Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. 1970/01/01 00:00:50 ignoring optional flag "type"="gce" 1970/01/01 00:00:50 parsed 1 programs 1970/01/01 00:00:50 executed programs: 0 [ 50.937051][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 50.956697][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.957985][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.959571][ T4274] device bridge_slave_0 entered promiscuous mode [ 50.961685][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.962877][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.964397][ T4274] device bridge_slave_1 entered promiscuous mode [ 50.973243][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.976371][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.984409][ T4274] team0: Port device team_slave_0 added [ 50.986322][ T4274] team0: Port device team_slave_1 added [ 50.993725][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.994950][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.999239][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.001777][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.002918][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.007175][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.061636][ T4274] device hsr_slave_0 entered promiscuous mode [ 51.109977][ T4274] device hsr_slave_1 entered promiscuous mode [ 51.657707][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.721320][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.791130][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.851082][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.897241][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.898538][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.899749][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.900985][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.922965][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.927293][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.928958][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.933843][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.936168][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 51.941679][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.945070][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.946598][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.947985][ T659] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.949039][ T659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.953897][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.955728][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.957140][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.958223][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.961138][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.963857][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.973096][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.974836][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.981601][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.983255][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.984931][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.986555][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.988319][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.991534][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.993070][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.994596][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.996432][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.997880][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.047857][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.049271][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.060503][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.067744][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.069423][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.078160][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.080047][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.082744][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.084256][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.086228][ T4274] device veth0_vlan entered promiscuous mode [ 52.089537][ T4274] device veth1_vlan entered promiscuous mode [ 52.100798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.102426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.103936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.105490][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.108439][ T4274] device veth0_macvtap entered promiscuous mode [ 52.112067][ T4274] device veth1_macvtap entered promiscuous mode [ 52.118583][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.120564][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.121967][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.123394][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.125001][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.128438][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.129688][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.131864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.136696][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.138166][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.139596][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.141118][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.221882][ T4391] [ 52.222314][ T4391] ====================================================== [ 52.223517][ T4391] WARNING: possible circular locking dependency detected [ 52.224684][ T4391] syzkaller #0 Not tainted [ 52.225412][ T4391] ------------------------------------------------------ [ 52.226569][ T4391] syz-executor.0/4391 is trying to acquire lock: [ 52.227575][ T4391] ffff0000c51e03f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x360 [ 52.229256][ T4391] [ 52.229256][ T4391] but task is already holding lock: [ 52.230474][ T4391] ffff0000d4c063f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0xa28 [ 52.232305][ T4391] [ 52.232305][ T4391] which lock already depends on the new lock. [ 52.232305][ T4391] [ 52.234048][ T4391] [ 52.234048][ T4391] the existing dependency chain (in reverse order) is: [ 52.235571][ T4391] [ 52.235571][ T4391] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 52.237014][ T4391] __mutex_lock_common+0x194/0x1f14 [ 52.237939][ T4391] mutex_lock_io_nested+0xcc/0x12c [ 52.238954][ T4391] jbd2_journal_flush+0x1e8/0xa28 [ 52.239848][ T4391] ext4_ioctl+0x2e0c/0x3750 [ 52.240640][ T4391] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.241556][ T4391] invoke_syscall+0x98/0x2b0 [ 52.242345][ T4391] el0_svc_common+0x138/0x258 [ 52.243202][ T4391] do_el0_svc+0x58/0x13c [ 52.243974][ T4391] el0_svc+0x78/0x1d0 [ 52.244750][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 52.245685][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 52.246524][ T4391] [ 52.246524][ T4391] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 52.247897][ T4391] __mutex_lock_common+0x194/0x1f14 [ 52.248848][ T4391] mutex_lock_nested+0xac/0x11c [ 52.249940][ T4391] jbd2_journal_lock_updates+0x260/0x318 [ 52.251006][ T4391] ext4_change_inode_journal_flag+0x158/0x630 [ 52.252123][ T4391] ext4_fileattr_set+0xbd8/0x133c [ 52.253088][ T4391] vfs_fileattr_set+0x67c/0x90c [ 52.253982][ T4391] do_vfs_ioctl+0x1c88/0x23f0 [ 52.254818][ T4391] __arm64_sys_ioctl+0xe4/0x1c8 [ 52.255736][ T4391] invoke_syscall+0x98/0x2b0 [ 52.256640][ T4391] el0_svc_common+0x138/0x258 [ 52.257501][ T4391] do_el0_svc+0x58/0x13c [ 52.258303][ T4391] el0_svc+0x78/0x1d0 [ 52.259075][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 52.259984][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 52.260825][ T4391] [ 52.260825][ T4391] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 52.262169][ T4391] percpu_down_write+0xcc/0x39c [ 52.262993][ T4391] ext4_ind_migrate+0x170/0x6b8 [ 52.263875][ T4391] ext4_fileattr_set+0xc50/0x133c [ 52.264737][ T4391] vfs_fileattr_set+0x67c/0x90c [ 52.265647][ T4391] do_vfs_ioctl+0x1c88/0x23f0 [ 52.266491][ T4391] __arm64_sys_ioctl+0xe4/0x1c8 [ 52.267356][ T4391] invoke_syscall+0x98/0x2b0 [ 52.268165][ T4391] el0_svc_common+0x138/0x258 [ 52.268978][ T4391] do_el0_svc+0x58/0x13c [ 52.269732][ T4391] el0_svc+0x78/0x1d0 [ 52.270460][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 52.271333][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 52.272148][ T4391] [ 52.272148][ T4391] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 52.273660][ T4391] __lock_acquire+0x2870/0x67ec [ 52.274506][ T4391] lock_acquire+0x1f4/0x618 [ 52.275290][ T4391] down_read+0xc0/0x38c [ 52.275985][ T4391] ext4_bmap+0x54/0x360 [ 52.276674][ T4391] bmap+0xa8/0xe8 [ 52.277368][ T4391] jbd2_journal_flush+0x600/0xa28 [ 52.278188][ T4391] ext4_ioctl+0x2e0c/0x3750 [ 52.278968][ T4391] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.279813][ T4391] invoke_syscall+0x98/0x2b0 [ 52.280620][ T4391] el0_svc_common+0x138/0x258 [ 52.281461][ T4391] do_el0_svc+0x58/0x13c [ 52.282270][ T4391] el0_svc+0x78/0x1d0 [ 52.283023][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 52.283901][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 52.284689][ T4391] [ 52.284689][ T4391] other info that might help us debug this: [ 52.284689][ T4391] [ 52.286309][ T4391] Chain exists of: [ 52.286309][ T4391] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 52.286309][ T4391] [ 52.288681][ T4391] Possible unsafe locking scenario: [ 52.288681][ T4391] [ 52.289876][ T4391] CPU0 CPU1 [ 52.290726][ T4391] ---- ---- [ 52.291622][ T4391] lock(&journal->j_checkpoint_mutex); [ 52.292539][ T4391] lock(&journal->j_barrier); [ 52.293840][ T4391] lock(&journal->j_checkpoint_mutex); [ 52.295183][ T4391] lock(&sb->s_type->i_mutex_key#9); [ 52.296104][ T4391] [ 52.296104][ T4391] *** DEADLOCK *** [ 52.296104][ T4391] [ 52.297447][ T4391] 2 locks held by syz-executor.0/4391: [ 52.298346][ T4391] #0: ffff0000d4c06170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x260/0x318 [ 52.300229][ T4391] #1: ffff0000d4c063f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0xa28 [ 52.302137][ T4391] [ 52.302137][ T4391] stack backtrace: [ 52.303111][ T4391] CPU: 0 PID: 4391 Comm: syz-executor.0 Not tainted syzkaller #0 [ 52.304389][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 52.306061][ T4391] Call trace: [ 52.306628][ T4391] dump_backtrace+0x0/0x458 [ 52.307400][ T4391] show_stack+0x2c/0x3c [ 52.308104][ T4391] __dump_stack+0x30/0x40 [ 52.308819][ T4391] dump_stack_lvl+0xf4/0x15c [ 52.309602][ T4391] dump_stack+0x1c/0x5c [ 52.310281][ T4391] print_circular_bug+0x148/0x1b0 [ 52.311103][ T4391] check_noncircular+0x264/0x2f8 [ 52.311947][ T4391] __lock_acquire+0x2870/0x67ec [ 52.312792][ T4391] lock_acquire+0x1f4/0x618 [ 52.313543][ T4391] down_read+0xc0/0x38c [ 52.314259][ T4391] ext4_bmap+0x54/0x360 [ 52.314954][ T4391] bmap+0xa8/0xe8 [ 52.315534][ T4391] jbd2_journal_flush+0x600/0xa28 [ 52.316406][ T4391] ext4_ioctl+0x2e0c/0x3750 [ 52.317167][ T4391] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.318020][ T4391] invoke_syscall+0x98/0x2b0 [ 52.318796][ T4391] el0_svc_common+0x138/0x258 [ 52.319567][ T4391] do_el0_svc+0x58/0x13c [ 52.320275][ T4391] el0_svc+0x78/0x1d0 [ 52.320914][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 52.321730][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 52.970224][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.051551][ T1540] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:55 executed programs: 122 [ 57.130356][ T1540] Bluetooth: hci0: command 0x040f tx timeout [ 59.210017][ T1540] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:00 executed programs: 308