Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. 1970/01/01 00:00:47 ignoring optional flag "type"="gce" 1970/01/01 00:00:47 parsed 1 programs 1970/01/01 00:00:47 executed programs: 0 [ 47.425655][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 47.443498][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.444778][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.446225][ T4328] device bridge_slave_0 entered promiscuous mode [ 47.448128][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.449224][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.450538][ T4328] device bridge_slave_1 entered promiscuous mode [ 47.458228][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.460898][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.469020][ T4328] team0: Port device team_slave_0 added [ 47.471064][ T4328] team0: Port device team_slave_1 added [ 47.477291][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.478519][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.484028][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.486465][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.487573][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.492358][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.530033][ T4328] device hsr_slave_0 entered promiscuous mode [ 47.588581][ T4328] device hsr_slave_1 entered promiscuous mode [ 48.172227][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.209654][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.289580][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.339953][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.386890][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.388064][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.389288][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.390327][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.406747][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.412010][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.413799][ T1621] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.415492][ T1621] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.417418][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.422656][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.430362][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.432011][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.433559][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.434647][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.435937][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.437391][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.440327][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.441743][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.443037][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.444624][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.453282][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.454802][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.457756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.459590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.461032][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.462685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.464280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.465731][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.467205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.469373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.470885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.472387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.518288][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.520832][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.522050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.528050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.530105][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.537380][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.538925][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.540441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.541805][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.544667][ T4328] device veth0_vlan entered promiscuous mode [ 48.547868][ T4328] device veth1_vlan entered promiscuous mode [ 48.556133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.557614][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.560518][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.562303][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.564876][ T4328] device veth0_macvtap entered promiscuous mode [ 48.567580][ T4328] device veth1_macvtap entered promiscuous mode [ 48.573985][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.575170][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.576574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.577939][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.580056][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.582836][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.584633][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.586314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.588196][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.589743][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.591098][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.592503][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.682907][ T4474] [ 48.683330][ T4474] ====================================================== [ 48.684407][ T4474] WARNING: possible circular locking dependency detected [ 48.685438][ T4474] syzkaller #0 Not tainted [ 48.686098][ T4474] ------------------------------------------------------ [ 48.687180][ T4474] syz-executor.0/4474 is trying to acquire lock: [ 48.688225][ T4474] ffff0000c52603f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x368 [ 48.689819][ T4474] [ 48.689819][ T4474] but task is already holding lock: [ 48.690989][ T4474] ffff0000d51e03f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 48.692711][ T4474] [ 48.692711][ T4474] which lock already depends on the new lock. [ 48.692711][ T4474] [ 48.694451][ T4474] [ 48.694451][ T4474] the existing dependency chain (in reverse order) is: [ 48.695912][ T4474] [ 48.695912][ T4474] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 48.697300][ T4474] __mutex_lock_common+0x194/0x1edc [ 48.698192][ T4474] mutex_lock_io_nested+0xcc/0x12c [ 48.699063][ T4474] jbd2_journal_flush+0x1e8/0x9f0 [ 48.699932][ T4474] ext4_ioctl+0x2cb4/0x3614 [ 48.700735][ T4474] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.701569][ T4474] invoke_syscall+0x98/0x2b8 [ 48.702334][ T4474] el0_svc_common+0x138/0x258 [ 48.703140][ T4474] do_el0_svc+0x58/0x14c [ 48.703852][ T4474] el0_svc+0x78/0x1e0 [ 48.704513][ T4474] el0t_64_sync_handler+0xcc/0xe4 [ 48.705398][ T4474] el0t_64_sync+0x1a0/0x1a4 [ 48.706144][ T4474] [ 48.706144][ T4474] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 48.707353][ T4474] __mutex_lock_common+0x194/0x1edc [ 48.708216][ T4474] mutex_lock_nested+0xac/0x11c [ 48.709015][ T4474] jbd2_journal_lock_updates+0x250/0x310 [ 48.709903][ T4474] ext4_change_inode_journal_flag+0x158/0x640 [ 48.710827][ T4474] ext4_fileattr_set+0xb94/0x12e4 [ 48.711590][ T4474] vfs_fileattr_set+0x674/0x8fc [ 48.712299][ T4474] do_vfs_ioctl+0x1c18/0x2370 [ 48.713068][ T4474] __arm64_sys_ioctl+0xe4/0x1c8 [ 48.713885][ T4474] invoke_syscall+0x98/0x2b8 [ 48.714647][ T4474] el0_svc_common+0x138/0x258 [ 48.715391][ T4474] do_el0_svc+0x58/0x14c [ 48.716037][ T4474] el0_svc+0x78/0x1e0 [ 48.716662][ T4474] el0t_64_sync_handler+0xcc/0xe4 [ 48.717472][ T4474] el0t_64_sync+0x1a0/0x1a4 [ 48.718176][ T4474] [ 48.718176][ T4474] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 48.719468][ T4474] percpu_down_write+0xcc/0x39c [ 48.720262][ T4474] ext4_ind_migrate+0x170/0x6bc [ 48.721185][ T4474] ext4_fileattr_set+0xc0c/0x12e4 [ 48.722102][ T4474] vfs_fileattr_set+0x674/0x8fc [ 48.722981][ T4474] do_vfs_ioctl+0x1c18/0x2370 [ 48.723763][ T4474] __arm64_sys_ioctl+0xe4/0x1c8 [ 48.724592][ T4474] invoke_syscall+0x98/0x2b8 [ 48.725396][ T4474] el0_svc_common+0x138/0x258 [ 48.726165][ T4474] do_el0_svc+0x58/0x14c [ 48.726872][ T4474] el0_svc+0x78/0x1e0 [ 48.727554][ T4474] el0t_64_sync_handler+0xcc/0xe4 [ 48.728389][ T4474] el0t_64_sync+0x1a0/0x1a4 [ 48.729051][ T4474] [ 48.729051][ T4474] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 48.730239][ T4474] __lock_acquire+0x2928/0x651c [ 48.730990][ T4474] lock_acquire+0x1f4/0x620 [ 48.731752][ T4474] down_read+0xc0/0x390 [ 48.732416][ T4474] ext4_bmap+0x54/0x368 [ 48.733055][ T4474] bmap+0xa8/0xe8 [ 48.733629][ T4474] jbd2_journal_flush+0x5e8/0x9f0 [ 48.734400][ T4474] ext4_ioctl+0x2cb4/0x3614 [ 48.735124][ T4474] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.735898][ T4474] invoke_syscall+0x98/0x2b8 [ 48.736643][ T4474] el0_svc_common+0x138/0x258 [ 48.737350][ T4474] do_el0_svc+0x58/0x14c [ 48.738031][ T4474] el0_svc+0x78/0x1e0 [ 48.738707][ T4474] el0t_64_sync_handler+0xcc/0xe4 [ 48.739515][ T4474] el0t_64_sync+0x1a0/0x1a4 [ 48.740234][ T4474] [ 48.740234][ T4474] other info that might help us debug this: [ 48.740234][ T4474] [ 48.741769][ T4474] Chain exists of: [ 48.741769][ T4474] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 48.741769][ T4474] [ 48.744242][ T4474] Possible unsafe locking scenario: [ 48.744242][ T4474] [ 48.745282][ T4474] CPU0 CPU1 [ 48.746057][ T4474] ---- ---- [ 48.746822][ T4474] lock(&journal->j_checkpoint_mutex); [ 48.747689][ T4474] lock(&journal->j_barrier); [ 48.748714][ T4474] lock(&journal->j_checkpoint_mutex); [ 48.749864][ T4474] lock(&sb->s_type->i_mutex_key#9); [ 48.750632][ T4474] [ 48.750632][ T4474] *** DEADLOCK *** [ 48.750632][ T4474] [ 48.751759][ T4474] 2 locks held by syz-executor.0/4474: [ 48.752558][ T4474] #0: ffff0000d51e0170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x250/0x310 [ 48.754198][ T4474] #1: ffff0000d51e03f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0x9f0 [ 48.755748][ T4474] [ 48.755748][ T4474] stack backtrace: [ 48.756573][ T4474] CPU: 0 PID: 4474 Comm: syz-executor.0 Not tainted syzkaller #0 [ 48.757623][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 48.759064][ T4474] Call trace: [ 48.759519][ T4474] dump_backtrace+0x0/0x43c [ 48.760212][ T4474] show_stack+0x2c/0x3c [ 48.760858][ T4474] __dump_stack+0x30/0x40 [ 48.761495][ T4474] dump_stack_lvl+0xf8/0x160 [ 48.762199][ T4474] dump_stack+0x1c/0x5c [ 48.762793][ T4474] print_circular_bug+0x148/0x1b0 [ 48.763483][ T4474] check_noncircular+0x240/0x2d4 [ 48.764222][ T4474] __lock_acquire+0x2928/0x651c [ 48.764932][ T4474] lock_acquire+0x1f4/0x620 [ 48.765579][ T4474] down_read+0xc0/0x390 [ 48.766193][ T4474] ext4_bmap+0x54/0x368 [ 48.766793][ T4474] bmap+0xa8/0xe8 [ 48.767322][ T4474] jbd2_journal_flush+0x5e8/0x9f0 [ 48.768071][ T4474] ext4_ioctl+0x2cb4/0x3614 [ 48.768726][ T4474] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.769487][ T4474] invoke_syscall+0x98/0x2b8 [ 48.770152][ T4474] el0_svc_common+0x138/0x258 [ 48.770836][ T4474] do_el0_svc+0x58/0x14c [ 48.771455][ T4474] el0_svc+0x78/0x1e0 [ 48.772005][ T4474] el0t_64_sync_handler+0xcc/0xe4 [ 48.772683][ T4474] el0t_64_sync+0x1a0/0x1a4 [ 49.452416][ T4443] Bluetooth: hci0: command 0x0409 tx timeout [ 51.538517][ T4069] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:52 executed programs: 116 [ 53.618563][ T4443] Bluetooth: hci0: command 0x040f tx timeout [ 55.698499][ T7] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:57 executed programs: 317