[ 98.140940][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 98.418857][ T167] hsr_slave_0: left promiscuous mode [ 98.458080][ T167] hsr_slave_1: left promiscuous mode [ 98.458754][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.458796][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.519398][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.519421][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.697857][ T167] hsr_slave_0: left promiscuous mode [ 98.717795][ T167] hsr_slave_1: left promiscuous mode [ 98.718337][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.718351][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.759134][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.759156][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.830375][ T167] veth1_macvtap: left promiscuous mode [ 98.830499][ T167] veth0_macvtap: left promiscuous mode [ 98.830634][ T167] veth1_vlan: left promiscuous mode [ 98.830776][ T167] veth0_vlan: left promiscuous mode [ 98.958296][ T167] veth1_macvtap: left promiscuous mode [ 98.958347][ T167] veth0_macvtap: left promiscuous mode [ 98.958479][ T167] veth1_vlan: left promiscuous mode [ 98.958564][ T167] veth0_vlan: left promiscuous mode [ 99.628729][ T167] team0 (unregistering): Port device team_slave_1 removed [ 99.668313][ T167] team0 (unregistering): Port device team_slave_0 removed [ 100.108494][ T167] team0 (unregistering): Port device team_slave_1 removed [ 100.148287][ T167] team0 (unregistering): Port device team_slave_0 removed [ 100.279414][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [+] write hung_task_timeout_secs successful. [+] Starting netns threads... [+] pthread_create successful. [+] Starting mmap worker on CPU 0... [+] fork worker successful. [+] sched_setaffinity successful. [+] sched_setscheduler successful. [+] open testfile_0 successful. [+] ftruncate successful. [ 163.430600][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.445803][ T38] INFO: task pool_workqueue_:3 blocked for more than 40 seconds. [ 163.445826][ T38] Not tainted syzkaller #0 [ 163.445837][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 163.445844][ T38] task:pool_workqueue_ state:D stack:28024 pid:3 tgid:3 ppid:2 task_flags:0x208040 flags:0x00080000 [ 163.445911][ T38] Call Trace: [ 163.445917][ T38] [ 163.445928][ T38] __schedule+0x11f6/0x6500 [ 163.445998][ T38] ? __pfx___schedule+0x10/0x10 [ 163.446023][ T38] ? find_held_lock+0x2b/0x80 [ 163.446045][ T38] ? schedule+0x225/0x2c0 [ 163.446076][ T38] schedule+0xdd/0x2c0 [ 163.446102][ T38] schedule_timeout+0x1b2/0x280 [ 163.446129][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 163.446161][ T38] ? __wait_for_common+0x2da/0x4c0 [ 163.446191][ T38] ? rcu_is_watching+0x12/0xc0 [ 163.446216][ T38] __wait_for_common+0x2e7/0x4c0 [ 163.446245][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 163.446276][ T38] ? __pfx___wait_for_common+0x10/0x10 [ 163.446306][ T38] ? rcu_is_watching+0x12/0xc0 [ 163.446325][ T38] ? _raw_spin_unlock_irqrestore+0x52/0x90 [ 163.446355][ T38] ? lockdep_hardirqs_on+0x78/0x100 [ 163.446390][ T38] synchronize_rcu_normal+0x230/0x260 [ 163.446416][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 163.446443][ T38] ? trace_sched_exit_tp+0x120/0x160 [ 163.446468][ T38] ? __schedule+0x1208/0x6500 [ 163.446504][ T38] ? __lock_acquire+0x48f/0x1a30 [ 163.446539][ T38] ? __pfx___might_resched+0x10/0x10 [ 163.446574][ T38] synchronize_rcu_expedited+0x3cd/0x450 [ 163.446601][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 163.446634][ T38] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 163.446672][ T38] pwq_release_workfn+0x618/0xb30 [ 163.446698][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.446729][ T38] kthread_worker_fn+0x300/0xbe0 [ 163.446758][ T38] ? __pfx_pwq_release_workfn+0x10/0x10 [ 163.446784][ T38] ? kthread+0x13a/0x450 [ 163.446810][ T38] ? __pfx_kthread_worker_fn+0x10/0x10 [ 163.446836][ T38] kthread+0x370/0x450 [ 163.446863][ T38] ? __pfx_kthread+0x10/0x10 [ 163.446893][ T38] ret_from_fork+0x72b/0xd50 [ 163.446921][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 163.446949][ T38] ? __switch_to+0x800/0x10f0 [ 163.446971][ T38] ? __pfx_kthread+0x10/0x10 [ 163.447006][ T38] ret_from_fork_asm+0x1a/0x30 [ 163.447040][ T38] [ 163.447059][ T38] INFO: task kworker/1:0:31 blocked for more than 40 seconds. [ 163.447072][ T38] Not tainted syzkaller #0 [ 163.447082][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 163.447089][ T38] task:kworker/1:0 state:D stack:23320 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 163.447144][ T38] Workqueue: events_power_efficient crda_timeout_work [ 163.447173][ T38] Call Trace: [ 163.447179][ T38] [ 163.447190][ T38] __schedule+0x11f6/0x6500 [ 163.447216][ T38] ? __lock_acquire+0x48f/0x1a30 [ 163.447256][ T38] ? __pfx___schedule+0x10/0x10 [ 163.447291][ T38] rt_mutex_schedule+0x96/0xe0 [ 163.447313][ T38] rt_mutex_slowlock_block.constprop.0+0x366/0x7c0 [ 163.447347][ T38] __rt_mutex_slowlock_locked.constprop.0+0x1cc/0x760 [ 163.447380][ T38] ? __pfx___rt_mutex_slowlock_locked.constprop.0+0x10/0x10 [ 163.455243][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.634634][ T38] ? _raw_spin_lock_irqsave+0x52/0x60 [ 163.634681][ T38] rt_mutex_slowlock.constprop.0+0x8d/0x120 [ 163.634707][ T38] ? __pfx_rt_mutex_slowlock.constprop.0+0x10/0x10 [ 163.634738][ T38] ? crda_timeout_work+0x16/0x70 [ 163.634764][ T38] mutex_lock_nested+0xd6/0x110 [ 163.634788][ T38] crda_timeout_work+0x16/0x70 [ 163.634813][ T38] process_one_work+0xa23/0x1940 [ 163.634857][ T38] ? __pfx_process_one_work+0x10/0x10 [ 163.634896][ T38] ? __pfx_crda_timeout_work+0x10/0x10 [ 163.634925][ T38] worker_thread+0x5ef/0xe50 [ 163.634955][ T38] ? kthread+0x13a/0x450 [ 163.634991][ T38] ? __pfx_worker_thread+0x10/0x10 [ 163.635009][ T38] kthread+0x370/0x450 [ 163.635036][ T38] ? __pfx_kthread+0x10/0x10 [ 163.635066][ T38] ret_from_fork+0x72b/0xd50 [ 163.635095][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 163.635123][ T38] ? __switch_to+0x800/0x10f0 [ 163.635144][ T38] ? __pfx_kthread+0x10/0x10 [ 163.635174][ T38] ret_from_fork_asm+0x1a/0x30 [ 163.635208][ T38] [ 163.635246][ T38] INFO: task kworker/u8:7:167 blocked for more than 40 seconds. [ 163.635260][ T38] Not tainted syzkaller #0 [ 163.635271][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 163.635278][ T38] task:kworker/u8:7 state:D stack:22608 pid:167 tgid:167 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 163.635330][ T38] Workqueue: netns cleanup_net [ 163.635354][ T38] Call Trace: [ 163.635360][ T38] [ 163.635370][ T38] __schedule+0x11f6/0x6500 [ 163.635406][ T38] ? __lock_acquire+0x48f/0x1a30 [ 163.635439][ T38] ? __pfx___schedule+0x10/0x10 [ 163.635463][ T38] ? find_held_lock+0x2b/0x80 [ 163.635483][ T38] ? schedule+0x225/0x2c0 [ 163.635513][ T38] schedule+0xdd/0x2c0 [ 163.635539][ T38] schedule_timeout+0x1b2/0x280 [ 163.635566][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 163.635601][ T38] ? mark_held_locks+0x40/0x70 [ 163.635630][ T38] __wait_for_common+0x2e7/0x4c0 [ 163.635658][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 163.635689][ T38] ? __pfx___wait_for_common+0x10/0x10 [ 163.635720][ T38] ? mark_held_locks+0x40/0x70 [ 163.635744][ T38] ? _raw_spin_unlock_irqrestore+0x52/0x90 [ 163.635774][ T38] ? lockdep_hardirqs_on+0x78/0x100 [ 163.635808][ T38] synchronize_rcu_normal+0x230/0x260 [ 163.635835][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 163.635880][ T38] ? do_raw_spin_lock+0x128/0x260 [ 163.635917][ T38] ? __pfx___might_resched+0x10/0x10 [ 163.635953][ T38] synchronize_rcu_expedited+0x3cd/0x450 [ 163.635987][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 163.796742][ T38] ? __pfx___might_resched+0x10/0x10 [ 163.796790][ T38] dev_remove_pack+0x7a/0xb0 [ 163.796823][ T38] tipc_detach_loopback+0x5b/0x110 [ 163.796857][ T38] tipc_exit_net+0x8b/0x260 [ 163.796877][ T38] ? __pfx_tipc_exit_net+0x10/0x10 [ 163.796902][ T38] ? __pfx___might_resched+0x10/0x10 [ 163.796930][ T38] ? kfree+0x22b/0x630 [ 163.796966][ T38] ? __pfx_tipc_exit_net+0x10/0x10 [ 163.796987][ T38] ops_undo_list+0x2ee/0xab0 [ 163.797015][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 163.797036][ T38] ? rt_spin_unlock+0x88/0x1e0 [ 163.797062][ T38] ? idr_destroy+0x68/0x2f0 [ 163.797092][ T38] cleanup_net+0x49c/0x920 [ 163.797117][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 163.797145][ T38] ? rcu_is_watching+0x12/0xc0 [ 163.797170][ T38] process_one_work+0xa23/0x1940 [ 163.797214][ T38] ? __pfx_process_one_work+0x10/0x10 [ 163.797253][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 163.797279][ T38] worker_thread+0x5ef/0xe50 [ 163.797310][ T38] ? kthread+0x13a/0x450 [ 163.797337][ T38] ? __pfx_worker_thread+0x10/0x10 [ 163.797355][ T38] kthread+0x370/0x450 [ 163.797382][ T38] ? __pfx_kthread+0x10/0x10 [ 163.797412][ T38] ret_from_fork+0x72b/0xd50 [ 163.797440][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 163.797468][ T38] ? __switch_to+0x800/0x10f0 [ 163.797490][ T38] ? __pfx_kthread+0x10/0x10 [ 163.797520][ T38] ret_from_fork_asm+0x1a/0[ 163.797520][ T38] ret_from_fork_asm+0x1a/0x30 [ 163.797554][ T38] [ 163.817619][ T38] [ 163.817619][ T38] Showing all locks held in the system: [ 163.817636][ T38] 4 locks held by ktimers/0/16: [ 163.817650][ T38] 3 locks held by pr/legacy/17: [ 163.837402][ T38] 2 locks held by rcu_preempt/18: [ 163.837423][ T38] 3 locks held by kworker/1:0/31: [ 163.837433][ T38] #0: ffff88813fe3e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 163.837526][ T38] #1: ffffc90000a5fd08 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 163.837582][ T38] #2: ffffffff8fd25398 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70 [ 163.837634][ T38] 1 lock held by khungtaskd/38: [ 163.951745][ T38] #0: ffffffff8e04e740 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 163.951812][ T38] 2 locks held by kcompactd0/41: [ 163.951824][ T38] #0: ffffffff8ebe21a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x223/0x660 [ 163.951873][ T38] #1: ffff88813fe20758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x149/0x4e0 [ 163.951928][ T38] 2 locks held by kcompactd1/42: [ 163.951945][ T38] #0: ffffffff8ebe21a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x223/0x660 [ 163.951990][ T38] #1: ffff88813fe20758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x149/0x4e0 [ 163.952044][ T38] 7 locks held by kworker/u8:4/66: [ 163.952056][ T38] 2 locks held by kworker/0:1H/102: [ 163.952068][ T38] 7 locks held by kworker/u8:5/122: [ 163.952080][ T38] 3 locks held by kworker/u8:7/167: [ 163.952090][ T38] #0: ffff88801bae0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 163.952147][ T38] #1: ffffc900038ffd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 163.952201][ T38] #2: ffffffff8fd0cc60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 163.952271][ T38] 2 locks held by dhcpcd/5248: [ 163.952282][ T38] #0: ffffffff8ebe21a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x223/0x660 [ 163.952329][ T38] #1: ffff88813fe20758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x149/0x4e0 [ 163.952382][ T38] 2 locks held by getty/5341: [ 163.952392][ T38] #0: ffff8880384d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 163.952443][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x424/0x14f0 [ 163.952491][ T38] 4 locks held by udevd/5614: [ 163.952502][ T38] 3 locks held by kworker/1:4/5645: [ 163.952516][ T38] 1 lock held by syz-executor663/5977: [ 163.952541][ T38] 2 locks held by syz-executor663/6203: [ 163.952552][ T38] 2 locks held by syz-executor663/6205: [ 163.952563][ T38] 2 locks held by syz-executor663/6207: [ 163.952574][ T38] #0: ffffffff8fd0cc60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 163.952620][ T38] #1: ffffffff8fd25398 