[ 376.054228][ T4866] Dev nbd0: unable to read RDB block 0 [ 376.055870][ T4866] nbd0: unable to read partition table [ 376.057424][ T4866] nbd0: partition table beyond EOD, truncated [ 376.060049][ T4866] ldm_validate_partition_table(): Disk read failed. [ 376.062732][ T4866] Dev nbd0: unable to read RDB block 0 [ 376.064370][ T4866] nbd0: unable to read partition table [ 376.065860][ T4866] nbd0: partition table beyond EOD, truncated [ 376.170627][ T5959] nbd0: detected capacity change from 0 to 2 [ 376.917446][ T4403] block nbd0: Receive control failed (result -104) [ 406.239934][ T1053] block nbd0: Possible stuck request 00000000a01afcf8: control (read@0,1024B). Runtime 30 seconds Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. [ 419.106476][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.108823][ T46] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.111281][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.113671][ T46] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.115813][ T46] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 419.117922][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.154509][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 419.172771][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.174747][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.177030][ T5967] device bridge_slave_0 entered promiscuous mode [ 419.181049][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.182935][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.185114][ T5967] device bridge_slave_1 entered promiscuous mode [ 419.194251][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.197651][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.208168][ T5967] team0: Port device team_slave_0 added [ 419.211632][ T5967] team0: Port device team_slave_1 added [ 419.218753][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.221774][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.228611][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.233695][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.235527][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.242729][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.300101][ T5967] device hsr_slave_0 entered promiscuous mode [ 419.359317][ T5967] device hsr_slave_1 entered promiscuous mode [ 419.409124][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.411331][ T5967] Cannot create hsr debugfs directory [ 419.481091][ T5967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.550798][ T5967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.611983][ T5967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.675922][ T5967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.872368][ T5967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.910189][ T5967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.950149][ T5967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.990680][ T5967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.037294][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.039215][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.041142][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.043009][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.061881][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.066395][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.071119][ T911] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.073571][ T911] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.076239][ T911] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 420.081931][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.090400][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.092757][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.094658][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.096758][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.099117][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.100996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.105580][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.112863][ T5967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.115696][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.119512][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.121952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.124749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 420.132586][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 420.134593][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 420.138770][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.149460][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.154615][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.157346][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.163625][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.165926][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.169564][ T5967] device veth0_vlan entered promiscuous mode [ 420.173825][ T5967] device veth1_vlan entered promiscuous mode [ 420.184847][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 420.187234][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 420.189615][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.192173][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.195534][ T5967] device veth0_macvtap entered promiscuous mode [ 420.198492][ T5967] device veth1_macvtap entered promiscuous mode [ 420.204782][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.206793][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.209240][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.211427][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.213882][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.217192][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.220739][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.224338][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.226590][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.229091][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.232630][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.234946][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.237239][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.240600][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.263462][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.265514][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.268843][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 