Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. 2026/03/21 11:10:38 parsed 1 programs [ 86.157166][ T5828] cgroup: Unknown subsys name 'net' [ 86.277027][ T5828] cgroup: Unknown subsys name 'cpuset' [ 86.286379][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.121457][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.079775][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.108468][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.121765][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.134696][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.142836][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.151535][ T11] cfg80211: failed to load regulatory.db [ 92.158949][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.489797][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.497944][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.531740][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.540238][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.981319][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 93.121086][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.130245][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.137947][ T5889] bridge_slave_0: entered allmulticast mode [ 93.148547][ T5889] bridge_slave_0: entered promiscuous mode [ 93.167468][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.174901][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.182350][ T5889] bridge_slave_1: entered allmulticast mode [ 93.193050][ T5889] bridge_slave_1: entered promiscuous mode [ 93.242287][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.255363][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.292916][ T5889] team0: Port device team_slave_0 added [ 93.319006][ T5889] team0: Port device team_slave_1 added [ 93.356397][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.363599][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.390393][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.408449][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.415473][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.441612][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.490182][ T5889] hsr_slave_0: entered promiscuous mode [ 93.496873][ T5889] hsr_slave_1: entered promiscuous mode [ 93.657845][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.671204][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.681450][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.691973][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.765619][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.784991][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.799920][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.807323][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.824964][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.832096][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.005441][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.045625][ T5889] veth0_vlan: entered promiscuous mode [ 94.058064][ T5889] veth1_vlan: entered promiscuous mode [ 94.093090][ T5889] veth0_macvtap: entered promiscuous mode [ 94.102283][ T5889] veth1_macvtap: entered promiscuous mode [ 94.120834][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.136099][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.151818][ T499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.162999][ T499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179139][ T499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188664][ T499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.330737][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.418698][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.497945][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.585716][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/21 11:10:50 executed programs: 0 [ 96.214929][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.223067][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.233451][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.241508][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.251433][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.394230][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 