Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
2026/01/02 16:54:46 parsed 1 programs
[ 93.552451][ T5831] cgroup: Unknown subsys name 'net'
[ 93.733118][ T5831] cgroup: Unknown subsys name 'cpuset'
[ 93.746587][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 95.470070][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.226840][ T107] cfg80211: failed to load regulatory.db
[ 98.469399][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 100.563428][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.573301][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.581649][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.590047][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.598869][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.385236][ T5895] chnl_net:caif_netlink_parms(): no params data found
[ 101.488345][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.496362][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.503890][ T5895] bridge_slave_0: entered allmulticast mode
[ 101.512116][ T5895] bridge_slave_0: entered promiscuous mode
[ 101.523047][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.530445][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.537797][ T5895] bridge_slave_1: entered allmulticast mode
[ 101.545496][ T5895] bridge_slave_1: entered promiscuous mode
[ 101.580470][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.593002][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.631575][ T5895] team0: Port device team_slave_0 added
[ 101.640133][ T5895] team0: Port device team_slave_1 added
[ 101.674030][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.681514][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.707968][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.721086][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.728353][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.754402][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.809281][ T5895] hsr_slave_0: entered promiscuous mode
[ 101.816241][ T5895] hsr_slave_1: entered promiscuous mode
[ 102.013654][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.027543][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.038575][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.051748][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.089177][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.096431][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.105066][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.112521][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.180993][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.204938][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.215081][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.233631][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.247696][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.255015][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.270258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.277676][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.476159][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.532960][ T5895] veth0_vlan: entered promiscuous mode
[ 102.546684][ T5895] veth1_vlan: entered promiscuous mode
[ 102.579946][ T5895] veth0_macvtap: entered promiscuous mode
[ 102.591073][ T5895] veth1_macvtap: entered promiscuous mode
[ 102.613521][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.632136][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.648453][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.660348][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.672680][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.682082][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.834409][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.922757][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.025310][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.103155][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.183435][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.196115][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.231825][ T2120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.240328][ T2120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/02 16:55:00 executed programs: 0
