Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts. 2026/01/03 18:55:53 parsed 1 programs [ 90.581536][ T5834] cgroup: Unknown subsys name 'net' [ 90.715699][ T5834] cgroup: Unknown subsys name 'cpuset' [ 90.724780][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.408743][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.480786][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.703428][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.714924][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.722765][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.730797][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.738510][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.361918][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 96.486258][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.494259][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.501543][ T5866] bridge_slave_0: entered allmulticast mode [ 96.509260][ T5866] bridge_slave_0: entered promiscuous mode [ 96.519730][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.527521][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.535540][ T5866] bridge_slave_1: entered allmulticast mode [ 96.543633][ T5866] bridge_slave_1: entered promiscuous mode [ 96.588184][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.600655][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.639594][ T5866] team0: Port device team_slave_0 added [ 96.648900][ T5866] team0: Port device team_slave_1 added [ 96.685948][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.693054][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.719198][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.732307][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.739270][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.765416][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.814584][ T5866] hsr_slave_0: entered promiscuous mode [ 96.821423][ T5866] hsr_slave_1: entered promiscuous mode [ 97.003976][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.018165][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.028670][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.040568][ T123] cfg80211: failed to load regulatory.db [ 97.044572][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.085387][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.092733][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.100679][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.108013][ T5866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.171170][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.193298][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.202148][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.219752][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.234459][ T4565] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.241704][ T4565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.257752][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.264976][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.466136][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.518476][ T5866] veth0_vlan: entered promiscuous mode [ 97.531343][ T5866] veth1_vlan: entered promiscuous mode [ 97.565543][ T5866] veth0_macvtap: entered promiscuous mode [ 97.576129][ T5866] veth1_macvtap: entered promiscuous mode [ 97.597809][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.613644][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.630107][ T771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.639942][ T771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.650800][ T771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.660156][ T771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.827823][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.931564][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.017053][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.117791][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.299352][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.312381][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.347027][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.355613][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/03 