last executing test programs: 3.023096703s ago: executing program 0 (id=1): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x22, 0x7, {0x7, 0x7, "861eef498a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.796455997s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 2.723606142s ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) 2.586464943s ago: executing program 1 (id=5): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0) write$apparmor_exec(r4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r7, 0x701, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2.545510626s ago: executing program 3 (id=6): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r2 = epoll_create(0x87) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000000}) 1.598936845s ago: executing program 1 (id=7): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 1.529652688s ago: executing program 2 (id=3): r0 = socket(0x2, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000700)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c000) 1.199930648s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 450.204846ms ago: executing program 1 (id=9): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES8], 0x0) 220.435455ms ago: executing program 0 (id=10): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0x4, 0x2, 0x4, 0x6}}}}, 0x15) 196.276µs ago: executing program 0 (id=11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000002c0)=@known='system.sockprotoname\x00') 0s ago: executing program 3 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x44040}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 74.331263][ T5820] cgroup: Unknown subsys name 'net' [ 74.457888][ T5820] cgroup: Unknown subsys name 'cpuset' [ 74.466676][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.988459][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.391455][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.399367][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.407122][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.414815][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.422418][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.429655][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.437250][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.445801][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.453078][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.460837][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.467443][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.485097][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.513809][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.520998][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.528883][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.537166][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.544378][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.551781][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.574157][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.587857][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.975289][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.066322][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.155504][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.212140][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.222148][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.230201][ T5829] bridge_slave_0: entered allmulticast mode [ 79.237376][ T5829] bridge_slave_0: entered promiscuous mode [ 79.246345][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.253484][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.260694][ T5829] bridge_slave_1: entered allmulticast mode [ 79.268090][ T5829] bridge_slave_1: entered promiscuous mode [ 79.312057][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.354443][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.403794][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.450493][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.458040][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.465728][ T5838] bridge_slave_0: entered allmulticast mode [ 79.472765][ T5838] bridge_slave_0: entered promiscuous mode [ 79.510908][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.518129][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.525989][ T5838] bridge_slave_1: entered allmulticast mode [ 79.533004][ T5838] bridge_slave_1: entered promiscuous mode [ 79.541007][ T5829] team0: Port device team_slave_0 added [ 79.549629][ T5829] team0: Port device team_slave_1 added [ 79.556138][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.563252][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.570598][ T5833] bridge_slave_0: entered allmulticast mode [ 79.578045][ T5833] bridge_slave_0: entered promiscuous mode [ 79.586677][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.593826][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.600980][ T5833] bridge_slave_1: entered allmulticast mode [ 79.608265][ T5833] bridge_slave_1: entered promiscuous mode [ 79.686388][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.693537][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.700704][ T5830] bridge_slave_0: entered allmulticast mode [ 79.707719][ T5830] bridge_slave_0: entered promiscuous mode [ 79.728172][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.735465][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.761726][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.787590][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.797109][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.806390][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.813497][ T5830] bridge_slave_1: entered allmulticast mode [ 79.820579][ T5830] bridge_slave_1: entered promiscuous mode [ 79.841998][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.851689][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.858841][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.885661][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.898636][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.931706][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.976724][ T5833] team0: Port device team_slave_0 added [ 79.987444][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.010614][ T5838] team0: Port device team_slave_0 added [ 80.018288][ T5833] team0: Port device team_slave_1 added [ 80.039179][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.075182][ T5838] team0: Port device team_slave_1 added [ 80.093907][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.100890][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.127572][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.175321][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.182291][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.210255][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.222604][ T5830] team0: Port device team_slave_0 added [ 80.231216][ T5830] team0: Port device team_slave_1 added [ 80.241046][ T5829] hsr_slave_0: entered promiscuous mode [ 80.247807][ T5829] hsr_slave_1: entered promiscuous mode [ 80.267652][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.274659][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.300783][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.344991][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.351954][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.378214][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.399279][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.406719][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.432636][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.478541][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.485568][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.512557][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.524864][ T5832] Bluetooth: hci0: command tx timeout [ 80.565870][ T5838] hsr_slave_0: entered promiscuous mode [ 80.572228][ T5838] hsr_slave_1: entered promiscuous mode [ 80.578878][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 80.585475][ T5838] Cannot create hsr debugfs directory [ 80.604550][ T5832] Bluetooth: hci2: command tx timeout [ 80.604715][ T5843] Bluetooth: hci3: command tx timeout [ 80.610025][ T51] Bluetooth: hci1: command tx timeout [ 80.622051][ T5833] hsr_slave_0: entered promiscuous mode [ 80.628521][ T5833] hsr_slave_1: entered promiscuous mode [ 80.634713][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 80.640445][ T5833] Cannot create hsr debugfs directory [ 80.730006][ T5830] hsr_slave_0: entered promiscuous mode [ 80.737732][ T5830] hsr_slave_1: entered promiscuous mode [ 80.743711][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 80.749473][ T5830] Cannot create hsr debugfs directory [ 81.096961][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.108652][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.119634][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.130178][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.186609][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.211097][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.231513][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.257500][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.318044][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.332465][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.358920][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.383048][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.458159][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.527600][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.551959][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.570223][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