Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2025/12/15 12:46:51 parsed 1 programs [ 90.115998][ T5831] cgroup: Unknown subsys name 'net' [ 90.274234][ T5831] cgroup: Unknown subsys name 'cpuset' [ 90.283165][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.960597][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.011886][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.506738][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.515919][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.525293][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.534914][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.550120][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.951462][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.964361][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.002030][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.010163][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.267153][ T24] cfg80211: failed to load regulatory.db [ 98.135737][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 98.223377][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.231302][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.238522][ T5901] bridge_slave_0: entered allmulticast mode [ 98.246345][ T5901] bridge_slave_0: entered promiscuous mode [ 98.256064][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.263516][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.271356][ T5901] bridge_slave_1: entered allmulticast mode [ 98.278721][ T5901] bridge_slave_1: entered promiscuous mode [ 98.314894][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.327142][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.362254][ T5901] team0: Port device team_slave_0 added [ 98.370862][ T5901] team0: Port device team_slave_1 added [ 98.403919][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.411037][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.437405][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.450620][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.457610][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.483696][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.533310][ T5901] hsr_slave_0: entered promiscuous mode [ 98.540303][ T5901] hsr_slave_1: entered promiscuous mode [ 98.724071][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.737764][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.748864][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.759794][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.794357][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.801642][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.809901][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.817079][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.885238][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.905887][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.915030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.934028][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.949429][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.956730][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.974996][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.982206][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.175060][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.224917][ T5901] veth0_vlan: entered promiscuous mode [ 99.238833][ T5901] veth1_vlan: entered promiscuous mode [ 99.275947][ T5901] veth0_macvtap: entered promiscuous mode [ 99.285978][ T5901] veth1_macvtap: entered promiscuous mode [ 99.307991][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.323589][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.338845][ T1928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.348231][ T1928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.360455][ T1928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.372666][ T1928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.531934][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.597273][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.696739][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.808170][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/15 12:47:05 executed programs: 0 [ 100.865860][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.876686][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.885775][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.894924][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.904121][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.086341][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 101.184439][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.193270][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.200627][ T5943] bridge_slave_0: entered allmulticast mode [ 101.208034][ T5943] bridge_slave_0: entered promiscuous mode [ 101.216487][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.223954][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.231984][ T5943] bridge_slave_1: entered allmulticast mode [ 101.239595][ T5943] bridge_slave_1: entered promiscuous mode [ 101.277855][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.290719][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.328076][ T5943] team0: Port device team_slave_0 added [ 101.340968][ T5943] team0: Port device team_slave_1 added [ 101.372580][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.379888][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.406473][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.419797][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.426879][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.453472][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.505125][ T5943] hsr_slave_0: entered