Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
2025/12/15 15:29:39 parsed 1 programs
[ 88.143354][ T5829] cgroup: Unknown subsys name 'net'
[ 88.276707][ T5829] cgroup: Unknown subsys name 'cpuset'
[ 88.285423][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.830807][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.964147][ T130] cfg80211: failed to load regulatory.db
[ 92.645393][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 93.558072][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.567574][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.602128][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.610724][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.612022][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.620160][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.628435][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.636790][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.647655][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.915243][ T5904] chnl_net:caif_netlink_parms(): no params data found
[ 96.015542][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.023122][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.030302][ T5904] bridge_slave_0: entered allmulticast mode
[ 96.037882][ T5904] bridge_slave_0: entered promiscuous mode
[ 96.047264][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.054967][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.062192][ T5904] bridge_slave_1: entered allmulticast mode
[ 96.069475][ T5904] bridge_slave_1: entered promiscuous mode
[ 96.103350][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.115600][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.148574][ T5904] team0: Port device team_slave_0 added
[ 96.156339][ T5904] team0: Port device team_slave_1 added
[ 96.183682][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.190714][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.217051][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.230030][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.237129][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.263146][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.308969][ T5904] hsr_slave_0: entered promiscuous mode
[ 96.315702][ T5904] hsr_slave_1: entered promiscuous mode
[ 96.481093][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.493867][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.504184][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.514368][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.546338][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.553538][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.561234][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.568441][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.625423][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.643891][ T38] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.655477][ T38] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.672066][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.684815][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.692063][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.706762][ T38] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.713889][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.890815][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.934282][ T5904] veth0_vlan: entered promiscuous mode
[ 96.948575][ T5904] veth1_vlan: entered promiscuous mode
[ 96.980728][ T5904] veth0_macvtap: entered promiscuous mode
[ 96.990462][ T5904] veth1_macvtap: entered promiscuous mode
[ 97.015288][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.028904][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.043139][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.055321][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.065259][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.075552][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.201269][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.295248][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.364643][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.422432][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/12/15 15:29:52 executed programs: 0