96.464586][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.472236][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.480194][ T5940] bridge_slave_0: entered allmulticast mode [ 96.487519][ T5940] bridge_slave_0: entered promiscuous mode [ 96.495363][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.502448][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.510516][ T5940] bridge_slave_1: entered allmulticast mode [ 96.518026][ T5940] bridge_slave_1: entered promiscuous mode [ 96.546836][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.558611][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.590649][ T5940] team0: Port device team_slave_0 added [ 96.599120][ T5940] team0: Port device team_slave_1 added [ 96.625467][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.632555][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.658815][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.670823][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.677847][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.705107][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.746398][ T5940] hsr_slave_0: entered promiscuous mode [ 96.752853][ T5940] hsr_slave_1: entered promiscuous mode [ 96.759523][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 96.765483][ T5940] Cannot create hsr debugfs directory [ 97.106974][ T35] bridge_slave_1: left allmulticast mode [ 97.112726][ T35] bridge_slave_1: left promiscuous mode [ 97.125606][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.138570][ T35] bridge_slave_0: left allmulticast mode [ 97.145972][ T35] bridge_slave_0: left promiscuous mode [ 97.152001][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.382389][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.396723][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.410996][ T35] bond0 (unregistering): Released all slaves [ 97.539025][ T35] hsr_slave_0: left promiscuous mode [ 97.545687][ T35] hsr_slave_1: left promiscuous mode [ 97.552000][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.561373][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.574819][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.582294][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.605305][ T35] veth1_macvtap: left promiscuous mode [ 97.611038][ T35] veth0_macvtap: left promiscuous mode [ 97.617571][ T35] veth1_vlan: left promiscuous mode [ 97.623028][ T35] veth0_vlan: left promiscuous mode [ 97.806399][ T35] team0 (unregistering): Port device team_slave_1 removed [ 97.820155][ T35] team0 (unregistering): Port device team_slave_0 removed [ 98.157282][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.181138][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.202951][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.215621][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.305063][ T5146] Bluetooth: hci0: command tx timeout [ 98.368759][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.411110][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.714267][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.721448][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.734763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.742092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.063764][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.105007][ T5940] veth0_vlan: entered promiscuous mode [ 99.116683][ T5940] veth1_vlan: entered promiscuous mode [ 99.149349][ T5940] veth0_macvtap: entered promiscuous mode [ 99.160668][ T5940] veth1_macvtap: entered promiscuous mode [ 99.180052][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.202337][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.224022][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.233013][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.250405][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.259334][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.331503][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.346317][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.374377][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.382473][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.476035][ T5146] block nbd0: Receive control failed (result -107) [ 99.733543][ T5987] nbd1: detected capacity change from 0 to 63 [ 99.740473][ T51] block nbd1: Receive control failed (result -32) [ 99.742538][ T5845] [ 99.747122][ T5146] block nbd1: Receive control failed (result -32) [ 99.749336][ T5845] ====================================================== [ 99.762849][ T5845] WARNING: possible circular locking dependency detected [ 99.769974][ T5845] syzkaller #0 Not tainted [ 99.774656][ T5845] ------------------------------------------------------ [ 99.781939][ T5845] udevd/5845 is trying to acquire lock: [ 99.787485][ T5845] ffff88807c4e5670 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 99.796868][ T5845] [ 99.796868][ T5845] but task is already holding lock: [ 99.804246][ T5845] ffff888034fb0180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 99.813116][ T5845] [ 99.813116][ T5845] which lock already depends on the new lock. [ 99.813116][ T5845] [ 99.823813][ T5845] [ 99.823813][ T5845] the existing dependency chain (in reverse order) is: [ 99.832964][ T5845] [ 99.832964][ T5845] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 99.840281][ T5845] __mutex_lock+0x19f/0x1300 [ 99.845492][ T5845] nbd_queue_rq+0xc6/0x1100 [ 99.850627][ T5845] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 99.856721][ T5845] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 99.863843][ T5845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 99.870371][ T5845] blk_mq_run_hw_queue+0x348/0x4f0 [ 99.876156][ T5845] blk_mq_dispatch_list+0xd16/0xe10 [ 99.882155][ T5845] blk_mq_flush_plug_list+0x48d/0x570 [ 99.888292][ T5845] __blk_flush_plug+0x3ed/0x4d0 [ 99.894033][ T5845] __submit_bio+0x28d/0x580 [ 99.899172][ T5845] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 99.905415][ T5845] block_read_full_folio+0x599/0x830 [ 99.911226][ T5845] filemap_read_folio+0x137/0x3b0 [ 99.916773][ T5845] do_read_cache_folio+0x358/0x590 [ 99.922437][ T5845] read_part_sector+0xb6/0x2b0 [ 99.927836][ T5845] adfspart_check_ICS+0xa5/0xa40 [ 99.933591][ T5845] bdev_disk_changed+0x7ba/0x1550 [ 99.939519][ T5845] blkdev_get_whole+0x380/0x510 [ 99.944904][ T5845] bdev_open+0x31e/0xd30 [ 99.949788][ T5845] blkdev_open+0x470/0x610 [ 99.954824][ T5845] do_dentry_open+0x785/0x14e0 [ 99.960200][ T5845] vfs_open+0x3b/0x340 [ 99.964790][ T5845] path_openat+0x2e08/0x3860 [ 99.969994][ T5845] do_file_open+0x23e/0x4a0 [ 99.975016][ T5845] do_sys_openat2+0x113/0x200 [ 99.980307][ T5845] __x64_sys_openat+0x138/0x170 [ 99.985680][ T5845] do_syscall_64+0x14d/0xf80 [ 99.990788][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.997205][ T5845] [ 99.997205][ T5845] -> #5 (set->srcu){.+.+}-{0:0}: [ 100.004336][ T5845] __synchronize_srcu+0xca/0x3e0 [ 100.009795][ T5845] elevator_switch+0x1e8/0x7a0 [ 100.015080][ T5845] elevator_change+0x2cc/0x450 [ 100.020384][ T5845] elevator_set_default+0x36c/0x430 [ 100.026271][ T5845] blk_register_queue+0x366/0x430 [ 100.031821][ T5845] __add_disk+0x677/0xd50 [ 100.036673][ T5845] add_disk_fwnode+0xfb/0x480 [ 100.041881][ T5845] nbd_dev_add+0x72c/0xb50 [ 100.046905][ T5845] nbd_init+0x168/0x1f0 [ 100.051598][ T5845] do_one_initcall+0x250/0x8d0 [ 100.057004][ T5845] do_initcall_level+0x104/0x190 [ 100.062480][ T5845] do_initcalls+0x59/0xa0 [ 100.067772][ T5845] kernel_init_freeable+0x2a6/0x3e0 [ 100.073513][ T5845] kernel_init+0x1d/0x1d0 [ 100.078463][ T5845] ret_from_fork+0x51e/0xb90 [ 100.083579][ T5845] ret_from_fork_asm+0x1a/0x30 [ 100.088882][ T5845] [ 100.088882][ T5845] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 100.096900][ T5845] __mutex_lock+0x19f/0x1300 [ 100.102046][ T5845] elevator_change+0x1b3/0x450 [ 100.107365][ T5845] elevator_set_none+0xb5/0x140 [ 100.112840][ T5845] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 100.119271][ T5845] nbd_start_device+0x17f/0xb10 [ 100.124641][ T5845] nbd_genl_connect+0x165b/0x1cf0 [ 100.130182][ T5845] genl_family_rcv_msg_doit+0x22a/0x330 [ 100.136371][ T5845] genl_rcv_msg+0x61c/0x7a0 [ 100.141416][ T5845] netlink_rcv_skb+0x232/0x4b0 [ 100.146887][ T5845] genl_rcv+0x28/0x40 [ 100.151415][ T5845] netlink_unicast+0x80f/0x9b0 [ 100.156711][ T5845] netlink_sendmsg+0x813/0xb40 [ 100.161997][ T5845] ____sys_sendmsg+0x972/0x9f0 [ 100.167390][ T5845] ___sys_sendmsg+0x2a5/0x360 [ 100.172593][ T5845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.178059][ T5845] do_syscall_64+0x14d/0xf80 [ 100.183182][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.189597][ T5845] [ 100.189597][ T5845] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 100.198310][ T5845] blk_alloc_queue+0x546/0x680 [ 100.203623][ T5845] __blk_mq_alloc_disk+0x197/0x390 [ 100.209353][ T5845] nbd_dev_add+0x499/0xb50 [ 100.214554][ T5845] nbd_init+0x168/0x1f0 [ 100.219415][ T5845] do_one_initcall+0x250/0x8d0 [ 100.224704][ T5845] do_initcall_level+0x104/0x190 [ 100.230187][ T5845] do_initcalls+0x59/0xa0 [ 100.235321][ T5845] kernel_init_freeable+0x2a6/0x3e0 [ 100.241106][ T5845] kernel_init+0x1d/0x1d0 [ 100.246024][ T5845] ret_from_fork+0x51e/0xb90 [ 100.251148][ T5845] ret_from_fork_asm+0x1a/0x30 [ 100.256443][ T5845] [ 100.256443][ T5845] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 100.263660][ T5845] fs_reclaim_acquire+0x71/0x100 [ 100.269120][ T5845] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 100.275533][ T5845] __alloc_skb+0x1d0/0x7d0 [ 100.280490][ T5845] __ip6_append_data+0x2a44/0x3c50 [ 100.286316][ T5845] ip6_append_data+0x10f/0x280 [ 100.291712][ T5845] rawv6_sendmsg+0x12d3/0x18e0 [ 100.297195][ T5845] ____sys_sendmsg+0x80a/0x9f0 [ 100.302836][ T5845] ___sys_sendmsg+0x2a5/0x360 [ 100.308136][ T5845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.313691][ T5845] do_syscall_64+0x14d/0xf80 [ 100.318803][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.325401][ T5845] [ 100.325401][ T5845] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 100.333313][ T5845] lock_sock_nested+0x41/0x100 [ 100.338606][ T5845] inet_shutdown+0x6a/0x390 [ 100.343633][ T5845] nbd_mark_nsock_dead+0x2e9/0x560 [ 100.349269][ T5845] recv_work+0x1c7f/0x1d90 [ 100.354204][ T5845] process_scheduled_works+0xb6e/0x18c0 [ 100.360299][ T5845] worker_thread+0xa53/0xfc0 [ 100.365415][ T5845] kthread+0x388/0x470 [ 100.370049][ T5845] ret_from_fork+0x51e/0xb90 [ 100.375178][ T5845] ret_from_fork_asm+0x1a/0x30 [ 100.380469][ T5845] [ 100.380469][ T5845] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 100.388134][ T5845] __lock_acquire+0x15a5/0x2cf0 [ 100.393623][ T5845] lock_acquire+0xf0/0x2e0 [ 100.398659][ T5845] __mutex_lock+0x19f/0x1300 [ 100.403781][ T5845] nbd_queue_rq+0x37b/0x1100 [ 100.408898][ T5845] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 100.414966][ T5845] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 100.421814][ T5845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 100.428669][ T5845] blk_mq_run_hw_queue+0x348/0x4f0 [ 100.434300][ T5845] blk_mq_dispatch_list+0xd16/0xe10 [ 100.440040][ T5845] blk_mq_flush_plug_list+0x48d/0x570 [ 100.445966][ T5845] __blk_flush_plug+0x3ed/0x4d0 [ 100.451343][ T5845] __submit_bio+0x28d/0x580 [ 100.456375][ T5845] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 100.462616][ T5845] block_read_full_folio+0x599/0x830 [ 100.468516][ T5845] filemap_read_folio+0x137/0x3b0 [ 100.474151][ T5845] do_read_cache_folio+0x358/0x590 [ 100.479789][ T5845] read_part_sector+0xb6/0x2b0 [ 100.485076][ T5845] adfspart_check_ICS+0xa5/0xa40 [ 100.490638][ T5845] bdev_disk_changed+0x7ba/0x1550 [ 100.496238][ T5845] blkdev_get_whole+0x380/0x510 [ 100.501635][ T5845] bdev_open+0x31e/0xd30 [ 100.506415][ T5845] blkdev_open+0x470/0x610 [ 100.511357][ T5845] do_dentry_open+0x785/0x14e0 [ 100.517272][ T5845] vfs_open+0x3b/0x340 [ 100.521890][ T5845] path_openat+0x2e08/0x3860 [ 100.527016][ T5845] do_file_open+0x23e/0x4a0 [ 100.532374][ T5845] do_sys_openat2+0x113/0x200 [ 100.537602][ T5845] __x64_sys_openat+0x138/0x170 [ 100.543078][ T5845] do_syscall_64+0x14d/0xf80 [ 100.548195][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.554695][ T5845] [ 100.554695][ T5845] other info that might help us debug this: [ 100.554695][ T5845] [ 100.565095][ T5845] Chain exists of: [ 100.565095][ T5845] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 100.565095][ T5845] [ 100.577179][ T5845] Possible unsafe locking scenario: [ 