18:56:06 executed programs: 0 [ 100.700466][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.708503][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.719605][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.727742][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.735441][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.916100][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 101.037048][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.044492][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.052042][ T5945] bridge_slave_0: entered allmulticast mode [ 101.059332][ T5945] bridge_slave_0: entered promiscuous mode [ 101.083160][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.091061][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.099025][ T5945] bridge_slave_1: entered allmulticast mode [ 101.106621][ T5945] bridge_slave_1: entered promiscuous mode [ 101.159860][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.173350][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.182650][ T37] bridge_slave_1: left allmulticast mode [ 101.188384][ T37] bridge_slave_1: left promiscuous mode [ 101.196889][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.210104][ T37] bridge_slave_0: left allmulticast mode [ 101.216758][ T37] bridge_slave_0: left promiscuous mode [ 101.222613][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.452439][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.464798][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.475329][ T37] bond0 (unregistering): Released all slaves [ 101.536653][ T5945] team0: Port device team_slave_0 added [ 101.550231][ T5945] team0: Port device team_slave_1 added [ 101.596280][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.603393][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.630565][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.653740][ T37] hsr_slave_0: left promiscuous mode [ 101.666809][ T37] hsr_slave_1: left promiscuous mode [ 101.674618][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.682243][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.690881][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.698653][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.728123][ T37] veth1_macvtap: left promiscuous mode [ 101.734314][ T37] veth0_macvtap: left promiscuous mode [ 101.740054][ T37] veth1_vlan: left promiscuous mode [ 101.746498][ T37] veth0_vlan: left promiscuous mode [ 102.244692][ T37] team0 (unregistering): Port device team_slave_1 removed [ 102.274839][ T37] team0 (unregistering): Port device team_slave_0 removed [ 102.505584][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.512608][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.538989][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.601834][ T5945] hsr_slave_0: entered promiscuous mode [ 102.608658][ T5945] hsr_slave_1: entered promiscuous mode [ 102.792767][ T52] Bluetooth: hci0: command tx timeout [ 104.013457][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.043407][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.139339][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.151609][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.414982][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.469960][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.499728][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.506996][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.527412][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.534747][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.871979][ T52] Bluetooth: hci0: command tx timeout [ 105.008379][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.059576][ T5945] veth0_vlan: entered promiscuous mode [ 105.071421][ T5945] veth1_vlan: entered promiscuous mode [ 