[ 97.960548][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.969530][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.977947][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.986143][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.994314][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.164864][ T5941] chnl_net:caif_netlink_parms(): no params data found
[ 98.250332][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.257741][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.265098][ T5941] bridge_slave_0: entered allmulticast mode
[ 98.272335][ T5941] bridge_slave_0: entered promiscuous mode
[ 98.280630][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.288590][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.295835][ T5941] bridge_slave_1: entered allmulticast mode
[ 98.303324][ T5941] bridge_slave_1: entered promiscuous mode
[ 98.340153][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.352957][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.392441][ T5941] team0: Port device team_slave_0 added
[ 98.402715][ T5941] team0: Port device team_slave_1 added
[ 98.435275][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.442540][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.469009][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.481430][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.488569][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.514640][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.564683][ T5941] hsr_slave_0: entered promiscuous mode
[ 98.570988][ T5941] hsr_slave_1: entered promiscuous mode
[ 98.577590][ T5941] debugfs: 'hsr0' already exists in 'hsr'
[ 98.583462][ T5941] Cannot create hsr debugfs directory
[ 99.923087][ T36] bridge_slave_1: left allmulticast mode
[ 99.928873][ T36] bridge_slave_1: left promiscuous mode
[ 99.935445][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.947536][ T36] bridge_slave_0: left allmulticast mode
[ 99.954157][ T36] bridge_slave_0: left promiscuous mode
[ 99.959929][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.042561][ T52] Bluetooth: hci0: command tx timeout
[ 100.294595][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.307080][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.320459][ T36] bond0 (unregistering): Released all slaves
[ 100.439947][ T36] hsr_slave_0: left promiscuous mode
[ 100.447638][ T36] hsr_slave_1: left promiscuous mode
[ 100.454743][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.462200][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.470277][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.477800][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.498375][ T36] veth1_macvtap: left promiscuous mode
[ 100.504256][ T36] veth0_macvtap: left promiscuous mode
[ 100.510014][ T36] veth1_vlan: left promiscuous mode
[ 100.515532][ T36] veth0_vlan: left promiscuous mode
[ 100.792824][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 100.819376][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 101.231344][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.247742][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.259382][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.286862][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.615653][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.650059][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.668442][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.675712][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.695525][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.702888][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.897549][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.946298][ T5941] veth0_vlan: entered promiscuous mode