100.577179][ T5845] [ 100.584720][ T5845] CPU0 CPU1 [ 100.590115][ T5845] ---- ---- [ 100.595511][ T5845] lock(&cmd->lock); [ 100.599523][ T5845] lock(set->srcu); [ 100.606306][ T5845] lock(&cmd->lock); [ 100.613013][ T5845] lock(&nsock->tx_lock); [ 100.617453][ T5845] [ 100.617453][ T5845] *** DEADLOCK *** [ 100.617453][ T5845] [ 100.625684][ T5845] 3 locks held by udevd/5845: [ 100.630546][ T5845] #0: ffff888026b1c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 100.639865][ T5845] #1: ffff8880268fd698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 100.649386][ T5845] #2: ffff888034fb0180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 100.658366][ T5845] [ 100.658366][ T5845] stack backtrace: [ 100.664339][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.664357][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.664366][ T5845] Call Trace: [ 100.664375][ T5845] [ 100.664381][ T5845] dump_stack_lvl+0xe8/0x150 [ 100.664404][ T5845] print_circular_bug+0x2e1/0x300 [ 100.664429][ T5845] check_noncircular+0x12e/0x150 [ 100.664453][ T5845] __lock_acquire+0x15a5/0x2cf0 [ 100.664478][ T5845] lock_acquire+0xf0/0x2e0 [ 100.664495][ T5845] ? nbd_queue_rq+0x37b/0x1100 [ 100.664513][ T5845] __mutex_lock+0x19f/0x1300 [ 100.664529][ T5845] ? nbd_queue_rq+0x37b/0x1100 [ 100.664544][ T5845] ? is_bpf_text_address+0x292/0x2b0 [ 100.664559][ T5845] ? is_bpf_text_address+0x26/0x2b0 [ 100.664575][ T5845] ? kernel_text_address+0xa5/0xe0 [ 100.664590][ T5845] ? nbd_queue_rq+0x37b/0x1100 [ 100.664604][ T5845] ? __kernel_text_address+0xd/0x30 [ 100.664620][ T5845] ? unwind_get_return_address+0x4d/0x90 [ 100.664642][ T5845] ? __pfx___mutex_lock+0x10/0x10 [ 100.664663][ T5845] nbd_queue_rq+0x37b/0x1100 [ 100.664680][ T5845] ? add_lock_to_list+0xc7/0x100 [ 100.664702][ T5845] ? __pfx_nbd_queue_rq+0x10/0x10 [ 100.664717][ T5845] ? is_bpf_text_address+0x26/0x2b0 [ 100.664735][ T5845] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 100.664757][ T5845] ? sbitmap_get+0x229/0x390 [ 100.664773][ T5845] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 100.664789][ T5845] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 100.664814][ T5845] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 100.664839][ T5845] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 100.664872][ T5845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 100.664891][ T5845] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 100.664905][ T5845] blk_mq_run_hw_queue+0x348/0x4f0 [ 100.664921][ T5845] blk_mq_dispatch_list+0xd16/0xe10 [ 100.664938][ T5845] ? bdev_count_inflight+0x1cf/0x210 [ 100.664958][ T5845] ? blk_mq_dispatch_list+0x1c0/0xe10 [ 100.664976][ T5845] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 100.664994][ T5845] ? rcu_is_watching+0x15/0xb0 [ 100.665015][ T5845] blk_mq_flush_plug_list+0x48d/0x570 [ 100.665032][ T5845] ? blk_add_rq_to_plug+0x300/0x450 [ 100.665048][ T5845] ? blk_mq_submit_bio+0xef8/0x2810 [ 100.665065][ T5845] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 100.665086][ T5845] __blk_flush_plug+0x3ed/0x4d0 [ 100.665105][ T5845] ? __pfx___blk_flush_plug+0x10/0x10 [ 100.665124][ T5845] __submit_bio+0x28d/0x580 [ 100.665142][ T5845] ? __pfx___submit_bio+0x10/0x10 [ 100.665161][ T5845] ? bio_associate_blkg+0x6d/0x230 [ 100.665182][ T5845] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 100.665201][ T5845] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 100.665217][ T5845] ? bio_alloc_bioset+0xbe2/0x11b0 [ 100.665242][ T5845] block_read_full_folio+0x599/0x830 [ 100.665263][ T5845] ? __pfx_blkdev_get_block+0x10/0x10 [ 100.665283][ T5845] filemap_read_folio+0x137/0x3b0 [ 100.665301][ T5845] ? __pfx_blkdev_read_folio+0x10/0x10 [ 100.665319][ T5845] ? __pfx_filemap_read_folio+0x10/0x10 [ 100.665336][ T5845] ? filemap_add_folio+0x356/0x530 [ 100.665351][ T5845] do_read_cache_folio+0x358/0x590 [ 100.665370][ T5845] ? __pfx_blkdev_read_folio+0x10/0x10 [ 100.665388][ T5845] read_part_sector+0xb6/0x2b0 [ 100.665406][ T5845] adfspart_check_ICS+0xa5/0xa40 [ 100.665423][ T5845] ? snprintf+0xe8/0x140 [ 100.665442][ T5845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.665460][ T5845] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 