[ 104.275780][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 104.286812][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 104.295273][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 104.304278][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 104.312211][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.502094][ T5942] chnl_net:caif_netlink_parms(): no params data found
[ 104.595035][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.602683][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.610271][ T5942] bridge_slave_0: entered allmulticast mode
[ 104.618440][ T5942] bridge_slave_0: entered promiscuous mode
[ 104.626719][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.634691][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.642641][ T5942] bridge_slave_1: entered allmulticast mode
[ 104.650300][ T5942] bridge_slave_1: entered promiscuous mode
[ 104.690494][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.703835][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.741019][ T5942] team0: Port device team_slave_0 added
[ 104.749913][ T5942] team0: Port device team_slave_1 added
[ 104.783414][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.790544][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.817052][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.831297][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.839167][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.866247][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.928527][ T5942] hsr_slave_0: entered promiscuous mode
[ 104.935330][ T5942] hsr_slave_1: entered promiscuous mode
[ 104.942211][ T5942] debugfs: 'hsr0' already exists in 'hsr'
[ 104.948192][ T5942] Cannot create hsr debugfs directory
[ 105.110806][ T13] bridge_slave_1: left allmulticast mode
[ 105.116746][ T13] bridge_slave_1: left promiscuous mode
[ 105.123427][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.135986][ T13] bridge_slave_0: left allmulticast mode
[ 105.143179][ T13] bridge_slave_0: left promiscuous mode
[ 105.149630][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.468124][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.481175][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.492411][ T13] bond0 (unregistering): Released all slaves
[ 105.631721][ T13] hsr_slave_0: left promiscuous mode
[ 105.640081][ T13] hsr_slave_1: left promiscuous mode
[ 105.647511][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.655673][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.665725][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.675207][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.701587][ T13] veth1_macvtap: left promiscuous mode
[ 105.708456][ T13] veth0_macvtap: left promiscuous mode
[ 105.714652][ T13] veth1_vlan: left promiscuous mode
[ 105.720408][ T13] veth0_vlan: left promiscuous mode
[ 106.141406][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 106.171053][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 106.348764][ T53] Bluetooth: hci0: command tx timeout
[ 106.846858][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.868026][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.892530][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.906279][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.322664][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.433632][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.474236][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.481552][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.546649][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.554127][ T2120] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.983575][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.033013][ T5942] veth0_vlan: entered promiscuous mode
