Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. 2026/05/03 01:21:03 parsed 1 programs [ 87.581459][ T5637] cgroup: Unknown subsys name 'net' [ 87.673748][ T5637] cgroup: Unknown subsys name 'cpuset' [ 87.682628][ T5637] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.449947][ T5637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.032676][ T24] cfg80211: failed to load regulatory.db [ 92.666171][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.533892][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.542921][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.607204][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.615277][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.664561][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.672951][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.680996][ T5680] bridge_slave_0: entered allmulticast mode [ 94.688731][ T5680] bridge_slave_0: entered promiscuous mode [ 94.698436][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.706650][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.714109][ T5680] bridge_slave_1: entered allmulticast mode [ 94.721204][ T5680] bridge_slave_1: entered promiscuous mode [ 94.752255][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.764413][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.793679][ T5680] team0: Port device team_slave_0 added [ 94.802018][ T5680] team0: Port device team_slave_1 added [ 94.827641][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.834691][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.860999][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.873805][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.881065][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.907056][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.947914][ T5680] hsr_slave_0: entered promiscuous mode [ 94.955170][ T5680] hsr_slave_1: entered promiscuous mode [ 95.098683][ T5680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.112323][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.121614][ T5680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.132925][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.141181][ T5680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.151631][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.161347][ T5680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.172371][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.201882][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.209661][ T5680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.217510][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.224724][ T5680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.290555][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.314155][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.322797][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.338339][ T5680] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.352674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.359846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.373339][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.380579][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.723562][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.777389][ T5680] veth0_vlan: entered promiscuous mode [ 95.792096][ T5680] veth1_vlan: entered promiscuous mode [ 95.827121][ T5680] veth0_macvtap: entered promiscuous mode [ 95.837926][ T5680] veth1_macvtap: entered promiscuous mode [ 95.857678][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.877043][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.893367][ T1128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.903505][ T1128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.915393][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.924619][ T1128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.082706][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.190188][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.261971][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.346726][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.788461][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.796648][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.804916][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.814158][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.822617][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/05/03 