[ 101.960063][ T5941] veth1_vlan: entered promiscuous mode
[ 101.990264][ T5941] veth0_macvtap: entered promiscuous mode
[ 102.001250][ T5941] veth1_macvtap: entered promiscuous mode
[ 102.021483][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.036683][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.049795][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.060415][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.070904][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.083429][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.121829][ T52] Bluetooth: hci0: command tx timeout
[ 102.139422][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.151173][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.179119][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.187366][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.201851][ T52] Bluetooth: hci0: command tx timeout
[ 105.239483][ T5987] ------------[ cut here ]------------
[ 105.239995][ T5987]
[ 105.240001][ T5987] ======================================================
[ 105.240006][ T5987] WARNING: possible circular locking dependency detected
[ 105.240017][ T5987] syzkaller #0 Not tainted
[ 105.240023][ T5987] ------------------------------------------------------
[ 105.240027][ T5987] syz.0.17/5987 is trying to acquire lock:
[ 105.240039][ T5987] ffffffff8df35980 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 105.240092][ T5987]
[ 105.240092][ T5987] but task is already holding lock:
[ 105.240096][ T5987] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 105.240131][ T5987]
[ 105.240131][ T5987] which lock already depends on the new lock.
[ 105.240131][ T5987]
[ 105.240135][ T5987]
[ 105.240135][ T5987] the existing dependency chain (in reverse order) is:
[ 105.240139][ T5987]
[ 105.240139][ T5987] -> #5 (&rq->__lock){-.-.}-{2:2}:
[ 105.240156][ T5987] _raw_spin_lock_nested+0x32/0x50
[ 105.240175][ T5987] raw_spin_rq_lock_nested+0x2a/0x140
[ 105.240205][ T5987] task_rq_lock+0xbc/0x470
[ 105.240217][ T5987] cgroup_move_task+0x92/0x2a0
[ 105.240232][ T5987] css_set_move_task+0x658/0x9e0
[ 105.240245][ T5987] cgroup_post_fork+0x1ef/0x7a0
[ 105.240258][ T5987] copy_process+0x3614/0x3950
[ 105.240271][ T5987] kernel_clone+0x21e/0x820
[ 105.240285][ T5987] user_mode_thread+0xdd/0x140
[ 105.240299][ T5987] rest_init+0x23/0x300
[ 105.240317][ T5987] start_kernel+0x3a7/0x400
[ 105.240332][ T5987] x86_64_start_reservations+0x24/0x30
[ 105.240351][ T5987] x86_64_start_kernel+0x143/0x1c0
[ 105.240380][ T5987] common_startup_64+0x13e/0x147
[ 105.240396][ T5987]
[ 105.240396][ T5987] -> #4 (&p->pi_lock){-.-.}-{2:2}:
[ 105.240413][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0
[ 105.240426][ T5987] try_to_wake_up+0x67/0x12b0
[ 105.240444][ T5987] create_worker+0x503/0x720
[ 105.240469][ T5987] workqueue_init+0x3ea/0x690
[ 105.240484][ T5987] kernel_init_freeable+0x302/0x4b0
[ 105.240501][ T5987] kernel_init+0x1d/0x1d0
[ 105.240521][ T5987] ret_from_fork+0x599/0xb30
[ 105.240533][ T5987] ret_from_fork_asm+0x1a/0x30
[ 105.240552][ T5987]
[ 105.240552][ T5987] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 105.240571][ T5987] _raw_spin_lock+0x2e/0x40
[ 105.240584][ T5987] __queue_work+0x7eb/0xf90
[ 105.240598][ T5987] queue_work_on+0x181/0x270
[ 105.240612][ T5987] rpm_suspend+0xe44/0x1700
[ 105.240631][ T5987] __pm_runtime_idle+0x12f/0x1a0
[ 105.240643][ T5987] __device_attach+0x342/0x430
[ 105.240657][ T5987] device_initial_probe+0xa1/0xd0
[ 105.240671][ T5987] bus_probe_device+0x12a/0x220
[ 105.240691][ T5987] device_add+0x7b6/0xb80
[ 105.240702][ T5987] serial_base_port_add+0x18f/0x260
[ 105.240719][ T5987] serial_core_register_port+0x369/0x2800
[ 105.240740][ T5987] serial8250_register_8250_port+0x1658/0x1fd0
[ 105.240760][ T5987] serial_pnp_probe+0x527/0x7d0