[ 108.045124][ T5942] veth1_vlan: entered promiscuous mode
[ 108.079869][ T5942] veth0_macvtap: entered promiscuous mode
[ 108.089883][ T5942] veth1_macvtap: entered promiscuous mode
[ 108.115035][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.131504][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.146215][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.159714][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.173841][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.183674][ T3484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.246494][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.257712][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.294520][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.302830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.417962][ T53] Bluetooth: hci0: command tx timeout
[ 110.499122][ T53] Bluetooth: hci0: command tx timeout
2026/01/02 16:55:07 executed programs: 3
[ 112.578592][ T53] Bluetooth: hci0: command tx timeout
[ 114.382139][ T5991] ------------[ cut here ]------------
[ 114.382750][ T5991]
[ 114.382757][ T5991] ======================================================
[ 114.382762][ T5991] WARNING: possible circular locking dependency detected
[ 114.382776][ T5991] syzkaller #0 Not tainted
[ 114.382783][ T5991] ------------------------------------------------------
[ 114.382788][ T5991] syz.0.18/5991 is trying to acquire lock:
[ 114.382795][ T5991] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 114.382844][ T5991]
[ 114.382844][ T5991] but task is already holding lock:
[ 114.382849][ T5991] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 114.382885][ T5991]
[ 114.382885][ T5991] which lock already depends on the new lock.
[ 114.382885][ T5991]
[ 114.382890][ T5991]
[ 114.382890][ T5991] the existing dependency chain (in reverse order) is:
[ 114.382895][ T5991]
[ 114.382895][ T5991] -> #5 (&rq->__lock){-.-.}-{2:2}:
[ 114.382912][ T5991] _raw_spin_lock_nested+0x32/0x50
[ 114.382931][ T5991] raw_spin_rq_lock_nested+0x2a/0x140
[ 114.382944][ T5991] task_rq_lock+0xbc/0x470
[ 114.382956][ T5991] cgroup_move_task+0x92/0x2a0
[ 114.382972][ T5991] css_set_move_task+0x658/0x9e0
[ 114.382986][ T5991] cgroup_post_fork+0x1ef/0x7a0
[ 114.383000][ T5991] copy_process+0x3614/0x3950
[ 114.383013][ T5991] kernel_clone+0x21e/0x820
[ 114.383027][ T5991] user_mode_thread+0xdd/0x140
[ 114.383042][ T5991] rest_init+0x23/0x300
[ 114.383054][ T5991] start_kernel+0x3ac/0x400
[ 114.383093][ T5991] x86_64_start_reservations+0x24/0x30
[ 114.383116][ T5991] x86_64_start_kernel+0x143/0x1c0
[ 114.383136][ T5991] common_startup_64+0x13e/0x147
[ 114.383155][ T5991]
[ 114.383155][ T5991] -> #4 (&p->pi_lock){-.-.}-{2:2}:
[ 114.383175][ T5991] _raw_spin_lock_irqsave+0xa7/0xf0
[ 114.383193][ T5991] try_to_wake_up+0x67/0x12b0
[ 114.383213][ T5991] create_worker+0x503/0x720
[ 114.383233][ T5991] workqueue_init+0x3ea/0x690
[ 114.383255][ T5991] kernel_init_freeable+0x302/0x4b0
[ 114.383272][ T5991] kernel_init+0x1d/0x1d0
[ 114.383285][ T5991] ret_from_fork+0x599/0xb30
[ 114.383298][ T5991] ret_from_fork_asm+0x1a/0x30
[ 114.383319][ T5991]
[ 114.383319][ T5991] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 114.383346][ T5991] _raw_spin_lock+0x2e/0x40
[ 114.383366][ T5991] __queue_work+0x7eb/0xf90
[ 114.383381][ T5991] queue_work_on+0x181/0x270
[ 114.383396][ T5991] rpm_suspend+0xe44/0x1700
[ 114.383418][ T5991] __pm_runtime_idle+0x12f/0x1a0
[ 114.383439][ T5991] __device_attach+0x342/0x430
[ 114.383451][ T5991] device_initial_probe+0xa1/0xd0
[ 114.383464][ T5991] bus_probe_device+0x12a/0x220
[ 114.383482][ T5991] device_add+0x7b6/0xb80
[ 114.383502][ T5991] serial_base_port_add+0x18f/0x260
[ 114.383522][ T5991] serial_core_register_port+0x369/0x2800
[ 114.383537][ T5991] serial8250_register_8250_port+0x1658/0x1fd0
[ 114.383561][ T5991] serial_pnp_probe+0x527/0x7d0
[ 114.383574][ T5991] pnp_device_probe+0x30b/0x4c0
[ 114.383645][ T5991] really_probe+0x26d/0xad0