01:21:17 executed programs: 0 [ 98.457963][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.467386][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.476180][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.485688][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.493459][ T4942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.773170][ T12] bridge_slave_1: left allmulticast mode [ 98.779853][ T12] bridge_slave_1: left promiscuous mode [ 98.787404][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.802015][ T12] bridge_slave_0: left allmulticast mode [ 98.807692][ T12] bridge_slave_0: left promiscuous mode [ 98.814683][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.981261][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.994227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.004629][ T12] bond0 (unregistering): Released all slaves [ 99.147155][ T12] hsr_slave_0: left promiscuous mode [ 99.153808][ T12] hsr_slave_1: left promiscuous mode [ 99.160344][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.167882][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.176910][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.188302][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.207395][ T12] veth1_macvtap: left promiscuous mode [ 99.213890][ T12] veth0_macvtap: left promiscuous mode [ 99.220298][ T12] veth1_vlan: left promiscuous mode [ 99.225722][ T12] veth0_vlan: left promiscuous mode [ 99.592403][ T12] team0 (unregistering): Port device team_slave_1 removed [ 99.628225][ T12] team0 (unregistering): Port device team_slave_0 removed [ 99.751236][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 100.406113][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.424328][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.444326][ T5763] bridge_slave_0: entered allmulticast mode [ 100.455586][ T5763] bridge_slave_0: entered promiscuous mode [ 100.468437][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.499815][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.507389][ T5763] bridge_slave_1: entered allmulticast mode [ 100.515626][ T5733] Bluetooth: hci0: command tx timeout [ 100.533303][ T5763] bridge_slave_1: entered promiscuous mode [ 100.832604][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.858640][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.873188][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.929577][ T5763] team0: Port device team_slave_0 added [ 100.944354][ T5763] team0: Port device team_slave_1 added [ 101.021374][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.028594][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.055906][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.075401][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.083006][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.110354][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.192215][ T5763] hsr_slave_0: entered promiscuous mode [ 101.199774][ T5763] hsr_slave_1: entered promiscuous mode [ 101.953562][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.968020][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.977045][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.990779][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.001483][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.015446][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.026554][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.044185][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.177645][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.210848][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.226953][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.234393][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.264449][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.271721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.593447][ T5733] Bluetooth: hci0: command tx timeout [ 102.853929][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.925339][ T5763] veth0_vlan: entered promiscuous mode [ 102.942375][ T5763] veth1_vlan: entered promiscuous mode [ 102.984230][ T5763] veth0_macvtap: entered promiscuous mode [ 102.996772][ T5763] veth1_macvtap: entered promiscuous mode [ 