.585141][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.605848][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.637337][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.644591][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.676947][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.684221][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.717339][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.770780][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.808312][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.833146][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.840356][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.859379][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.877052][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.884184][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.908271][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.915394][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.960230][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.967416][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.198824][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.288985][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.328305][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.368399][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.375596][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.403160][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.410304][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.483015][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.532046][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.552505][ T5829] veth0_vlan: entered promiscuous mode [ 82.589905][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.600358][ T5829] veth1_vlan: entered promiscuous mode [ 82.608559][ T5832] Bluetooth: hci0: command tx timeout [ 82.684352][ T5832] Bluetooth: hci2: command tx timeout [ 82.689819][ T5832] Bluetooth: hci1: command tx timeout [ 82.691161][ T5829] veth0_macvtap: entered promiscuous mode [ 82.695872][ T51] Bluetooth: hci3: command tx timeout [ 82.707362][ T5829] veth1_macvtap: entered promiscuous mode [ 82.730444][ T5833] veth0_vlan: entered promiscuous mode [ 82.786189][ T5833] veth1_vlan: entered promiscuous mode [ 82.799387][ T5838] veth0_vlan: entered promiscuous mode [ 82.819143][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.841433][ T5838] veth1_vlan: entered promiscuous mode [ 82.869229][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.910730][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.920428][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.943937][ T5833] veth0_macvtap: entered promiscuous mode [ 82.955212][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.969499][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.979244][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.992710][ T5833] veth1_macvtap: entered promiscuous mode [ 83.012650][ T5838] veth0_macvtap: entered promiscuous mode [ 83.036672][ T5838] veth1_macvtap: entered promiscuous mode [ 83.050992][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.099869][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.112370][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.124747][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.149497][ T1006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.186920][ T1006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.228686][ T5830] veth0_vlan: entered promiscuous mode [ 83.236149][ T1006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.251563][ T1006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.272499][ T1006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.282257][ T1006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.301601][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.303467][ T5830] veth1_vlan: entered promiscuous mode [ 83.318507][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.326013][ T1006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.338660][ T1006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.390778][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.402504][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.487378][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.492782][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.544850][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.566349][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.588467][ T5830] veth0_macvtap: entered promiscuous mode [ 83.595004][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.616564][ T5830] veth1_macvtap: entered promiscuous mode [ 83.667492][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.697163][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.720589][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.731981][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.746149][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.757446][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.789165][ T1006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815632][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830656][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.854691][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.926840][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.011480][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.038861][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281887][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.292402][ T5921] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 84.301834][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.310033][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.316947][ T5921] usb 1-1: config 0 descriptor?? [ 84.327387][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.685199][ T51] Bluetooth: hci0: command tx timeout [ 84.764660][ T5832] Bluetooth: hci3: command tx timeout [ 84.770417][ T5832] Bluetooth: hci1: command tx timeout [ 84.777751][ T51] Bluetooth: hci2: command tx timeout [ 85.114419][ T5921] razer 0003:1532:010E.0001: failed to enable macro keys: -71 [ 85.171842][ T5921] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 85.234672][ T5921] usb 1-1: USB disconnect, device number 2 [ 86.078886][ T5952] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 86.439131][ T5946] fido_id[5946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 86.532891][ T43] cfg80211: failed to load regulatory.db [ 86.649910][ T5843] block nbd0: Receive control failed (result -107) [ 86.650018][ T51] block nbd0: Receive control failed (result -107) [ 86.674660][ T2155] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.685903][ T5945] nbd0: detected capacity change from 0 to 32 [ 86.697619][ T5846] [ 86.700062][ T5846] ====================================================== [ 86.707084][ T5846] WARNING: possible circular locking dependency detected [ 86.714096][ T5846] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 86.720673][ T5846] ------------------------------------------------------ [ 86.727680][ T5846] udevd/5846 is trying to acquire lock: [ 86.733208][ T5846] ffff888031673a70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x257/0xf10 [ 86.742167][ T5846] [ 86.742167][ T5846] but task is already holding lock: [ 86.749520][ T5846] ffff88805c8e51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 86.757950][ T5846] [ 86.757950][ T5846] which lock already depends on the new lock. [ 86.757950][ T5846] [ 86.768339][ T5846] [ 86.768339][ T5846] the existing dependency chain (in reverse order) is: [ 86.777340][ T5846] [ 86.777340][ T5846] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 86.784559][ T5846] lock_acquire+0x120/0x360 [ 86.789594][ T5846] __mutex_lock+0x182/0xe80 [ 86.794619][ T5846] nbd_queue_rq+0xc8/0xf10 [ 86.799556][ T5846] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 86.805616][ T5846] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 86.812459][ T5846] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 86.818955][ T5846] blk_mq_run_hw_queue+0x348/0x4f0 [ 86.824588][ T5846] blk_mq_dispatch_list+0xd0c/0xe00 [ 86.830316][ T5846] blk_mq_flush_plug_list+0x469/0x550 [ 86.836211][ T5846] __blk_flush_plug+0x3d3/0x4b0 [ 86.841582][ T5846] __submit_bio+0x2d3/0x5a0 [ 86.846611][ T5846] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 86.852767][ T5846] block_read_full_folio+0x7b7/0x830 [ 86.858569][ T5846] filemap_read_folio+0x117/0x380 [ 86.864118][ T5846] do_read_cache_folio+0x350/0x590 [ 86.869749][ T5846] read_part_sector+0xb6/0x2b0 [ 86.875034][ T5846] adfspart_check_ICS+0xa4/0xa50 [ 86.880497][ T5846] bdev_disk_changed+0x75f/0x14b0 [ 86.886042][ T5846] blkdev_get_whole+0x380/0x510 [ 86.891421][ T5846] bdev_open+0x31e/0xd30 [ 86.896189][ T5846] blkdev_open+0x3a8/0x510 [ 86.901119][ T5846] do_dentry_open+0xdf0/0x1970 [ 86.906411][ T5846] vfs_open+0x3b/0x340 [ 86.911007][ T5846] path_openat+0x2ee5/0x3830 [ 86.916110][ T5846] do_filp_open+0x1fa/0x410 [ 86.921128][ T5846] do_sys_openat2+0x121/0x1c0 [ 86.926342][ T5846] __x64_sys_openat+0x138/0x170 [ 86.931733][ T5846] do_syscall_64+0xfa/0x3b0 [ 86.936755][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.943158][ T5846] [ 86.943158][ T5846] -> #5 (set->srcu){.+.