Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts.
2025/12/23 20:57:44 parsed 1 programs
[ 91.108384][ T5834] cgroup: Unknown subsys name 'net'
[ 91.239844][ T5834] cgroup: Unknown subsys name 'cpuset'
[ 91.249946][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 93.103211][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.322315][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.998912][ T5858] chnl_net:caif_netlink_parms(): no params data found
[ 97.094941][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.102787][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.110195][ T5858] bridge_slave_0: entered allmulticast mode
[ 97.119050][ T5858] bridge_slave_0: entered promiscuous mode
[ 97.128599][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.135956][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.143158][ T5858] bridge_slave_1: entered allmulticast mode
[ 97.150721][ T5858] bridge_slave_1: entered promiscuous mode
[ 97.163994][ T9] cfg80211: failed to load regulatory.db
[ 97.194507][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.209454][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.244960][ T5858] team0: Port device team_slave_0 added
[ 97.253289][ T5858] team0: Port device team_slave_1 added
[ 97.283719][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.291545][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.318185][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.331247][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.338724][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.364810][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.412982][ T5858] hsr_slave_0: entered promiscuous mode
[ 97.419830][ T5858] hsr_slave_1: entered promiscuous mode
[ 97.609540][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.622540][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.633928][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.645349][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.681596][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.688897][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.697045][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.704201][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.772000][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.794493][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.803409][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.822281][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.837942][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.845190][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.861317][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.868572][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.076538][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.131058][ T5858] veth0_vlan: entered promiscuous mode
[ 98.144286][ T5858] veth1_vlan: entered promiscuous mode
[ 98.177213][ T5858] veth0_macvtap: entered promiscuous mode
[ 98.189595][ T5858] veth1_macvtap: entered promiscuous mode
[ 98.211699][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.228524][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.244654][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.255873][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.265653][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.277798][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.447438][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.513618][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.613838][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.684193][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.694054][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.702983][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.716224][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.724367][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.731883][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.235833][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.243969][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.288832][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.297020][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.428292][ T50] bridge_slave_1: left allmulticast mode