[ 114.383659][ T5991] __driver_probe_device+0x18c/0x320
[ 114.383671][ T5991] driver_probe_device+0x4f/0x240
[ 114.383685][ T5991] __driver_attach+0x349/0x650
[ 114.383697][ T5991] bus_for_each_dev+0x233/0x2b0
[ 114.383715][ T5991] bus_add_driver+0x345/0x670
[ 114.383733][ T5991] driver_register+0x23a/0x320
[ 114.383748][ T5991] serial8250_init+0x8f/0x160
[ 114.383770][ T5991] do_one_initcall+0x1fb/0x820
[ 114.383788][ T5991] do_initcall_level+0x104/0x190
[ 114.383805][ T5991] do_initcalls+0x59/0xa0
[ 114.383820][ T5991] kernel_init_freeable+0x334/0x4b0
[ 114.383837][ T5991] kernel_init+0x1d/0x1d0
[ 114.383851][ T5991] ret_from_fork+0x599/0xb30
[ 114.383863][ T5991] ret_from_fork_asm+0x1a/0x30
[ 114.383883][ T5991]
[ 114.383883][ T5991] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 114.383904][ T5991] _raw_spin_lock_irqsave+0xa7/0xf0
[ 114.383921][ T5991] __pm_runtime_resume+0x10f/0x180
[ 114.383943][ T5991] __uart_start+0x171/0x460
[ 114.383956][ T5991] uart_write+0xdc/0x130
[ 114.383969][ T5991] n_tty_write+0xd78/0x12a0
[ 114.383990][ T5991] file_tty_write+0x559/0xa20
[ 114.384003][ T5991] vfs_write+0x5c9/0xb30
[ 114.384017][ T5991] ksys_write+0x145/0x250
[ 114.384030][ T5991] do_syscall_64+0xfa/0xf80
[ 114.384050][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.384065][ T5991]
[ 114.384065][ T5991] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 114.384084][ T5991] _raw_spin_lock_irqsave+0xa7/0xf0
[ 114.384101][ T5991] serial8250_console_write+0x17e/0x1ba0
[ 114.384118][ T5991] console_flush_all+0x745/0xb60
[ 114.384138][ T5991] console_unlock+0xbb/0x190
[ 114.384156][ T5991] vprintk_emit+0x4f8/0x5f0
[ 114.384173][ T5991] _printk+0xcf/0x120
[ 114.384194][ T5991] register_console+0xa8b/0xf90
[ 114.384215][ T5991] univ8250_console_init+0x3a/0x70
[ 114.384236][ T5991] console_init+0xfc/0x3f0
[ 114.384256][ T5991] start_kernel+0x252/0x400
[ 114.384270][ T5991] x86_64_start_reservations+0x24/0x30
[ 114.384291][ T5991] x86_64_start_kernel+0x143/0x1c0
[ 114.384312][ T5991] common_startup_64+0x13e/0x147
[ 114.384330][ T5991]
[ 114.384330][ T5991] -> #0 (console_owner){....}-{0:0}:
[ 114.384349][ T5991] __lock_acquire+0x15a6/0x2cf0
[ 114.384363][ T5991] lock_acquire+0x117/0x340
[ 114.384377][ T5991] console_flush_all+0x6ee/0xb60
[ 114.384396][ T5991] console_unlock+0xbb/0x190
[ 114.384414][ T5991] vprintk_emit+0x4f8/0x5f0
[ 114.384431][ T5991] _printk+0xcf/0x120
[ 114.384451][ T5991] __report_bug+0x305/0x500
[ 114.384469][ T5991] report_bug+0x16a/0x220
[ 114.384486][ T5991] handle_bug+0x98/0x200
[ 114.384497][ T5991] exc_invalid_op+0x1a/0x50
[ 114.384509][ T5991] asm_exc_invalid_op+0x1a/0x20
[ 114.384522][ T5991] sched_change_end+0x4f6/0x640
[ 114.384540][ T5991] rt_mutex_setprio+0x488/0xb70
[ 114.384553][ T5991] remove_waiter+0x7f5/0xaf0
[ 114.384566][ T5991] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 114.384582][ T5991] futex_lock_pi+0x530/0xa90
[ 114.384607][ T5991] do_futex+0x292/0x420
[ 114.384622][ T5991] __se_sys_futex+0x36f/0x400
[ 114.384637][ T5991] do_syscall_64+0xfa/0xf80
[ 114.384656][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.384670][ T5991]
[ 114.384670][ T5991] other info that might help us debug this:
[ 114.384670][ T5991]
[ 114.384675][ T5991] Chain exists of:
[ 114.384675][ T5991] console_owner --> &p->pi_lock --> &rq->__lock
[ 114.384675][ T5991]
[ 114.384710][ T5991] Possible unsafe locking scenario:
[ 114.384710][ T5991]
[ 114.384714][ T5991] CPU0 CPU1
[ 114.384719][ T5991] ---- ----
[ 114.384723][ T5991] lock(&rq->__lock);
[ 114.384733][ T5991] lock(&p->pi_lock);
[ 114.384743][ T5991] lock(&rq->__lock);
[ 114.384754][ T5991] lock(console_owner);
[ 114.384764][ T5991]
[ 114.384764][ T5991] *** DEADLOCK ***
[ 114.384764][ T5991]
[ 114.384768][ T5991] 5 locks held by syz.0.18/5991:
[ 114.384777][ T5991] #0: ffff888076252f28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100
[ 114.384814][ T5991] #1: ffff88802614e5e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0