+}-{0:0}: [ 86.950272][ T5846] lock_sync+0xba/0x160 [ 86.954952][ T5846] __synchronize_srcu+0x96/0x3a0 [ 86.960419][ T5846] elevator_switch+0x12b/0x5f0 [ 86.965705][ T5846] elevator_change+0x21b/0x320 [ 86.970986][ T5846] elevator_set_default+0x144/0x210 [ 86.976702][ T5846] blk_register_queue+0x35d/0x400 [ 86.982241][ T5846] __add_disk+0x677/0xd50 [ 86.987082][ T5846] add_disk_fwnode+0xfc/0x480 [ 86.992270][ T5846] nbd_dev_add+0x70e/0xb00 [ 86.997199][ T5846] nbd_init+0x21a/0x2d0 [ 87.001868][ T5846] do_one_initcall+0x233/0x820 [ 87.007148][ T5846] do_initcall_level+0x137/0x1f0 [ 87.012613][ T5846] do_initcalls+0x69/0xd0 [ 87.017463][ T5846] kernel_init_freeable+0x3d9/0x570 [ 87.023192][ T5846] kernel_init+0x1d/0x1d0 [ 87.028042][ T5846] ret_from_fork+0x3fc/0x770 [ 87.033153][ T5846] ret_from_fork_asm+0x1a/0x30 [ 87.038459][ T5846] [ 87.038459][ T5846] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 87.046278][ T5846] lock_acquire+0x120/0x360 [ 87.051393][ T5846] __mutex_lock+0x182/0xe80 [ 87.056440][ T5846] elv_update_nr_hw_queues+0x87/0x2a0 [ 87.062340][ T5846] blk_mq_update_nr_hw_queues+0xd54/0x14c0 [ 87.068679][ T5846] nbd_start_device+0x16c/0xac0 [ 87.074049][ T5846] nbd_genl_connect+0x1250/0x1930 [ 87.079599][ T5846] genl_family_rcv_msg_doit+0x215/0x300 [ 87.086107][ T5846] genl_rcv_msg+0x60e/0x790 [ 87.091132][ T5846] netlink_rcv_skb+0x208/0x470 [ 87.096430][ T5846] genl_rcv+0x28/0x40 [ 87.100933][ T5846] netlink_unicast+0x75b/0x8d0 [ 87.106214][ T5846] netlink_sendmsg+0x805/0xb30 [ 87.111527][ T5846] __sock_sendmsg+0x219/0x270 [ 87.116739][ T5846] ____sys_sendmsg+0x505/0x830 [ 87.122025][ T5846] ___sys_sendmsg+0x21f/0x2a0 [ 87.127216][ T5846] __x64_sys_sendmsg+0x19b/0x260 [ 87.132672][ T5846] do_syscall_64+0xfa/0x3b0 [ 87.137700][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.144123][ T5846] [ 87.144123][ T5846] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 87.152738][ T5846] lock_acquire+0x120/0x360 [ 87.157764][ T5846] blk_alloc_queue+0x538/0x620 [ 87.163043][ T5846] __blk_mq_alloc_disk+0x162/0x340 [ 87.168677][ T5846] nbd_dev_add+0x476/0xb00 [ 87.173605][ T5846] nbd_init+0x21a/0x2d0 [ 87.178272][ T5846] do_one_initcall+0x233/0x820 [ 87.183549][ T5846] do_initcall_level+0x137/0x1f0 [ 87.189003][ T5846] do_initcalls+0x69/0xd0 [ 87.193857][ T5846] kernel_init_freeable+0x3d9/0x570 [ 87.199575][ T5846] kernel_init+0x1d/0x1d0 [ 87.204420][ T5846] ret_from_fork+0x3fc/0x770 [ 87.209527][ T5846] ret_from_fork_asm+0x1a/0x30 [ 87.214814][ T5846] [ 87.214814][ T5846] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 87.222028][ T5846] lock_acquire+0x120/0x360 [ 87.227053][ T5846] fs_reclaim_acquire+0x72/0x100 [ 87.232508][ T5846] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 87.238827][ T5846] __alloc_skb+0x112/0x2d0 [ 87.243764][ T5846] tcp_stream_alloc_skb+0x3d/0x340 [ 87.249391][ T5846] tcp_sendmsg_locked+0x1f46/0x5630 [ 87.255114][ T5846] tcp_sendmsg+0x2f/0x50 [ 87.259878][ T5846] __sock_sendmsg+0x19c/0x270 [ 87.265074][ T5846] sock_write_iter+0x258/0x330 [ 87.270361][ T5846] vfs_write+0x54b/0xa90 [ 87.275124][ T5846] ksys_write+0x145/0x250 [ 87.279974][ T5846] do_syscall_64+0xfa/0x3b0 [ 87.284998][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.291422][ T5846] [ 87.291422][ T5846] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 87.299083][ T5846] lock_acquire+0x120/0x360 [ 87.304112][ T5846] lock_sock_nested+0x48/0x100 [ 87.309420][ T5846] inet_shutdown+0x6a/0x390 [ 87.314442][ T5846] nbd_mark_nsock_dead+0x2e9/0x560 [ 87.320069][ T5846] recv_work+0x2138/0x24f0 [ 87.325002][ T5846] process_scheduled_works+0xae1/0x17b0 [ 87.331081][ T5846] worker_thread+0x8a0/0xda0 [ 87.336178][ T5846] kthread+0x70e/0x8a0 [ 87.340761][ T5846] ret_from_fork+0x3fc/0x770 [ 87.345857][ T5846] ret_from_fork_asm+0x1a/0x30 [ 87.351132][ T5846] [ 87.351132][ T5846] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 87.358767][ T5846] validate_chain+0xb9b/0x2140 [ 87.364042][ T5846] __lock_acquire+0xab9/0xd20 [ 87.369245][ T5846] lock_acquire+0x120/0x360 [ 87.374279][ T5846] __mutex_lock+0x182/0xe80 [ 87.379305][ T5846] nbd_queue_rq+0x257/0xf10 [ 87.384320][ T5846] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 87.390391][ T5846] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 87.397239][ T5846] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 87.403743][ T5846] blk_mq_run_hw_queue+0x348/0x4f0 [ 87.409376][ T5846] blk_mq_dispatch_list+0xd0c/0xe00 [ 87.415096][ T5846] blk_mq_flush_plug_list+0x469/0x550 [ 87.420996][ T5846] __blk_flush_plug+0x3d3/0x4b0 [ 87.426362][ T5846] __submit_bio+0x2d3/0x5a0 [ 87.431382][ T5846] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 87.437540][ T5846] block_read_full_folio+0x7b7/0x830 [ 87.443357][ T5846] filemap_read_folio+0x117/0x380 [ 87.448897][ T5846] do_read_cache_folio+0x350/0x590 [ 87.454530][ T5846] read_part_sector+0xb6/0x2b0 [ 87.459816][ T5846] adfspart_check_ICS+0xa4/0xa50 [ 87.465287][ T5846] bdev_disk_changed+0x75f/0x14b0 [ 87.470835][ T5846] blkdev_get_whole+0x380/0x510 [ 87.476225][ T5846] bdev_open+0x31e/0xd30 [ 87.480986][ T5846] blkdev_open+0x3a8/0x510 [ 87.485913][ T5846] do_dentry_open+0xdf0/0x1970 [ 87.491206][ T5846] vfs_open+0x3b/0x340 [ 87.495824][ T5846] path_openat+0x2ee5/0x3830 [ 87.500969][ T5846] do_filp_open+0x1fa/0x410 [ 87.506019][ T5846] do_sys_openat2+0x121/0x1c0 [ 87.511222][ T5846] __x64_sys_openat+0x138/0x170 [ 87.516592][ T5846] do_syscall_64+0xfa/0x3b0 [ 87.521634][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.528042][ T5846] [ 87.528042][ T5846] other info that might help us debug this: [ 87.528042][ T5846] [ 87.538374][ T5846] Chain exists of: [ 87.538374][ T5846] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 87.538374][ T5846] [ 87.550458][ T5846] Possible unsafe locking scenario: [ 87.550458][ T5846] [ 87.557984][ T5846] CPU0 CPU1 [ 87.563427][ T5846] ---- ---- [ 87.568787][ T5846] lock(&cmd->lock); [ 87.572860][ T5846] lock(set->srcu); [ 87.579272][ T5846] lock(&cmd->lock); [ 87.585853][ T5846] lock(&nsock->tx_lock); [ 87.590264][ T5846] [ 87.590264][ T5846] *** DEADLOCK *** [ 87.590264][ T5846] [ 87.598403][ T5846] 3 locks held by udevd/5846: [ 87.603075][ T5846] #0: ffff888142f91358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 87.612319][ T5846] #1: ffff888140577890 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 87.621809][ T5846] #2: ffff88805c8e51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 87.630683][ T5846] [ 87.630683][ T5846] stack backtrace: [ 87.636595][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: udevd Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 87.636619][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.636635][ T5846] Call Trace: [ 87.636641][ T5846] [ 87.636648][ T5846] dump_stack_lvl+0x189/0x250 [ 87.636668][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.636684][ T5846] ? __pfx__printk+0x10/0x10 [ 87.636701][ T5846] ? print_lock_name+0xde/0x100 [ 87.636719][ T5846] print_circular_bug+0x2ee/0x310 [ 87.636736][ T5846] check_noncircular+0x134/0x160 [ 87.636755][ T5846] validate_chain+0xb9b/0x2140 [ 87.636779][ T5846] __lock_acquire+0xab9/0xd20 [ 87.636803][ T5846] ? nbd_queue_rq+0x257/0xf10 [ 87.636815][ T5846] lock_acquire+0x120/0x360 [ 87.636836][ T5846] ? nbd_queue_rq+0x257/0xf10 [ 87.636850][ T5846] ? is_bpf_text_address+0x292/0x2b0 [ 87.636876][ T5846] __mutex_lock+0x182/0xe80 [ 87.636896][ T5846] ? nbd_queue_rq+0x257/0xf10 [ 87.636908][ T5846] ? unwind_get_return_address+0x4d/0x90 [ 87.636924][ T5846] ? arch_stack_walk+0xfc/0x150 [ 87.636942][ T5846] ? nbd_queue_rq+0x257/0xf10 [ 87.636956][ T5846] ? __pfx___mutex_lock+0x10/0x10 [ 87.636976][ T5846] ? nbd_get_config_unlocked+0x152/0x210 [ 87.636992][ T5846] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 87.637010][ T5846] nbd_queue_rq+0x257/0xf10 [ 87.637027][ T5846] ? __pfx_nbd_queue_rq+0x10/0x10 [ 87.637046][ T5846] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 87.637080][ T5846] ? sbitmap_find_bit+0x3ff/0x490 [ 87.637105][ T5846] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 87.637124][ T5846] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 87.637154][ T5846] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 87.637179][ T5846] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 87.637201][ T5846] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 87.637219][ T5846] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 87.637238][ T5846] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 87.637253][ T5846] blk_mq_run_hw_queue+0x348/0x4f0 [ 87.637270][ T5846] blk_mq_dispatch_list+0xd0c/0xe00 [ 87.637289][ T5846] ? blk_mq_dispatch_list+0x220/0xe00 [ 87.637309][ T5846] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 87.637326][ T5846] ? __pfx_update_io_ticks+0x10/0x10 [ 87.637347][ T5846] blk_mq_flush_plug_list+0x469/0x550 [ 87.637365][ T5846] ? trace_block_plug+0x7a/0x1f0 [ 87.637376][ T5846] ? blk_add_rq_to_plug+0x300/0x450 [ 87.637393][ T5846] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 87.637410][ T5846] ? blk_mq_submit_bio+0xbcb/0x2520 [ 87.637431][ T5846] __blk_flush_plug+0x3d3/0x4b0 [ 87.637451][ T5846] ? __pfx___blk_flush_plug+0x10/0x10 [ 87.637472][ T5846] __submit_bio+0x2d3/0x5a0 [ 87.637491][ T5846] ? ktime_get+0x3e/0x1f0 [ 87.637504][ T5846] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 87.637519][ T5846] ? __pfx___submit_bio+0x10/0x10 [ 87.637537][ T5846] ? blk_cgroup_bio_start+0x59d/0x640 [ 87.637558][ T5846] ? bio_associate_blkg+0x6d/0x230 [ 87.637579][ T5846] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 87.637596][ T5846] ? bio_associate_blkg+0x6d/0x230 [ 87.637621][ T5846] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 87.637640][ T5846] ? submit_bio_noacct+0xd65/0x1a70 [ 87.637661][ T5846] block_read_full_folio+0x7b7/0x830 [ 87.637677][ T5846] ? __pfx_blkdev_get_block+0x10/0x10 [ 87.637690][ T5846] filemap_read_folio+0x117/0x380 [ 87.637710][ T5846] ? __pfx_blkdev_read_folio+0x10/0x10 [ 87.637721][ T5846] ? __pfx_filemap_read_folio+0x10/0x10 [ 87.637743][ T5846] do_read_cache_folio+0x350/0x590 [ 87.637762][ T5846] ? __pfx_blkdev_read_folio+0x10/0x10 [ 87.637775][ T5846] read_part_sector+0xb6/0x2b0 [ 87.637793][ T5846] adfspart_check_ICS+0xa4/0xa50 [ 87.637810][ T5846] ? snprintf+0xda/0x120 [ 87.637825][ T5846] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 