[ 105.240800][ T5987] pnp_device_probe+0x30b/0x4c0
[ 105.240823][ T5987] really_probe+0x26d/0xad0
[ 105.240838][ T5987] __driver_probe_device+0x18c/0x320
[ 105.240853][ T5987] driver_probe_device+0x4f/0x240
[ 105.240868][ T5987] __driver_attach+0x349/0x650
[ 105.240883][ T5987] bus_for_each_dev+0x233/0x2b0
[ 105.240902][ T5987] bus_add_driver+0x345/0x670
[ 105.240922][ T5987] driver_register+0x23a/0x320
[ 105.240939][ T5987] serial8250_init+0x8f/0x160
[ 105.240952][ T5987] do_one_initcall+0x1fb/0x820
[ 105.240970][ T5987] do_initcall_level+0x104/0x190
[ 105.240988][ T5987] do_initcalls+0x59/0xa0
[ 105.241005][ T5987] kernel_init_freeable+0x334/0x4b0
[ 105.241023][ T5987] kernel_init+0x1d/0x1d0
[ 105.241043][ T5987] ret_from_fork+0x599/0xb30
[ 105.241055][ T5987] ret_from_fork_asm+0x1a/0x30
[ 105.241075][ T5987]
[ 105.241075][ T5987] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 105.241095][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0
[ 105.241109][ T5987] __pm_runtime_resume+0x10f/0x180
[ 105.241124][ T5987] __uart_start+0x171/0x460
[ 105.241146][ T5987] uart_write+0xdc/0x130
[ 105.241156][ T5987] n_tty_write+0xd78/0x12a0
[ 105.241173][ T5987] file_tty_write+0x559/0xa20
[ 105.241195][ T5987] vfs_write+0x5c9/0xb30
[ 105.241208][ T5987] ksys_write+0x145/0x250
[ 105.241221][ T5987] do_syscall_64+0xfa/0xf80
[ 105.241238][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.241252][ T5987]
[ 105.241252][ T5987] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 105.241272][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0
[ 105.241286][ T5987] serial8250_console_write+0x17e/0x1ba0
[ 105.241300][ T5987] console_flush_all+0x745/0xb60
[ 105.241320][ T5987] console_unlock+0xbb/0x190
[ 105.241338][ T5987] vprintk_emit+0x4f8/0x5f0
[ 105.241355][ T5987] _printk+0xcf/0x120
[ 105.241381][ T5987] register_console+0xa8b/0xf90
[ 105.241401][ T5987] univ8250_console_init+0x3a/0x70
[ 105.241415][ T5987] console_init+0xfc/0x3f0
[ 105.241437][ T5987] start_kernel+0x24d/0x400
[ 105.241452][ T5987] x86_64_start_reservations+0x24/0x30
[ 105.241475][ T5987] x86_64_start_kernel+0x143/0x1c0
[ 105.241497][ T5987] common_startup_64+0x13e/0x147
[ 105.241514][ T5987]
[ 105.241514][ T5987] -> #0 (console_owner){....}-{0:0}:
[ 105.241534][ T5987] __lock_acquire+0x15a6/0x2cf0
[ 105.241548][ T5987] lock_acquire+0x117/0x340
[ 105.241561][ T5987] console_flush_all+0x6ee/0xb60
[ 105.241581][ T5987] console_unlock+0xbb/0x190
[ 105.241598][ T5987] vprintk_emit+0x4f8/0x5f0
[ 105.241615][ T5987] _printk+0xcf/0x120
[ 105.241634][ T5987] __report_bug+0x305/0x500
[ 105.241649][ T5987] report_bug+0x16a/0x220
[ 105.241667][ T5987] handle_bug+0x98/0x200
[ 105.241687][ T5987] exc_invalid_op+0x1a/0x50
[ 105.241706][ T5987] asm_exc_invalid_op+0x1a/0x20
[ 105.241719][ T5987] sched_change_end+0x4f6/0x640
[ 105.241737][ T5987] rt_mutex_setprio+0x488/0xb70
[ 105.241750][ T5987] remove_waiter+0x7f5/0xaf0
[ 105.241771][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 105.241784][ T5987] futex_lock_pi+0x530/0xa90
[ 105.241802][ T5987] do_futex+0x292/0x420
[ 105.241817][ T5987] __se_sys_futex+0x36f/0x400
[ 105.241832][ T5987] do_syscall_64+0xfa/0xf80
[ 105.241863][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.241876][ T5987]
[ 105.241876][ T5987] other info that might help us debug this:
[ 105.241876][ T5987]
[ 105.241881][ T5987] Chain exists of:
[ 105.241881][ T5987] console_owner --> &p->pi_lock --> &rq->__lock
[ 105.241881][ T5987]
[ 105.241903][ T5987] Possible unsafe locking scenario:
[ 105.241903][ T5987]
[ 105.241907][ T5987] CPU0 CPU1
[ 105.241912][ T5987] ---- ----
[ 105.241916][ T5987] lock(&rq->__lock);
[ 105.241925][ T5987] lock(&p->pi_lock);
[ 105.241936][ T5987] lock(&rq->__lock);
[ 105.241957][ T5987] lock(console_owner);
[ 105.241966][ T5987]
[ 105.241966][ T5987] *** DEADLOCK ***
[ 105.241966][ T5987]
[ 105.241970][ T5987] 5 locks held by syz.0.17/5987:
[ 105.241977][ T5987] #0: ffff888075790a28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100