[ 101.434118][ T50] bridge_slave_1: left promiscuous mode
[ 101.445143][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.478799][ T50] bridge_slave_0: left allmulticast mode
[ 101.484513][ T50] bridge_slave_0: left promiscuous mode
[ 101.496190][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
2025/12/23 20:57:58 executed programs: 0
[ 102.073989][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.083006][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.091727][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.111256][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.120085][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.163072][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.187003][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.198253][ T50] bond0 (unregistering): Released all slaves
[ 102.343670][ T50] hsr_slave_0: left promiscuous mode
[ 102.352118][ T50] hsr_slave_1: left promiscuous mode
[ 102.366732][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.374160][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.397679][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.405127][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.427876][ T50] veth1_macvtap: left promiscuous mode
[ 102.433600][ T50] veth0_macvtap: left promiscuous mode
[ 102.439923][ T50] veth1_vlan: left promiscuous mode
[ 102.445436][ T50] veth0_vlan: left promiscuous mode
[ 102.922555][ T50] team0 (unregistering): Port device team_slave_1 removed
[ 102.952319][ T50] team0 (unregistering): Port device team_slave_0 removed
[ 103.396802][ T5957] chnl_net:caif_netlink_parms(): no params data found
[ 103.616898][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.624227][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.634754][ T5957] bridge_slave_0: entered allmulticast mode
[ 103.644306][ T5957] bridge_slave_0: entered promiscuous mode
[ 103.662066][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.675678][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.683276][ T5957] bridge_slave_1: entered allmulticast mode
[ 103.692652][ T5957] bridge_slave_1: entered promiscuous mode
[ 103.750464][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.771130][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.186972][ T52] Bluetooth: hci0: command tx timeout
[ 104.326561][ T5957] team0: Port device team_slave_0 added
[ 104.334970][ T5957] team0: Port device team_slave_1 added
[ 104.393129][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.400693][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.428015][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.441628][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.448777][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.475672][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.581266][ T5957] hsr_slave_0: entered promiscuous mode
[ 104.589070][ T5957] hsr_slave_1: entered promiscuous mode
[ 105.685103][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.710225][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.725025][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.740665][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.877837][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.908432][ T5957] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.926418][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.933664][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.958735][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.966017][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.269464][ T52] Bluetooth: hci0: command tx timeout