87.637846][ T5846] bdev_disk_changed+0x75f/0x14b0 [ 87.637869][ T5846] ? __pfx_bdev_disk_changed+0x10/0x10 [ 87.637884][ T5846] ? wait_on_inode+0xc0/0x230 [ 87.637906][ T5846] blkdev_get_whole+0x380/0x510 [ 87.637927][ T5846] bdev_open+0x31e/0xd30 [ 87.637949][ T5846] blkdev_open+0x3a8/0x510 [ 87.637962][ T5846] ? __pfx_blkdev_open+0x10/0x10 [ 87.637973][ T5846] do_dentry_open+0xdf0/0x1970 [ 87.637999][ T5846] vfs_open+0x3b/0x340 [ 87.638017][ T5846] ? path_openat+0x2ecd/0x3830 [ 87.638031][ T5846] path_openat+0x2ee5/0x3830 [ 87.638044][ T5846] ? arch_stack_walk+0xfc/0x150 [ 87.638069][ T5846] ? __pfx_path_openat+0x10/0x10 [ 87.638081][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.638100][ T5846] do_filp_open+0x1fa/0x410 [ 87.638113][ T5846] ? __lock_acquire+0xab9/0xd20 [ 87.638132][ T5846] ? __pfx_do_filp_open+0x10/0x10 [ 87.638152][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 87.638166][ T5846] ? alloc_fd+0x64c/0x6c0 [ 87.638186][ T5846] do_sys_openat2+0x121/0x1c0 [ 87.638198][ T5846] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 87.638211][ T5846] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.638225][ T5846] ? rcu_is_watching+0x15/0xb0 [ 87.638239][ T5846] __x64_sys_openat+0x138/0x170 [ 87.638253][ T5846] do_syscall_64+0xfa/0x3b0 [ 87.638270][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.638285][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.638298][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 87.638312][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.638324][ T5846] RIP: 0033:0x7f80f50a7407 [ 87.638343][ T5846] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 87.638354][ T5846] RSP: 002b:00007ffc201516a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 87.638368][ T5846] RAX: ffffffffffffffda RBX: 00007f80f573f880 RCX: 00007f80f50a7407 [ 87.638377][ T5846] RDX: 00000000000a0800 RSI: 00005603f5dcbc60 RDI: ffffffffffffff9c [ 87.638387][ T5846] RBP: 00005603f5dab910 R08: 0000000000000000 R09: 0000000000000000 [ 87.638395][ T5846] R10: 0000000000000000 R11: 0000000000000202 R12: 00005603f5dc0800 [ 87.638403][ T5846] R13: 00005603f5dc33e0 R14: 0000000000000000 R15: 00005603f5dc0800 [ 87.638417][ T5846] [ 87.664316][ T51] Bluetooth: hci0: command tx timeout [ 87.714189][ T5843] Bluetooth: hci2: command tx timeout [ 87.714215][ T5843] Bluetooth: hci1: command tx timeout [ 87.714253][ T5843] Bluetooth: hci3: command tx timeout [ 87.729629][ T5846] block nbd0: Dead connection, failed to find a fallback [ 87.815493][ T2155] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 87.819326][ T5846] block nbd0: shutting down sockets [ 87.825393][ T2155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 87.831160][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.838613][ T2155] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.840829][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 87.847168][ T2155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.853486][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.860271][ T2155] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 87.862793][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 87.872350][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.872978][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.879518][ T2155] usb 2-1: Product: syz [ 87.883947][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 87.884296][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.891280][ T2155] usb 2-1: Manufacturer: syz [ 87.894860][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 87.900985][ T2155] usb 2-1: SerialNumber: syz [ 87.903302][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.916910][ T2155] usb 2-1: config 0 descriptor?? [ 87.921300][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 87.932806][ T2155] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 87.937272][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.144134][ T2155] usb 2-1: USB disconnect, device number 2 [ 88.150624][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.458439][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.468481][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.477082][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.486216][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.494030][ T5846] ldm_validate_partition_table(): Disk read failed. [ 88.500674][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.509815][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.517661][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.527654][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.535654][ T5846] Dev nbd0: unable to read RDB block 0 [ 88.541419][ T5846] nbd0: unable to read partition table [ 88.549361][ T5846] ldm_validate_partition_table(): Disk read failed. [ 88.556267][ T5846] Dev nbd0: unable to read RDB block 0 [ 88.561964][ T5846] nbd0: unable to read partition table