 [ 62.143687][ T4483] __se_sys_ioctl+0xfa/0x170 [ 62.148280][ T4483] do_syscall_64+0x4c/0xa0 [ 62.152724][ T4483] ? clear_bhb_loop+0x30/0x80 [ 62.157401][ T4483] ? clear_bhb_loop+0x30/0x80 [ 62.162077][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.167990][ T4483] RIP: 0033:0x7fd45ae84079 [ 62.172413][ T4483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 62.192018][ T4483] RSP: 002b:00007fd45a2150b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.200541][ T4483] RAX: ffffffffffffffda RBX: 00007fd45afc2f80 RCX: 00007fd45ae84079 [ 62.208516][ T4483] RDX: 00000000200005c0 RSI: 000000004004662b RDI: 0000000000000004 [ 62.216490][ T4483] RBP: 00007fd45aee5498 R08: 0000000000000000 R09: 0000000000000000 [ 62.224468][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.232442][ T4483] R13: 000000000000000b R14: 00007fd45afc2f80 R15: 00007ffd93b3fc28 [ 62.240432][ T4483] [ 63.815598][ T24] Bluetooth: hci0: command 0x041b tx timeout 2026/07/26 18:38:06 executed programs: 57 [ 65.906129][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 67.975659][ T24] Bluetooth: hci0: command 0x0419 tx timeout 2026/07/26 18:38:11 executed programs: 171 [ 71.256842][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263157][ T1428] ieee802154 phy1 wpan1: encryption failed: -22