[ 106.278847][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.347598][ T5957] veth0_vlan: entered promiscuous mode
[ 106.362509][ T5957] veth1_vlan: entered promiscuous mode
[ 106.421909][ T5957] veth0_macvtap: entered promiscuous mode
[ 106.435414][ T5957] veth1_macvtap: entered promiscuous mode
[ 106.459850][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.485608][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.502484][ T1133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.517711][ T1133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.528152][ T1133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.537914][ T1133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.633086][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.650896][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.700942][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.709940][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.345889][ T52] Bluetooth: hci0: command tx timeout
[ 109.780258][ T6048] ------------[ cut here ]------------
[ 109.780810][ T6048]
[ 109.780817][ T6048] ======================================================
[ 109.780822][ T6048] WARNING: possible circular locking dependency detected
[ 109.780834][ T6048] syzkaller #0 Not tainted
[ 109.780841][ T6048] ------------------------------------------------------
[ 109.780846][ T6048] syz.0.17/6048 is trying to acquire lock:
[ 109.780853][ T6048] ffffffff8e333180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 109.780893][ T6048]
[ 109.780893][ T6048] but task is already holding lock:
[ 109.780898][ T6048] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 109.780934][ T6048]
[ 109.780934][ T6048] which lock already depends on the new lock.
[ 109.780934][ T6048]
[ 109.780939][ T6048]
[ 109.780939][ T6048] the existing dependency chain (in reverse order) is:
[ 109.780943][ T6048]
[ 109.780943][ T6048] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 109.780961][ T6048] _raw_spin_lock_nested+0x32/0x50
[ 109.780976][ T6048] raw_spin_rq_lock_nested+0x2a/0x140
[ 109.780994][ T6048] task_rq_lock+0xbc/0x470
[ 109.781012][ T6048] cgroup_move_task+0x92/0x2a0
[ 109.781025][ T6048] css_set_move_task+0x658/0x9e0
[ 109.781050][ T6048] cgroup_post_fork+0x1ef/0x7a0
[ 109.781068][ T6048] copy_process+0x3614/0x3950
[ 109.781087][ T6048] kernel_clone+0x21e/0x820
[ 109.781098][ T6048] user_mode_thread+0xdd/0x140
[ 109.781109][ T6048] rest_init+0x23/0x300
[ 109.781126][ T6048] start_kernel+0x3ac/0x400
[ 109.781143][ T6048] x86_64_start_reservations+0x24/0x30
[ 109.781160][ T6048] x86_64_start_kernel+0x143/0x1c0
[ 109.781203][ T6048] common_startup_64+0x13e/0x147
[ 109.781220][ T6048]
[ 109.781220][ T6048] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 109.781240][ T6048] _raw_spin_lock_irqsave+0xa7/0xf0
[ 109.781252][ T6048] try_to_wake_up+0x67/0x12b0
[ 109.781268][ T6048] __wake_up_common_lock+0x137/0x1f0
[ 109.781285][ T6048] tty_port_default_wakeup+0xfb/0x170
[ 109.781305][ T6048] serial8250_tx_chars+0x72e/0x970
[ 109.781322][ T6048] serial8250_handle_irq+0x633/0xbb0
[ 109.781339][ T6048] serial8250_default_handle_irq+0xbf/0x200
[ 109.781359][ T6048] serial8250_interrupt+0x8d/0x180
[ 109.781372][ T6048] __handle_irq_event_percpu+0x285/0xa60
[ 109.781390][ T6048] handle_irq_event+0x8b/0x1e0
[ 109.781406][ T6048] handle_edge_irq+0x23b/0xa10
[ 109.781421][ T6048] __common_interrupt+0x141/0x1f0
[ 109.781439][ T6048] common_interrupt+0xb6/0xe0
[ 109.781459][ T6048] asm_common_interrupt+0x26/0x40
[ 109.781472][ T6048] __sanitizer_cov_trace_cmp8+0x2f/0x90
[ 109.781488][ T6048] __phys_addr+0x6d/0x180
[ 109.781503][ T6048] check_slab_allocation+0x1f/0xf0
[ 109.781517][ T6048] kfree+0x16e/0x660
[ 109.781534][ T6048] slab_free_after_rcu_debug+0x5d/0x260
[ 109.781549][ T6048] rcu_core+0xd70/0x1870
[ 109.781561][ T6048] handle_softirqs+0x27d/0x850
[ 109.781582][ T6048] run_ksoftirqd+0x9b/0x100
[ 109.781594][ T6048] smpboot_thread_fn+0x542/0xa60
[ 109.781617][ T6048] kthread+0x711/0x8a0