[ 105.242009][ T5987] #1: ffff888026714768 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0
[ 105.242047][ T5987] #2: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 105.242089][ T5987] #3: ffffffff8df359e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 105.242125][ T5987] #4: ffffffff8de1d298 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 105.242160][ T5987]
[ 105.242160][ T5987] stack backtrace:
[ 105.242178][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 105.242193][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 105.242207][ T5987] Call Trace:
[ 105.242213][ T5987]
[ 105.242218][ T5987] dump_stack_lvl+0x189/0x250
[ 105.242236][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.242252][ T5987] ? __pfx__printk+0x10/0x10
[ 105.242271][ T5987] ? print_lock_name+0xde/0x100
[ 105.242291][ T5987] print_circular_bug+0x2e2/0x300
[ 105.242309][ T5987] check_noncircular+0x12e/0x150
[ 105.242328][ T5987] __lock_acquire+0x15a6/0x2cf0
[ 105.242349][ T5987] ? console_flush_all+0x131/0xb60
[ 105.242371][ T5987] lock_acquire+0x117/0x340
[ 105.242384][ T5987] ? console_flush_all+0x131/0xb60
[ 105.242407][ T5987] ? do_raw_spin_unlock+0x122/0x240
[ 105.242424][ T5987] ? console_flush_all+0x131/0xb60
[ 105.242440][ T5987] console_flush_all+0x6ee/0xb60
[ 105.242456][ T5987] ? console_flush_all+0x131/0xb60
[ 105.242473][ T5987] ? console_flush_all+0x131/0xb60
[ 105.242491][ T5987] ? __pfx_console_flush_all+0x10/0x10
[ 105.242511][ T5987] ? is_printk_cpu_sync_owner+0x32/0x40
[ 105.242522][ T5987] console_unlock+0xbb/0x190
[ 105.242537][ T5987] ? __pfx___down_trylock_console_sem+0x10/0x10
[ 105.242554][ T5987] ? __pfx_console_unlock+0x10/0x10
[ 105.242571][ T5987] vprintk_emit+0x4f8/0x5f0
[ 105.242586][ T5987] ? __pfx_vprintk_emit+0x10/0x10
[ 105.242602][ T5987] ? __lock_acquire+0x6b6/0x2cf0
[ 105.242614][ T5987] ? __lock_acquire+0x6b6/0x2cf0
[ 105.242628][ T5987] _printk+0xcf/0x120
[ 105.242646][ T5987] ? __pfx__printk+0x10/0x10
[ 105.242665][ T5987] ? find_bug+0xa5/0x370
[ 105.242677][ T5987] ? sched_change_end+0x4f6/0x640
[ 105.242692][ T5987] ? sched_change_end+0x4f6/0x640
[ 105.242707][ T5987] __report_bug+0x305/0x500
[ 105.242720][ T5987] ? sched_change_end+0x4f6/0x640
[ 105.242736][ T5987] ? __pfx___report_bug+0x10/0x10
[ 105.242749][ T5987] ? rcu_read_lock_sched_held+0x89/0x100
[ 105.242764][ T5987] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 105.242782][ T5987] ? sched_change_end+0x4f6/0x640
[ 105.242797][ T5987] report_bug+0x16a/0x220
[ 105.242810][ T5987] ? sched_change_end+0x4f6/0x640
[ 105.242824][ T5987] ? sched_change_end+0x4f8/0x640
[ 105.242838][ T5987] handle_bug+0x98/0x200
[ 105.242854][ T5987] exc_invalid_op+0x1a/0x50
[ 105.242870][ T5987] asm_exc_invalid_op+0x1a/0x20
[ 105.242880][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640
[ 105.242897][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 105.242906][ T5987] RSP: 0018:ffffc900039e7850 EFLAGS: 00010046
[ 105.242916][ T5987] RAX: 1ffff11004ce27a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 105.242925][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888026713d00
[ 105.242933][ T5987] RBP: ffff888026713fa8 R08: ffff888026713d07 R09: 1ffff11004ce27a0
[ 105.242941][ T5987] R10: dffffc0000000000 R11: ffffed1004ce27a1 R12: dffffc0000000000
[ 105.242950][ T5987] R13: ffff888026713d00 R14: ffff8880b873a900 R15: ffff888026713d00
[ 105.242961][ T5987] ? sched_change_end+0x4af/0x640
[ 105.242981][ T5987] rt_mutex_setprio+0x488/0xb70
[ 105.242995][ T5987] remove_waiter+0x7f5/0xaf0
[ 105.243015][ T5987] ? lockdep_hardirqs_on+0x98/0x140
[ 105.243029][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 105.243041][ T5987] futex_lock_pi+0x530/0xa90
[ 105.243059][ T5987] ? __pfx_futex_lock_pi+0x10/0x10
[ 105.243080][ T5987] ? futex_hash+0x40/0x2d0
[ 105.243089][ T5987] ? futex_hash+0x2ad/0x2d0
[ 105.243100][ T5987] ? __pfx_futex_wake_mark+0x10/0x10