[ 114.384850][ T5991] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 114.384886][ T5991] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 114.384927][ T5991] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 114.384969][ T5991]
[ 114.384969][ T5991] stack backtrace:
[ 114.384991][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 114.385009][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 114.385025][ T5991] Call Trace:
[ 114.385033][ T5991]
[ 114.385041][ T5991] dump_stack_lvl+0x189/0x250
[ 114.385069][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.385085][ T5991] ? __pfx__printk+0x10/0x10
[ 114.385106][ T5991] ? print_lock_name+0xde/0x100
[ 114.385127][ T5991] print_circular_bug+0x2e2/0x300
[ 114.385147][ T5991] check_noncircular+0x12e/0x150
[ 114.385166][ T5991] __lock_acquire+0x15a6/0x2cf0
[ 114.385189][ T5991] ? console_flush_all+0x131/0xb60
[ 114.385207][ T5991] lock_acquire+0x117/0x340
[ 114.385221][ T5991] ? console_flush_all+0x131/0xb60
[ 114.385243][ T5991] ? do_raw_spin_unlock+0x122/0x240
[ 114.385263][ T5991] ? console_flush_all+0x131/0xb60
[ 114.385281][ T5991] console_flush_all+0x6ee/0xb60
[ 114.385300][ T5991] ? console_flush_all+0x131/0xb60
[ 114.385320][ T5991] ? console_flush_all+0x131/0xb60
[ 114.385341][ T5991] ? __pfx_console_flush_all+0x10/0x10
[ 114.385361][ T5991] ? rcu_is_watching+0x15/0xb0
[ 114.385380][ T5991] ? is_printk_cpu_sync_owner+0x32/0x40
[ 114.385403][ T5991] console_unlock+0xbb/0x190
[ 114.385421][ T5991] ? __pfx___down_trylock_console_sem+0x10/0x10
[ 114.385440][ T5991] ? __pfx_console_unlock+0x10/0x10
[ 114.385461][ T5991] vprintk_emit+0x4f8/0x5f0
[ 114.385479][ T5991] ? __pfx_vprintk_emit+0x10/0x10
[ 114.385497][ T5991] ? __lock_acquire+0x6b6/0x2cf0
[ 114.385511][ T5991] ? __lock_acquire+0x6b6/0x2cf0
[ 114.385527][ T5991] _printk+0xcf/0x120
[ 114.385549][ T5991] ? __pfx__printk+0x10/0x10
[ 114.385572][ T5991] ? find_bug+0xa5/0x370
[ 114.385594][ T5991] ? sched_change_end+0x4f6/0x640
[ 114.385612][ T5991] ? sched_change_end+0x4f6/0x640
[ 114.385629][ T5991] __report_bug+0x305/0x500
[ 114.385646][ T5991] ? sched_change_end+0x4f6/0x640
[ 114.385665][ T5991] ? __pfx___report_bug+0x10/0x10
[ 114.385682][ T5991] ? rcu_read_lock_sched_held+0x89/0x100
[ 114.385700][ T5991] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 114.385718][ T5991] ? trace_pelt_se_tp+0x39/0x120
[ 114.385739][ T5991] ? sched_change_end+0x4f6/0x640
[ 114.385756][ T5991] report_bug+0x16a/0x220
[ 114.385773][ T5991] ? sched_change_end+0x4f6/0x640
[ 114.385789][ T5991] ? sched_change_end+0x4f8/0x640
[ 114.385806][ T5991] handle_bug+0x98/0x200
[ 114.385819][ T5991] exc_invalid_op+0x1a/0x50
[ 114.385831][ T5991] asm_exc_invalid_op+0x1a/0x20
[ 114.385846][ T5991] RIP: 0010:sched_change_end+0x4f6/0x640
[ 114.385865][ T5991] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 114.385876][ T5991] RSP: 0018:ffffc90003fff850 EFLAGS: 00010046
[ 114.385888][ T5991] RAX: 1ffff11004c29b70 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f
[ 114.385898][ T5991] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802614db80
[ 114.385908][ T5991] RBP: ffff88802614de28 R08: ffff88802614db87 R09: 1ffff11004c29b70
[ 114.385918][ T5991] R10: dffffc0000000000 R11: ffffed1004c29b71 R12: dffffc0000000000
[ 114.385928][ T5991] R13: ffff88802614db80 R14: ffff8880b873ab00 R15: ffff88802614db80
[ 114.385942][ T5991] ? sched_change_end+0x4af/0x640
[ 114.385965][ T5991] rt_mutex_setprio+0x488/0xb70
[ 114.385982][ T5991] remove_waiter+0x7f5/0xaf0
[ 114.385998][ T5991] ? lockdep_hardirqs_on+0x98/0x140
[ 114.386018][ T5991] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 114.386035][ T5991] futex_lock_pi+0x530/0xa90
[ 114.386056][ T5991] ? __pfx_futex_lock_pi+0x10/0x10
[ 114.386081][ T5991] ? futex_hash+0x40/0x2d0
[ 114.386092][ T5991] ? futex_hash+0x2ad/0x2d0
[ 114.386106][ T5991] ? __pfx_futex_wake_mark+0x10/0x10
[ 114.386126][ T5991] ? __pfx_futex_wake+0x10/0x10
[ 114.386148][ T5991] ? handle_mm_fault+0xdb/0x32b0
[ 114.386171][ T5991] do_futex+0x292/0x420
