Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. 2025/09/15 04:43:45 parsed 1 programs [ 60.673149][ T30] audit: type=1400 audit(1757911425.501:62): avc: denied { write } for pid=5840 comm="syz-execprog" path="pipe:[5164]" dev="pipefs" ino=5164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 60.697503][ T30] audit: type=1400 audit(1757911425.501:63): avc: denied { node_bind } for pid=5840 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.656739][ T30] audit: type=1400 audit(1757911427.491:64): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.660091][ T5848] cgroup: Unknown subsys name 'net' [ 62.679510][ T30] audit: type=1400 audit(1757911427.491:65): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.707243][ T30] audit: type=1400 audit(1757911427.521:66): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.827334][ T5848] cgroup: Unknown subsys name 'cpuset' [ 62.835041][ T5848] cgroup: Unknown subsys name 'rlimit' [ 63.008270][ T30] audit: type=1400 audit(1757911427.841:67): avc: denied { setattr } for pid=5848 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.039782][ T30] audit: type=1400 audit(1757911427.841:68): avc: denied { create } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.060424][ T30] audit: type=1400 audit(1757911427.841:69): avc: denied { write } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.081098][ T30] audit: type=1400 audit(1757911427.841:70): avc: denied { read } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.101933][ T30] audit: type=1400 audit(1757911427.851:71): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.112068][ T5850] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.036889][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.676283][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 65.676297][ T30] audit: type=1400 audit(1757911430.511:91): avc: denied { mount } for pid=5855 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.704849][ T30] audit: type=1400 audit(1757911430.511:92): avc: denied { mounton } for pid=5855 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 65.729385][ T30] audit: type=1400 audit(1757911430.511:93): avc: denied { mount } for pid=5855 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 65.733241][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.771165][ T30] audit: type=1400 audit(1757911430.601:94): avc: denied { read write } for pid=5855 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.803632][ T30] audit: type=1400 audit(1757911430.601:95): avc: denied { open } for pid=5855 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.827725][ T30] audit: type=1400 audit(1757911430.601:96): avc: denied { ioctl } for pid=5855 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.898011][ T30] audit: type=1400 audit(1757911430.731:97): avc: denied { mounton } for pid=5860 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.033084][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.041203][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.068225][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.077873][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.924497][ T30] audit: type=1400 audit(1757911431.751:98): avc: denied { create } for pid=5885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.955800][ T30] audit: type=1400 audit(1757911431.751:99): avc: denied { sys_admin } for pid=5885 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.044789][ T30] audit: type=1400 audit(1757911431.871:100): avc: denied { sys_chroot } for pid=5886 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.359581][ T5898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.367440][ T5898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.380898][ T5898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.392710][ T5898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.400298][ T5898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.685253][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 67.740600][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.748161][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.755660][ T5903] bridge_slave_0: entered allmulticast mode [ 67.763309][ T5903] bridge_slave_0: entered promiscuous mode [ 67.772300][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.779679][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.788158][ T5903] bridge_slave_1: entered allmulticast mode [ 67.796135][ T5903] bridge_slave_1: entered promiscuous mode [ 67.825569][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.837164][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.870699][ T5903] team0: Port device team_slave_0 added [ 67.880466][ T5903] team0: Port device team_slave_1 added [ 67.901186][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.908395][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.935158][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.947024][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.953945][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.979917][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.009441][ T5903] hsr_slave_0: entered promiscuous mode [ 68.015779][ T5903] hsr_slave_1: entered promiscuous mode [ 68.107653][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.120228][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.129328][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.138449][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.189293][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.205694][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.216112][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.223284][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.237116][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.244212][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.364020][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.393432][ T5903] veth0_vlan: entered promiscuous mode [ 68.403930][ T5903] veth1_vlan: entered promiscuous mode [ 68.423672][ T5903] veth0_macvtap: entered promiscuous mode [ 68.431846][ T5903] veth1_macvtap: entered promiscuous mode [ 68.445570][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.459618][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.471989][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.481379][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.491387][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.501066][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.593301][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.646226][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.729515][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.793808][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/15 04:43:54 executed programs: 0 [ 69.341260][ T5898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.349531][ T5898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.357029][ T5898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.367074][ T5898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.374438][ T5898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.479368][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 69.531974][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.539145][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.546345][ T5956] bridge_slave_0: entered allmulticast mode [ 69.552925][ T5956] bridge_slave_0: entered promiscuous mode [ 69.560711][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.568122][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.576563][ T5956] bridge_slave_1: entered allmulticast mode [ 69.583131][ T5956] bridge_slave_1: entered promiscuous mode [ 69.607974][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.618552][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.642718][ T5956] team0: Port device team_slave_0 added [ 69.650574][ T5956] team0: Port device team_slave_1 added [ 69.671806][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.678775][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.705182][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.718456][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.725457][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.751390][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.788083][ T5956] hsr_slave_0: entered promiscuous mode [ 69.794034][ T5956] hsr_slave_1: entered promiscuous mode [ 69.800294][ T5956] debugfs: 'hsr0' already exists in 'hsr' [ 69.806378][ T5956] Cannot create hsr debugfs directory [ 70.927571][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.933943][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.405557][ T5898] Bluetooth: hci0: command tx timeout [ 71.882791][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 71.882805][ T30] audit: type=1400 audit(1757911436.711:108): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.920686][ T30] audit: type=1400 audit(1757911436.711:109): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.953622][ T30] audit: type=1400 audit(1757911436.711:110): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.977047][ T12] bridge_slave_1: left allmulticast mode [ 71.982775][ T12] bridge_slave_1: left promiscuous mode [ 71.989993][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.001241][ T12] bridge_slave_0: left allmulticast mode [ 72.007753][ T12] bridge_slave_0: left promiscuous mode [ 72.013443][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.025907][ T30] audit: type=1400 audit(1757911436.781:111): avc: denied { read open } for pid=5969 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.051569][ T30] audit: type=1400 audit(1757911436.781:112): avc: denied { getattr } for pid=5969 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.145779][ T30] audit: type=1400 audit(1757911436.971:113): avc: denied { add_name } for pid=5968 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.249520][ T30] audit: type=1400 audit(1757911437.081:114): avc: denied { remove_name } for pid=5979 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1977 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.323730][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.336022][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.345811][ T12] bond0 (unregistering): Released all slaves [ 72.461675][ T12] hsr_slave_0: left promiscuous mode [ 72.472154][ T12] hsr_slave_1: left promiscuous mode [ 72.478208][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.487936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.500034][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.507636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.524601][ T12] veth1_macvtap: left promiscuous mode [ 72.530754][ T12] veth0_macvtap: left promiscuous mode [ 72.537540][ T12] veth1_vlan: left promiscuous mode [ 72.542875][ T12] veth0_vlan: left promiscuous mode [ 72.807847][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.828064][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.126707][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.139461][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.151647][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.166752][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.250937][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.282321][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.297630][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.304713][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.319189][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.326296][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.485464][ T5898] Bluetooth: hci0: command tx timeout [ 73.850638][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.896857][ T5956] veth0_vlan: entered promiscuous mode [ 73.911338][ T5956] veth1_vlan: entered promiscuous mode [ 73.931698][ T5956] veth0_macvtap: entered promiscuous mode [ 73.939813][ T5956] veth1_macvtap: entered promiscuous mode [ 73.952919][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.966974][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.979013][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988336][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.001528][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.011221][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.053541][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.065879][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.085396][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.093230][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.125897][ T30] audit: type=1400 audit(1757911438.961:115): avc: denied { create } for pid=6033 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.303477][ T5170] block nbd0: Receive control failed (result -107) [ 74.303530][ T5898] block nbd0: Receive control failed (result -107) [ 74.335138][ T6033] nbd0: detected capacity change from 0 to 32 [ 74.343725][ T5967] [ 74.346052][ T5967] ====================================================== [ 74.353044][ T5967] WARNING: possible circular locking dependency detected [ 74.360034][ T5967] syzkaller #0 Not tainted [ 74.364424][ T5967] ------------------------------------------------------ [ 74.371418][ T5967] udevd/5967 is trying to acquire lock: [ 74.376934][ T5967] ffff888073b90070 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x423/0x12d0 [ 74.385966][ T5967] [ 74.385966][ T5967] but task is already holding lock: [ 74.393327][ T5967] ffff88807d35e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 74.401828][ T5967] [ 74.401828][ T5967] which lock already depends on the new lock. [ 74.401828][ T5967] [ 74.412203][ T5967] [ 74.412203][ T5967] the existing dependency chain (in reverse order) is: [ 74.421188][ T5967] [ 74.421188][ T5967] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 74.428371][ T5967] __mutex_lock+0x193/0x1060 [ 74.433465][ T5967] nbd_queue_rq+0xbd/0x12d0 [ 74.438468][ T5967] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 74.444515][ T5967] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 74.451345][ T5967] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 74.457832][ T5967] blk_mq_run_hw_queue+0x239/0x670 [ 74.463449][ T5967] blk_mq_dispatch_list+0x514/0x1310 [ 74.469229][ T5967] blk_mq_flush_plug_list+0x130/0x600 [ 74.475097][ T5967] __blk_flush_plug+0x2c4/0x4b0 [ 74.480442][ T5967] __submit_bio+0x545/0x690 [ 74.485439][ T5967] submit_bio_noacct_nocheck+0x660/0xd30 [ 74.491567][ T5967] submit_bio_noacct+0xc20/0x1ed0 [ 74.497102][ T5967] block_read_full_folio+0x4db/0x850 [ 74.502889][ T5967] filemap_read_folio+0xc5/0x2a0 [ 74.508322][ T5967] do_read_cache_folio+0x263/0x5c0 [ 74.513934][ T5967] read_part_sector+0xd4/0x370 [ 74.519200][ T5967] adfspart_check_ICS+0x93/0x940 [ 74.524641][ T5967] bdev_disk_changed+0x723/0x1520 [ 74.530172][ T5967] blkdev_get_whole+0x187/0x290 [ 74.535527][ T5967] bdev_open+0x2c7/0xe40 [ 74.540263][ T5967] blkdev_open+0x34e/0x4f0 [ 74.545176][ T5967] do_dentry_open+0x97f/0x1530 [ 74.550437][ T5967] vfs_open+0x82/0x3f0 [ 74.555004][ T5967] path_openat+0x1de4/0x2cb0 [ 74.560091][ T5967] do_filp_open+0x20b/0x470 [ 74.565095][ T5967] do_sys_openat2+0x11b/0x1d0 [ 74.570271][ T5967] __x64_sys_openat+0x174/0x210 [ 74.575625][ T5967] do_syscall_64+0xcd/0x4e0 [ 74.580629][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.587018][ T5967] [ 74.587018][ T5967] -> #5 (set->srcu){.+.+}-{0:0}: [ 74.594113][ T5967] __synchronize_srcu+0xa1/0x290 [ 74.599548][ T5967] blk_mq_quiesce_queue+0x149/0x1b0 [ 74.605248][ T5967] elevator_switch+0x17d/0x810 [ 74.610514][ T5967] elevator_change+0x391/0x580 [ 74.615781][ T5967] elevator_set_default+0x2e9/0x380 [ 74.621485][ T5967] blk_register_queue+0x384/0x4e0 [ 74.627012][ T5967] __add_disk+0x74a/0xf00 [ 74.631842][ T5967] add_disk_fwnode+0x13f/0x5d0 [ 74.637106][ T5967] nbd_dev_add+0x783/0xbb0 [ 74.642023][ T5967] nbd_init+0x181/0x320 [ 74.646683][ T5967] do_one_initcall+0x120/0x6e0 [ 74.651949][ T5967] kernel_init_freeable+0x5c2/0x910 [ 74.657648][ T5967] kernel_init+0x1c/0x2b0 [ 74.662483][ T5967] ret_from_fork+0x56a/0x730 [ 74.667569][ T5967] ret_from_fork_asm+0x1a/0x30 [ 74.672834][ T5967] [ 74.672834][ T5967] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 74.680644][ T5967] __mutex_lock+0x193/0x1060 [ 74.685735][ T5967] elevator_change+0x17d/0x580 [ 74.691002][ T5967] elevator_set_none+0xaa/0x120 [ 74.696358][ T5967] __blk_mq_update_nr_hw_queues+0x4bd/0x1200 [ 74.702848][ T5967] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 74.708894][ T5967] nbd_start_device+0x1b0/0xd70 [ 74.714246][ T5967] nbd_genl_connect+0x134b/0x1c60 [ 74.719770][ T5967] genl_family_rcv_msg_doit+0x206/0x2f0 [ 74.725821][ T5967] genl_rcv_msg+0x55c/0x800 [ 74.730826][ T5967] netlink_rcv_skb+0x158/0x420 [ 74.736090][ T5967] genl_rcv+0x28/0x40 [ 74.740573][ T5967] netlink_unicast+0x5a7/0x870 [ 74.745856][ T5967] netlink_sendmsg+0x8d1/0xdd0 [ 74.751119][ T5967] ____sys_sendmsg+0xa95/0xc70 [ 74.756387][ T5967] ___sys_sendmsg+0x134/0x1d0 [ 74.761563][ T5967] __sys_sendmsg+0x16d/0x220 [ 74.766650][ T5967] do_syscall_64+0xcd/0x4e0 [ 74.771654][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.778042][ T5967] [ 74.778042][ T5967] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 74.786618][ T5967] blk_alloc_queue+0x619/0x760 [ 74.791887][ T5967] blk_mq_alloc_queue+0x172/0x280 [ 74.797413][ T5967] __blk_mq_alloc_disk+0x29/0x120 [ 74.802936][ T5967] nbd_dev_add+0x492/0xbb0 [ 74.807850][ T5967] nbd_init+0x181/0x320 [ 74.812505][ T5967] do_one_initcall+0x120/0x6e0 [ 74.817769][ T5967] kernel_init_freeable+0x5c2/0x910 [ 74.823468][ T5967] kernel_init+0x1c/0x2b0 [ 74.828299][ T5967] ret_from_fork+0x56a/0x730 [ 74.833385][ T5967] ret_from_fork_asm+0x1a/0x30 [ 74.838658][ T5967] [ 74.838658][ T5967] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 74.845857][ T5967] fs_reclaim_acquire+0x102/0x150 [ 74.851383][ T5967] __kmalloc_cache_noprof+0x50/0x3e0 [ 74.857170][ T5967] virtio_transport_do_socket_init+0x4a/0x350 [ 74.863734][ T5967] vsock_assign_transport+0x63d/0x900 [ 74.869605][ T5967] vsock_connect+0x201/0xee0 [ 74.874702][ T5967] __sys_connect_file+0x13e/0x1a0 [ 74.880225][ T5967] __sys_connect+0x13b/0x160 [ 74.885310][ T5967] __x64_sys_connect+0x72/0xb0 [ 74.890570][ T5967] do_syscall_64+0xcd/0x4e0 [ 74.895571][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.901967][ T5967] [ 74.901967][ T5967] -> #1 (sk_lock-AF_VSOCK){+.+.}-{0:0}: [ 74.909675][ T5967] lock_sock_nested+0x41/0xf0 [ 74.914853][ T5967] vsock_shutdown+0x61/0x2d0 [ 74.919940][ T5967] nbd_mark_nsock_dead+0xae/0x5d0 [ 74.925461][ T5967] recv_work+0x671/0xa80 [ 74.930205][ T5967] process_one_work+0x9cc/0x1b70 [ 74.935641][ T5967] worker_thread+0x6c8/0xf10 [ 74.940728][ T5967] kthread+0x3c2/0x780 [ 74.945299][ T5967] ret_from_fork+0x56a/0x730 [ 74.950405][ T5967] ret_from_fork_asm+0x1a/0x30 [ 74.955670][ T5967] [ 74.955670][ T5967] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 74.963391][ T5967] __lock_acquire+0x12a6/0x1ce0 [ 74.968752][ T5967] lock_acquire+0x179/0x350 [ 74.973747][ T5967] __mutex_lock+0x193/0x1060 [ 74.978837][ T5967] nbd_queue_rq+0x423/0x12d0 [ 74.983928][ T5967] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 74.989971][ T5967] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 74.996809][ T5967] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 75.003292][ T5967] blk_mq_run_hw_queue+0x239/0x670 [ 75.008906][ T5967] blk_mq_dispatch_list+0x514/0x1310 [ 75.014686][ T5967] blk_mq_flush_plug_list+0x130/0x600 [ 75.020556][ T5967] __blk_flush_plug+0x2c4/0x4b0 [ 75.025919][ T5967] __submit_bio+0x545/0x690 [ 75.030925][ T5967] submit_bio_noacct_nocheck+0x660/0xd30 [ 75.037053][ T5967] submit_bio_noacct+0xc20/0x1ed0 [ 75.042574][ T5967] block_read_full_folio+0x4db/0x850 [ 75.048368][ T5967] filemap_read_folio+0xc5/0x2a0 [ 75.053802][ T5967] do_read_cache_folio+0x263/0x5c0 [ 75.059410][ T5967] read_part_sector+0xd4/0x370 [ 75.064676][ T5967] adfspart_check_ICS+0x93/0x940 [ 75.070115][ T5967] bdev_disk_changed+0x723/0x1520 [ 75.075642][ T5967] blkdev_get_whole+0x187/0x290 [ 75.080998][ T5967] bdev_open+0x2c7/0xe40 [ 75.085735][ T5967] blkdev_open+0x34e/0x4f0 [ 75.090649][ T5967] do_dentry_open+0x97f/0x1530 [ 75.095909][ T5967] vfs_open+0x82/0x3f0 [ 75.100482][ T5967] path_openat+0x1de4/0x2cb0 [ 75.105568][ T5967] do_filp_open+0x20b/0x470 [ 75.110570][ T5967] do_sys_openat2+0x11b/0x1d0 [ 75.115748][ T5967] __x64_sys_openat+0x174/0x210 [ 75.121099][ T5967] do_syscall_64+0xcd/0x4e0 [ 75.126103][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.132492][ T5967] [ 75.132492][ T5967] other info that might help us debug this: [ 75.132492][ T5967] [ 75.142692][ T5967] Chain exists of: [ 75.142692][ T5967] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 75.142692][ T5967] [ 75.154745][ T5967] Possible unsafe locking scenario: [ 75.154745][ T5967] [ 75.162170][ T5967] CPU0 