[ 105.243119][ T5987] ? __pfx_futex_wake+0x10/0x10
[ 105.243139][ T5987] do_futex+0x292/0x420
[ 105.243153][ T5987] ? __pfx_do_futex+0x10/0x10
[ 105.243168][ T5987] __se_sys_futex+0x36f/0x400
[ 105.243183][ T5987] ? __pfx___se_sys_futex+0x10/0x10
[ 105.243198][ T5987] ? __x64_sys_futex+0x21/0xf0
[ 105.243212][ T5987] do_syscall_64+0xfa/0xf80
[ 105.243226][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.243237][ T5987] ? clear_bhb_loop+0x60/0xb0
[ 105.243250][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.243262][ T5987] RIP: 0033:0x7f7cf1d8f749
[ 105.243276][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.243285][ T5987] RSP: 002b:00007ffc0774c118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 105.243296][ T5987] RAX: ffffffffffffffda RBX: 00007f7cf1fe5fa0 RCX: 00007f7cf1d8f749
[ 105.243305][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 105.243312][ T5987] RBP: 00007f7cf1e13f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 105.243320][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.243326][ T5987] R13: 00007f7cf1fe5fa0 R14: 00007f7cf1fe5fa0 R15: 0000000000000006
[ 105.243339][ T5987]
[ 106.468649][ T5987] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/5987
[ 106.478632][ T5987] Modules linked in:
[ 106.482528][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 106.491621][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 106.501661][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640
[ 106.507292][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 106.526892][ T5987] RSP: 0018:ffffc900039e7850 EFLAGS: 00010046
[ 106.532955][ T5987] RAX: 1ffff11004ce27a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 106.540933][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888026713d00
[ 106.548895][ T5987] RBP: ffff888026713fa8 R08: ffff888026713d07 R09: 1ffff11004ce27a0
[ 106.556856][ T5987] R10: dffffc0000000000 R11: ffffed1004ce27a1 R12: dffffc0000000000
[ 106.564815][ T5987] R13: ffff888026713d00 R14: ffff8880b873a900 R15: ffff888026713d00
[ 106.572772][ T5987] FS: 00005555934f4500(0000) GS:ffff888125e32000(0000) knlGS:0000000000000000
[ 106.581684][ T5987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 106.588255][ T5987] CR2: 0000001b30063fff CR3: 0000000075132000 CR4: 00000000003526f0
[ 106.596224][ T5987] Call Trace:
[ 106.599494][ T5987]
[ 106.602421][ T5987] rt_mutex_setprio+0x488/0xb70
[ 106.607266][ T5987] remove_waiter+0x7f5/0xaf0
[ 106.611850][ T5987] ? lockdep_hardirqs_on+0x98/0x140
[ 106.617043][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 106.622755][ T5987] futex_lock_pi+0x530/0xa90
[ 106.627338][ T5987] ? __pfx_futex_lock_pi+0x10/0x10
[ 106.632445][ T5987] ? futex_hash+0x40/0x2d0
[ 106.636846][ T5987] ? futex_hash+0x2ad/0x2d0
[ 106.641337][ T5987] ? __pfx_futex_wake_mark+0x10/0x10
[ 106.646613][ T5987] ? __pfx_futex_wake+0x10/0x10
[ 106.651458][ T5987] do_futex+0x292/0x420
[ 106.655602][ T5987] ? __pfx_do_futex+0x10/0x10
[ 106.660268][ T5987] __se_sys_futex+0x36f/0x400
[ 106.664936][ T5987] ? __pfx___se_sys_futex+0x10/0x10
[ 106.670125][ T5987] ? __x64_sys_futex+0x21/0xf0
[ 106.674892][ T5987] do_syscall_64+0xfa/0xf80
[ 106.679417][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.685469][ T5987] ? clear_bhb_loop+0x60/0xb0
[ 106.690133][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.696013][ T5987] RIP: 0033:0x7f7cf1d8f749
[ 106.700429][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 106.720024][ T5987] RSP: 002b:00007ffc0774c118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 106.728453][ T5987] RAX: ffffffffffffffda RBX: 00007f7cf1fe5fa0 RCX: 00007f7cf1d8f749
[ 106.736416][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 106.744392][ T5987] RBP: 00007f7cf1e13f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 106.752353][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.760308][ T5987] R13: 00007f7cf1fe5fa0 R14: 00007f7cf1fe5fa0 R15: 0000000000000006
[ 106.768277][ T5987]
