Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. 2026/03/24 06:56:26 parsed 1 programs [ 73.937559][ T5842] cgroup: Unknown subsys name 'net' [ 74.068751][ T5842] cgroup: Unknown subsys name 'cpuset' [ 74.078069][ T5842] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.424779][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.314666][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.516435][ T5886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.524565][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.532366][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.540751][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.549486][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.174889][ T507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.183382][ T507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.210852][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.219304][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.471294][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 81.540968][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.548761][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.556369][ T5928] bridge_slave_0: entered allmulticast mode [ 81.563564][ T5928] bridge_slave_0: entered promiscuous mode [ 81.573421][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.580730][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.588673][ T5928] bridge_slave_1: entered allmulticast mode [ 81.595891][ T5928] bridge_slave_1: entered promiscuous mode [ 81.638139][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.650635][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.688973][ T5928] team0: Port device team_slave_0 added [ 81.697559][ T5928] team0: Port device team_slave_1 added [ 81.777356][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.784340][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.816268][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.847482][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.854646][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.880920][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.946119][ T5928] hsr_slave_0: entered promiscuous mode [ 81.952465][ T5928] hsr_slave_1: entered promiscuous mode [ 82.128471][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.143938][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.154490][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.169862][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.241409][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.267868][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.280478][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.288105][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.303495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.310639][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.459398][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.498561][ T5928] veth0_vlan: entered promiscuous mode [ 82.510717][ T5928] veth1_vlan: entered promiscuous mode [ 82.539564][ T5928] veth0_macvtap: entered promiscuous mode [ 82.552172][ T5928] veth1_macvtap: entered promiscuous mode [ 82.570821][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.586450][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.601947][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.612370][ T1014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622804][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.631679][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.781372][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.844723][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.930422][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.062696][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/24 06:56:38 executed programs: 0 [ 83.250003][ T5886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.259822][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.269760][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.277511][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.286043][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.408261][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 