[ 68.975288][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.033561][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.075862][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.687152][ T9] device hsr_slave_0 left promiscuous mode [ 69.695570][ T9] device hsr_slave_1 left promiscuous mode [ 69.703756][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.712191][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.722489][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.730598][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.738593][ T9] device bridge_slave_1 left promiscuous mode [ 69.746571][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.764114][ T9] device bridge_slave_0 left promiscuous mode [ 69.772285][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.795180][ T9] device veth1_macvtap left promiscuous mode [ 69.802891][ T9] device veth0_macvtap left promiscuous mode [ 69.809449][ T9] device veth1_vlan left promiscuous mode [ 69.815644][ T9] device veth0_vlan left promiscuous mode [ 70.006473][ T9] team0 (unregistering): Port device team_slave_1 removed [ 70.022695][ T9] team0 (unregistering): Port device team_slave_0 removed [ 70.036591][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.050470][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.095663][ T9] bond0 (unregistering): Released all slaves [ 71.853357][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.860268][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2026/07/26 18:22:42 ignoring optional flag "type"="gce" 2026/07/26 18:22:42 parsed 1 programs 2026/07/26 18:22:44 executed programs: 0 [ 74.744394][ T4392] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.885811][ T4401] chnl_net:caif_netlink_parms(): no params data found [ 74.923942][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.931316][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.939597][ T4401] device bridge_slave_0 entered promiscuous mode [ 74.950235][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.958272][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.966910][ T4401] device bridge_slave_1 entered promiscuous mode [ 74.987814][ T4401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.999591][ T4401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.022054][ T4401] team0: Port device team_slave_0 added [ 75.030824][ T4401] team0: Port device team_slave_1 added [ 75.047437][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.054519][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.083603][ T4401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.099593][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.106856][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.133573][ T4401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.162472][ T4401] device hsr_slave_0 entered promiscuous mode [ 75.169741][ T4401] device hsr_slave_1 entered promiscuous mode [ 75.653706][ T4401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.665468][ T4401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.675809][ T4401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.687004][ T4401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.714529][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.721789][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.729332][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.736622][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.793116][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.807269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.816793][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.825087][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.835224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.851134][ T4401] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.865989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.875395][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.882558][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.911727][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.921436][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.934921][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.942212][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.951057][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.961086][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.971716][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.982603][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.991922][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.001435][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.011881][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.022673][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.031645][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.044386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.055866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.067203][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.189545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.197126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.212289][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.235310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.246973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.272099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.282036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.296225][ T4401] device veth0_vlan entered promiscuous mode [ 76.303544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.313777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.327294][ T4401] device veth1_vlan entered promiscuous mode [ 76.352026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.360457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.370050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.379957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.392922][ T4401] device veth0_macvtap entered promiscuous mode [ 76.405146][ T4401] device veth1_macvtap entered promiscuous mode [ 76.424280][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.432090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.442277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.451477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.462777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.476288][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.484372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.494956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.510303][ T4401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520204][ T4401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.530134][ T4401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.540556][ T4401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810666][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 76.928988][ T4480] [ 76.931355][ T4480] ====================================================== [ 76.938453][ T4480] WARNING: possible circular locking dependency detected [ 76.945784][ T4480] syzkaller #0 Not tainted [ 76.950793][ T4480] ------------------------------------------------------ [ 76.957936][ T4480] syz-executor.0/4480 is trying to acquire lock: [ 76.964453][ T4480] ffff8880212b83f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x4f/0x3f0 [ 76.974847][ T4480] [ 76.974847][ T4480] but task is already holding lock: [ 76.982309][ T4480] ffff88814ceac3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x317/0xcd0 [ 76.992940][ T4480] [ 76.992940][ T4480] which lock already depends on the new lock. [ 76.992940][ T4480] [ 77.003702][ T4480] [ 77.003702][ T4480] the existing dependency chain (in reverse order) is: [ 77.013156][ T4480] [ 77.013156][ T4480] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 77.021942][ T4480] __mutex_lock_common+0x1e5/0x2400 [ 77.027886][ T4480] mutex_lock_io_nested+0x43/0x60 [ 77.033542][ T4480] jbd2_journal_flush+0x285/0xcd0 [ 77.039112][ T4480] ext4_ioctl+0x31f7/0x3840 [ 77.044304][ T4480] __se_sys_ioctl+0xfa/0x170 [ 77.049527][ T4480] do_syscall_64+0x4c/0xa0 [ 77.054496][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.060945][ T4480] [ 77.060945][ T4480] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 77.069044][ T4480] __mutex_lock_common+0x1e5/0x2400 [ 77.074879][ T4480] mutex_lock_nested+0x17/0x20 [ 77.080196][ T4480] jbd2_journal_lock_updates+0x2ce/0x390 [ 77.086791][ T4480] ext4_change_inode_journal_flag+0x18e/0x710 [ 77.093493][ T4480] ext4_fileattr_set+0xe61/0x1750 [ 77.099319][ T4480] vfs_fileattr_set+0x859/0xb10 [ 77.104804][ T4480] do_vfs_ioctl+0x1881/0x1f40 [ 77.110035][ T4480] __se_sys_ioctl+0x83/0x170 [ 77.115386][ T4480] do_syscall_64+0x4c/0xa0 [ 77.120593][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.127035][ T4480] [ 77.127035][ T4480] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 77.135492][ T4480] percpu_down_write+0x52/0x2f0 [ 77.141082][ T4480] ext4_ind_migrate+0x247/0x8e0 [ 77.146569][ T4480] ext4_fileattr_set+0xf53/0x1750 [ 77.152148][ T4480] vfs_fileattr_set+0x859/0xb10 [ 77.157555][ T4480] do_vfs_ioctl+0x1881/0x1f40 [ 77.162775][ T4480] __se_sys_ioctl+0x83/0x170 [ 77.167907][ T4480] do_syscall_64+0x4c/0xa0 [ 77.172944][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.179393][ T4480] [ 77.179393][ T4480] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 77.188189][ T4480] __lock_acquire+0x2c66/0x7b50 [ 77.193737][ T4480] lock_acquire+0x19e/0x400 [ 77.198821][ T4480] down_read+0x44/0x2e0 [ 77.203655][ T4480] ext4_bmap+0x4f/0x3f0 [ 77.208735][ T4480] bmap+0xa2/0xd0 [ 77.212910][ T4480] jbd2_journal_flush+0x7e0/0xcd0 [ 77.218486][ T4480] ext4_ioctl+0x31f7/0x3840 [ 77.223886][ T4480] __se_sys_ioctl+0xfa/0x170 [ 77.229028][ T4480] do_syscall_64+0x4c/0xa0 [ 77.233987][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.240424][ T4480] [ 77.240424][ T4480] other info that might help us debug this: [ 77.240424][ T4480] [ 77.250767][ T4480] Chain exists of: [ 77.250767][ T4480] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 77.250767][ T4480] [ 77.266359][ T4480] Possible unsafe locking scenario: [ 77.266359][ T4480] [ 77.273910][ T4480] CPU0 CPU1 [ 77.279320][ T4480] ---- ---- [ 77.284781][ T4480] lock(&journal->j_checkpoint_mutex); [ 77.290343][ T4480] lock(&journal->j_barrier); [ 77.297743][ T4480] lock(&journal->j_checkpoint_mutex); [ 77.305911][ T4480] lock(&sb->s_type->i_mutex_key#9); [ 77.311308][ T4480] [ 77.311308][ T4480] *** DEADLOCK *** [ 77.311308][ T4480] [ 77.319731][ T4480] 2 locks held by syz-executor.0/4480: [ 77.325248][ T4480] #0: ffff88814ceac170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2ce/0x390 [ 77.336144][ T4480] #1: ffff88814ceac3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x317/0xcd0 [ 77.347226][ T4480] [ 77.347226][ T4480] stack backtrace: [ 77.353244][ T4480] CPU: 1 PID: 4480 Comm: syz-executor.0 Not tainted syzkaller #0 [ 77.360980][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.371495][ T4480] Call Trace: [ 77.374880][ T4480] [ 77.378221][ T4480] dump_stack_lvl+0x188/0x250 [ 77.383298][ T4480] ? load_image+0x410/0x410 [ 77.387859][ T4480] ? show_regs_print_info+0x20/0x20 [ 77.393101][ T4480] ? print_circular_bug+0x12b/0x1a0 [ 77.398337][ T4480] check_noncircular+0x296/0x330 [ 77.403559][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 77.408780][ T4480] ? add_chain_block+0x9b0/0x9b0 [ 77.413736][ T4480] ? lockdep_lock+0xf1/0x1f0 [ 77.418528][ T4480] ? mark_lock+0x94/0x320 [ 77.422963][ T4480] ? _find_first_zero_bit+0xd1/0xf0 [ 77.428268][ T4480] __lock_acquire+0x2c66/0x7b50 [ 77.433163][ T4480] ? release_firmware_map_entry+0x190/0x190 [ 77.439083][ T4480] ? verify_lock_unused+0x140/0x140 [ 77.444387][ T4480] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 77.450392][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 77.455849][ T4480] ? verify_lock_unused+0x140/0x140 [ 77.461260][ T4480] ? schedule+0x132/0x1e0 [ 77.465644][ T4480] ? io_schedule+0x7c/0xd0 [ 77.470187][ T4480] lock_acquire+0x19e/0x400 [ 77.474763][ T4480] ? ext4_bmap+0x4f/0x3f0 [ 77.479221][ T4480] ? __might_sleep+0xf0/0xf0 [ 77.483927][ T4480] ? read_lock_is_recursive+0x10/0x10 [ 77.489324][ T4480] ? jbd2_journal_flush+0x37d/0xcd0 [ 77.494559][ T4480] down_read+0x44/0x2e0 [ 77.498830][ T4480] ? ext4_bmap+0x4f/0x3f0 [ 77.503276][ T4480] ext4_bmap+0x4f/0x3f0 [ 77.507918][ T4480] ? ext4_journalled_write_end+0xf10/0xf10 [ 77.513850][ T4480] bmap+0xa2/0xd0 [ 77.517524][ T4480] jbd2_journal_flush+0x7e0/0xcd0 [ 77.522700][ T4480] ? jbd2_journal_wait_updates+0x270/0x270 [ 77.528801][ T4480] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 77.535676][ T4480] ? bpf_lsm_capable+0x5/0x10 [ 77.540481][ T4480] ? security_capable+0x85/0xb0 [ 77.545356][ T4480] ext4_ioctl+0x31f7/0x3840 [ 77.549982][ T4480] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 77.554849][ T4480] ? ext4_fileattr_set+0x1750/0x1750 [ 77.560156][ T4480] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 77.565811][ T4480] ? rcu_lock_release+0x5/0x20 [ 77.570601][ T4480] ? __lock_acquire+0x7b50/0x7b50 [ 77.575745][ T4480] ? kfree+0xef/0x2a0 [ 77.579929][ T4480] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 77.585581][ T4480] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 77.591312][ T4480] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.596613][ T4480] ? security_file_ioctl+0x7c/0xa0 [ 77.601833][ T4480] ? ext4_fileattr_set+0x1750/0x1750 [ 77.607229][ T4480] __se_sys_ioctl+0xfa/0x170 [ 77.612035][ T4480] do_syscall_64+0x4c/0xa0 [ 77.616486][ T4480] ? clear_bhb_loop+0x30/0x80 [ 77.621191][ T4480] ? clear_bhb_loop+0x30/0x80 [ 77.625904][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.632244][ T4480] RIP: 0033:0x7f6addb193b9 [ 77.636691][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 77.656898][ T4480] RSP: 002b:00007f6adcea90b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.665415][ T4480] RAX: ffffffffffffffda RBX: 00007f6addc56f80 RCX: 00007f6addb193b9 [ 77.673515][ T4480] RDX: 0000000020000000 RSI: 000000004004662b RDI: 0000000000000004 [ 77.681619][ T4480] RBP: 00007f6addb7a4c2 R08: 0000000000000000 R09: 0000000000000000 [ 77.689691][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.697779][ T4480] R13: 000000000000000b R14: 00007f6addc56f80 R15: 00007ffe66009b78 [ 77.705779][ T4480] [ 78.888849][ T1111] Bluetooth: hci0: command 0x041b tx timeout 2026/07/26 18:22:49 executed programs: 40 [ 80.968961][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 83.048850][ T13] Bluetooth: hci0: command 0x0419 tx timeout 2026/07/26 18:22:54 executed programs: 131