[ 32.631665][ T4063] device veth1_macvtap entered promiscuous mode [ 32.638016][ T4063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.639252][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.641280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.644562][ T4063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.645896][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.648660][ T4063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.649983][ T4063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.651544][ T4063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.652865][ T4063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.759280][ T1643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.887969][ T1643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.938106][ T1643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.999242][ T1643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.157978][ T1643] device hsr_slave_0 left promiscuous mode [ 40.194856][ T1643] device hsr_slave_1 left promiscuous mode [ 40.254348][ T1643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.255619][ T1643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.258144][ T1643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.259449][ T1643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.260928][ T1643] device bridge_slave_1 left promiscuous mode [ 40.262251][ T1643] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.315756][ T1643] device bridge_slave_0 left promiscuous mode [ 40.316830][ T1643] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.474205][ T1643] device veth1_macvtap left promiscuous mode [ 40.475332][ T1643] device veth0_macvtap left promiscuous mode [ 40.476405][ T1643] device veth1_vlan left promiscuous mode [ 40.477338][ T1643] device veth0_vlan left promiscuous mode [ 40.586477][ T1643] team0 (unregistering): Port device team_slave_1 removed [ 40.590884][ T1643] team0 (unregistering): Port device team_slave_0 removed [ 40.596712][ T1643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.648416][ T1643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.787784][ T1643] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 1970/01/01 00:00:41 ignoring optional flag "type"="gce" 1970/01/01 00:00:41 parsed 1 programs 1970/01/01 00:00:41 executed programs: 0 [ 41.268750][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 41.288099][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.289442][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.291060][ T4246] device bridge_slave_0 entered promiscuous mode [ 41.293142][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.295113][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.296706][ T4246] device bridge_slave_1 entered promiscuous mode [ 41.306104][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.308626][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.317076][ T4246] team0: Port device team_slave_0 added [ 41.319221][ T4246] team0: Port device team_slave_1 added [ 41.326941][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.328160][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.332384][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.335145][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.336379][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.340762][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.416315][ T4246] device hsr_slave_0 entered promiscuous mode [ 41.454100][ T4246] device hsr_slave_1 entered promiscuous mode [ 42.031216][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.065719][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.124324][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.175179][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.248418][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.252227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.254861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.258442][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.260912][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.262587][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.265830][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.266927][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.268923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.279137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.280844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.282413][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.283596][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.285750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.287425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.289060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.290818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.292401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.303721][ T4246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.307512][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.309956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.311783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.314507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.324718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.326789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.328519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.330128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.399868][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.405263][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.406513][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.411303][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.412929][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.420607][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.422207][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.423792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.426805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.429188][ T4246] device veth0_vlan entered promiscuous mode [ 42.432598][ T4246] device veth1_vlan entered promiscuous mode [ 42.440709][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.442217][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.443761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.447767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.450895][ T4246] device veth0_macvtap entered promiscuous mode [ 42.453510][ T4246] device veth1_macvtap entered promiscuous mode [ 