CPU1 [ 75.167509][ T5967] ---- ---- [ 75.172847][ T5967] lock(&cmd->lock); [ 75.176804][ T5967] lock(set->srcu); [ 75.183192][ T5967] lock(&cmd->lock); [ 75.189667][ T5967] lock(&nsock->tx_lock); [ 75.194072][ T5967] [ 75.194072][ T5967] *** DEADLOCK *** [ 75.194072][ T5967] [ 75.202191][ T5967] 3 locks held by udevd/5967: [ 75.206838][ T5967] #0: ffff888143767358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 75.216127][ T5967] #1: ffff8881433cdd10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 75.225590][ T5967] #2: ffff88807d35e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 75.234528][ T5967] [ 75.234528][ T5967] stack backtrace: [ 75.240393][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 75.240410][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.240422][ T5967] Call Trace: [ 75.240427][ T5967] [ 75.240432][ T5967] dump_stack_lvl+0x116/0x1f0 [ 75.240451][ T5967] print_circular_bug+0x275/0x350 [ 75.240473][ T5967] check_noncircular+0x14c/0x170 [ 75.240495][ T5967] __lock_acquire+0x12a6/0x1ce0 [ 75.240518][ T5967] lock_acquire+0x179/0x350 [ 75.240530][ T5967] ? nbd_queue_rq+0x423/0x12d0 [ 75.240548][ T5967] ? __pfx___might_resched+0x10/0x10 [ 75.240567][ T5967] ? nbd_queue_rq+0x423/0x12d0 [ 75.240584][ T5967] __mutex_lock+0x193/0x1060 [ 75.240601][ T5967] ? nbd_queue_rq+0x423/0x12d0 [ 75.240619][ T5967] ? is_bpf_text_address+0x8a/0x1a0 [ 75.240634][ T5967] ? lock_release+0x201/0x2f0 [ 75.240653][ T5967] ? bpf_ksym_find+0x127/0x1c0 [ 75.240670][ T5967] ? __pfx___mutex_lock+0x10/0x10 [ 75.240688][ T5967] ? is_bpf_text_address+0x94/0x1a0 [ 75.240702][ T5967] ? kernel_text_address+0x8d/0x100 [ 75.240718][ T5967] ? arch_stack_walk+0xa6/0x100 [ 75.240736][ T5967] ? nbd_queue_rq+0x423/0x12d0 [ 75.240753][ T5967] nbd_queue_rq+0x423/0x12d0 [ 75.240770][ T5967] ? stack_trace_save+0x8e/0xc0 [ 75.240791][ T5967] ? __pfx_nbd_queue_rq+0x10/0x10 [ 75.240808][ T5967] ? save_trace+0x4e/0x380 [ 75.240825][ T5967] ? add_lock_to_list+0x9d/0x130 [ 75.240844][ T5967] ? lockdep_unlock+0x64/0xe0 [ 75.240860][ T5967] ? __lock_acquire+0x107f/0x1ce0 [ 75.240881][ T5967] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 75.240896][ T5967] ? sbitmap_find_bit+0x500/0x6f0 [ 75.240911][ T5967] ? sbitmap_get+0x1e5/0x360 [ 75.240922][ T5967] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 75.240938][ T5967] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 75.240952][ T5967] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 75.240977][ T5967] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 75.241008][ T5967] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 75.241031][ T5967] blk_mq_run_hw_queue+0x239/0x670 [ 75.241051][ T5967] ? blk_mq_run_hw_queue+0x22b/0x670 [ 75.241072][ T5967] blk_mq_dispatch_list+0x514/0x1310 [ 75.241088][ T5967] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 75.241102][ T5967] ? __pfx_update_io_ticks+0x10/0x10 [ 75.241116][ T5967] blk_mq_flush_plug_list+0x130/0x600 [ 75.241130][ T5967] ? trace_block_plug+0x17f/0x200 [ 75.241149][ T5967] ? blk_add_rq_to_plug+0x30a/0x540 [ 75.241163][ T5967] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 75.241178][ T5967] ? blk_mq_submit_bio+0x7b2/0x2a10 [ 75.241193][ T5967] __blk_flush_plug+0x2c4/0x4b0 [ 75.241207][ T5967] ? __pfx___blk_flush_plug+0x10/0x10 [ 75.241219][ T5967] ? __lock_acquire+0xb97/0x1ce0 [ 75.241241][ T5967] __submit_bio+0x545/0x690 [ 75.241253][ T5967] ? __pfx___submit_bio+0x10/0x10 [ 75.241268][ T5967] ? ktime_get+0x200/0x310 [ 75.241286][ T5967] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.241304][ T5967] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 75.241317][ T5967] submit_bio_noacct_nocheck+0x660/0xd30 [ 75.241331][ T5967] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 75.241345][ T5967] ? __pfx___might_resched+0x10/0x10 [ 75.241363][ T5967] submit_bio_noacct+0xc20/0x1ed0 [ 75.241378][ T5967] block_read_full_folio+0x4db/0x850 [ 75.241399][ T5967] ? __pfx_blkdev_get_block+0x10/0x10 [ 75.241413][ T5967] ? __pfx_blkdev_read_folio+0x10/0x10 [ 75.241427][ T5967] filemap_read_folio+0xc5/0x2a0 [ 75.241441][ T5967] ? __pfx_filemap_read_folio+0x10/0x10 [ 75.241455][ T5967] ? __filemap_get_folio+0x32b/0xc30 [ 75.241472][ T5967] do_read_cache_folio+0x263/0x5c0 [ 75.241488][ T5967] ? __pfx_blkdev_read_folio+0x10/0x10 [ 75.241502][ T5967] read_part_sector+0xd4/0x370 [ 75.241523][ T5967] adfspart_check_ICS+0x93/0x940 [ 75.241544][ T5967] ? snprintf+0xc7/0x100 [ 75.241559][ T5967] ? __pfx_snprintf+0x10/0x10 [ 75.241574][ T5967] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 75.241596][ T5967] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 75.241617][ T5967] bdev_disk_changed+0x723/0x1520 [ 75.241639][ T5967] ? __pfx_bdev_disk_changed+0x10/0x10 [ 75.241659][ T5967] ? __pfx_ilookup+0x10/0x10 [ 75.241679][ T5967] blkdev_get_whole+0x187/0x290 [ 75.241700][ T5967] bdev_open+0x2c7/0xe40 [ 75.241714][ T5967] blkdev_open+0x34e/0x4f0 [ 75.241729][ T5967] do_dentry_open+0x97f/0x1530 [ 75.241744][ T5967] ? __pfx_blkdev_open+0x10/0x10 [ 75.241759][ T5967] vfs_open+0x82/0x3f0 [ 75.241778][ T5967] path_openat+0x1de4/0x2cb0 [ 75.241796][ T5967] ? __pfx_path_openat+0x10/0x10 [ 75.241812][ T5967] do_filp_open+0x20b/0x470 [ 75.241827][ T5967] ? __pfx_do_filp_open+0x10/0x10 [ 75.241847][ T5967] ? alloc_fd+0x471/0x7d0 [ 75.241862][ T5967] do_sys_openat2+0x11b/0x1d0 [ 75.241881][ T5967] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.241899][ T5967] ? __sys_recvmsg+0x189/0x220 [ 75.241917][ T5967] ? __pfx___sys_recvmsg+0x10/0x10 [ 75.241934][ T5967] __x64_sys_openat+0x174/0x210 [ 75.241954][ T5967] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.241975][ T5967] do_syscall_64+0xcd/0x4e0 [ 75.241998][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.242012][ T5967] RIP: 0033:0x7f7378aa7407 [ 75.242023][ T5967] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 75.242036][ T5967] RSP: 002b:00007ffefea3ae00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 75.242049][ T5967] RAX: ffffffffffffffda RBX: 00007f737918e880 RCX: 00007f7378aa7407 [ 75.242058][ T5967] RDX: 00000000000a0800 RSI: 000055a7d4a2f700 RDI: ffffffffffffff9c [ 75.242066][ T5967] RBP: 000055a7d4a2c2c0 R08: 0000000000000000 R09: 0000000000000000 [ 75.242074][ T5967] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a7d4f32e80 [ 75.242082][ T5967] R13: 000055a7d4c678d0 R14: 0000000000000000 R15: 000055a7d4f32e80 [ 75.242094][ T5967] [ 75.800634][ T30] audit: type=1400 audit(1757911439.171:116): avc: denied { connect } for pid=6033 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.820228][ T5967] block nbd0: Dead connection, failed to find a fallback [ 75.820275][ T5898] Bluetooth: hci0: command tx timeout [ 75.827918][ T5967] block nbd0: shutting down sockets [ 75.838114][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.847367][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.859311][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.868838][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.879050][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.888402][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.896355][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.906108][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.913907][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.923209][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.931356][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.940909][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.949064][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.958452][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.967265][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.976456][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.984209][ T5967] ldm_validate_partition_table(): Disk read failed. [ 75.991084][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.000279][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.008410][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.017625][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.025640][ T5967] Dev nbd0: unable to read RDB block 0 [ 76.031415][ T5967] nbd0: unable to read partition table [ 76.040138][ T5967] ldm_validate_partition_table(): Disk read failed. [ 76.047182][ T5967] Dev nbd0: unable to read RDB block 0 [ 76.052960][ T5967] nbd0: unable to read partition table