[ 109.781631][ T6048] ret_from_fork+0x599/0xb30
[ 109.781651][ T6048] ret_from_fork_asm+0x1a/0x30
[ 109.781667][ T6048]
[ 109.781667][ T6048] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[ 109.781688][ T6048] _raw_spin_lock_irqsave+0xa7/0xf0
[ 109.781701][ T6048] __wake_up_common_lock+0x2f/0x1f0
[ 109.781717][ T6048] tty_port_default_wakeup+0xfb/0x170
[ 109.781737][ T6048] serial8250_tx_chars+0x72e/0x970
[ 109.781753][ T6048] serial8250_handle_irq+0x633/0xbb0
[ 109.781769][ T6048] serial8250_default_handle_irq+0xbf/0x200
[ 109.781789][ T6048] serial8250_interrupt+0x8d/0x180
[ 109.781803][ T6048] __handle_irq_event_percpu+0x285/0xa60
[ 109.781820][ T6048] handle_irq_event+0x8b/0x1e0
[ 109.781836][ T6048] handle_edge_irq+0x23b/0xa10
[ 109.781851][ T6048] __common_interrupt+0x141/0x1f0
[ 109.781868][ T6048] common_interrupt+0xb6/0xe0
[ 109.781888][ T6048] asm_common_interrupt+0x26/0x40
[ 109.781901][ T6048] _raw_spin_unlock_irqrestore+0xa8/0x110
[ 109.781914][ T6048] uart_port_unlock_deref+0x111/0x2f0
[ 109.781930][ T6048] uart_write+0xe8/0x130
[ 109.781945][ T6048] n_tty_write+0xd78/0x12a0
[ 109.781966][ T6048] file_tty_write+0x559/0xa20
[ 109.781981][ T6048] vfs_write+0x5c9/0xb30
[ 109.782000][ T6048] ksys_write+0x145/0x250
[ 109.782020][ T6048] do_syscall_64+0xfa/0xf80
[ 109.782035][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.782058][ T6048]
[ 109.782058][ T6048] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 109.782078][ T6048] _raw_spin_lock_irqsave+0xa7/0xf0
[ 109.782090][ T6048] serial8250_console_write+0x17e/0x1ba0
[ 109.782108][ T6048] console_flush_all+0x745/0xb60
[ 109.782124][ T6048] console_unlock+0xbb/0x190
[ 109.782143][ T6048] vprintk_emit+0x4f8/0x5f0
[ 109.782156][ T6048] _printk+0xcf/0x120
[ 109.782177][ T6048] register_console+0xa8b/0xf90
[ 109.782193][ T6048] univ8250_console_init+0x3a/0x70
[ 109.782213][ T6048] console_init+0xfc/0x3f0
[ 109.782230][ T6048] start_kernel+0x252/0x400
[ 109.782242][ T6048] x86_64_start_reservations+0x24/0x30
[ 109.782260][ T6048] x86_64_start_kernel+0x143/0x1c0
[ 109.782277][ T6048] common_startup_64+0x13e/0x147
[ 109.782291][ T6048]
[ 109.782291][ T6048] -> #0 (console_owner){....}-{0:0}:
[ 109.782310][ T6048] __lock_acquire+0x15a6/0x2cf0
[ 109.782331][ T6048] lock_acquire+0x117/0x340
[ 109.782351][ T6048] console_flush_all+0x6ee/0xb60
[ 109.782367][ T6048] console_unlock+0xbb/0x190
[ 109.782380][ T6048] vprintk_emit+0x4f8/0x5f0
[ 109.782393][ T6048] _printk+0xcf/0x120
[ 109.782413][ T6048] __report_bug+0x305/0x500
[ 109.782427][ T6048] report_bug+0x16a/0x220
[ 109.782440][ T6048] handle_bug+0x98/0x200
[ 109.782457][ T6048] exc_invalid_op+0x1a/0x50
[ 109.782479][ T6048] asm_exc_invalid_op+0x1a/0x20
[ 109.782492][ T6048] sched_change_end+0x4f6/0x640
[ 109.782506][ T6048] rt_mutex_setprio+0x488/0xb70
[ 109.782525][ T6048] remove_waiter+0x7f5/0xaf0
[ 109.782544][ T6048] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 109.782565][ T6048] futex_lock_pi+0x530/0xa90
[ 109.782579][ T6048] do_futex+0x292/0x420
[ 109.782600][ T6048] __se_sys_futex+0x36f/0x400
[ 109.782622][ T6048] do_syscall_64+0xfa/0xf80
[ 109.782636][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.782650][ T6048]
[ 109.782650][ T6048] other info that might help us debug this:
[ 109.782650][ T6048]
[ 109.782655][ T6048] Chain exists of:
[ 109.782655][ T6048] console_owner --> &p->pi_lock --> &rq->__lock
[ 109.782655][ T6048]
[ 109.782678][ T6048] Possible unsafe locking scenario:
[ 109.782678][ T6048]
[ 109.782683][ T6048] CPU0 CPU1
[ 109.782687][ T6048] ---- ----
[ 109.782692][ T6048] lock(&rq->__lock);
[ 109.782701][ T6048] lock(&p->pi_lock);
[ 109.782712][ T6048] lock(&rq->__lock);
[ 109.782722][ T6048] lock(console_owner);
[ 109.782732][ T6048]
[ 109.782732][ T6048] *** DEADLOCK ***
[ 109.782732][ T6048]
[ 109.782736][ T6048] 5 locks held by syz.0.17/6048:
[ 109.782744][ T6048] #0: ffff88806bf2c728 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100
