Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. 1970/01/01 00:00:46 ignoring optional flag "type"="gce" 1970/01/01 00:00:46 parsed 1 programs 1970/01/01 00:00:46 executed programs: 0 [ 46.456024][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 46.473640][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.474822][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.476229][ T4281] device bridge_slave_0 entered promiscuous mode [ 46.478415][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.479622][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.481053][ T4281] device bridge_slave_1 entered promiscuous mode [ 46.488597][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.490934][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.498733][ T4281] team0: Port device team_slave_0 added [ 46.500414][ T4281] team0: Port device team_slave_1 added [ 46.506664][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.507820][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.511671][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.513901][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.515036][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.519222][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.588549][ T4281] device hsr_slave_0 entered promiscuous mode [ 46.627454][ T4281] device hsr_slave_1 entered promiscuous mode [ 47.188167][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.248969][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.278447][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.298396][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.345661][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.346808][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.348144][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.349246][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.367044][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.371079][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.373233][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.374683][ T1646] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.376425][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.380964][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.389122][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.390704][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.391819][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.393134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.394984][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.396137][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.400701][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.402437][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.408938][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.410521][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.413492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.415304][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.417051][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.421026][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.459072][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.460483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.465470][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.476133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.478366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.484570][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.486060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.488363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.489742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.492689][ T4281] device veth0_vlan entered promiscuous mode [ 47.495930][ T4281] device veth1_vlan entered promiscuous mode [ 47.504923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.506367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.508099][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.509535][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.512924][ T4281] device veth0_macvtap entered promiscuous mode [ 47.515184][ T4281] device veth1_macvtap entered promiscuous mode [ 47.521194][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.522449][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.523849][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.525204][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.526675][ T881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.530544][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.532388][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.533912][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.535992][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.537939][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.539366][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.540674][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.609400][ T4413] [ 47.609817][ T4413] ====================================================== [ 47.610845][ T4413] WARNING: possible circular locking dependency detected [ 47.611857][ T4413] syzkaller #0 Not tainted [ 47.612525][ T4413] ------------------------------------------------------ [ 47.613523][ T4413] syz-executor.0/4413 is trying to acquire lock: [ 47.614404][ T4413] ffff0000d05103f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x54/0x360 [ 47.615843][ T4413] [ 47.615843][ T4413] but task is already holding lock: [ 47.616948][ T4413] ffff0000d47503f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0xa28 [ 47.618518][ T4413] [ 47.618518][ T4413] which lock already depends on the new lock. [ 47.618518][ T4413] [ 47.620043][ T4413] [ 47.620043][ T4413] the existing dependency chain (in reverse order) is: [ 47.621306][ T4413] [ 47.621306][ T4413] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 47.622587][ T4413] __mutex_lock_common+0x194/0x1f14 [ 47.623436][ T4413] mutex_lock_io_nested+0xcc/0x12c [ 47.624242][ T4413] jbd2_journal_flush+0x1e8/0xa28 [ 47.625003][ T4413] ext4_ioctl+0x2dcc/0x3710 [ 47.625684][ T4413] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.626483][ T4413] invoke_syscall+0x98/0x2b0 [ 47.627227][ T4413] el0_svc_common+0x138/0x258 [ 47.628013][ T4413] do_el0_svc+0x58/0x13c [ 47.628716][ T4413] el0_svc+0x78/0x1d0 [ 47.629344][ T4413] el0t_64_sync_handler+0xcc/0xe4 [ 47.630098][ T4413] el0t_64_sync+0x1a0/0x1a4 [ 47.630867][ T4413] [ 47.630867][ T4413] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 47.632022][ T4413] __mutex_lock_common+0x194/0x1f14 [ 47.632915][ T4413] mutex_lock_nested+0xac/0x11c [ 47.633724][ T4413] jbd2_journal_lock_updates+0x260/0x318 [ 47.634567][ T4413] ext4_change_inode_journal_flag+0x158/0x630 [ 47.635483][ T4413] ext4_fileattr_set+0xbd8/0x133c [ 47.636286][ T4413] vfs_fileattr_set+0x67c/0x90c [ 47.637096][ T4413] do_vfs_ioctl+0x1c88/0x23f0 [ 47.637899][ T4413] __arm64_sys_ioctl+0xe4/0x1c8 [ 47.638699][ T4413] invoke_syscall+0x98/0x2b0 [ 47.639436][ T4413] el0_svc_common+0x138/0x258 [ 47.640224][ T4413] do_el0_svc+0x58/0x13c [ 47.640956][ T4413] el0_svc+0x78/0x1d0 [ 47.641576][ T4413] el0t_64_sync_handler+0xcc/0xe4 [ 47.642379][ T4413] el0t_64_sync+0x1a0/0x1a4 [ 47.643148][ T4413] [ 47.643148][ T4413] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 47.644317][ T4413] percpu_down_write+0xcc/0x39c [ 47.645148][ T4413] ext4_ind_migrate+0x170/0x6b8 [ 47.645949][ T4413] ext4_fileattr_set+0xc50/0x133c [ 47.646789][ T4413] vfs_fileattr_set+0x67c/0x90c [ 47.647603][ T4413] do_vfs_ioctl+0x1c88/0x23f0 [ 47.648335][ T4413] __arm64_sys_ioctl+0xe4/0x1c8 [ 47.649115][ T4413] invoke_syscall+0x98/0x2b0 [ 47.649913][ T4413] el0_svc_common+0x138/0x258 [ 47.650718][ T4413] do_el0_svc+0x58/0x13c [ 47.651410][ T4413] el0_svc+0x78/0x1d0 [ 47.652074][ T4413] el0t_64_sync_handler+0xcc/0xe4 [ 47.652860][ T4413] el0t_64_sync+0x1a0/0x1a4 [ 47.653588][ T4413] [ 47.653588][ T4413] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 47.654804][ T4413] __lock_acquire+0x2870/0x67ec [ 47.655619][ T4413] lock_acquire+0x1f4/0x618 [ 47.656334][ T4413] down_read+0xc0/0x38c [ 47.657036][ T4413] ext4_bmap+0x54/0x360 [ 47.657686][ T4413] bmap+0xa8/0xe8 [ 47.658337][ T4413] jbd2_journal_flush+0x600/0xa28 [ 47.659162][ T4413] ext4_ioctl+0x2dcc/0x3710 [ 47.659870][ T4413] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.660673][ T4413] invoke_syscall+0x98/0x2b0 [ 47.661382][ T4413] el0_svc_common+0x138/0x258 [ 47.662120][ T4413] do_el0_svc+0x58/0x13c [ 47.662777][ T4413] el0_svc+0x78/0x1d0 [ 47.663428][ T4413] el0t_64_sync_handler+0xcc/0xe4 [ 47.664222][ T4413] el0t_64_sync+0x1a0/0x1a4 [ 47.665000][ T4413] [ 47.665000][ T4413] other info that might help us debug this: [ 47.665000][ T4413] [ 47.666573][ T4413] Chain exists of: [ 47.666573][ T4413] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 47.666573][ T4413] [ 47.669057][ T4413] Possible unsafe locking scenario: [ 47.669057][ T4413] [ 47.670202][ T4413] CPU0 CPU1 [ 47.670992][ T4413] ---- ---- [ 47.671729][ T4413] lock(&journal->j_checkpoint_mutex); [ 47.672562][ T4413] lock(&journal->j_barrier); [ 47.673649][ T4413] lock(&journal->j_checkpoint_mutex); [ 47.674793][ T4413] lock(&sb->s_type->i_mutex_key#9); [ 47.675567][ T4413] [ 47.675567][ T4413] *** DEADLOCK *** [ 47.675567][ T4413] [ 47.676706][ T4413] 2 locks held by syz-executor.0/4413: [ 47.677468][ T4413] #0: ffff0000d4750170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x260/0x318 [ 47.678995][ T4413] #1: ffff0000d47503f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x264/0xa28 [ 47.680535][ T4413] [ 47.680535][ T4413] stack backtrace: [ 47.681394][ T4413] CPU: 1 PID: 4413 Comm: syz-executor.0 Not tainted syzkaller #0 [ 47.682440][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.683841][ T4413] Call trace: [ 47.684314][ T4413] dump_backtrace+0x0/0x458 [ 47.685010][ T4413] show_stack+0x2c/0x3c [ 47.685596][ T4413] __dump_stack+0x30/0x40 [ 47.686198][ T4413] dump_stack_lvl+0xf4/0x15c [ 47.686831][ T4413] dump_stack+0x1c/0x5c [ 47.687386][ T4413] print_circular_bug+0x148/0x1b0 [ 47.688103][ T4413] check_noncircular+0x264/0x2f8 [ 47.688816][ T4413] __lock_acquire+0x2870/0x67ec [ 47.689566][ T4413] lock_acquire+0x1f4/0x618 [ 47.690166][ T4413] down_read+0xc0/0x38c [ 47.690760][ T4413] ext4_bmap+0x54/0x360 [ 47.691377][ T4413] bmap+0xa8/0xe8 [ 47.691908][ T4413] jbd2_journal_flush+0x600/0xa28 [ 47.692607][ T4413] ext4_ioctl+0x2dcc/0x3710 [ 47.693250][ T4413] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.693929][ T4413] invoke_syscall+0x98/0x2b0 [ 47.694623][ T4413] el0_svc_common+0x138/0x258 [ 47.695363][ T4413] do_el0_svc+0x58/0x13c [ 47.695978][ T4413] el0_svc+0x78/0x1d0 [ 47.696575][ T4413] el0t_64_sync_handler+0xcc/0xe4 [ 47.697256][ T4413] el0t_64_sync+0x1a0/0x1a4 [ 48.427445][ T4069] Bluetooth: hci0: command 0x0409 tx timeout [ 50.507574][ T7] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:51 executed programs: 135 [ 52.587294][ T1970] Bluetooth: hci0: command 0x040f tx timeout [ 54.667260][ T13] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:56 executed programs: 343