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 163.952673][ T38] 2 locks held by syz-executor663/6209: [ 163.952685][ T38] 1 lock held by dhcpcd/6211: [ 163.952695][ T38] #0: ffff88803e628358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 163.952740][ T38] 1 lock held by dhcpcd/6212: [ 163.952751][ T38] #0: ffff88803b75e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 163.952795][ T38] 1 lock held by dhcpcd/6213: [ 163.952806][ T38] #0: ffff88803c2bc358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 163.952850][ T38] 3 locks held by dhcpcd/6214: [ 163.952860][ T38] #0: ffff88802eceacb0 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x946/0xdd0 [ 163.952916][ T38] #1: ffffffff8ebe21a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x223/0x660 [ 163.952971][ T38] #2: ffff88813fe20758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x149/0x4e0 [ 163.953023][ T38] 1 lock held by dhcpcd/6215: [ 163.953033][ T38] #0: ffff88803c2b8358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 163.953078][ T38] 1 lock held by dhcpcd/6216: [ 163.953088][ T38] #0: ffff88803c2be358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 163.953133][ T38] 1 lock held by dhcpcd/6217: [ 164.065536][ T38] #0: ffff88803b534358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 164.065596][ T38] 1 lock held by dhcpcd/6218: [ 164.065607][ T38] #0: ffff88803b4a8358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 164.065652][ T38] 1 lock held by dhcpcd/6219: [ 164.065663][ T38] #0: ffff88803b4aa358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 164.065707][ T38] 3 locks held by dhcpcd/6220: [ 164.065717][ T38] #0: ffff888032b6acb0 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x10f/0x390 [ 164.065764][ T38] #1: ffffffff8ebe21a0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x223/0x660 [ 164.065812][ T38] #2: ffff88813fe20758 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x149/0x4e0 [ 164.065867][ T38] [ 164.065871][ T38] ============================================= [ 164.065871][ T38] [ 164.065898][ T38] NMI backtrace for cpu 1 [ 164.065932][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.065955][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.065966][ T38] Call Trace: [ 164.065973][ T38] [ 164.065980][ T38] dump_stack_lvl+0x100/0x190 [ 164.066008][ T38] nmi_cpu_backtrace.cold+0x12d/0x151 [ 164.066036][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 164.066064][ T38] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 164.066094][ T38] sys_info+0x141/0x190 [ 164.066115][ T38] watchdog+0xcb1/0x1030 [ 164.066144][ T38] ? _raw_spin_unlock_irqrestore+0x52/0x90 [ 164.066174][ T38] ? __pfx_watchdog+0x10/0x10 [ 164.066198][ T38] ? __kthread_parkme+0x18c/0x230 [ 164.066226][ T38] ? kthread+0x13a/0x450 [ 164.066252][ T38] ? __pfx_watchdog+0x10/0x10 [ 164.066272][ T38] kthread+0x370/0x450 [ 164.066298][ T38] ? __pfx_kthread+0x10/0x10 [ 164.066327][ T38] ret_from_fork+0x72b/0xd50 [ 164.066355][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 164.066382][ T38] ? __switch_to+0x800/0x10f0 [ 164.066403][ T38] ? __pfx_kthread+0x10/0x10 [ 164.066431][ T38] ret_from_fork_asm+0x1a/0x30 [ 164.066463][ T38] [ 164.066470][ T38] Sending NMI from CPU 1 to CPUs 0: [ 164.066502][ C0] NMI backtrace for cpu 0 [ 164.066514][ C0] CPU: 0 UID: 0 PID: 5977 Comm: syz-executor663 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.066534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.066544][ C0] RIP: 0010:write_comp_data+0x2e/0xa0 [ 164.066564][ C0] Code: 89 cf 49 89 d2 65 8b 15 20 a2 53 11 65 48 8b 0d 00 a2 53 11 49 89 f1 81 e2 00 00 ff 00 8b 81 f4 0b 00 00 89 d6 25 00 01 00 00 <09> c6 74 17 85 c0 74 04 85 d2 74 05 c3 cc cc cc cc 8b 81 f4 16 00 [ 164.066579][ C0] RSP: 0018:ffffc900038cf6e0 EFLAGS: 00000246 [ 164.066595][ C0] RAX: 0000000000000000 RBX: ffff88803870d200 RCX: ffff888027d98000 [ 164.066606][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8b0988ac [ 164.066617][ C0] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000007 [ 164.066627][ C0] R10: 000000000000000b R11: 0000000000000000 R12: ffff888041231b40 [ 164.066637][ C0] R13: 0000000000000007 R14: 0000000000000001 R15: 0000000000000000 [ 164.066648][ C0] FS: 000055556f5b4400(0000) GS:ffff888125097000(0000) knlGS:0000000000000000 [ 164.066664][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.066675][ C0] CR2: 00007f2474af7d3c CR3: 000000003d734000 CR4: 00000000003506f0 [ 164.066686][ C0] Call Trace: [ 164.066691][ C0] [ 164.066696][ C0] mt_validate_nulls+0x48c/0xa20 [ 164.066717][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 164.066737][ C0] ? mas_prev_node+0x1da/0xf10 [ 164.066756][ C0] mt_validate+0x188d/0x3220 [ 164.066779][ C0] ? __pfx_mt_validate+0x10/0x10 [ 164.066803][ C0] validate_mm+0xa8/0x4e0 [ 164.066829][ C0] ? __pfx_validate_mm+0x10/0x10 [ 164.066855][ C0] ? __pfx_mt_find+0x10/0x10 [ 164.066875][ C0] mmap_region+0x38d/0x620 [ 164.066892][ C0] ? __pfx_mmap_region+0x10/0x10 [ 164.066910][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 164.066931][ C0] ? security_mmap_addr+0x71/0x1e0 [ 164.066954][ C0] ? __get_unmapped_area+0x260/0x390 [ 164.066977][ C0] do_mmap+0xc74/0x1300 [ 164.067000][ C0] ? __pfx_do_mmap+0x10/0x10 [ 164.067021][ C0] ? __pfx___might_resched+0x10/0x10 [ 164.067049][ C0] vm_mmap_pgoff+0x2a4/0x470 [ 164.067073][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 164.067094][ C0] ? __fget_files+0x224/0x3e0 [ 164.067120][ C0] ? __fget_files+0x22e/0x3e0 [ 164.067145][ C0] ksys_mmap_pgoff+0x3d1/0x620 [ 164.067168][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 164.067188][ C0] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 164.067212][ C0] __x64_sys_mmap+0x125/0x190 [ 164.067235][ C0] do_syscall_64+0x10b/0x830 [ 164.067259][ C0] ? clear_bhb_loop+0x70/0xc0 [ 164.067279][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.067296][ C0] RIP: 0033:0x7f2474a89122 [ 164.067313][ C0] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 d0 ff ff ff 64 [ 164.067327][ C0] RSP: 002b:00007ffc98fd5ca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 164.067342][ C0] RAX: ffffffffffffffda RBX: 0000001b2e964000 RCX: 00007f2474a89122 [ 164.067354][ C0] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2e964000 [ 164.067364][ C0] RBP: 0000000000100001 R08: 0000000000000003 R09: 0000000000040000 [ 164.067374][ C0] R10: 0000000000100001 R11: 0000000000000206 R12: 00007ffc98fd5cc0 [ 164.067384][ C0] R13: 0000000000000002 R14: 00007f2474b27560 R15: 0000000000000002 [ 164.067401][ C0] [ 164.254347][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 164.254366][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.254390][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.254402][ T38] Call Trace: [ 164.254408][ T38] [ 164.254416][ T38] dump_stack_lvl+0x100/0x190 [ 164.254448][ T38] vpanic+0x552/0x970 [ 164.254468][ T38] ? __pfx_vpanic+0x10/0x10 [ 164.254495][ T38] panic+0xd1/0xe0 [ 164.254513][ T38] ? __pfx_panic+0x10/0x10 [ 164.254535][ T38] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 164.254563][ T38] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 164.254587][ T38] ? watchdog.cold+0x1ec/0x234 [ 164.254611][ T38] watchdog.cold+0x1fd/0x234 [ 164.254638][ T38] ? _raw_spin_unlock_irqrestore+0x52/0x90 [ 164.254669][ T38] ? __pfx_watchdog+0x10/0x10 [ 164.254693][ T38] ? __kthread_parkme+0x18c/0x230 [ 164.254722][ T38] ? kthread+0x13a/0x450 [ 164.254748][ T38] ? __pfx_watchdog+0x10/0x10 [ 164.254769][ T38] kthread+0x370/0x450 [ 164.254795][ T38] ? __pfx_kthread+0x10/0x10 [ 164.254824][ T38] ret_from_fork+0x72b/0xd50 [ 164.254853][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 164.254880][ T38] ? __switch_to+0x800/0x10f0 [ 164.254901][ T38] ? __pfx_kthread+0x10/0x10 [ 164.254936][ T38] ret_from_fork_asm+0x1a/0x30 [ 164.254969][ T38] [ 164.255180][ T38] Kernel Offset: disabled