Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. 1970/01/01 00:01:01 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:01 ignoring optional flag "type"="gce" 1970/01/01 00:01:02 parsed 1 programs 1970/01/01 00:01:02 executed programs: 0 [ 62.322508][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 62.357483][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.359490][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.364420][ T4313] device bridge_slave_0 entered promiscuous mode [ 62.368013][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.369994][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.373039][ T4313] device bridge_slave_1 entered promiscuous mode [ 62.391153][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.397278][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.414408][ T4313] team0: Port device team_slave_0 added [ 62.419162][ T4313] team0: Port device team_slave_1 added [ 62.437379][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.439318][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.447073][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.451578][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.453520][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.460951][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.502380][ T4313] device hsr_slave_0 entered promiscuous mode [ 62.541031][ T4313] device hsr_slave_1 entered promiscuous mode [ 63.258805][ T4313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.291951][ T4313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.321918][ T4313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.367815][ T4313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.461534][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.468527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.473875][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.478634][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.488693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.492797][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.496942][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.498949][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.502184][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.512245][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.515199][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.517902][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.519945][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.525326][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.528223][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.542618][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.546800][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.549584][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.553938][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.556669][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.559390][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.565317][ T4313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.568679][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.573560][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.576553][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.579191][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.661183][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.663769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.669550][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.683507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.686484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.699068][ T4313] device veth0_vlan entered promiscuous mode [ 63.703275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.706353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.709442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.712453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.719491][ T4313] device veth1_vlan entered promiscuous mode [ 63.735392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.738074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.740943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.743654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.748040][ T4313] device veth0_macvtap entered promiscuous mode [ 63.753304][ T4313] device veth1_macvtap entered promiscuous mode [ 63.764727][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.766729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.769378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.772886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.775723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.780700][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.784662][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.787324][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.790009][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.793558][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.798639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.803700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.846264][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.848461][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.859205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.868262][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.871436][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.874585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.947177][ T4415] [ 63.947824][ T4415] ====================================================== [ 63.949796][ T4415] WARNING: possible circular locking dependency detected [ 63.951701][ T4415] 5.15.185-syzkaller #0 Not tainted [ 63.953168][ T4415] ------------------------------------------------------ [ 63.955169][ T4415] syz-executor.0/4415 is trying to acquire lock: [ 63.956947][ T4415] ffff0000d00c83f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x368 [ 63.959533][ T4415] [ 63.959533][ T4415] but task is already holding lock: [ 63.961540][ T4415] ffff0000d46303f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 63.964428][ T4415] [ 63.964428][ T4415] which lock already depends on the new lock. [ 63.964428][ T4415] [ 63.967193][ T4415] [ 63.967193][ T4415] the existing dependency chain (in reverse order) is: [ 63.969639][ T4415] [ 63.969639][ T4415] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 63.972038][ T4415] __mutex_lock_common+0x194/0x1edc [ 63.973637][ T4415] mutex_lock_io_nested+0xcc/0x12c [ 63.975287][ T4415] jbd2_journal_flush+0x1e8/0x9f0 [ 63.976855][ T4415] ext4_ioctl+0x2ca0/0x3600 [ 63.978261][ T4415] __arm64_sys_ioctl+0x14c/0x1c8 [ 63.979730][ T4415] invoke_syscall+0x98/0x2b8 [ 63.981154][ T4415] el0_svc_common+0x138/0x258 [ 63.982555][ T4415] do_el0_svc+0x58/0x14c [ 63.983829][ T4415] el0_svc+0x78/0x1e0 [ 63.985060][ T4415] el0t_64_sync_handler+0xcc/0xe4 [ 63.986631][ T4415] el0t_64_sync+0x1a0/0x1a4 [ 63.988002][ T4415] [ 63.988002][ T4415] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 63.990212][ T4415] __mutex_lock_common+0x194/0x1edc [ 63.991767][ T4415] mutex_lock_nested+0xac/0x11c [ 63.993226][ T4415] jbd2_journal_lock_updates+0x250/0x310 [ 63.994882][ T4415] ext4_change_inode_journal_flag+0x158/0x640 [ 63.996638][ T4415] ext4_fileattr_set+0xb94/0x12e4 [ 63.998073][ T4415] vfs_fileattr_set+0x674/0x8fc [ 63.999514][ T4415] do_vfs_ioctl+0x1c18/0x2370 [ 64.000919][ T4415] __arm64_sys_ioctl+0xe4/0x1c8 [ 64.002382][ T4415] invoke_syscall+0x98/0x2b8 [ 64.003760][ T4415] el0_svc_common+0x138/0x258 [ 64.005228][ T4415] do_el0_svc+0x58/0x14c [ 64.006488][ T4415] el0_svc+0x78/0x1e0 [ 64.007681][ T4415] el0t_64_sync_handler+0xcc/0xe4 [ 64.009158][ T4415] el0t_64_sync+0x1a0/0x1a4 [ 64.010494][ T4415] [ 64.010494][ T4415] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 64.012797][ T4415] percpu_down_write+0xcc/0x39c [ 64.014237][ T4415] ext4_ind_migrate+0x170/0x6bc [ 64.015728][ T4415] ext4_fileattr_set+0xc0c/0x12e4 [ 64.017186][ T4415] vfs_fileattr_set+0x674/0x8fc [ 64.018618][ T4415] do_vfs_ioctl+0x1c18/0x2370 [ 64.020006][ T4415] __arm64_sys_ioctl+0xe4/0x1c8 [ 64.021493][ T4415] invoke_syscall+0x98/0x2b8 [ 64.022887][ T4415] el0_svc_common+0x138/0x258 [ 64.024365][ T4415] do_el0_svc+0x58/0x14c [ 64.025659][ T4415] el0_svc+0x78/0x1e0 [ 64.026890][ T4415] el0t_64_sync_handler+0xcc/0xe4 [ 64.028360][ T4415] el0t_64_sync+0x1a0/0x1a4 [ 64.029677][ T4415] [ 64.029677][ T4415] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 64.031959][ T4415] __lock_acquire+0x2928/0x651c [ 64.033402][ T4415] lock_acquire+0x1f4/0x620 [ 64.034747][ T4415] down_read+0xc0/0x390 [ 64.036016][ T4415] ext4_bmap+0x54/0x368 [ 64.037247][ T4415] bmap+0xa8/0xe8 [ 64.038335][ T4415] jbd2_journal_flush+0x5e8/0x9f0 [ 64.039895][ T4415] ext4_ioctl+0x2ca0/0x3600 [ 64.041284][ T4415] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.042799][ T4415] invoke_syscall+0x98/0x2b8 [ 64.044269][ T4415] el0_svc_common+0x138/0x258 [ 64.045702][ T4415] do_el0_svc+0x58/0x14c [ 64.047006][ T4415] el0_svc+0x78/0x1e0 [ 64.048206][ T4415] el0t_64_sync_handler+0xcc/0xe4 [ 64.049692][ T4415] el0t_64_sync+0x1a0/0x1a4 [ 64.051170][ T4415] [ 64.051170][ T4415] other info that might help us debug this: [ 64.051170][ T4415] [ 64.053960][ T4415] Chain exists of: [ 64.053960][ T4415] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 64.053960][ T4415] [ 64.058180][ T4415] Possible unsafe locking scenario: [ 64.058180][ T4415] [ 64.060155][ T4415] CPU0 CPU1 [ 64.061558][ T4415] ---- ---- [ 64.062998][ T4415] lock(&journal->j_checkpoint_mutex); [ 64.064518][ T4415] lock(&journal->j_barrier); [ 64.066531][ T4415] lock(&journal->j_checkpoint_mutex); [ 64.068746][ T4415] lock(&sb->s_type->i_mutex_key#9); [ 64.070221][ T4415] [ 64.070221][ T4415] *** DEADLOCK *** [ 64.070221][ T4415] [ 64.072497][ T4415] 2 locks held by syz-executor.0/4415: [ 64.073992][ T4415] #0: ffff0000d4630170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x250/0x310 [ 64.076970][ T4415] #1: ffff0000d46303f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 64.080028][ T4415] [ 64.080028][ T4415] stack backtrace: [ 64.081621][ T4415] CPU: 1 PID: 4415 Comm: syz-executor.0 Not tainted 5.15.185-syzkaller #0 [ 64.083970][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.086702][ T4415] Call trace: [ 64.087568][ T4415] dump_backtrace+0x0/0x43c [ 64.088836][ T4415] show_stack+0x2c/0x3c [ 64.089981][ T4415] __dump_stack+0x30/0x40 [ 64.091151][ T4415] dump_stack_lvl+0xf8/0x160 [ 64.092431][ T4415] dump_stack+0x1c/0x5c [ 64.093515][ T4415] print_circular_bug+0x148/0x1b0 [ 64.094872][ T4415] check_noncircular+0x240/0x2d4 [ 64.096185][ T4415] __lock_acquire+0x2928/0x651c [ 64.097503][ T4415] lock_acquire+0x1f4/0x620 [ 64.098744][ T4415] down_read+0xc0/0x390 [ 64.099850][ T4415] ext4_bmap+0x54/0x368 [ 64.100971][ T4415] bmap+0xa8/0xe8 [ 64.101947][ T4415] jbd2_journal_flush+0x5e8/0x9f0 [ 64.103343][ T4415] ext4_ioctl+0x2ca0/0x3600 [ 64.104527][ T4415] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.105875][ T4415] invoke_syscall+0x98/0x2b8 [ 64.107131][ T4415] el0_svc_common+0x138/0x258 [ 64.108342][ T4415] do_el0_svc+0x58/0x14c [ 64.109444][ T4415] el0_svc+0x78/0x1e0 [ 64.110557][ T4415] el0t_64_sync_handler+0xcc/0xe4 [ 64.111974][ T4415] el0t_64_sync+0x1a0/0x1a4 [ 64.260258][ T4026] Bluetooth: hci0: command 0x0409 tx timeout [ 66.340109][ T25] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:07 executed programs: 56 [ 68.420133][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 69.630925][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632790][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.500390][ T25] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:12 executed programs: 172