105.106336][ T5945] veth0_macvtap: entered promiscuous mode [ 105.116541][ T5945] veth1_macvtap: entered promiscuous mode [ 105.138197][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.154009][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.170648][ T3433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.179564][ T3433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.189727][ T3433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.199699][ T3433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.261237][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.277751][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.308582][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.317210][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.952355][ T52] Bluetooth: hci0: command tx timeout [ 108.365995][ T6018] ------------[ cut here ]------------ [ 108.366352][ T6018] [ 108.366359][ T6018] ====================================================== [ 108.366365][ T6018] WARNING: possible circular locking dependency detected [ 108.366377][ T6018] syzkaller #0 Not tainted [ 108.366384][ T6018] ------------------------------------------------------ [ 108.366390][ T6018] syz.0.17/6018 is trying to acquire lock: [ 108.366397][ T6018] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 108.366444][ T6018] [ 108.366444][ T6018] but task is already holding lock: [ 108.366449][ T6018] ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 108.366481][ T6018] [ 108.366481][ T6018] which lock already depends on the new lock. [ 108.366481][ T6018] [ 108.366486][ T6018] [ 108.366486][ T6018] the existing dependency chain (in reverse order) is: [ 108.366491][ T6018] [ 108.366491][ T6018] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 108.366510][ T6018] _raw_spin_lock_nested+0x32/0x50 [ 108.366530][ T6018] raw_spin_rq_lock_nested+0x2a/0x140 [ 108.366544][ T6018] task_rq_lock+0xbc/0x470 [ 108.366557][ T6018] cgroup_move_task+0x92/0x2a0 [ 108.366575][ T6018] css_set_move_task+0x658/0x9e0 [ 108.366599][ T6018] cgroup_post_fork+0x1ef/0x7a0 [ 108.366613][ T6018] copy_process+0x3614/0x3950 [ 108.366628][ T6018] kernel_clone+0x21e/0x820 [ 108.366643][ T6018] user_mode_thread+0xdd/0x140 [ 108.366659][ T6018] rest_init+0x23/0x300 [ 108.366672][ T6018] start_kernel+0x3ac/0x400 [ 108.366686][ T6018] x86_64_start_reservations+0x24/0x30 [ 108.366707][ T6018] x86_64_start_kernel+0x143/0x1c0 [ 108.366726][ T6018] common_startup_64+0x13e/0x147 [ 108.366745][ T6018] [ 108.366745][ T6018] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 108.366763][ T6018] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.366780][ T6018] try_to_wake_up+0x67/0x12b0 [ 108.366798][ T6018] __wake_up_common_lock+0x137/0x1f0 [ 108.366819][ T6018] tty_port_default_wakeup+0xfb/0x170 [ 108.366838][ T6018] serial8250_tx_chars+0x72e/0x970 [ 108.366854][ T6018] serial8250_handle_irq+0x633/0xbb0 [ 108.366869][ T6018] serial8250_default_handle_irq+0xbf/0x200 [ 108.366889][ T6018] serial8250_interrupt+0x8d/0x180 [ 108.366911][ T6018] __handle_irq_event_percpu+0x285/0xa60 [ 108.366932][ T6018] handle_irq_event+0x8b/0x1e0 [ 108.366951][ T6018] handle_edge_irq+0x23b/0xa10 [ 108.366969][ T6018] __common_interrupt+0x141/0x1f0 [ 108.366991][ T6018] common_interrupt+0x5e/0xe0 [ 108.367012][ T6018] asm_common_interrupt+0x26/0x40 [ 108.367026][ T6018] handle_softirqs+0x1b0/0x850 [ 108.367039][ T6018] __irq_exit_rcu+0xca/0x1f0 [ 108.367053][ T6018] irq_exit_rcu+0x9/0x30 [ 108.367065][ T6018] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 108.367084][ T6018] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.367098][ T6018] pv_native_safe_halt+0x13/0x20 [ 108.367116][ T6018] default_idle+0x13/0x20 [ 108.367127][ T6018] default_idle_call+0x73/0xb0 [ 108.367138][ T6018] do_idle+0x1ea/0x520 [ 108.367153][ T6018] cpu_startup_entry+0x44/0x60 [ 108.367169][ T6018] rest_init+0x2de/0x300 [ 108.367181][ T6018] start_kernel+0x3ac/0x400 [ 108.367195][ T6018] x86_64_start_reservations+0x24/0x30 [ 108.367215][ T6018] x86_64_start_kernel+0x143/0x1c0 [ 108.367234][ T6018] common_startup_64+0x13e/0x147 [ 108.367251][ T6018] [ 108.367251][ T6018] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 108.367270][ T6018] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.367287][ T6018] __wake_up_common_lock+0x2f/0x1f0 [ 108.367307][ T6018] tty_port_default_wakeup+0xfb/0x170 [ 108.367324][ T6018] serial8250_tx_chars+0x72e/0x970 [ 108.367338][ T6018] serial8250_handle_irq+0x633/0xbb0 [ 108.367352][ T6018] serial8250_default_handle_irq+0xbf/0x200 [ 108.367370][ T6018] serial8250_interrupt+0x8d/0x180 [ 108.367410][ T6018] __handle_irq_event_percpu+0x285/0xa60 [ 108.367431][ T6018] handle_irq_event+0x8b/0x1e0 [ 108.367451][ T6018] handle_edge_irq+0x23b/0xa10 [ 108.367469][ T6018] __common_interrupt+0x141/0x1f0 [ 108.367490][ T6018] common_interrupt+0xb6/0xe0 [ 108.367504][ T6018] asm_common_interrupt+0x26/0x40 [ 108.367517][ T6018] pv_native_safe_halt+0x13/0x20 [ 108.367535][ T6018] default_idle+0x13/0x20 [ 108.367558][ T6018] default_idle_call+0x73/0xb0 [ 108.367569][ T6018] do_idle+0x1ea/0x520 [ 108.367630][ T6018] cpu_startup_entry+0x44/0x60 [ 108.367645][ T6018] rest_init+0x2de/0x300 [ 108.367657][ T6018] start_kernel+0x3ac/0x400 [ 108.367671][ T6018] x86_64_start_reservations+0x24/0x30 [ 108.367691][ T6018] x86_64_start_kernel+0x143/0x1c0 [ 108.367710][ T6018] common_startup_64+0x13e/0x147 [ 108.367727][ T6018] [ 108.367727][ T6018] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 108.367746][ T6018] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.367763][ T6018] serial8250_console_write+0x17e/0x1ba0 [ 108.367779][ T6018] console_flush_all+0x745/0xb60 [ 108.367798][ T6018] console_unlock+0xbb/0x190 [ 108.367833][ T6018] vprintk_emit+0x4f8/0x5f0 [ 108.367851][ T6018] _printk+0xcf/0x120 [ 108.367871][ T6018] register_console+0xa8b/0xf90 [ 108.367900][ T6018] univ8250_console_init+0x3a/0x70 [ 108.367921][ T6018] console_init+0xfc/0x3f0 [ 108.367938][ T6018] start_kernel+0x252/0x400 [ 108.367951][ T6018] x86_64_start_reservations+0x24/0x30 [ 108.367969][ T6018] x86_64_start_kernel+0x143/0x1c0 [ 108.367993][ T6018] common_startup_64+0x13e/0x147 [ 108.368009][ T6018] [ 108.368009][ T6018] -> #0 (console_owner){....}-{0:0}: [ 108.368026][ T6018] __lock_acquire+0x15a6/0x2cf0 [ 108.368039][ T6018] lock_acquire+0x117/0x340 [ 108.368051][ T6018] console_flush_all+0x6ee/0xb60 [ 108.368069][ T6018] console_unlock+0xbb/0x190 [ 108.368084][ T6018] vprintk_emit+0x4f8/0x5f0 [ 108.368099][ T6018] _printk+0xcf/0x120 [ 108.368117][ T6018] __report_bug+0x305/0x500 [ 108.368133][ T6018] report_bug+0x16a/0x220 [ 108.368148][ T6018] handle_bug+0x98/0x200 [ 108.368158][ T6018] exc_invalid_op+0x1a/0x50 [ 108.368169][ T6018] asm_exc_invalid_op+0x1a/0x20 [ 108.368181][ T6018] sched_change_end+0x4f6/0x640 [ 108.368197][ T6018] rt_mutex_setprio+0x488/0xb70 [ 108.368208][ T6018] remove_waiter+0x7f5/0xaf0 [ 108.368220][ T6018] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 108.368234][ T6018] futex_lock_pi+0x530/0xa90 [ 108.368251][ T6018] do_futex+0x292/0x420 [ 108.368263][ T6018] __se_sys_futex+0x36f/0x400 [ 108.368277][ T6018] do_syscall_64+0xfa/0xf80 [ 108.368295][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.368307][ T6018] [ 108.368307][ T6018] other info that might help us debug this: [ 108.368307][ T6018] [ 108.368312][ T6018] Chain exists of: [ 108.368312][ T6018] console_owner --> &p->pi_lock --> &rq->__lock [ 108.368312][ T6018] [ 108.368333][ T6018] Possible unsafe locking scenario: [ 108.368333][ T6018] [ 108.368336][ T6018] CPU0 CPU1 [ 108.368341][ T6018] ---- ---- [ 108.368345][ T6018] lock(&rq->__lock); [ 108.368353][ T6018] lock(&p->pi_lock); [ 108.368363][ T6018] lock(&rq->__lock); [ 108.368372][ T6018] lock(console_owner); [ 108.368381][ T6018] [ 108.368381][ T6018] *** DEADLOCK *** [ 108.368381][ T6018] [ 108.368385][ T6018] 5 locks held by syz.0.17/6018: [ 108.368392][ T6018] #0: ffff8880795d7e28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 108.368426][ T6018] #1: ffff88802ac68a68 