103.023894][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.044272][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.066834][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.100216][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.121414][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.132069][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.210996][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.235141][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.281614][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.293497][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.399866][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 103.455362][ T5733] block nbd0: Receive control failed (result -107) [ 103.736307][ T5876] nbd1: detected capacity change from 0 to 63 [ 103.743964][ T5733] block nbd1: Receive control failed (result -32) [ 103.744236][ T4942] block nbd1: Receive control failed (result -32) [ 103.763620][ T5650] [ 103.766225][ T5650] ====================================================== [ 103.773360][ T5650] WARNING: possible circular locking dependency detected [ 103.780492][ T5650] syzkaller #0 Not tainted [ 103.784960][ T5650] ------------------------------------------------------ [ 103.792072][ T5650] udevd/5650 is trying to acquire lock: [ 103.797628][ T5650] ffff8880746c7468 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 103.807894][ T5650] [ 103.807894][ T5650] but task is already holding lock: [ 103.815291][ T5650] ffff88802b9451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 103.824028][ T5650] [ 103.824028][ T5650] which lock already depends on the new lock. [ 103.824028][ T5650] [ 103.834847][ T5650] [ 103.834847][ T5650] the existing dependency chain (in reverse order) is: [ 103.843879][ T5650] [ 103.843879][ T5650] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 103.851108][ T5650] __mutex_lock+0x1a3/0x1550 [ 103.856234][ T5650] nbd_queue_rq+0xc6/0x1100 [ 103.861264][ T5650] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 103.868564][ T5650] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 103.875519][ T5650] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 103.882036][ T5650] blk_mq_run_hw_queue+0x348/0x4f0 [ 103.887711][ T5650] blk_mq_dispatch_list+0xd16/0xe10 [ 103.893611][ T5650] blk_mq_flush_plug_list+0x48d/0x570 [ 103.899514][ T5650] __blk_flush_plug+0x3ed/0x4d0 [ 103.905039][ T5650] __submit_bio+0x28d/0x580 [ 103.910082][ T5650] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 103.916254][ T5650] block_read_full_folio+0x599/0x830 [ 103.922061][ T5650] filemap_read_folio+0x137/0x3b0 [ 103.927621][ T5650] do_read_cache_folio+0x358/0x590 [ 103.933261][ T5650] read_part_sector+0xb6/0x2b0 [ 103.938552][ T5650] adfspart_check_ICS+0xb1/0x960 [ 103.944280][ T5650] bdev_disk_changed+0x817/0x1770 [ 103.950019][ T5650] blkdev_get_whole+0x380/0x510 [ 103.955405][ T5650] bdev_open+0x31e/0xd30 [ 103.960351][ T5650] blkdev_open+0x470/0x610 [ 103.965297][ T5650] do_dentry_open+0x785/0x14e0 [ 103.970671][ T5650] vfs_open+0x3b/0x340 [ 103.975355][ T5650] path_openat+0x2e08/0x3860 [ 103.980482][ T5650] do_file_open+0x23e/0x4a0 [ 103.985980][ T5650] do_sys_openat2+0x113/0x200 [ 103.991378][ T5650] __x64_sys_openat+0x138/0x170 [ 103.996781][ T5650] do_syscall_64+0x15f/0xf80 [ 104.001975][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.008397][ T5650] [ 104.008397][ T5650] -> #5 (set->srcu){.+.+}-{0:0}: [ 104.015530][ T5650] __synchronize_srcu+0xca/0x300 [ 104.021005][ T5650] elevator_switch+0x1e8/0x7a0 [ 104.026386][ T5650] elevator_change+0x2cc/0x450 [ 104.031675][ T5650] elevator_set_default+0x36c/0x430 [ 104.037583][ T5650] blk_register_queue+0x3e9/0x4e0 [ 104.043141][ T5650] __add_disk+0x677/0xd50 [ 104.047998][ T5650] add_disk_fwnode+0xfb/0x480 [ 104.053305][ T5650] nbd_dev_add+0x72c/0xb50 [ 104.058337][ T5650] nbd_init+0x168/0x1f0 [ 104.063016][ T5650] do_one_initcall+0x250/0x870 [ 104.068315][ T5650] do_initcall_level+0x104/0x190 [ 104.073979][ T5650] do_initcalls+0x59/0xa0 [ 104.079097][ T5650] kernel_init_freeable+0x2a6/0x3e0 [ 104.084825][ T5650] kernel_init+0x1d/0x1d0 [ 104.089943][ T5650] ret_from_fork+0x514/0xb70 [ 104.095321][ T5650] ret_from_fork_asm+0x1a/0x30 [ 104.100630][ T5650] [ 104.100630][ T5650] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 104.108831][ T5650] __mutex_lock+0x1a3/0x1550 [ 104.113965][ T5650] elevator_change+0x1b3/0x450 [ 104.119370][ T5650] elevator_set_none+0xb5/0x140 [ 104.125030][ T5650] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 