42.461228][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.462515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.464195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.465714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.467335][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.472104][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.473421][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.476204][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.480004][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.481396][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.482765][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.489260][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.570564][ T4355] [ 42.571126][ T4355] ====================================================== [ 42.572351][ T4355] WARNING: possible circular locking dependency detected [ 42.573606][ T4355] syzkaller #0 Not tainted [ 42.574388][ T4355] ------------------------------------------------------ [ 42.575607][ T4355] syz-executor.0/4355 is trying to acquire lock: [ 42.576739][ T4355] ffff0000d10783f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x360 [ 42.578504][ T4355] [ 42.578504][ T4355] but task is already holding lock: [ 42.579800][ T4355] ffff0000d55ea3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x26c/0xa00 [ 42.581669][ T4355] [ 42.581669][ T4355] which lock already depends on the new lock. [ 42.581669][ T4355] [ 42.583509][ T4355] [ 42.583509][ T4355] the existing dependency chain (in reverse order) is: [ 42.584979][ T4355] [ 42.584979][ T4355] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 42.586385][ T4355] __mutex_lock_common+0x1a4/0x1ea4 [ 42.587385][ T4355] mutex_lock_io_nested+0xcc/0x12c [ 42.588366][ T4355] jbd2_journal_flush+0x1f0/0xa00 [ 42.589371][ T4355] ext4_ioctl+0x2ef4/0x37ec [ 42.590249][ T4355] __arm64_sys_ioctl+0x14c/0x1c8 [ 42.591087][ T4355] invoke_syscall+0x98/0x28c [ 42.591924][ T4355] el0_svc_common+0x13c/0x258 [ 42.592782][ T4355] do_el0_svc+0x5c/0x140 [ 42.593707][ T4355] el0_svc+0x78/0x1d0 [ 42.594433][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 42.595270][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 42.596072][ T4355] [ 42.596072][ T4355] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 42.597364][ T4355] __mutex_lock_common+0x1a4/0x1ea4 [ 42.598263][ T4355] mutex_lock_nested+0xac/0x11c [ 42.599174][ T4355] jbd2_journal_lock_updates+0x260/0x31c [ 42.600183][ T4355] ext4_change_inode_journal_flag+0x158/0x630 [ 42.601320][ T4355] ext4_fileattr_set+0xc0c/0x137c [ 42.602281][ T4355] vfs_fileattr_set+0x668/0x904 [ 42.603245][ T4355] do_vfs_ioctl+0x1c94/0x2404 [ 42.604130][ T4355] __arm64_sys_ioctl+0xe4/0x1c8 [ 42.604975][ T4355] invoke_syscall+0x98/0x28c [ 42.605821][ T4355] el0_svc_common+0x13c/0x258 [ 42.606711][ T4355] do_el0_svc+0x5c/0x140 [ 42.607525][ T4355] el0_svc+0x78/0x1d0 [ 42.608303][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 42.609222][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 42.610085][ T4355] [ 42.610085][ T4355] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 42.611554][ T4355] percpu_down_write+0xcc/0x3a8 [ 42.612504][ T4355] ext4_ind_migrate+0x170/0x6b0 [ 42.613386][ T4355] ext4_fileattr_set+0xc80/0x137c [ 42.614264][ T4355] vfs_fileattr_set+0x668/0x904 [ 42.615126][ T4355] do_vfs_ioctl+0x1c94/0x2404 [ 42.615979][ T4355] __arm64_sys_ioctl+0xe4/0x1c8 [ 42.616843][ T4355] invoke_syscall+0x98/0x28c [ 42.617723][ T4355] el0_svc_common+0x13c/0x258 [ 42.618622][ T4355] do_el0_svc+0x5c/0x140 [ 42.619487][ T4355] el0_svc+0x78/0x1d0 [ 42.620254][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 42.621278][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 42.622136][ T4355] [ 42.622136][ T4355] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 42.623556][ T4355] __lock_acquire+0x28b0/0x65d4 [ 42.624451][ T4355] lock_acquire+0x1f4/0x618 [ 42.625301][ T4355] down_read+0xc0/0x38c [ 42.626020][ T4355] ext4_bmap+0x54/0x360 [ 42.626896][ T4355] bmap+0xa8/0xe8 [ 42.627561][ T4355] jbd2_journal_flush+0x4c8/0xa00 [ 42.628535][ T4355] ext4_ioctl+0x2ef4/0x37ec [ 42.629459][ T4355] __arm64_sys_ioctl+0x14c/0x1c8 [ 42.630463][ T4355] invoke_syscall+0x98/0x28c [ 42.631408][ T4355] el0_svc_common+0x13c/0x258 [ 42.632309][ T4355] do_el0_svc+0x5c/0x140 [ 42.633151][ T4355] el0_svc+0x78/0x1d0 [ 42.633943][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 42.634943][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 42.635852][ T4355] [ 42.635852][ T4355] other info that might help us debug this: [ 42.635852][ T4355] [ 42.637680][ T4355] Chain exists of: [ 42.637680][ T4355] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 42.637680][ T4355] [ 42.640418][ T4355] Possible unsafe locking scenario: [ 42.640418][ T4355] [ 42.641769][ T4355] CPU0 CPU1 [ 42.642817][ T4355] ---- ---- [ 42.643725][ T4355] lock(&journal->j_checkpoint_mutex); [ 42.644684][ T4355] lock(&journal->j_barrier); [ 42.645928][ T4355] lock(&journal->j_checkpoint_mutex); [ 42.647341][ T4355] lock(&sb->s_type->i_mutex_key#9); [ 42.648221][ T4355] [ 42.648221][ T4355] *** DEADLOCK *** [ 42.648221][ T4355] [ 42.649722][ T4355] 2 locks held by syz-executor.0/4355: [ 42.650728][ T4355] #0: ffff0000d55ea170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x260/0x31c [ 42.652623][ T4355] #1: ffff0000d55ea3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x26c/0xa00 [ 42.654482][ T4355] [ 42.654482][ T4355] stack backtrace: [ 42.655516][ T4355] CPU: 1 PID: 4355 Comm: syz-executor.0 Not tainted syzkaller #0 [ 42.656869][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 42.658599][ T4355] Call trace: [ 42.659177][ T4355] dump_backtrace+0x0/0x458 [ 42.659915][ T4355] show_stack+0x2c/0x3c [ 42.660638][ T4355] __dump_stack+0x30/0x40 [ 42.661372][ T4355] dump_stack_lvl+0xf4/0x15c [ 42.662102][ T4355] dump_stack+0x1c/0x5c [ 42.662854][ T4355] print_circular_bug+0x148/0x1b0 [ 42.663787][ T4355] check_noncircular+0x264/0x2f8 [ 42.664620][ T4355] __lock_acquire+0x28b0/0x65d4 [ 42.665436][ T4355] lock_acquire+0x1f4/0x618 [ 42.666189][ T4355] down_read+0xc0/0x38c [ 42.666903][ T4355] ext4_bmap+0x54/0x360 [ 42.667687][ T4355] bmap+0xa8/0xe8 [ 42.668317][ T4355] jbd2_journal_flush+0x4c8/0xa00 [ 42.669144][ T4355] ext4_ioctl+0x2ef4/0x37ec [ 42.669966][ T4355] __arm64_sys_ioctl+0x14c/0x1c8 [ 42.670808][ T4355] invoke_syscall+0x98/0x28c [ 42.671567][ T4355] el0_svc_common+0x13c/0x258 [ 42.672407][ T4355] do_el0_svc+0x5c/0x140 [ 42.673217][ T4355] el0_svc+0x78/0x1d0 [ 42.673936][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 42.674834][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 43.284243][ T4325] Bluetooth: hci0: command 0x0409 tx timeout [ 45.364057][ T4073] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:46 executed programs: 117 [ 47.444258][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 49.523960][ T25] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:51 executed programs: 296