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 108.368457][ T6018] #2: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 108.368489][ T6018] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 108.368526][ T6018] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 108.368563][ T6018] [ 108.368563][ T6018] stack backtrace: [ 108.368580][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.368604][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.368619][ T6018] Call Trace: [ 108.368625][ T6018] [ 108.368630][ T6018] dump_stack_lvl+0x189/0x250 [ 108.368650][ T6018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.368667][ T6018] ? __pfx__printk+0x10/0x10 [ 108.368688][ T6018] ? print_lock_name+0xde/0x100 [ 108.368709][ T6018] print_circular_bug+0x2e2/0x300 [ 108.368728][ T6018] check_noncircular+0x12e/0x150 [ 108.368747][ T6018] __lock_acquire+0x15a6/0x2cf0 [ 108.368770][ T6018] ? console_flush_all+0x131/0xb60 [ 108.368789][ T6018] lock_acquire+0x117/0x340 [ 108.368802][ T6018] ? console_flush_all+0x131/0xb60 [ 108.368824][ T6018] ? do_raw_spin_unlock+0x122/0x240 [ 108.368843][ T6018] ? console_flush_all+0x131/0xb60 [ 108.368862][ T6018] console_flush_all+0x6ee/0xb60 [ 108.368880][ T6018] ? console_flush_all+0x131/0xb60 [ 108.368900][ T6018] ? console_flush_all+0x131/0xb60 [ 108.368921][ T6018] ? __pfx_console_flush_all+0x10/0x10 [ 108.368941][ T6018] ? is_bpf_text_address+0x26/0x2b0 [ 108.368957][ T6018] ? is_printk_cpu_sync_owner+0x32/0x40 [ 108.368980][ T6018] console_unlock+0xbb/0x190 [ 108.368997][ T6018] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 108.369016][ T6018] ? __pfx_console_unlock+0x10/0x10 [ 108.369037][ T6018] vprintk_emit+0x4f8/0x5f0 [ 108.369061][ T6018] ? __pfx_vprintk_emit+0x10/0x10 [ 108.369079][ T6018] ? __lock_acquire+0x6b6/0x2cf0 [ 108.369093][ T6018] ? __lock_acquire+0x6b6/0x2cf0 [ 108.369110][ T6018] _printk+0xcf/0x120 [ 108.369131][ T6018] ? __pfx__printk+0x10/0x10 [ 108.369156][ T6018] ? find_bug+0xa5/0x370 [ 108.369172][ T6018] ? sched_change_end+0x4f6/0x640 [ 108.369189][ T6018] ? sched_change_end+0x4f6/0x640 [ 108.369206][ T6018] __report_bug+0x305/0x500 [ 108.369256][ T6018] ? sched_change_end+0x4f6/0x640 [ 108.369285][ T6018] ? __pfx___report_bug+0x10/0x10 [ 108.369303][ T6018] ? rcu_read_lock_sched_held+0x89/0x100 [ 108.369321][ T6018] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 108.369342][ T6018] ? sched_change_end+0x4f6/0x640 [ 108.369359][ T6018] report_bug+0x16a/0x220 [ 108.369376][ T6018] ? sched_change_end+0x4f6/0x640 [ 108.369393][ T6018] ? sched_change_end+0x4f8/0x640 [ 108.369409][ T6018] handle_bug+0x98/0x200 [ 108.369421][ T6018] exc_invalid_op+0x1a/0x50 [ 108.369433][ T6018] asm_exc_invalid_op+0x1a/0x20 [ 108.369446][ T6018] RIP: 0010:sched_change_end+0x4f6/0x640 [ 108.369464][ T6018] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 108.369476][ T6018] RSP: 0018:ffffc900033f7850 EFLAGS: 00010046 [ 108.369487][ T6018] RAX: 1ffff1100558d000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 108.369498][ T6018] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802ac68000 [ 108.369507][ T6018] RBP: ffff88802ac682a8 R08: ffff88802ac68007 R09: 1ffff1100558d000 [ 108.369517][ T6018] R10: dffffc0000000000 R11: ffffed100558d001 R12: dffffc0000000000 [ 108.369527][ T6018] R13: ffff88802ac68000 R14: ffff8880b863ab00 R15: ffff88802ac68000 [ 108.369541][ T6018] ? sched_change_end+0x4af/0x640 [ 108.369563][ T6018] rt_mutex_setprio+0x488/0xb70 [ 108.369581][ T6018] remove_waiter+0x7f5/0xaf0 [ 108.369603][ T6018] ? lockdep_hardirqs_on+0x98/0x140 [ 108.369622][ T6018] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 108.369638][ T6018] futex_lock_pi+0x530/0xa90 [ 108.369659][ T6018] ? __pfx_futex_lock_pi+0x10/0x10 [ 108.369684][ T6018] ? futex_hash+0x40/0x2d0 [ 108.369695][ T6018] ? futex_hash+0x2ad/0x2d0 [ 108.369708][ T6018] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.369728][ T6018] ? __pfx_futex_wake+0x10/0x10 [ 108.369749][ T6018] ? handle_mm_fault+0xdb/0x32b0 [ 108.369772][ T6018] do_futex+0x292/0x420 [ 108.369789][ T6018] ? __pfx_do_futex+0x10/0x10 [ 108.369806][ T6018] __se_sys_futex+0x36f/0x400 [ 108.369824][ T6018] ? __pfx___se_sys_futex+0x10/0x10 [ 108.369842][ T6018] ? __x64_sys_futex+0x21/0xf0 [ 108.369862][ T6018] do_syscall_64+0xfa/0xf80 [ 108.369881][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.369895][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 108.369923][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.369935][ T6018] RIP: 0033:0x7f23cf18f749 [ 108.369951][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.369962][ T6018] RSP: 002b:00007fffee2ef3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.369975][ T6018] RAX: ffffffffffffffda RBX: 00007f23cf3e5fa0 RCX: 00007f23cf18f749 [ 108.369984][ T6018] RDX: 0000000000000000 RSI: 0000800000000006 RDI: 000020000000cffc [ 108.369993][ T6018] RBP: 00007f23cf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.370001][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.370009][ T6018] R13: 00007f23cf3e5fa0 R14: 00007f23cf3e5fa0 R15: 0000000000000006 [ 108.370024][ T6018] [ 109.635051][ T6018] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#1: syz.0.17/6018 [ 109.645047][ T6018] Modules linked in: [ 109.648949][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.658065][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.668125][ T6018] RIP: 0010:sched_change_end+0x4f6/0x640 [ 109.673763][ T6018] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 109.693380][ T6018] RSP: 0018:ffffc900033f7850 EFLAGS: 00010046 [ 109.699443][ T6018] RAX: 1ffff1100558d000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 109.707427][ T6018] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802ac68000 [ 109.715391][ T6018] RBP: ffff88802ac682a8 R08: ffff88802ac68007 R09: 1ffff1100558d000 [ 109.723364][ T6018] R10: dffffc0000000000 R11: ffffed100558d001 R12: dffffc0000000000 [ 109.731328][ T6018] R13: ffff88802ac68000 R14: ffff8880b863ab00 R15: ffff88802ac68000 [ 109.739297][ T6018] FS: 0000555586b76500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 109.748228][ T6018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.754821][ T6018] CR2: 000000c000613b64 CR3: 000000007fdc0000 CR4: 00000000003526f0 [ 109.762799][ T6018] Call Trace: [ 109.766082][ T6018] [ 109.769019][ T6018] rt_mutex_setprio+0x488/0xb70 [ 109.773901][ T6018] remove_waiter+0x7f5/0xaf0 [ 109.778497][ T6018] ? lockdep_hardirqs_on+0x98/0x140 [ 109.783717][ T6018] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 109.789456][ T6018] futex_lock_pi+0x530/0xa90 [ 109.794088][ T6018] ? __pfx_futex_lock_pi+0x10/0x10 [ 109.799205][ T6018] ? futex_hash+0x40/0x2d0 [ 109.803614][ T6018] ? futex_hash+0x2ad/0x2d0 [ 109.808199][ T6018] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.813488][ T6018] ? __pfx_futex_wake+0x10/0x10 [ 109.818347][ T6018] ? handle_mm_fault+0xdb/0x32b0 [ 109.823284][ T6018] do_futex+0x292/0x420 [ 109.827455][ T6018] ? __pfx_do_futex+0x10/0x10 [ 109.832139][ T6018] __se_sys_futex+0x36f/0x400 [ 109.836818][ T6018] ? __pfx___se_sys_futex+0x10/0x10 [ 109.842019][ T6018] ? __x64_sys_futex+0x21/0xf0 [ 109.846867][ T6018] do_syscall_64+0xfa/0xf80 [ 109.851373][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.857440][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 109.862116][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.868009][ T6018] RIP: 0033:0x7f23cf18f749 [ 109.872506][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.892126][ T6018] RSP: 002b:00007fffee2ef3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.900554][ T6018] RAX: ffffffffffffffda RBX: 00007f23cf3e5fa0 RCX: 00007f23cf18f749 [ 109.908521][ T6018] RDX: 0000000000000000 RSI: 0000800000000006 RDI: 000020000000cffc [ 109.916541][ T6018] RBP: 00007f23cf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.924504][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.932503][ T6018] R13: 00007f23cf3e5fa0 R14: 00007f23cf3e5fa0 R15: 0000000000000006 [ 109.940488][ T6018] [ 109.943581][ T6018] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.950869][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.959981][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.970037][ T6018] Call Trace: [ 109.973326][ T6018] [ 109.976258][ T6018] dump_stack_lvl+0x99/0x250 [ 109.980869][ T6018] ? __asan_memcpy+0x40/0x70 [ 109.985499][ T6018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.990698][ T6018] ? __pfx__printk+0x10/0x10 [ 109.995294][ T6018] vpanic+0x237/0x6d0 [ 109.999276][ T6018] ? __pfx_vpanic+0x10/0x10 [ 110.003807][ T6018] ? is_bpf_text_address+0x292/0x2b0 [ 110.009100][ T6018] ? is_bpf_text_address+0x26/0x2b0 [ 110.014302][ T6018] panic+0xb9/0xc0 [ 110.018033][ T6018] ? __pfx_panic+0x10/0x10 [ 110.022465][ T6018] __warn+0x317/0x4b0 [ 110.026460][ T6018] ? sched_change_end+0x4f6/0x640 [ 110.031528][ T6018] ? sched_change_end+0x4f6/0x640 [ 110.036554][ T6018] __report_bug+0x288/0x500 [ 110.041085][ T6018] ? sched_change_end+0x4f6/0x640 [ 110.046114][ T6018] ? __pfx___report_bug+0x10/0x10 [ 110.051138][ T6018] ? rcu_read_lock_sched_held+0x89/0x100 [ 110.056777][ T6018] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 110.062852][ T6018] ? sched_change_end+0x4f6/0x640 [ 110.067888][ T6018] report_bug+0x16a/0x220 [ 110.072222][ T6018] ? sched_change_end+0x4f6/0x640 [ 110.077255][ T6018] ? sched_change_end+0x4f8/0x640 [ 110.082290][ T6018] handle_bug+0x98/0x200 [ 110.086542][ T6018] exc_invalid_op+0x1a/0x50 [ 110.091050][ T6018] asm_exc_invalid_op+0x1a/0x20 [ 110.095902][ T6018] RIP: 0010:sched_change_end+0x4f6/0x640 [ 110.101542][ T6018] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 110.121143][ T6018] RSP: 0018:ffffc900033f7850 EFLAGS: 00010046 [ 110.127210][ T6018] RAX: 1ffff1100558d000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 110.135183][ T6018] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802ac68000 [ 110.143152][ T6018] RBP: ffff88802ac682a8 R08: ffff88802ac68007 R09: 1ffff1100558d000 [ 110.151121][ T6018] R10: dffffc0000000000 R11: ffffed100558d001 R12: dffffc0000000000 [ 110.159091][ T6018] R13: ffff88802ac68000 R14: ffff8880b863ab00 R15: ffff88802ac68000 [ 110.167060][ T6018] ? sched_change_end+0x4af/0x640 [ 110.172184][ T6018] rt_mutex_setprio+0x488/0xb70 [ 110.177033][ T6018] remove_waiter+0x7f5/0xaf0 [ 110.181622][ T6018] ? lockdep_hardirqs_on+0x98/0x140 [ 110.186856][ T6018] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 110.192572][ T6018] futex_lock_pi+0x530/0xa90 [ 110.197163][ T6018] ? __pfx_futex_lock_pi+0x10/0x10 [ 110.202284][ T6018] ? futex_hash+0x40/0x2d0 [ 110.206702][ T6018] ? futex_hash+0x2ad/0x2d0 [ 110.211200][ T6018] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.216487][ T6018] ? __pfx_futex_wake+0x10/0x10 [ 110.221355][ T6018] ? handle_mm_fault+0xdb/0x32b0 [ 110.226297][ T6018] do_futex+0x292/0x420 [ 110.230452][ T6018] ? __pfx_do_futex+0x10/0x10 [ 110.235127][ T6018] __se_sys_futex+0x36f/0x400 [ 110.239805][ T6018] ? __pfx___se_sys_futex+0x10/0x10 [ 110.245005][ T6018] ? __x64_sys_futex+0x21/0xf0 [ 110.249767][ T6018] do_syscall_64+0xfa/0xf80 [ 110.254274][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.260354][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 110.265029][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.270918][ T6018] RIP: 0033:0x7f23cf18f749 [ 110.275415][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.295015][ T6018] RSP: 002b:00007fffee2ef3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.303424][ T6018] RAX: ffffffffffffffda RBX: 00007f23cf3e5fa0 RCX: 00007f23cf18f749 [ 110.311390][ T6018] RDX: 0000000000000000 RSI: 0000800000000006 RDI: 000020000000cffc [ 110.319361][ T6018] RBP: 00007f23cf213f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.327327][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.335295][ T6018] R13: 00007f23cf3e5fa0 R14: 00007f23cf3e5fa0 R15: 0000000000000006 [ 110.343274][ T6018] [ 111.466492][ T6018] Shutting down cpus with NMI [ 111.471408][ T6018] Kernel Offset: disabled [ 111.475742][ T6018] Rebooting in 86400 seconds..