[ 109.782786][ T6048] #1: ffff888025ae65e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0
[ 109.782826][ T6048] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 109.782868][ T6048] #3: ffffffff8e3331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 109.782911][ T6048] #4: ffffffff8e21aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 109.782948][ T6048]
[ 109.782948][ T6048] stack backtrace:
[ 109.782965][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 109.782982][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 109.782999][ T6048] Call Trace:
[ 109.783005][ T6048]
[ 109.783012][ T6048] dump_stack_lvl+0x189/0x250
[ 109.783029][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.783044][ T6048] ? __pfx__printk+0x10/0x10
[ 109.783068][ T6048] ? print_lock_name+0xde/0x100
[ 109.783092][ T6048] print_circular_bug+0x2e2/0x300
[ 109.783109][ T6048] check_noncircular+0x12e/0x150
[ 109.783127][ T6048] __lock_acquire+0x15a6/0x2cf0
[ 109.783172][ T6048] ? console_flush_all+0x131/0xb60
[ 109.783200][ T6048] lock_acquire+0x117/0x340
[ 109.783218][ T6048] ? console_flush_all+0x131/0xb60
[ 109.783237][ T6048] ? do_raw_spin_unlock+0x122/0x240
[ 109.783253][ T6048] ? console_flush_all+0x131/0xb60
[ 109.783269][ T6048] console_flush_all+0x6ee/0xb60
[ 109.783284][ T6048] ? console_flush_all+0x131/0xb60
[ 109.783301][ T6048] ? console_flush_all+0x131/0xb60
[ 109.783318][ T6048] ? __pfx_console_flush_all+0x10/0x10
[ 109.783338][ T6048] ? is_printk_cpu_sync_owner+0x32/0x40
[ 109.783357][ T6048] console_unlock+0xbb/0x190
[ 109.783371][ T6048] ? __pfx___down_trylock_console_sem+0x10/0x10
[ 109.783387][ T6048] ? __pfx_console_unlock+0x10/0x10
[ 109.783404][ T6048] vprintk_emit+0x4f8/0x5f0
[ 109.783418][ T6048] ? __pfx_vprintk_emit+0x10/0x10
[ 109.783433][ T6048] ? __lock_acquire+0x6b6/0x2cf0
[ 109.783454][ T6048] ? __lock_acquire+0x6b6/0x2cf0
[ 109.783475][ T6048] _printk+0xcf/0x120
[ 109.783497][ T6048] ? __pfx__printk+0x10/0x10
[ 109.783519][ T6048] ? find_bug+0xa5/0x370
[ 109.783531][ T6048] ? sched_change_end+0x4f6/0x640
[ 109.783545][ T6048] ? sched_change_end+0x4f6/0x640
[ 109.783558][ T6048] __report_bug+0x305/0x500
[ 109.783572][ T6048] ? sched_change_end+0x4f6/0x640
[ 109.783587][ T6048] ? __pfx___report_bug+0x10/0x10
[ 109.783601][ T6048] ? rcu_read_lock_sched_held+0x89/0x100
[ 109.783615][ T6048] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 109.783633][ T6048] ? sched_change_end+0x4f6/0x640
[ 109.783646][ T6048] report_bug+0x16a/0x220
[ 109.783659][ T6048] ? sched_change_end+0x4f6/0x640
[ 109.783672][ T6048] ? sched_change_end+0x4f8/0x640
[ 109.783685][ T6048] handle_bug+0x98/0x200
[ 109.783702][ T6048] exc_invalid_op+0x1a/0x50
[ 109.783719][ T6048] asm_exc_invalid_op+0x1a/0x20
[ 109.783732][ T6048] RIP: 0010:sched_change_end+0x4f6/0x640
[ 109.783747][ T6048] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 109.783759][ T6048] RSP: 0018:ffffc9000405f850 EFLAGS: 00010046
[ 109.783770][ T6048] RAX: 1ffff11004b5cb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 109.783781][ T6048] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888025ae5b80
[ 109.783790][ T6048] RBP: ffff888025ae5e28 R08: ffff888025ae5b87 R09: 1ffff11004b5cb70
[ 109.783801][ T6048] R10: dffffc0000000000 R11: ffffed1004b5cb71 R12: dffffc0000000000
[ 109.783811][ T6048] R13: ffff888025ae5b80 R14: ffff8880b873ab00 R15: ffff888025ae5b80
[ 109.783824][ T6048] ? sched_change_end+0x4af/0x640
[ 109.783843][ T6048] rt_mutex_setprio+0x488/0xb70
[ 109.783866][ T6048] remove_waiter+0x7f5/0xaf0
[ 109.783888][ T6048] ? lockdep_hardirqs_on+0x98/0x140
[ 109.783904][ T6048] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 109.783925][ T6048] futex_lock_pi+0x530/0xa90
[ 109.783942][ T6048] ? __pfx_futex_lock_pi+0x10/0x10
[ 109.783963][ T6048] ? futex_hash+0x40/0x2d0
[ 109.783980][ T6048] ? futex_hash+0x2ad/0x2d0
[ 109.783999][ T6048] ? __pfx_futex_wake_mark+0x10/0x10
[ 109.784015][ T6048] ? __pfx_futex_wake+0x10/0x10