83.474873][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.482406][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.489651][ T5952] bridge_slave_0: entered allmulticast mode [ 83.496748][ T5952] bridge_slave_0: entered promiscuous mode [ 83.504667][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512146][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.520044][ T5952] bridge_slave_1: entered allmulticast mode [ 83.527203][ T5952] bridge_slave_1: entered promiscuous mode [ 83.556720][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.568262][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.597903][ T5952] team0: Port device team_slave_0 added [ 83.607415][ T5952] team0: Port device team_slave_1 added [ 83.630913][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.638323][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.664243][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.678755][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.685765][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.711763][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.757481][ T5952] hsr_slave_0: entered promiscuous mode [ 83.763738][ T5952] hsr_slave_1: entered promiscuous mode [ 83.769909][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 83.776263][ T5952] Cannot create hsr debugfs directory [ 85.345990][ T5160] Bluetooth: hci0: command tx timeout [ 85.637055][ T12] bridge_slave_1: left allmulticast mode [ 85.643441][ T12] bridge_slave_1: left promiscuous mode [ 85.650162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.661448][ T12] bridge_slave_0: left allmulticast mode [ 85.668477][ T12] bridge_slave_0: left promiscuous mode [ 85.674184][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.823776][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.835925][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.845916][ T12] bond0 (unregistering): Released all slaves [ 85.919938][ T12] hsr_slave_0: left promiscuous mode [ 85.927248][ T12] hsr_slave_1: left promiscuous mode [ 85.933551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.941093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.951088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.959720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.977248][ T12] veth1_macvtap: left promiscuous mode [ 85.983284][ T12] veth0_macvtap: left promiscuous mode [ 85.989408][ T12] veth1_vlan: left promiscuous mode [ 85.994832][ T12] veth0_vlan: left promiscuous mode [ 86.292239][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.324298][ T12] team0 (unregistering): Port device team_slave_0 removed [ 86.710780][ T1222] cfg80211: failed to load regulatory.db [ 86.848637][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.864410][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.880026][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.896436][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.022280][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.073753][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.099467][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.106667][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.127672][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.134867][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.394416][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.426902][ T5160] Bluetooth: hci0: command tx timeout [ 87.456700][ T5952] veth0_vlan: entered promiscuous mode [ 87.471343][ T5952] veth1_vlan: entered promiscuous mode [ 87.514721][ T5952] veth0_macvtap: entered promiscuous mode [ 87.526520][ T5952] veth1_macvtap: entered promiscuous mode [ 87.548013][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.562319][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.581514][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.602625][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624737][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.658454][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.716348][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.737082][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.783296][ T507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.797201][ T507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.864492][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 