Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 24.776771][ T6530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.778079][ T6530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.779455][ T6530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.782766][ T6530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.784354][ T6530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 25.048245][ T6530] block nbd0: Receive control failed (result -107) [ 25.048607][ T6124] block nbd0: Receive control failed (result -107) [ 25.085564][ T6528] nbd0: detected capacity change from 0 to 32 [ 25.087279][ T6531] [ 25.087662][ T6531] ====================================================== [ 25.088739][ T6531] WARNING: possible circular locking dependency detected [ 25.089793][ T6531] syzkaller #0 Not tainted [ 25.090461][ T6531] ------------------------------------------------------ [ 25.091531][ T6531] udevd/6531 is trying to acquire lock: [ 25.092329][ T6531] ffff0001ffb32070 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x20c/0xc48 [ 25.093658][ T6531] [ 25.093658][ T6531] but task is already holding lock: [ 25.094749][ T6531] ffff0000e184e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xb4/0xc48 [ 25.096094][ T6531] [ 25.096094][ T6531] which lock already depends on the new lock. [ 25.096094][ T6531] [ 25.097732][ T6531] [ 25.097732][ T6531] the existing dependency chain (in reverse order) is: [ 25.099103][ T6531] [ 25.099103][ T6531] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 25.100155][ T6531] __mutex_lock_common+0x1d0/0x2678 [ 25.101024][ T6531] mutex_lock_nested+0x2c/0x38 [ 25.101791][ T6531] nbd_queue_rq+0xb4/0xc48 [ 25.102544][ T6531] blk_mq_dispatch_rq_list+0x890/0x1548 [ 25.103524][ T6531] __blk_mq_sched_dispatch_requests+0xa7c/0x10e4 [ 25.104533][ T6531] blk_mq_sched_dispatch_requests+0xa4/0x154 [ 25.105632][ T6531] blk_mq_run_hw_queue+0x2d0/0x4a4 [ 25.106443][ T6531] blk_mq_dispatch_list+0xa00/0xaf8 [ 25.107345][ T6531] blk_mq_flush_plug_list+0x3a4/0x488 [ 25.108287][ T6531] __blk_flush_plug+0x330/0x408 [ 25.109142][ T6531] __submit_bio+0x3f4/0x4d8 [ 25.109919][ T6531] submit_bio_noacct_nocheck+0x390/0xaac [ 25.110914][ T6531] submit_bio_noacct+0xc94/0x177c [ 25.111788][ T6531] submit_bio+0x3b4/0x550 [ 25.112601][ T6531] submit_bh_wbc+0x3ec/0x4bc [ 25.113470][ T6531] block_read_full_folio+0x734/0x824 [ 25.114369][ T6531] blkdev_read_folio+0x28/0x38 [ 25.115241][ T6531] filemap_read_folio+0xec/0x2f8 [ 25.116112][ T6531] do_read_cache_folio+0x364/0x5bc [ 25.117005][ T6531] read_cache_folio+0x68/0x88 [ 25.117760][ T6531] read_part_sector+0xcc/0x6fc [ 25.118578][ T6531] adfspart_check_ICS+0xa0/0x83c [ 25.119395][ T6531] bdev_disk_changed+0x674/0x11fc [ 25.120328][ T6531] blkdev_get_whole+0x2b0/0x4a4 [ 25.121194][ T6531] bdev_open+0x3b0/0xc20 [ 25.122041][ T6531] blkdev_open+0x300/0x440 [ 25.122771][ T6531] do_dentry_open+0x7a4/0x10bc [ 25.123596][ T6531] vfs_open+0x44/0x2d4 [ 25.124393][ T6531] path_openat+0x2424/0x2c40 [ 25.125189][ T6531] do_filp_open+0x18c/0x36c [ 25.125962][ T6531] do_sys_openat2+0x11c/0x1b4 [ 25.126795][ T6531] __arm64_sys_openat+0x120/0x158 [ 25.127718][ T6531] invoke_syscall+0x98/0x2b8 [ 25.128469][ T6531] el0_svc_common+0x130/0x23c [ 25.129272][ T6531] do_el0_svc+0x48/0x58 [ 25.129980][ T6531] el0_svc+0x5c/0x254 [ 25.130645][ T6531] el0t_64_sync_handler+0x84/0x12c [ 25.131538][ T6531] el0t_64_sync+0x198/0x19c [ 25.132311][ T6531] [ 25.132311][ T6531] -> #5 (set->srcu){.+.+}-{0:0}: [ 25.133438][ T6531] srcu_lock_sync+0x2c/0x38 [ 25.134180][ T6531] __synchronize_srcu+0xa0/0x348 [ 25.134963][ T6531] synchronize_srcu+0x2cc/0x338 [ 25.135738][ T6531] blk_mq_quiesce_queue+0x118/0x16c [ 25.136644][ T6531] elevator_switch+0x12c/0x410 [ 25.137478][ T6531] elevator_change+0x264/0x3cc [ 25.138354][ T6531] elevator_set_default+0x138/0x21c [ 25.139267][ T6531] blk_register_queue+0x2b4/0x338 [ 25.140090][ T6531] __add_disk+0x560/0xb90 [ 25.140860][ T6531] add_disk_fwnode+0xdc/0x438 [ 25.141696][ T6531] device_add_disk+0x38/0x4c [ 25.142477][ T6531] nbd_dev_add+0x560/0x820 [ 25.143239][ T6531] nbd_init+0x15c/0x174 [ 25.143901][ T6531] do_one_initcall+0x250/0x990 [ 25.144706][ T6531] do_initcall_level+0x128/0x1c4 [ 25.145555][ T6531] do_initcalls+0x70/0xd0 [ 25.146259][ T6531] do_basic_setup+0x78/0x8c [ 25.146975][ T6531] kernel_init_freeable+0x268/0x39c [ 25.147798][ T6531] kernel_init+0x24/0x1dc [ 25.148599][ T6531] ret_from_fork+0x10/0x20 [ 25.149348][ T6531] [ 25.149348][ T6531] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 25.150536][ T6531] __mutex_lock_common+0x1d0/0x2678 [ 25.151462][ T6531] mutex_lock_nested+0x2c/0x38 [ 25.152374][ T6531] elevator_change+0x16c/0x3cc [ 25.153228][ T6531] elevator_set_none+0x48/0xac [ 25.154061][ T6531] blk_mq_update_nr_hw_queues+0x4c8/0x15f4 [ 25.155095][ T6531] nbd_start_device+0x158/0xa48 [ 25.155921][ T6531] nbd_genl_connect+0xf88/0x158c [ 25.156840][ T6531] genl_family_rcv_msg_doit+0x1d8/0x2bc [ 25.157862][ T6531] genl_rcv_msg+0x450/0x624 [ 25.158688][ T6531] netlink_rcv_skb+0x220/0x3fc [ 25.159523][ T6531] genl_rcv+0x38/0x50 [ 25.160234][ T6531] netlink_unicast+0x694/0x8c4 [ 25.161076][ T6531] netlink_sendmsg+0x648/0x930 [ 25.161984][ T6531] ____sys_sendmsg+0x490/0x7b8 [ 25.162851][ T6531] ___sys_sendmsg+0x204/0x278 [ 25.163677][ T6531] __arm64_sys_sendmsg+0x184/0x238 [ 25.164555][ T6531] invoke_syscall+0x98/0x2b8 [ 25.165408][ T6531] el0_svc_common+0x130/0x23c [ 25.166229][ T6531] do_el0_svc+0x48/0x58 [ 25.166999][ T6531] el0_svc+0x5c/0x254 [ 25.167736][ T6531] el0t_64_sync_handler+0x84/0x12c [ 25.168619][ T6531] el0t_64_sync+0x198/0x19c [ 25.169412][ T6531] [ 25.169412][ T6531] -> #3 (&q->q_usage_counter(io)#33){++++}-{0:0}: [ 25.170829][ T6531] blk_alloc_queue+0x48c/0x54c [ 25.171620][ T6531] __blk_mq_alloc_disk+0x124/0x304 [ 25.172517][ T6531] nbd_dev_add+0x398/0x820 [ 25.173368][ T6531] nbd_init+0x15c/0x174 [ 25.174060][ T6531] do_one_initcall+0x250/0x990 [ 25.174845][ T6531] do_initcall_level+0x128/0x1c4 [ 25.175730][ T6531] do_initcalls+0x70/0xd0 [ 25.176406][ T6531] do_basic_setup+0x78/0x8c [ 25.177218][ T6531] kernel_init_freeable+0x268/0x39c [ 25.178212][ T6531] kernel_init+0x24/0x1dc [ 25.178973][ T6531] ret_from_fork+0x10/0x20 [ 25.179715][ T6531] [ 25.179715][ T6531] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 25.180822][ T6531] fs_reclaim_acquire+0x8c/0x118 [ 25.181710][ T6531] __kmalloc_cache_noprof+0x58/0x3fc [ 25.182672][ T6531] virtio_transport_do_socket_init+0x60/0x2b8 [ 25.183721][ T6531] vsock_assign_transport+0x514/0x65c [ 25.184700][ T6531] vsock_connect+0x4a8/0xb94 [ 25.185494][ T6531] __sys_connect+0x2a0/0x3ac [ 25.186328][ T6531] __arm64_sys_connect+0x7c/0x94 [ 25.187162][ T6531] invoke_syscall+0x98/0x2b8 [ 25.188026][ T6531] el0_svc_common+0x130/0x23c [ 25.188900][ T6531] do_el0_svc+0x48/0x58 [ 25.189645][ T6531] el0_svc+0x5c/0x254 [ 25.190389][ T6531] el0t_64_sync_handler+0x84/0x12c [ 25.191268][ T6531] el0t_64_sync+0x198/0x19c [ 25.192040][ T6531] [ 25.192040][ T6531] -> #1 (sk_lock-AF_VSOCK){+.+.}-{0:0}: [ 25.193202][ T6531] lock_sock_nested+0x58/0x118 [ 25.194009][ T6531] vsock_shutdown+0x70/0x280 [ 25.194742][ T6531] kernel_sock_shutdown+0x6c/0x80 [ 25.195686][ T6531] nbd_mark_nsock_dead+0x2a4/0x534 [ 25.196585][ T6531] recv_work+0x1cf8/0x2044 [ 25.197354][ T6531] process_one_work+0x7e8/0x155c [ 25.198223][ T6531] worker_thread+0x958/0xed8 [ 25.198977][ T6531] kthread+0x5fc/0x75c [ 25.199692][ T6531] ret_from_fork+0x10/0x20 [ 25.200485][ T6531] [ 25.200485][ T6531] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 25.201730][ T6531] __lock_acquire+0x1774/0x30a4 [ 25.202539][ T6531] lock_acquire+0x14c/0x2e0 [ 25.203276][ T6531] __mutex_lock_common+0x1d0/0x2678 [ 25.204084][ T6531] mutex_lock_nested+0x2c/0x38 [ 25.204945][ T6531] nbd_queue_rq+0x20c/0xc48 [ 25.205772][ T6531] blk_mq_dispatch_rq_list+0x890/0x1548 [ 25.206650][ T6531] __blk_mq_sched_dispatch_requests+0xa7c/0x10e4 [ 25.207684][ T6531] blk_mq_sched_dispatch_requests+0xa4/0x154 [ 25.208788][ T6531] blk_mq_run_hw_queue+0x2d0/0x4a4 [ 25.209743][ T6531] blk_mq_dispatch_list+0xa00/0xaf8 [ 25.210625][ T6531] blk_mq_flush_plug_list+0x3a4/0x488 [ 25.211561][ T6531] __blk_flush_plug+0x330/0x408 [ 25.212410][ T6531] __submit_bio+0x3f4/0x4d8 [ 25.213263][ T6531] submit_bio_noacct_nocheck+0x390/0xaac [ 25.214204][ T6531] submit_bio_noacct+0xc94/0x177c [ 25.215079][ T6531] submit_bio+0x3b4/0x550 [ 25.215848][ T6531] submit_bh_wbc+0x3ec/0x4bc [ 25.216667][ T6531] block_read_full_folio+0x734/0x824 [ 25.217598][ T6531] blkdev_read_folio+0x28/0x38 [ 25.218466][ T6531] filemap_read_folio+0xec/0x2f8 [ 25.219360][ T6531] do_read_cache_folio+0x364/0x5bc [ 25.220221][ T6531] read_cache_folio+0x68/0x88 [ 25.220969][ T6531] read_part_sector+0xcc/0x6fc [ 25.221836][ T6531] adfspart_check_ICS+0xa0/0x83c [ 25.222743][ T6531] bdev_disk_changed+0x674/0x11fc [ 25.223644][ T6531] blkdev_get_whole+0x2b0/0x4a4 [ 25.224535][ T6531] bdev_open+0x3b0/0xc20 [ 25.225343][ T6531] blkdev_open+0x300/0x440 [ 25.226154][ T6531] do_dentry_open+0x7a4/0x10bc [ 25.227053][ T6531] vfs_open+0x44/0x2d4 [ 25.227796][ T6531] path_openat+0x2424/0x2c40 [ 25.228619][ T6531] do_filp_open+0x18c/0x36c [ 25.229419][ T6531] do_sys_openat2+0x11c/0x1b4 [ 25.230243][ T6531] __arm64_sys_openat+0x120/0x158 [ 25.231100][ T6531] invoke_syscall+0x98/0x2b8 [ 25.231870][ T6531] el0_svc_common+0x130/0x23c [ 25.232674][ T6531] do_el0_svc+0x48/0x58 [ 25.233405][ T6531] el0_svc+0x5c/0x254 [ 25.234130][ T6531] el0t_64_sync_handler+0x84/0x12c [ 25.235017][ T6531] el0t_64_sync+0x198/0x19c [ 25.235769][ T6531] [ 25.235769][ T6531] other info that might help us debug this: [ 25.235769][ T6531] [ 25.237484][ T6531] Chain exists of: [ 25.237484][ T6531] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 25.237484][ T6531] [ 25.239522][ T6531] Possible unsafe locking scenario: [ 25.239522][ T6531] [ 25.240699][ T6531] CPU0 CPU1 [ 25.241535][ T6531] ---- ---- [ 25.242420][ T6531] lock(&cmd->lock); [ 25.243068][ T6531] lock(set->srcu); [ 25.244119][ T6531] lock(&cmd->lock); [ 25.245214][ T6531] lock(&nsock->tx_lock); [ 25.245841][ T6531] [ 25.245841][ T6531] *** DEADLOCK *** [ 25.245841][ T6531] [ 25.247180][ T6531] 3 locks held by udevd/6531: [ 25.247954][ T6531] #0: ffff0000cb97e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xcc/0xc20 [ 25.249419][ T6531] #1: ffff0000cad37e90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 [ 25.250872][ T6531] #2: ffff0000e184e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xb4/0xc48 [ 25.252370][ T6531] [ 25.252370][ T6531] stack backtrace: [ 25.253335][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: udevd Not tainted syzkaller #0 PREEMPT [ 25.254719][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 25.256333][ T6531] Call trace: [ 25.256881][ T6531] show_stack+0x2c/0x3c (C) [ 25.257570][ T6531] __dump_stack+0x30/0x40 [ 25.258153][ T6531] dump_stack_lvl+0xd8/0x12c [ 25.258888][ T6531] dump_stack+0x1c/0x28 [ 25.259581][ T6531] print_circular_bug+0x324/0x32c [ 25.260365][ T6531] check_noncircular+0x154/0x174 [ 25.261188][ T6531] __lock_acquire+0x1774/0x30a4 [ 25.261971][ T6531] lock_acquire+0x14c/0x2e0 [ 25.262695][ T6531] __mutex_lock_common+0x1d0/0x2678 [ 25.263534][ T6531] mutex_lock_nested+0x2c/0x38 [ 25.264298][ T6531] nbd_queue_rq+0x20c/0xc48 [ 25.265046][ T6531] blk_mq_dispatch_rq_list+0x890/0x1548 [ 25.265992][ T6531] __blk_mq_sched_dispatch_requests+0xa7c/0x10e4 [ 25.267012][ T6531] blk_mq_sched_dispatch_requests+0xa4/0x154 [ 25.267987][ T6531] blk_mq_run_hw_queue+0x2d0/0x4a4 [ 25.268811][ T6531] blk_mq_dispatch_list+0xa00/0xaf8 [ 25.269629][ T6531] blk_mq_flush_plug_list+0x3a4/0x488 [ 25.270543][ T6531] __blk_flush_plug+0x330/0x408 [ 25.271347][ T6531] __submit_bio+0x3f4/0x4d8 [ 25.272115][ T6531] submit_bio_noacct_nocheck+0x390/0xaac [ 25.272983][ T6531] submit_bio_noacct+0xc94/0x177c [ 25.273766][ T6531] submit_bio+0x3b4/0x550 [ 25.274415][ T6531] submit_bh_wbc+0x3ec/0x4bc [ 25.275256][ T6531] block_read_full_folio+0x734/0x824 [ 25.276141][ T6531] blkdev_read_folio+0x28/0x38 [ 25.276928][ T6531] filemap_read_folio+0xec/0x2f8 [ 25.277745][ T6531] do_read_cache_folio+0x364/0x5bc [ 25.278532][ T6531] read_cache_folio+0x68/0x88 [ 25.279219][ T6531] read_part_sector+0xcc/0x6fc [ 25.279982][ T6531] adfspart_check_ICS+0xa0/0x83c [ 25.280769][ T6531] bdev_disk_changed+0x674/0x11fc [ 25.281700][ T6531] blkdev_get_whole+0x2b0/0x4a4 [ 25.282484][ T6531] bdev_open+0x3b0/0xc20 [ 25.283174][ T6531] blkdev_open+0x300/0x440 [ 25.283874][ T6531] do_dentry_open+0x7a4/0x10bc [ 25.284622][ T6531] vfs_open+0x44/0x2d4 [ 25.285325][ T6531] path_openat+0x2424/0x2c40 [ 25.286081][ T6531] do_filp_open+0x18c/0x36c [ 25.286785][ T6531] do_sys_openat2+0x11c/0x1b4 [ 25.287559][ T6531] __arm64_sys_openat+0x120/0x158 [ 25.288382][ T6531] invoke_syscall+0x98/0x2b8 [ 25.289142][ T6531] el0_svc_common+0x130/0x23c [ 25.289860][ T6531] do_el0_svc+0x48/0x58 [ 25.290517][ T6531] el0_svc+0x5c/0x254 [ 25.291127][ T6531] el0t_64_sync_handler+0x84/0x12c [ 25.291897][ T6531] el0t_64_sync+0x198/0x19c [ 25.292829][ T6531] block nbd0: Dead connection, failed to find a fallback [ 25.292848][ T6531] block nbd0: shutting down sockets [ 25.292863][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.292881][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.292944][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.292959][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.292992][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293002][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293032][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293042][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293071][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293080][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293120][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293129][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293163][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293172][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293200][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293209][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293227][ T6531] ldm_validate_partition_table(): Disk read failed. [ 25.293246][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293255][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293282][ T6531] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.293291][ T6531] Buffer I/O error on dev nbd0, logical block 0, async page read [ 25.293352][ T6531] Dev nbd0: unable to read RDB block 0 [ 25.293467][ T6531] nbd0: unable to read partition table [ 25.325475][ T6531] ldm_validate_partition_table(): Disk read failed. [ 25.326244][ T6531] Dev nbd0: unable to read RDB block 0 [ 25.326335][ T6531] nbd0: unable to read partition table