420.276692][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.278803][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.282869][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.199918][ T4403] Bluetooth: hci1: command 0x0409 tx timeout [ 423.279159][ T46] Bluetooth: hci1: command 0x041b tx timeout [ 425.359507][ T4403] Bluetooth: hci1: command 0x040f tx timeout [ 427.439125][ T4403] Bluetooth: hci1: command 0x0419 tx timeout [ 433.119453][ T1372] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.121212][ T1372] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.319814][ T1053] block nbd0: Possible stuck request 00000000a01afcf8: control (read@0,1024B). Runtime 60 seconds [ 438.296225][ T3924] udevd[3924]: worker [4866] /devices/virtual/block/nbd0 is taking a long time [ 466.399207][ T1053] block nbd0: Possible stuck request 00000000a01afcf8: control (read@0,1024B). Runtime 90 seconds [ 494.559863][ T1372] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.561546][ T1372] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.479190][ T1053] block nbd0: Possible stuck request 00000000a01afcf8: control (read@0,1024B). Runtime 120 seconds [ 526.559277][ T1053] block nbd0: Possible stuck request 00000000a01afcf8: control (read@0,1024B). Runtime 150 seconds [ 538.079209][ T27] INFO: task syz-executor.0:5958 blocked for more than 143 seconds. [ 538.081473][ T27] Not tainted 6.2.0-rc2-syzkaller-00127-g69b41ac87e4a #0 [ 538.083536][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.085765][ T27] task:syz-executor.0 state:D stack:0 pid:5958 ppid:4867 flags:0x00000009 [ 538.088247][ T27] Call trace: [ 538.089226][ T27] __switch_to+0x180/0x298 [ 538.090449][ T27] __schedule+0x438/0x5a0 [ 538.091596][ T27] schedule+0x64/0xa4 [ 538.092674][ T27] schedule_preempt_disabled+0x18/0x2c [ 538.094101][ T27] __mutex_lock_common+0x788/0xca8 [ 538.095489][ T27] mutex_lock_nested+0x38/0x44 [ 538.096759][ T27] nbd_start_device_ioctl+0x1f0/0x2b8 [ 538.098215][ T27] __nbd_ioctl+0x16c/0x334 [ 538.099461][ T27] nbd_ioctl+0xec/0x13c [ 538.100587][ T27] blkdev_ioctl+0x24c/0x6d8 [ 538.101760][ T27] __arm64_sys_ioctl+0xd0/0x140 [ 538.103028][ T27] el0_svc_common+0x138/0x220 [ 538.104271][ T27] do_el0_svc+0x48/0x140 [ 538.105373][ T27] el0_svc+0x58/0x150 [ 538.106462][ T27] el0t_64_sync_handler+0x84/0xf0 [ 538.107793][ T27] el0t_64_sync+0x190/0x194 [ 538.108959][ T27] INFO: task syz-executor.0:5959 blocked for more than 143 seconds. [ 538.111194][ T27] Not tainted 6.2.0-rc2-syzkaller-00127-g69b41ac87e4a #0 [ 538.113210][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.115543][ T27] task:syz-executor.0 state:D stack:0 pid:5959 ppid:4867 flags:0x00000001 [ 538.117951][ T27] Call trace: [ 538.118810][ T27] __switch_to+0x180/0x298 [ 538.120038][ T27] __schedule+0x438/0x5a0 [ 538.121311][ T27] schedule+0x64/0xa4 [ 538.122364][ T27] blk_mq_freeze_queue_wait+0x94/0xf4 [ 538.123763][ T27] blk_freeze_queue+0x94/0xa8 [ 538.125013][ T27] blk_mq_freeze_queue+0x20/0x30 [ 538.126376][ T27] nbd_add_socket+0x78/0x27c [ 538.127638][ T27] __nbd_ioctl+0x80/0x334 [ 538.128858][ T27] nbd_ioctl+0xec/0x13c [ 538.130060][ T27] blkdev_ioctl+0x24c/0x6d8 [ 538.131251][ T27] __arm64_sys_ioctl+0xd0/0x140 [ 538.132566][ T27] el0_svc_common+0x138/0x220 [ 538.133892][ T27] do_el0_svc+0x48/0x140 [ 538.134998][ T27] el0_svc+0x58/0x150 [ 538.136069][ T27] el0t_64_sync_handler+0x84/0xf0 [ 538.137435][ T27] el0t_64_sync+0x190/0x194 [ 538.138627][ T27] [ 538.138627][ T27] Showing all locks held in the system: [ 538.140810][ T27] 1 lock held by rcu_tasks_kthre/11: [ 538.142179][ T27] #0: ffff80000d635648 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 [ 538.145016][ T27] 1 lock held by rcu_tasks_trace/12: [ 538.146414][ T27] #0: ffff80000d635c98 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 [ 538.149462][ T27] 1 lock held by khungtaskd/27: [ 538.150764][ T27] #0: ffff80000d635520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x4/0x48 [ 538.153231][ T27] 2 locks held by getty/4074: [ 538.154467][ T27] #0: ffff0000c546c898 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x28/0x58 [ 538.157163][ T27] #1: ffff80000f8462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x19c/0x89c [ 538.159946][ T27] 1 lock held by udevd/4866: [ 538.161209][ T27] #0: ffff0000c424ccc8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0x2fc [ 538.163831][ T27] 1 lock held by syz-executor.0/5958: [ 538.165264][ T27] #0: ffff0000c5eec5a0 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_start_device_ioctl+0x1f0/0x2b8 [ 538.168093][ T27] 1 lock held by syz-executor.0/5959: [ 538.169552][ T27] #0: ffff0000c5eec5a0 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x70/0x13c [ 538.172057][ T27] 1 lock held by syz-executor293/5981: [ 538.173514][ T27] #0: ffff0000c424ccc8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0x2fc [ 538.176222][ T27] 1 lock held by syz-executor293/5982: [ 538.177665][ T27] #0: ffff0000c424ccc8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfc/0x2fc [ 538.180464][ T27] [ 538.181092][ T27] ============================================= [ 538.181092][ T27] [ 538.183322][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 538.185153][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.2.0-rc2-syzkaller-00127-g69b41ac87e4a #0 [ 538.187762][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 538.190490][ T27] Call trace: [ 538.191370][ T27] dump_backtrace+0x1c4/0x1f0 [ 538.192599][ T27] show_stack+0x2c/0x3c [ 538.193727][ T27] dump_stack_lvl+0x104/0x16c [ 538.195008][ T27] dump_stack+0x1c/0x58 [ 538.196121][ T27] panic+0x218/0x508 [ 538.197158][ T27] hung_task_panic+0x0/0x2c [ 538.198402][ T27] kthread+0x12c/0x158 [ 538.199517][ T27] ret_from_fork+0x10/0x20 [ 538.200756][ T27] SMP: stopping secondary CPUs [ 538.202073][ T27] Kernel Offset: disabled [ 538.203275][ T27] CPU features: 0x00000,040e0108,4c017203 [ 538.204848][ T27] Memory Limit: none [ 538.841514][ T27] Rebooting in 86400 seconds..