87.904405][ T5160] block nbd0: Receive control failed (result -107) [ 88.085962][ T6023] nbd1: detected capacity change from 0 to 63 [ 88.094069][ T5886] block nbd1: Receive control failed (result -32) [ 88.094328][ T5160] block nbd1: Receive control failed (result -32) [ 88.104108][ T5885] [ 88.109635][ T5885] ====================================================== [ 88.116668][ T5885] WARNING: possible circular locking dependency detected [ 88.123679][ T5885] syzkaller #0 Not tainted [ 88.128075][ T5885] ------------------------------------------------------ [ 88.135072][ T5885] udevd/5885 is trying to acquire lock: [ 88.140594][ T5885] ffff88802b277a68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 88.149692][ T5885] [ 88.149692][ T5885] but task is already holding lock: [ 88.157037][ T5885] ffff888035897178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 88.165564][ T5885] [ 88.165564][ T5885] which lock already depends on the new lock. [ 88.165564][ T5885] [ 88.175951][ T5885] [ 88.175951][ T5885] the existing dependency chain (in reverse order) is: [ 88.185898][ T5885] [ 88.185898][ T5885] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 88.193099][ T5885] __mutex_lock+0x19e/0x1420 [ 88.198204][ T5885] nbd_queue_rq+0xc6/0x1100 [ 88.203219][ T5885] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 88.209287][ T5885] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 88.216127][ T5885] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 88.222610][ T5885] blk_mq_run_hw_queue+0x348/0x4f0 [ 88.228230][ T5885] blk_mq_dispatch_list+0xd16/0xe10 [ 88.234132][ T5885] blk_mq_flush_plug_list+0x48d/0x570 [ 88.240101][ T5885] __blk_flush_plug+0x3ed/0x4d0 [ 88.245472][ T5885] __submit_bio+0x28d/0x580 [ 88.250480][ T5885] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 88.256621][ T5885] block_read_full_folio+0x599/0x830 [ 88.262412][ T5885] filemap_read_folio+0x137/0x3b0 [ 88.267947][ T5885] do_read_cache_folio+0x358/0x590 [ 88.273575][ T5885] read_part_sector+0xb6/0x2b0 [ 88.278941][ T5885] adfspart_check_ICS+0xb1/0x960 [ 88.284380][ T5885] bdev_disk_changed+0x817/0x1770 [ 88.289912][ T5885] blkdev_get_whole+0x380/0x510 [ 88.295357][ T5885] bdev_open+0x31e/0xd30 [ 88.300117][ T5885] blkdev_open+0x470/0x610 [ 88.305098][ T5885] do_dentry_open+0x785/0x14e0 [ 88.310411][ T5885] vfs_open+0x3b/0x340 [ 88.315002][ T5885] path_openat+0x2e08/0x3860 [ 88.320099][ T5885] do_file_open+0x23e/0x4a0 [ 88.325109][ T5885] do_sys_openat2+0x113/0x200 [ 88.330298][ T5885] __x64_sys_openat+0x138/0x170 [ 88.335659][ T5885] do_syscall_64+0x14d/0xf80 [ 88.340760][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.347169][ T5885] [ 88.347169][ T5885] -> #5 (set->srcu){.+.+}-{0:0}: [ 88.354289][ T5885] __synchronize_srcu+0xca/0x3e0 [ 88.359736][ T5885] elevator_switch+0x1e8/0x7a0 [ 88.365016][ T5885] elevator_change+0x2cc/0x450 [ 88.370300][ T5885] elevator_set_default+0x36c/0x430 [ 88.376026][ T5885] blk_register_queue+0x3e9/0x4e0 [ 88.381568][ T5885] __add_disk+0x677/0xd50 [ 88.386419][ T5885] add_disk_fwnode+0xfb/0x480 [ 88.391634][ T5885] nbd_dev_add+0x72c/0xb50 [ 88.396562][ T5885] nbd_init+0x168/0x1f0 [ 88.401229][ T5885] do_one_initcall+0x250/0x870 [ 88.406539][ T5885] do_initcall_level+0x104/0x190 [ 88.412004][ T5885] do_initcalls+0x59/0xa0 [ 88.416837][ T5885] kernel_init_freeable+0x2a6/0x3e0 [ 88.422536][ T5885] kernel_init+0x1d/0x1d0 [ 88.427374][ T5885] ret_from_fork+0x51e/0xb90 [ 88.432473][ T5885] ret_from_fork_asm+0x1a/0x30 [ 88.437747][ T5885] [ 88.437747][ T5885] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 88.445598][ T5885] __mutex_lock+0x19e/0x1420 [ 88.450738][ T5885] elevator_change+0x1b3/0x450 [ 88.456128][ T5885] elevator_set_none+0xb5/0x140 [ 88.461493][ T5885] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 88.467820][ T5885] nbd_start_device+0x17f/0xb10 [ 88.473181][ T5885] nbd_genl_connect+0x165b/0x1cf0 [ 88.478715][ T5885] genl_family_rcv_msg_doit+0x22a/0x330 [ 88.484778][ T5885] genl_rcv_msg+0x61c/0x7a0 [ 88.489790][ T5885] netlink_rcv_skb+0x232/0x4b0 [ 88.495111][ T5885] genl_rcv+0x28/0x40 [ 88.499696][ T5885] netlink_unicast+0x80f/0x9b0 [ 88.504966][ T5885] netlink_sendmsg+0x813/0xb40 [ 88.510237][ T5885] ____sys_sendmsg+0x972/0x9f0 [ 88.515525][ T5885] ___sys_sendmsg+0x2a5/0x360 [ 88.520709][ T5885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 88.526161][ T5885] do_syscall_64+0x14d/0xf80 [ 88.531258][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.537659][ T5885] [ 88.537659][ T5885] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 88.546252][ T5885] blk_alloc_queue+0x546/0x680 [ 88.551529][ T5885] __blk_mq_alloc_disk+0x197/0x390 [ 88.557172][ T5885] nbd_dev_add+0x499/0xb50 [ 88.562100][ T5885] nbd_init+0x168/0x1f0 [ 88.566783][ T5885] do_one_initcall+0x250/0x870 [ 88.572060][ T5885] do_initcall_level+0x104/0x190 [ 88.577504][ T5885] do_initcalls+0x59/0xa0 [ 88.582338][ T5885] kernel_init_freeable+0x2a6/0x3e0 [ 88.588041][ T5885] kernel_init+0x1d/0x1d0 [ 88.592878][ T5885] ret_from_fork+0x51e/0xb90 [ 88.597980][ T5885] ret_from_fork_asm+0x1a/0x30 [ 88.603253][ T5885] [ 88.603253][ T5885] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 88.610451][ T5885] fs_reclaim_acquire+0x71/0x100 [ 88.615911][ T5885] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 88.622236][ T5885] __alloc_skb+0x1d0/0x7d0 [ 88.627161][ T5885] __ip6_append_data+0x2a44/0x3c50 [ 88.632778][ T5885] ip6_append_data+0x10f/0x280 [ 88.638055][ T5885] rawv6_sendmsg+0x12d3/0x18e0 [ 88.643326][ T5885] ____sys_sendmsg+0x80a/0x9f0 [ 88.648599][ T5885] ___sys_sendmsg+0x2a5/0x360 [ 88.653874][ T5885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 88.659320][ T5885] do_syscall_64+0x14d/0xf80 [ 88.664570][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.670966][ T5885] [ 88.670966][ T5885] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 88.678684][ T5885] lock_sock_nested+0x41/0x100 [ 88.683952][ T5885] inet_shutdown+0x6a/0x390 [ 88.688966][ T5885] nbd_mark_nsock_dead+0x2e9/0x560 [ 88.694671][ T5885] recv_work+0x1c2e/0x1d40 [ 88.699591][ T5885] process_scheduled_works+0xb5d/0x1860 [ 88.705654][ T5885] worker_thread+0xa53/0xfc0 [ 88.710749][ T5885] kthread+0x388/0x470 [ 88.715341][ T5885] ret_from_fork+0x51e/0xb90 [ 88.720442][ T5885] ret_from_fork_asm+0x1a/0x30 [ 88.725740][ T5885] [ 88.725740][ T5885] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 88.733393][ T5885] __lock_acquire+0x15a5/0x2cf0 [ 88.738752][ T5885] lock_acquire+0x106/0x350 [ 88.743764][ T5885] __mutex_lock+0x19e/0x1420 [ 88.748860][ T5885] nbd_queue_rq+0x37b/0x1100 [ 88.753958][ T5885] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 88.760016][ T5885] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 88.766849][ T5885] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 88.773339][ T5885] blk_mq_run_hw_queue+0x348/0x4f0 [ 88.778965][ T5885] blk_mq_dispatch_list+0xd16/0xe10 [ 88.784679][ T5885] blk_mq_flush_plug_list+0x48d/0x570 [ 88.790564][ T5885] __blk_flush_plug+0x3ed/0x4d0 [ 88.795928][ T5885] __submit_bio+0x28d/0x580 [ 88.800937][ T5885] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 88.807080][ T5885] block_read_full_folio+0x599/0x830 [ 88.812960][ T5885] filemap_read_folio+0x137/0x3b0 [ 88.818499][ T5885] do_read_cache_folio+0x358/0x590 [ 88.824199][ T5885] read_part_sector+0xb6/0x2b0 [ 88.829470][ T5885] adfspart_check_ICS+0xb1/0x960 [ 88.834912][ T5885] bdev_disk_changed+0x817/0x1770 [ 88.840443][ T5885] blkdev_get_whole+0x380/0x510 [ 88.845803][ T5885] bdev_open+0x31e/0xd30 [ 88.850552][ T5885] blkdev_open+0x470/0x610 [ 88.855470][ T5885] do_dentry_open+0x785/0x14e0 [ 88.860740][ T5885] vfs_open+0x3b/0x340 [ 88.865321][ T5885] path_openat+0x2e08/0x3860 [ 88.870413][ T5885] do_file_open+0x23e/0x4a0 [ 88.875429][ T5885] do_sys_openat2+0x113/0x200 [ 88.880617][ T5885] __x64_sys_openat+0x138/0x170 [ 88.885978][ T5885] do_syscall_64+0x14d/0xf80 [ 88.891079][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.897489][ T5885] [ 88.897489][ T5885] other info that might help us debug this: [ 88.897489][ T5885] [ 88.907715][ T5885] Chain exists of: [ 88.907715][ T5885] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 88.907715][ T5885] [ 88.919798][ T5885] Possible unsafe locking scenario: [ 88.919798][ T5885] [ 88.927245][ T5885] CPU0 CPU1 [ 88.932706][ T5885] ---- ---- [ 88.938069][ T5885] lock(&cmd->lock); [ 88.942047][ T5885] lock(set->srcu); [ 88.948454][ T5885] lock(&cmd->lock); [ 88.955028][ T5885] lock(&nsock->tx_lock); [ 88.959603][ T5885] [ 88.959603][ T5885] *** DEADLOCK *** [ 