[ 114.386187][ T5991] ? __pfx_do_futex+0x10/0x10
[ 114.386205][ T5991] __se_sys_futex+0x36f/0x400
[ 114.386223][ T5991] ? __pfx___se_sys_futex+0x10/0x10
[ 114.386240][ T5991] ? __x64_sys_futex+0x21/0xf0
[ 114.386256][ T5991] do_syscall_64+0xfa/0xf80
[ 114.386275][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.386289][ T5991] ? clear_bhb_loop+0x60/0xb0
[ 114.386305][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.386318][ T5991] RIP: 0033:0x7fe49338f749
[ 114.386335][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.386346][ T5991] RSP: 002b:00007fff9bfbebf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 114.386359][ T5991] RAX: ffffffffffffffda RBX: 00007fe4935e5fa0 RCX: 00007fe49338f749
[ 114.386370][ T5991] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 114.386379][ T5991] RBP: 00007fe493413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 114.386388][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 114.386396][ T5991] R13: 00007fe4935e5fa0 R14: 00007fe4935e5fa0 R15: 0000000000000006
[ 114.386411][ T5991]
[ 115.691551][ T5991] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.18/5991
[ 115.701930][ T5991] Modules linked in:
[ 115.706257][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 115.715527][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 115.725605][ T5991] RIP: 0010:sched_change_end+0x4f6/0x640
[ 115.731362][ T5991] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 115.751262][ T5991] RSP: 0018:ffffc90003fff850 EFLAGS: 00010046
[ 115.757808][ T5991] RAX: 1ffff11004c29b70 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f
[ 115.766239][ T5991] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802614db80
[ 115.774679][ T5991] RBP: ffff88802614de28 R08: ffff88802614db87 R09: 1ffff11004c29b70
[ 115.782768][ T5991] R10: dffffc0000000000 R11: ffffed1004c29b71 R12: dffffc0000000000
[ 115.790936][ T5991] R13: ffff88802614db80 R14: ffff8880b873ab00 R15: ffff88802614db80
[ 115.799185][ T5991] FS: 0000555592f5e500(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000
[ 115.808129][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 115.814745][ T5991] CR2: 000000c007e49000 CR3: 0000000072e3a000 CR4: 00000000003526f0
[ 115.823099][ T5991] Call Trace:
[ 115.826393][ T5991]
[ 115.829357][ T5991] rt_mutex_setprio+0x488/0xb70
[ 115.834665][ T5991] remove_waiter+0x7f5/0xaf0
[ 115.839325][ T5991] ? lockdep_hardirqs_on+0x98/0x140
[ 115.844602][ T5991] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 115.850436][ T5991] futex_lock_pi+0x530/0xa90
[ 115.855075][ T5991] ? __pfx_futex_lock_pi+0x10/0x10
[ 115.860219][ T5991] ? futex_hash+0x40/0x2d0
[ 115.864733][ T5991] ? futex_hash+0x2ad/0x2d0
[ 115.869811][ T5991] ? __pfx_futex_wake_mark+0x10/0x10
[ 115.875612][ T5991] ? __pfx_futex_wake+0x10/0x10
[ 115.880973][ T5991] ? handle_mm_fault+0xdb/0x32b0
[ 115.886216][ T5991] do_futex+0x292/0x420
[ 115.890963][ T5991] ? __pfx_do_futex+0x10/0x10
[ 115.895960][ T5991] __se_sys_futex+0x36f/0x400
[ 115.900853][ T5991] ? __pfx___se_sys_futex+0x10/0x10
[ 115.906194][ T5991] ? __x64_sys_futex+0x21/0xf0
[ 115.911159][ T5991] do_syscall_64+0xfa/0xf80
[ 115.916117][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.922324][ T5991] ? clear_bhb_loop+0x60/0xb0
[ 115.927209][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.933134][ T5991] RIP: 0033:0x7fe49338f749
[ 115.937673][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 115.957915][ T5991] RSP: 002b:00007fff9bfbebf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 115.966522][ T5991] RAX: ffffffffffffffda RBX: 00007fe4935e5fa0 RCX: 00007fe49338f749
[ 115.975396][ T5991] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 115.983571][ T5991] RBP: 00007fe493413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 115.991845][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.000364][ T5991] R13: 00007fe4935e5fa0 R14: 00007fe4935e5fa0 R15: 0000000000000006
[ 116.008370][ T5991]