[ 106.771289][ T5987] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 106.778558][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 106.787673][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 106.797720][ T5987] Call Trace:
[ 106.800991][ T5987]
[ 106.803911][ T5987] dump_stack_lvl+0x99/0x250
[ 106.808492][ T5987] ? __asan_memcpy+0x40/0x70
[ 106.813074][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.818265][ T5987] ? __pfx__printk+0x10/0x10
[ 106.822863][ T5987] vpanic+0x237/0x6d0
[ 106.826834][ T5987] ? __pfx_vpanic+0x10/0x10
[ 106.831323][ T5987] ? is_bpf_text_address+0x292/0x2b0
[ 106.836611][ T5987] ? is_bpf_text_address+0x26/0x2b0
[ 106.841824][ T5987] panic+0xb9/0xc0
[ 106.845557][ T5987] ? __pfx_panic+0x10/0x10
[ 106.849980][ T5987] __warn+0x317/0x4b0
[ 106.853962][ T5987] ? sched_change_end+0x4f6/0x640
[ 106.858986][ T5987] ? sched_change_end+0x4f6/0x640
[ 106.864009][ T5987] __report_bug+0x288/0x500
[ 106.868510][ T5987] ? sched_change_end+0x4f6/0x640
[ 106.873531][ T5987] ? __pfx___report_bug+0x10/0x10
[ 106.878547][ T5987] ? rcu_read_lock_sched_held+0x89/0x100
[ 106.884173][ T5987] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 106.890234][ T5987] ? sched_change_end+0x4f6/0x640
[ 106.895248][ T5987] report_bug+0x16a/0x220
[ 106.899571][ T5987] ? sched_change_end+0x4f6/0x640
[ 106.904586][ T5987] ? sched_change_end+0x4f8/0x640
[ 106.909599][ T5987] handle_bug+0x98/0x200
[ 106.913837][ T5987] exc_invalid_op+0x1a/0x50
[ 106.918336][ T5987] asm_exc_invalid_op+0x1a/0x20
[ 106.923182][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640
[ 106.928806][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 106.948403][ T5987] RSP: 0018:ffffc900039e7850 EFLAGS: 00010046
[ 106.954464][ T5987] RAX: 1ffff11004ce27a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 106.962433][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888026713d00
[ 106.970396][ T5987] RBP: ffff888026713fa8 R08: ffff888026713d07 R09: 1ffff11004ce27a0
[ 106.978361][ T5987] R10: dffffc0000000000 R11: ffffed1004ce27a1 R12: dffffc0000000000
[ 106.986324][ T5987] R13: ffff888026713d00 R14: ffff8880b873a900 R15: ffff888026713d00
[ 106.994292][ T5987] ? sched_change_end+0x4af/0x640
[ 106.999314][ T5987] rt_mutex_setprio+0x488/0xb70
[ 107.004159][ T5987] remove_waiter+0x7f5/0xaf0
[ 107.008746][ T5987] ? lockdep_hardirqs_on+0x98/0x140
[ 107.013971][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 107.019681][ T5987] futex_lock_pi+0x530/0xa90
[ 107.024266][ T5987] ? __pfx_futex_lock_pi+0x10/0x10
[ 107.029375][ T5987] ? futex_hash+0x40/0x2d0
[ 107.033775][ T5987] ? futex_hash+0x2ad/0x2d0
[ 107.038267][ T5987] ? __pfx_futex_wake_mark+0x10/0x10
[ 107.043549][ T5987] ? __pfx_futex_wake+0x10/0x10
[ 107.048397][ T5987] do_futex+0x292/0x420
[ 107.052547][ T5987] ? __pfx_do_futex+0x10/0x10
[ 107.057217][ T5987] __se_sys_futex+0x36f/0x400
[ 107.061906][ T5987] ? __pfx___se_sys_futex+0x10/0x10
[ 107.067102][ T5987] ? __x64_sys_futex+0x21/0xf0
[ 107.071862][ T5987] do_syscall_64+0xfa/0xf80
[ 107.076359][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.082418][ T5987] ? clear_bhb_loop+0x60/0xb0
[ 107.087095][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.092972][ T5987] RIP: 0033:0x7f7cf1d8f749
[ 107.097378][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.116974][ T5987] RSP: 002b:00007ffc0774c118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 107.125378][ T5987] RAX: ffffffffffffffda RBX: 00007f7cf1fe5fa0 RCX: 00007f7cf1d8f749
[ 107.133351][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 107.141311][ T5987] RBP: 00007f7cf1e13f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 107.149272][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.157246][ T5987] R13: 00007f7cf1fe5fa0 R14: 00007f7cf1fe5fa0 R15: 0000000000000006
[ 107.165208][ T5987]
[ 108.316528][ T5987] Shutting down cpus with NMI
[ 108.321641][ T5987] Kernel Offset: disabled
[ 108.325972][ T5987] Rebooting in 86400 seconds..