88.959603][ T5885] [ 88.967727][ T5885] 3 locks held by udevd/5885: [ 88.972390][ T5885] #0: ffff888027e5f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 88.981613][ T5885] #1: ffff888027cd9718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 88.991090][ T5885] #2: ffff888035897178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 89.000046][ T5885] [ 89.000046][ T5885] stack backtrace: [ 89.005938][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 89.005956][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.005971][ T5885] Call Trace: [ 89.005978][ T5885] [ 89.005985][ T5885] dump_stack_lvl+0xe8/0x150 [ 89.006007][ T5885] print_circular_bug+0x2e1/0x300 [ 89.006024][ T5885] check_noncircular+0x12e/0x150 [ 89.006041][ T5885] __lock_acquire+0x15a5/0x2cf0 [ 89.006064][ T5885] ? irqentry_exit+0x61a/0x700 [ 89.006082][ T5885] ? lockdep_hardirqs_on+0x7a/0x110 [ 89.006098][ T5885] ? irqentry_exit+0x61a/0x700 [ 89.006115][ T5885] ? trace_irq_disable+0x3b/0x140 [ 89.006134][ T5885] ? nbd_queue_rq+0x37b/0x1100 [ 89.006154][ T5885] lock_acquire+0x106/0x350 [ 89.006173][ T5885] ? nbd_queue_rq+0x37b/0x1100 [ 89.006196][ T5885] __mutex_lock+0x19e/0x1420 [ 89.006213][ T5885] ? nbd_queue_rq+0x37b/0x1100 [ 89.006232][ T5885] ? is_bpf_text_address+0x292/0x2b0 [ 89.006252][ T5885] ? kernel_text_address+0xa5/0xe0 [ 89.006270][ T5885] ? __kernel_text_address+0xd/0x30 [ 89.006287][ T5885] ? unwind_get_return_address+0x4d/0x90 [ 89.006301][ T5885] ? nbd_queue_rq+0x37b/0x1100 [ 89.006320][ T5885] ? arch_stack_walk+0xfb/0x150 [ 89.006335][ T5885] ? __pfx___mutex_lock+0x10/0x10 [ 89.006354][ T5885] ? stack_trace_save+0xa9/0x100 [ 89.006371][ T5885] ? __pfx_stack_trace_save+0x10/0x10 [ 89.006390][ T5885] nbd_queue_rq+0x37b/0x1100 [ 89.006412][ T5885] ? __lock_acquire+0x146e/0x2cf0 [ 89.006432][ T5885] ? __pfx_nbd_queue_rq+0x10/0x10 [ 89.006451][ T5885] ? is_bpf_text_address+0x26/0x2b0 [ 89.006473][ T5885] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 89.006500][ T5885] ? sbitmap_get+0x229/0x390 [ 89.006520][ T5885] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 89.006540][ T5885] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 89.006562][ T5885] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 89.006583][ T5885] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 89.006597][ T5885] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 89.006619][ T5885] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 89.006640][ T5885] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 89.006655][ T5885] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 89.006673][ T5885] blk_mq_run_hw_queue+0x348/0x4f0 [ 89.006694][ T5885] blk_mq_dispatch_list+0xd16/0xe10 [ 89.006715][ T5885] ? bdev_count_inflight+0x1cf/0x210 [ 89.006730][ T5885] ? blk_mq_dispatch_list+0x1c0/0xe10 [ 89.006752][ T5885] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 89.006774][ T5885] ? rcu_is_watching+0x15/0xb0 [ 89.006788][ T5885] blk_mq_flush_plug_list+0x48d/0x570 [ 89.006809][ T5885] ? blk_add_rq_to_plug+0x300/0x450 [ 89.006828][ T5885] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 89.006849][ T5885] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 89.006872][ T5885] __blk_flush_plug+0x3ed/0x4d0 [ 89.006895][ T5885] ? __pfx___blk_flush_plug+0x10/0x10 [ 89.006915][ T5885] ? blkg_get+0x20/0x1d0 [ 89.006941][ T5885] __submit_bio+0x28d/0x580 [ 89.006955][ T5885] ? __pfx___submit_bio+0x10/0x10 [ 89.006970][ T5885] ? bio_associate_blkg+0x6d/0x230 [ 89.006986][ T5885] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 89.007008][ T5885] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 89.007028][ T5885] ? bio_alloc_bioset+0x88b/0xc10 [ 89.007049][ T5885] block_read_full_folio+0x599/0x830 [ 89.007069][ T5885] ? __pfx_blkdev_get_block+0x10/0x10 [ 89.007084][ T5885] filemap_read_folio+0x137/0x3b0 [ 89.007105][ T5885] ? __pfx_blkdev_read_folio+0x10/0x10 [ 89.007119][ T5885] ? __pfx_filemap_read_folio+0x10/0x10 [ 89.007139][ T5885] ? filemap_add_folio+0x356/0x530 [ 89.007158][ T5885] do_read_cache_folio+0x358/0x590 [ 89.007172][ T5885] ? __pfx_blkdev_read_folio+0x10/0x10 [ 89.007187][ T5885] read_part_sector+0xb6/0x2b0 [ 89.007208][ T5885] adfspart_check_ICS+0xb1/0x960 [ 89.007221][ T5885] ? seq_buf_printf+0x212/0x2d0 [ 89.007238][ T5885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.007261][ T5885] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 89.007277][ T5885] bdev_disk_changed+0x817/0x1770 [ 89.007303][ T5885] ? __pfx_bdev_disk_changed+0x10/0x10 [ 89.007325][ T5885] blkdev_get_whole+0x380/0x510 [ 89.007348][ T5885] bdev_open+0x31e/0xd30 [ 89.007371][ T5885] blkdev_open+0x470/0x610 [ 89.007386][ T5885] ? __pfx_blkdev_open+0x10/0x10 [ 89.007399][ T5885] do_dentry_open+0x785/0x14e0 [ 89.007421][ T5885] vfs_open+0x3b/0x340 [ 89.007437][ T5885] ? path_openat+0x2df0/0x3860 [ 89.007451][ T5885] path_openat+0x2e08/0x3860 [ 89.007468][ T5885] ? __pfx_stack_trace_save+0x10/0x10 [ 89.007485][ T5885] ? stack_depot_save_flags+0x33/0x810 [ 89.007505][ T5885] ? __pfx_path_openat+0x10/0x10 [ 89.007517][ T5885] ? __x64_sys_openat+0x138/0x170 [ 89.007537][ T5885] ? __lock_acquire+0x6b5/0x2cf0 [ 89.007559][ T5885] do_file_open+0x23e/0x4a0 [ 89.007574][ T5885] ? __pfx_do_file_open+0x10/0x10 [ 89.007592][ T5885] ? _raw_spin_unlock+0x28/0x50 [ 89.007608][ T5885] ? alloc_fd+0x64b/0x6c0 [ 89.007628][ T5885] do_sys_openat2+0x113/0x200 [ 89.007646][ T5885] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 89.007667][ T5885] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.007687][ T5885] ? rcu_is_watching+0x15/0xb0 [ 89.007701][ T5885] __x64_sys_openat+0x138/0x170 [ 89.007721][ T5885] do_syscall_64+0x14d/0xf80 [ 89.007738][ T5885] ? trace_irq_disable+0x3b/0x140 [ 89.007754][ T5885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.007769][ T5885] ? clear_bhb_loop+0x40/0x90 [ 89.007784][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.007798][ T5885] RIP: 0033:0x7f63a38a7407 [ 89.007816][ T5885] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.007828][ T5885] RSP: 002b:00007ffc84dcbd50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 89.007843][ T5885] RAX: ffffffffffffffda RBX: 00007f63a3f7e880 RCX: 00007f63a38a7407 [ 89.007854][ T5885] RDX: 00000000000a0800 RSI: 00005632394a3150 RDI: ffffffffffffff9c [ 89.007865][ T5885] RBP: 0000563239491910 R08: 0000000000000000 R09: 0000000000000000 [ 89.007874][ T5885] R10: 0000000000000000 R11: 0000000000000202 R12: 00005632394a4e20 [ 89.007883][ T5885] R13: 000056323949f190 R14: 0000000000000000 R15: 00005632394a4e20 [ 89.007898][ T5885] [ 89.723657][ T5160] Bluetooth: hci0: command tx timeout [ 89.725554][ T5885] block nbd1: Dead connection, failed to find a fallback [ 89.738115][ T5885] block nbd1: shutting down sockets [ 89.752089][ T5885] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.799653][ T5885] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.807899][ T5885] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.817829][ T5885] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.828892][ T5885] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.838215][ T5885] Buffer I/O error on dev nbd1, logical block 2, async page read [ 89.852675][ T5885] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.867636][ T5885] Buffer I/O error on dev nbd1, logical block 3, async page read [ 89.875807][ T5885] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.884888][ T5885] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.893107][ T5885] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.902692][ T5885] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.913087][ T5885] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.922858][ T5885] Buffer I/O error on dev nbd1, logical block 2, async page read [ 89.931549][ T5885] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.942851][ T5885] Buffer I/O error on dev nbd1, logical block 3, async page read [ 89.951387][ T5885] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.961166][ T5885] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.969316][ T5885] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.978633][ T5885] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.988905][ T5885] ldm_validate_partition_table(): Disk read failed. [ 89.997017][ T5885] Dev nbd1: unable to read RDB block 0 [ 90.003891][ T5885] nbd1: unable to read partition table [ 90.016407][ T5885] ldm_validate_partition_table(): Disk read failed. [ 90.024341][ T5885] Dev nbd1: unable to read RDB block 0 [ 90.031525][ T5885] nbd1: unable to read partition table