[ 109.784035][ T6048] do_futex+0x292/0x420
[ 109.784057][ T6048] ? __pfx_do_futex+0x10/0x10
[ 109.784081][ T6048] __se_sys_futex+0x36f/0x400
[ 109.784104][ T6048] ? __pfx___se_sys_futex+0x10/0x10
[ 109.784127][ T6048] ? __x64_sys_futex+0x21/0xf0
[ 109.784153][ T6048] do_syscall_64+0xfa/0xf80
[ 109.784168][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.784181][ T6048] ? clear_bhb_loop+0x60/0xb0
[ 109.784197][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.784210][ T6048] RIP: 0033:0x7f384918f749
[ 109.784226][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.784237][ T6048] RSP: 002b:00007fffb7100158 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 109.784250][ T6048] RAX: ffffffffffffffda RBX: 00007f38493e5fa0 RCX: 00007f384918f749
[ 109.784261][ T6048] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 109.784269][ T6048] RBP: 00007f3849213f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 109.784278][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.784286][ T6048] R13: 00007f38493e5fa0 R14: 00007f38493e5fa0 R15: 0000000000000006
[ 109.784301][ T6048]
[ 111.020846][ T6048] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6048
[ 111.030836][ T6048] Modules linked in:
[ 111.034763][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 111.043868][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 111.053924][ T6048] RIP: 0010:sched_change_end+0x4f6/0x640
[ 111.059564][ T6048] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 111.079189][ T6048] RSP: 0018:ffffc9000405f850 EFLAGS: 00010046
[ 111.085313][ T6048] RAX: 1ffff11004b5cb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 111.093298][ T6048] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888025ae5b80
[ 111.101278][ T6048] RBP: ffff888025ae5e28 R08: ffff888025ae5b87 R09: 1ffff11004b5cb70
[ 111.109351][ T6048] R10: dffffc0000000000 R11: ffffed1004b5cb71 R12: dffffc0000000000
[ 111.117337][ T6048] R13: ffff888025ae5b80 R14: ffff8880b873ab00 R15: ffff888025ae5b80
[ 111.125326][ T6048] FS: 000055555f798500(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000
[ 111.134353][ T6048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.140945][ T6048] CR2: 00007f8b4f6bee9c CR3: 000000007dfec000 CR4: 00000000003526f0
[ 111.148953][ T6048] Call Trace:
[ 111.152247][ T6048]
[ 111.155182][ T6048] rt_mutex_setprio+0x488/0xb70
[ 111.160043][ T6048] remove_waiter+0x7f5/0xaf0
[ 111.164640][ T6048] ? lockdep_hardirqs_on+0x98/0x140
[ 111.169847][ T6048] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 111.175582][ T6048] futex_lock_pi+0x530/0xa90
[ 111.180174][ T6048] ? __pfx_futex_lock_pi+0x10/0x10
[ 111.185292][ T6048] ? futex_hash+0x40/0x2d0
[ 111.189711][ T6048] ? futex_hash+0x2ad/0x2d0
[ 111.194238][ T6048] ? __pfx_futex_wake_mark+0x10/0x10
[ 111.199619][ T6048] ? __pfx_futex_wake+0x10/0x10
[ 111.204472][ T6048] do_futex+0x292/0x420
[ 111.208638][ T6048] ? __pfx_do_futex+0x10/0x10
[ 111.213340][ T6048] __se_sys_futex+0x36f/0x400
[ 111.218028][ T6048] ? __pfx___se_sys_futex+0x10/0x10
[ 111.223240][ T6048] ? __x64_sys_futex+0x21/0xf0
[ 111.228022][ T6048] do_syscall_64+0xfa/0xf80
[ 111.232531][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.238611][ T6048] ? clear_bhb_loop+0x60/0xb0
[ 111.243305][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.249211][ T6048] RIP: 0033:0x7f384918f749
[ 111.253722][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.273333][ T6048] RSP: 002b:00007fffb7100158 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 111.281762][ T6048] RAX: ffffffffffffffda RBX: 00007f38493e5fa0 RCX: 00007f384918f749
[ 111.289808][ T6048] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 111.297809][ T6048] RBP: 00007f3849213f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 111.305796][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.313785][ T6048] R13: 00007f38493e5fa0 R14: 00007f38493e5fa0 R15: 0000000000000006
[ 111.321834][ T6048]