[ 116.011605][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 116.018979][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 116.028348][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 116.038412][ T5991] Call Trace:
[ 116.041815][ T5991]
[ 116.045019][ T5991] dump_stack_lvl+0x99/0x250
[ 116.049631][ T5991] ? __asan_memcpy+0x40/0x70
[ 116.054346][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10
[ 116.059780][ T5991] ? __pfx__printk+0x10/0x10
[ 116.064416][ T5991] vpanic+0x237/0x6d0
[ 116.068532][ T5991] ? __pfx_vpanic+0x10/0x10
[ 116.073075][ T5991] ? is_bpf_text_address+0x292/0x2b0
[ 116.078391][ T5991] ? is_bpf_text_address+0x26/0x2b0
[ 116.083676][ T5991] panic+0xb9/0xc0
[ 116.087400][ T5991] ? __pfx_panic+0x10/0x10
[ 116.091822][ T5991] __warn+0x317/0x4b0
[ 116.096000][ T5991] ? sched_change_end+0x4f6/0x640
[ 116.101138][ T5991] ? sched_change_end+0x4f6/0x640
[ 116.106260][ T5991] __report_bug+0x288/0x500
[ 116.110774][ T5991] ? sched_change_end+0x4f6/0x640
[ 116.115895][ T5991] ? __pfx___report_bug+0x10/0x10
[ 116.121223][ T5991] ? rcu_read_lock_sched_held+0x89/0x100
[ 116.126971][ T5991] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 116.133237][ T5991] ? trace_pelt_se_tp+0x39/0x120
[ 116.138227][ T5991] ? sched_change_end+0x4f6/0x640
[ 116.144110][ T5991] report_bug+0x16a/0x220
[ 116.148540][ T5991] ? sched_change_end+0x4f6/0x640
[ 116.153682][ T5991] ? sched_change_end+0x4f8/0x640
[ 116.158838][ T5991] handle_bug+0x98/0x200
[ 116.163229][ T5991] exc_invalid_op+0x1a/0x50
[ 116.167769][ T5991] asm_exc_invalid_op+0x1a/0x20
[ 116.172860][ T5991] RIP: 0010:sched_change_end+0x4f6/0x640
[ 116.178526][ T5991] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 116.198547][ T5991] RSP: 0018:ffffc90003fff850 EFLAGS: 00010046
[ 116.204632][ T5991] RAX: 1ffff11004c29b70 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f
[ 116.212610][ T5991] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802614db80
[ 116.220586][ T5991] RBP: ffff88802614de28 R08: ffff88802614db87 R09: 1ffff11004c29b70
[ 116.228659][ T5991] R10: dffffc0000000000 R11: ffffed1004c29b71 R12: dffffc0000000000
[ 116.236811][ T5991] R13: ffff88802614db80 R14: ffff8880b873ab00 R15: ffff88802614db80
[ 116.244981][ T5991] ? sched_change_end+0x4af/0x640
[ 116.250030][ T5991] rt_mutex_setprio+0x488/0xb70
[ 116.254987][ T5991] remove_waiter+0x7f5/0xaf0
[ 116.259689][ T5991] ? lockdep_hardirqs_on+0x98/0x140
[ 116.265008][ T5991] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 116.271151][ T5991] futex_lock_pi+0x530/0xa90
[ 116.276085][ T5991] ? __pfx_futex_lock_pi+0x10/0x10
[ 116.281245][ T5991] ? futex_hash+0x40/0x2d0
[ 116.285669][ T5991] ? futex_hash+0x2ad/0x2d0
[ 116.290178][ T5991] ? __pfx_futex_wake_mark+0x10/0x10
[ 116.295577][ T5991] ? __pfx_futex_wake+0x10/0x10
[ 116.300546][ T5991] ? handle_mm_fault+0xdb/0x32b0
[ 116.305545][ T5991] do_futex+0x292/0x420
[ 116.309823][ T5991] ? __pfx_do_futex+0x10/0x10
[ 116.314675][ T5991] __se_sys_futex+0x36f/0x400
[ 116.319762][ T5991] ? __pfx___se_sys_futex+0x10/0x10
[ 116.324995][ T5991] ? __x64_sys_futex+0x21/0xf0
[ 116.329887][ T5991] do_syscall_64+0xfa/0xf80
[ 116.334417][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.340680][ T5991] ? clear_bhb_loop+0x60/0xb0
[ 116.346534][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.353848][ T5991] RIP: 0033:0x7fe49338f749
[ 116.358720][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 116.384657][ T5991] RSP: 002b:00007fff9bfbebf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 116.393777][ T5991] RAX: ffffffffffffffda RBX: 00007fe4935e5fa0 RCX: 00007fe49338f749
[ 116.402295][ T5991] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 116.410758][ T5991] RBP: 00007fe493413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 116.419736][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.428232][ T5991] R13: 00007fe4935e5fa0 R14: 00007fe4935e5fa0 R15: 0000000000000006
[ 116.436353][ T5991]
[ 117.563947][ T5991] Shutting down cpus with NMI
[ 117.570023][ T5991] Kernel Offset: disabled
[ 117.574665][ T5991] Rebooting in 86400 seconds..