104.131381][ T5650] nbd_start_device+0x17f/0xb10 [ 104.136760][ T5650] nbd_genl_connect+0x165b/0x1cf0 [ 104.142402][ T5650] genl_family_rcv_msg_doit+0x22a/0x330 [ 104.148577][ T5650] genl_rcv_msg+0x61c/0x7a0 [ 104.153883][ T5650] netlink_rcv_skb+0x232/0x4b0 [ 104.159262][ T5650] genl_rcv+0x28/0x40 [ 104.163776][ T5650] netlink_unicast+0x75c/0x8e0 [ 104.169157][ T5650] netlink_sendmsg+0x813/0xb40 [ 104.174460][ T5650] ____sys_sendmsg+0x972/0x9f0 [ 104.179760][ T5650] ___sys_sendmsg+0x2a5/0x360 [ 104.185035][ T5650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 104.190782][ T5650] do_syscall_64+0x15f/0xf80 [ 104.195938][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.202376][ T5650] [ 104.202376][ T5650] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 104.211081][ T5650] blk_alloc_queue+0x546/0x680 [ 104.216470][ T5650] __blk_mq_alloc_disk+0x197/0x390 [ 104.222210][ T5650] nbd_dev_add+0x499/0xb50 [ 104.227286][ T5650] nbd_init+0x168/0x1f0 [ 104.232052][ T5650] do_one_initcall+0x250/0x870 [ 104.237428][ T5650] do_initcall_level+0x104/0x190 [ 104.242982][ T5650] do_initcalls+0x59/0xa0 [ 104.247852][ T5650] kernel_init_freeable+0x2a6/0x3e0 [ 104.253583][ T5650] kernel_init+0x1d/0x1d0 [ 104.258449][ T5650] ret_from_fork+0x514/0xb70 [ 104.263565][ T5650] ret_from_fork_asm+0x1a/0x30 [ 104.268855][ T5650] [ 104.268855][ T5650] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 104.276073][ T5650] fs_reclaim_acquire+0x71/0x100 [ 104.281549][ T5650] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 104.287975][ T5650] __alloc_skb+0x1d0/0x7d0 [ 104.292954][ T5650] __ip6_append_data+0x2c7c/0x3e90 [ 104.298595][ T5650] ip6_append_data+0x10f/0x280 [ 104.303889][ T5650] rawv6_sendmsg+0x12d3/0x18e0 [ 104.309187][ T5650] ____sys_sendmsg+0x80a/0x9f0 [ 104.314483][ T5650] ___sys_sendmsg+0x2a5/0x360 [ 104.319690][ T5650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 104.325156][ T5650] do_syscall_64+0x15f/0xf80 [ 104.330294][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.336727][ T5650] [ 104.336727][ T5650] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 104.344501][ T5650] lock_sock_nested+0x41/0x100 [ 104.349811][ T5650] inet_shutdown+0x6a/0x390 [ 104.354855][ T5650] nbd_mark_nsock_dead+0x2e9/0x560 [ 104.360498][ T5650] recv_work+0x1c2e/0x1d40 [ 104.365464][ T5650] process_scheduled_works+0xb5d/0x1860 [ 104.371536][ T5650] worker_thread+0xa53/0xfc0 [ 104.376657][ T5650] kthread+0x388/0x470 [ 104.381269][ T5650] ret_from_fork+0x514/0xb70 [ 104.386470][ T5650] ret_from_fork_asm+0x1a/0x30 [ 104.391759][ T5650] [ 104.391759][ T5650] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 104.399860][ T5650] __lock_acquire+0x15a5/0x2cf0 [ 104.405266][ T5650] lock_acquire+0x106/0x350 [ 104.410321][ T5650] __mutex_lock+0x1a3/0x1550 [ 104.415454][ T5650] nbd_queue_rq+0x37b/0x1100 [ 104.420575][ T5650] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 104.426657][ T5650] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 104.433515][ T5650] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 104.440202][ T5650] blk_mq_run_hw_queue+0x348/0x4f0 [ 104.445841][ T5650] blk_mq_dispatch_list+0xd16/0xe10 [ 104.451579][ T5650] blk_mq_flush_plug_list+0x48d/0x570 [ 104.457689][ T5650] __blk_flush_plug+0x3ed/0x4d0 [ 104.463082][ T5650] __submit_bio+0x28d/0x580 [ 104.468161][ T5650] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 104.474332][ T5650] block_read_full_folio+0x599/0x830 [ 104.480145][ T5650] filemap_read_folio+0x137/0x3b0 [ 104.485702][ T5650] do_read_cache_folio+0x358/0x590 [ 104.491351][ T5650] read_part_sector+0xb6/0x2b0 [ 104.496651][ T5650] adfspart_check_ICS+0xb1/0x960 [ 104.502210][ T5650] bdev_disk_changed+0x817/0x1770 [ 104.507866][ T5650] blkdev_get_whole+0x380/0x510 [ 104.513280][ T5650] bdev_open+0x31e/0xd30 [ 104.518153][ T5650] blkdev_open+0x470/0x610 [ 104.523248][ T5650] do_dentry_open+0x785/0x14e0 [ 104.528567][ T5650] vfs_open+0x3b/0x340 [ 104.533181][ T5650] path_openat+0x2e08/0x3860 [ 104.538308][ T5650] do_file_open+0x23e/0x4a0 [ 104.543340][ T5650] do_sys_openat2+0x113/0x200 [ 104.548550][ T5650] __x64_sys_openat+0x138/0x170 [ 104.553929][ T5650] do_syscall_64+0x15f/0xf80 [ 104.559049][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.565564][ T5650] [ 104.565564][ T5650] other info that might help us debug this: [ 104.565564][ T5650] [ 104.575882][ T5650] Chain exists of: [ 104.575882][ T5650] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 104.575882][ T5650] [ 104.587983][ T5650] Possible unsafe locking scenario: [ 104.587983][ T5650] [ 104.595617][ T5650] CPU0 CPU1 [ 104.600982][ T5650] ---- ---- [ 104.606344][ T5650] lock(&cmd->lock); [ 104.610335][ T5650] lock(set->srcu); [ 104.616752][ T5650] lock(&cmd->lock); [ 104.623435][ T5650] lock(&nsock->tx_lock); [ 104.628044][ T5650] [ 104.628044][ T5650] *** DEADLOCK *** [ 104.628044][ T5650] [ 104.636192][ T5650] 3 locks held by udevd/5650: [ 104.640871][ T5650] #0: ffff888027782350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 104.650216][ T5650] #1: ffff888026d56618 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 104.659718][ T5650] #2: ffff88802b9451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 104.668695][ T5650] [ 104.668695][ T5650] stack backtrace: [ 104.674589][ T5650] CPU: 0 UID: 0 PID: 5650 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 104.674609][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.674618][ T5650] Call Trace: [ 104.674625][ T5650] [ 104.674631][ T5650] dump_stack_lvl+0xe8/0x150 [ 104.674650][ T5650] print_circular_bug+0x2e1/0x300 [ 104.674671][ T5650] check_noncircular+0x12e/0x150 [ 104.674692][ T5650] __lock_acquire+0x15a5/0x2cf0 [ 104.674716][ T5650] ? nbd_queue_rq+0x37b/0x1100 [ 104.674730][ T5650] lock_acquire+0x106/0x350 [ 104.674745][ T5650] ? nbd_queue_rq+0x37b/0x1100 [ 104.674763][ T5650] __mutex_lock+0x1a3/0x1550 [ 104.674783][ T5650] ? nbd_queue_rq+0x37b/0x1100 [ 104.674796][ T5650] ? is_bpf_text_address+0x292/0x2b0 [ 104.674811][ T5650] ? is_bpf_text_address+0x26/0x2b0 [ 104.674826][ T5650] ? kernel_text_address+0xa5/0xe0 [ 104.674848][ T5650] ? __kernel_text_address+0xd/0x30 [ 104.674869][ T5650] ? unwind_get_return_address+0x4d/0x90 [ 104.674888][ T5650] ? nbd_queue_rq+0x37b/0x1100 [ 104.674902][ T5650] ? __pfx___mutex_lock+0x10/0x10 [ 104.674922][ T5650] ? stack_trace_save+0xa9/0x100 [ 104.674944][ T5650] ? __pfx_stack_trace_save+0x10/0x10 [ 104.674967][ T5650] nbd_queue_rq+0x37b/0x1100 [ 104.674984][ T5650] ? __lock_acquire+0x146e/0x2cf0 [ 104.675000][ T5650] ? __pfx_nbd_queue_rq+0x10/0x10 [ 104.675013][ T5650] ? is_bpf_text_address+0x26/0x2b0 [ 104.675039][ T5650] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 104.675066][ T5650] ? sbitmap_get+0x229/0x390 [ 104.675090][ T5650] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 104.675111][ T5650] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 104.675133][ T5650] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 104.675162][ T5650] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 104.675184][ T5650] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 104.675207][ T5650] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 104.675228][ T5650] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 104.675251][ T5650] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 104.675270][ T5650] blk_mq_run_hw_queue+0x348/0x4f0 [ 104.675290][ T5650] blk_mq_dispatch_list+0xd16/0xe10 [ 104.675312][ T5650] ? bdev_count_inflight+0x1cf/0x210 [ 104.675327][ T5650] ? blk_mq_dispatch_list+0x240/0xe10 [ 104.675349][ T5650] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 104.675372][ T5650] ? rcu_is_watching+0x15/0xb0 [ 104.675390][ T5650] blk_mq_flush_plug_list+0x48d/0x570 [ 104.675412][ T5650] ? blk_add_rq_to_plug+0x300/0x450 [ 104.675432][ T5650] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 104.675454][ T5650] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 104.675478][ T5650] __blk_flush_plug+0x3ed/0x4d0 [ 104.675502][ T5650] ? __pfx___blk_flush_plug+0x10/0x10 [ 104.675525][ T5650] __submit_bio+0x28d/0x580 [ 104.675548][ T5650] ? __pfx___submit_bio+0x10/0x10 [ 104.675571][ T5650] ? bio_associate_blkg+0x6d/0x230 [ 104.675605][ T5650] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 104.675628][ T5650] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 104.675654][ T5650] block_read_full_folio+0x599/0x830 [ 104.675672][ T5650] ? __pfx_blkdev_get_block+0x10/0x10 [ 104.675687][ T5650] filemap_read_folio+0x137/0x3b0 [ 104.675709][ T5650] ? __pfx_blkdev_read_folio+0x10/0x10 [ 104.675732][ T5650] ? __pfx_filemap_read_folio+0x10/0x10 [ 104.675753][ T5650] ? filemap_add_folio+0x356/0x530 [ 104.675771][ T5650] do_read_cache_folio+0x358/0x590 [ 104.675795][ T5650] ? __pfx_blkdev_read_folio+0x10/0x10 [ 104.675819][ T5650] read_part_sector+0xb6/0x2b0 [ 104.675841][ T5650] adfspart_check_ICS+0xb1/0x960 [ 104.675924][ T5650] ? seq_buf_printf+0x212/0x2d0 [ 104.675952][ T5650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.675985][ T5650] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 104.676012][ T5650] bdev_disk_changed+0x817/0x1770 [ 104.676040][ T5650] ? __pfx_bdev_disk_changed+0x10/0x10 [ 104.676063][ T5650] blkdev_get_whole+0x380/0x510 [ 104.676088][ T5650] bdev_open+0x31e/0xd30 [ 104.676111][ T5650] blkdev_open+0x470/0x610 [ 104.676127][ T5650] ? __pfx_blkdev_open+0x10/0x10 [ 104.676140][ T5650] do_dentry_open+0x785/0x14e0 [ 104.676161][ T5650] vfs_open+0x3b/0x340 [ 104.676177][ T5650] ? path_openat+0x2df0/0x3860 [ 104.676199][ T5650] path_openat+0x2e08/0x3860 [ 104.676224][ T5650] ? __pfx_stack_trace_save+0x10/0x10 [ 104.676247][ T5650] ? stack_depot_save_flags+0x33/0x810 [ 104.676269][ T5650] ? __pfx_path_openat+0x10/0x10 [ 104.676289][ T5650] ? __x64_sys_openat+0x138/0x170 [ 104.676307][ T5650] ? __lock_acquire+0x6b5/0x2cf0 [ 104.676327][ T5650] do_file_open+0x23e/0x4a0 [ 104.676349][ T5650] ? __pfx_do_file_open+0x10/0x10 [ 104.676376][ T5650] ? _raw_spin_unlock+0x28/0x50 [ 104.676392][ T5650] ? alloc_fd+0x64b/0x6c0 [ 104.676412][ T5650] do_sys_openat2+0x113/0x200 [ 104.676429][ T5650] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 104.676451][ T5650] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.676470][ T5650] ? rcu_is_watching+0x15/0xb0 [ 104.676489][ T5650] __x64_sys_openat+0x138/0x170 [ 104.676508][ T5650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.676525][ T5650] do_syscall_64+0x15f/0xf80 [ 104.676545][ T5650] ? clear_bhb_loop+0x40/0x90 [ 104.676563][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.676578][ T5650] RIP: 0033:0x7ff9f5ca7407 [ 104.676595][ T5650] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 104.676608][ T5650] RSP: 002b:00007ffc3365ce10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 104.676626][ T5650] RAX: ffffffffffffffda RBX: 00007ff9f63c8880 RCX: 00007ff9f5ca7407 [ 104.676638][ T5650] RDX: 00000000000a0800 RSI: 0000562ae00082e0 RDI: ffffffffffffff9c [ 104.676649][ T5650] RBP: 0000562adfff9910 R08: 0000000000000000 R09: 0000000000000000 [ 104.676659][ T5650] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562ae0016f10 [ 104.676669][ T5650] R13: 0000562ae0007190 R14: 0000000000000000 R15: 0000562ae0016f10 [ 104.676685][ T5650] [ 105.251378][ T4942] Bluetooth: hci0: command tx timeout [ 105.409815][ T5650] block nbd1: Dead connection, failed to find a fallback [ 105.417151][ T5650] block nbd1: shutting down sockets [ 105.429242][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.438786][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 105.448382][ T5650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.457763][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 105.484477][ T5650] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.497906][ T5650] Buffer I/O error on dev nbd1, logical block 2, async page read [ 105.507314][ T5650] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.516768][ T5650] Buffer I/O error on dev nbd1, logical block 3, async page read [ 105.525184][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.534802][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 105.543099][ T5650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.552766][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 105.565689][ T5650] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.575135][ T5650] Buffer I/O error on dev nbd1, logical block 2, async page read [ 105.583916][ T5650] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.594250][ T5650] Buffer I/O error on dev nbd1, logical block 3, async page read [ 105.602547][ T5650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.611924][ T5650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 105.620198][ T5650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.629722][ T5650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 105.639930][ T5650] ldm_validate_partition_table(): Disk read failed. [ 105.647920][ T5650] Dev nbd1: unable to read RDB block 0 [ 105.656022][ T5650] nbd1: unable to read partition table [ 105.667408][ T5650] ldm_validate_partition_table(): Disk read failed. [ 105.676196][ T5650] Dev nbd1: unable to read RDB block 0 [ 105.683549][ T5650] nbd1: unable to read partition table