[ 111.324867][ T6048] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 111.332272][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 111.341383][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 111.351442][ T6048] Call Trace:
[ 111.354726][ T6048]
[ 111.357655][ T6048] dump_stack_lvl+0x99/0x250
[ 111.362252][ T6048] ? __asan_memcpy+0x40/0x70
[ 111.366846][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.372049][ T6048] ? __pfx__printk+0x10/0x10
[ 111.376651][ T6048] vpanic+0x237/0x6d0
[ 111.380634][ T6048] ? __pfx_vpanic+0x10/0x10
[ 111.385136][ T6048] ? is_bpf_text_address+0x292/0x2b0
[ 111.390426][ T6048] ? is_bpf_text_address+0x26/0x2b0
[ 111.395637][ T6048] panic+0xb9/0xc0
[ 111.399480][ T6048] ? __pfx_panic+0x10/0x10
[ 111.403966][ T6048] __warn+0x317/0x4b0
[ 111.408087][ T6048] ? sched_change_end+0x4f6/0x640
[ 111.413131][ T6048] ? sched_change_end+0x4f6/0x640
[ 111.418161][ T6048] __report_bug+0x288/0x500
[ 111.422672][ T6048] ? sched_change_end+0x4f6/0x640
[ 111.427699][ T6048] ? __pfx___report_bug+0x10/0x10
[ 111.432723][ T6048] ? rcu_read_lock_sched_held+0x89/0x100
[ 111.438355][ T6048] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 111.444448][ T6048] ? sched_change_end+0x4f6/0x640
[ 111.449487][ T6048] report_bug+0x16a/0x220
[ 111.453842][ T6048] ? sched_change_end+0x4f6/0x640
[ 111.458870][ T6048] ? sched_change_end+0x4f8/0x640
[ 111.464334][ T6048] handle_bug+0x98/0x200
[ 111.468616][ T6048] exc_invalid_op+0x1a/0x50
[ 111.473135][ T6048] asm_exc_invalid_op+0x1a/0x20
[ 111.477987][ T6048] RIP: 0010:sched_change_end+0x4f6/0x640
[ 111.483804][ T6048] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 111.503518][ T6048] RSP: 0018:ffffc9000405f850 EFLAGS: 00010046
[ 111.509758][ T6048] RAX: 1ffff11004b5cb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 111.517729][ T6048] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888025ae5b80
[ 111.525698][ T6048] RBP: ffff888025ae5e28 R08: ffff888025ae5b87 R09: 1ffff11004b5cb70
[ 111.533682][ T6048] R10: dffffc0000000000 R11: ffffed1004b5cb71 R12: dffffc0000000000
[ 111.541936][ T6048] R13: ffff888025ae5b80 R14: ffff8880b873ab00 R15: ffff888025ae5b80
[ 111.549922][ T6048] ? sched_change_end+0x4af/0x640
[ 111.554971][ T6048] rt_mutex_setprio+0x488/0xb70
[ 111.559837][ T6048] remove_waiter+0x7f5/0xaf0
[ 111.564444][ T6048] ? lockdep_hardirqs_on+0x98/0x140
[ 111.569646][ T6048] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 111.575372][ T6048] futex_lock_pi+0x530/0xa90
[ 111.579985][ T6048] ? __pfx_futex_lock_pi+0x10/0x10
[ 111.585102][ T6048] ? futex_hash+0x40/0x2d0
[ 111.589523][ T6048] ? futex_hash+0x2ad/0x2d0
[ 111.594053][ T6048] ? __pfx_futex_wake_mark+0x10/0x10
[ 111.599342][ T6048] ? __pfx_futex_wake+0x10/0x10
[ 111.604302][ T6048] do_futex+0x292/0x420
[ 111.608523][ T6048] ? __pfx_do_futex+0x10/0x10
[ 111.613208][ T6048] __se_sys_futex+0x36f/0x400
[ 111.617897][ T6048] ? __pfx___se_sys_futex+0x10/0x10
[ 111.623128][ T6048] ? __x64_sys_futex+0x21/0xf0
[ 111.627899][ T6048] do_syscall_64+0xfa/0xf80
[ 111.632402][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.638468][ T6048] ? clear_bhb_loop+0x60/0xb0
[ 111.643143][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.649036][ T6048] RIP: 0033:0x7f384918f749
[ 111.653450][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.673144][ T6048] RSP: 002b:00007fffb7100158 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 111.681561][ T6048] RAX: ffffffffffffffda RBX: 00007f38493e5fa0 RCX: 00007f384918f749
[ 111.689535][ T6048] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 111.697508][ T6048] RBP: 00007f3849213f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 111.705478][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.713448][ T6048] R13: 00007f38493e5fa0 R14: 00007f38493e5fa0 R15: 0000000000000006
[ 111.721523][ T6048]
[ 112.833857][ T6048] Shutting down cpus with NMI
[ 112.839236][ T6048] Kernel Offset: disabled
[ 112.843578][ T6048] Rebooting in 86400 seconds..