100.665481][ T5845] bdev_disk_changed+0x7ba/0x1550 [ 100.665499][ T5845] ? bdev_open+0xe0/0xd30 [ 100.665517][ T5845] ? __pfx_bdev_disk_changed+0x10/0x10 [ 100.665535][ T5845] blkdev_get_whole+0x380/0x510 [ 100.665554][ T5845] bdev_open+0x31e/0xd30 [ 100.665572][ T5845] blkdev_open+0x470/0x610 [ 100.665592][ T5845] ? __pfx_blkdev_open+0x10/0x10 [ 100.665609][ T5845] do_dentry_open+0x785/0x14e0 [ 100.665634][ T5845] vfs_open+0x3b/0x340 [ 100.665652][ T5845] ? path_openat+0x2df0/0x3860 [ 100.665668][ T5845] path_openat+0x2e08/0x3860 [ 100.665688][ T5845] ? __pfx_stack_trace_save+0x10/0x10 [ 100.665704][ T5845] ? stack_depot_save_flags+0x33/0x810 [ 100.665728][ T5845] ? __pfx_path_openat+0x10/0x10 [ 100.665742][ T5845] ? __x64_sys_openat+0x138/0x170 [ 100.665762][ T5845] ? do_syscall_64+0x14d/0xf80 [ 100.665777][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.665794][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 100.665822][ T5845] do_file_open+0x23e/0x4a0 [ 100.665839][ T5845] ? __pfx_do_file_open+0x10/0x10 [ 100.665860][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 100.665880][ T5845] ? alloc_fd+0x64b/0x6c0 [ 100.665903][ T5845] do_sys_openat2+0x113/0x200 [ 100.665924][ T5845] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 100.665942][ T5845] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.665964][ T5845] ? rcu_is_watching+0x15/0xb0 [ 100.665984][ T5845] __x64_sys_openat+0x138/0x170 [ 100.666007][ T5845] do_syscall_64+0x14d/0xf80 [ 100.666022][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.666036][ T5845] ? clear_bhb_loop+0x40/0x90 [ 100.666053][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.666070][ T5845] RIP: 0033:0x7ffab58a7407 [ 100.666084][ T5845] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.666097][ T5845] RSP: 002b:00007fff84237dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 100.666113][ T5845] RAX: ffffffffffffffda RBX: 00007ffab5f92880 RCX: 00007ffab58a7407 [ 100.666124][ T5845] RDX: 00000000000a0800 RSI: 000055bf443a1320 RDI: ffffffffffffff9c [ 100.666134][ T5845] RBP: 000055bf44396910 R08: 0000000000000000 R09: 0000000000000000 [ 100.666144][ T5845] R10: 0000000000000000 R11: 0000000000000202 R12: 000055bf443aee00 [ 100.666153][ T5845] R13: 000055bf443a4190 R14: 0000000000000000 R15: 000055bf443aee00 [ 100.666168][ T5845] [ 101.262344][ T5146] Bluetooth: hci0: command tx timeout [ 101.268182][ T5845] block nbd1: Dead connection, failed to find a fallback [ 101.275515][ T5845] block nbd1: shutting down sockets [ 101.280924][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.319071][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.327245][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.338160][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 101.348149][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.383405][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read [ 101.391809][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.402367][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read [ 101.410419][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.420701][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.428824][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.438592][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 101.447178][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.457284][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read [ 101.465505][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.475406][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read [ 101.483466][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.493559][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read [ 101.501453][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.511462][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 101.520552][ T5845] ldm_validate_partition_table(): Disk read failed. [ 101.527876][ T5845] Dev nbd1: unable to read RDB block 0 [ 101.534229][ T5845] nbd1: unable to read partition table [ 101.542989][ T5845] ldm_validate_partition_table(): Disk read failed. [ 101.550117][ T5845] Dev nbd1: unable to read RDB block 0 [ 101.556267][ T5845] nbd1: unable to read partition table