promiscuous mode [ 101.513126][ T5943] hsr_slave_1: entered promiscuous mode [ 101.520122][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 101.526019][ T5943] Cannot create hsr debugfs directory [ 102.508969][ T1140] bridge_slave_1: left allmulticast mode [ 102.516667][ T1140] bridge_slave_1: left promiscuous mode [ 102.523510][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.535551][ T1140] bridge_slave_0: left allmulticast mode [ 102.543524][ T1140] bridge_slave_0: left promiscuous mode [ 102.549589][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.785098][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.796389][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.807962][ T1140] bond0 (unregistering): Released all slaves [ 102.926274][ T1140] hsr_slave_0: left promiscuous mode [ 102.932907][ T5858] Bluetooth: hci0: command tx timeout [ 102.947608][ T1140] hsr_slave_1: left promiscuous mode [ 102.954178][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.962044][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.971849][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.979293][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.002043][ T1140] veth1_macvtap: left promiscuous mode [ 103.007932][ T1140] veth0_macvtap: left promiscuous mode [ 103.014448][ T1140] veth1_vlan: left promiscuous mode [ 103.020452][ T1140] veth0_vlan: left promiscuous mode [ 103.466630][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 103.495490][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 104.049983][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.063505][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.079250][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.096053][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.493101][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.562232][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.630855][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.638182][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.663901][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.671272][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.009967][ T5858] Bluetooth: hci0: command tx timeout [ 105.122667][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.193504][ T5943] veth0_vlan: entered promiscuous mode [ 105.208515][ T5943] veth1_vlan: entered promiscuous mode [ 105.254861][ T5943] veth0_macvtap: entered promiscuous mode [ 105.267681][ T5943] veth1_macvtap: entered promiscuous mode [ 105.289881][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.304262][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.318581][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.327718][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.341234][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.350960][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.416209][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.428878][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.459791][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.467942][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.090022][ T5858] Bluetooth: hci0: command tx timeout [ 108.519911][ T6006] ------------[ cut here ]------------ [ 108.520562][ T6006] [ 108.520568][ T6006] ====================================================== [ 108.520574][ T6006] WARNING: possible circular locking dependency detected [ 108.520587][ T6006] syzkaller #0 Not tainted [ 108.520594][ T6006] ------------------------------------------------------ [ 108.520599][ T6006] syz.0.17/6006 is trying to acquire lock: [ 108.520606][ T6006] ffffffff8df35980 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 108.520649][ T6006] [ 108.520649][ T6006] but task is already holding lock: [ 108.520653][ T6006] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 108.520686][ T6006] [ 108.520686][ T6006] which lock already depends on the new lock. [ 108.520686][ T6006] [ 108.520692][ T6006] [ 108.520692][ T6006] the existing dependency chain (in reverse order) is: [ 108.520697][ T6006] [ 108.520697][ T6006] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 108.520715][ T6006] _raw_spin_lock_nested+0x32/0x50 [ 108.520731][ T6006] raw_spin_rq_lock_nested+0x2a/0x140 [ 108.520745][ T6006] task_rq_lock+0xbc/0x470 [ 108.520757][ T6006] cgroup_move_task+0x92/0x2a0 [ 108.520774][ T6006] css_set_move_task+0x658/0x9e0 [ 108.520788][ T6006] cgroup_post_fork+0x1ef/0x7a0 [ 108.520800][ T6006] copy_process+0x3614/0x3950 [ 108.520815][ T6006] kernel_clone+0x21e/0x820 [ 108.520835][ T6006] user_mode_thread+0xdd/0x140 [ 108.520853][ T6006] rest_init+0x23/0x300 [ 108.520875][ T6006] start_kernel+0x3a7/0x400 [ 108.520892][ T6006] x86_64_start_reservations+0x24/0x30 [ 108.520915][ T6006] x86_64_start_kernel+0x143/0x1c0 [ 108.520937][ T6006] common_startup_64+0x13e/0x147 [ 108.520956][ T6006] [ 108.520956][ T6006] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 108.520976][ T6006] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.520990][ T6006] try_to_wake_up+0x67/0x12b0 [ 108.521012][ T6006] __wake_up_common_lock+0x137/0x1f0 [ 108.521033][ T6006] tty_port_default_wakeup+0xfb/0x170 [ 108.521049][ T6006] serial8250_tx_chars+0x72e/0x970 [ 108.521072][ T6006] serial8250_handle_irq+0x633/0xbb0 [ 108.521085][ T6006] serial8250_default_handle_irq+0xbf/0x200 [ 108.521103][ T6006] serial8250_interrupt+0x8d/0x180 [ 108.521123][ T6006] __handle_irq_event_percpu+0x285/0xa60 [ 108.521145][ T6006] handle_irq_event+0x8b/0x1e0 [ 108.521165][ T6006] handle_edge_irq+0x23b/0xa10 [ 108.521184][ T6006] __common_interrupt+0x141/0x1f0 [ 108.521205][ T6006] common_interrupt+0xb6/0xe0 [ 108.521227][ T6006] asm_common_interrupt+0x26/0x40 [ 108.521241][ T6006] lock_acquire+0x16c/0x340 [ 108.521262][ T6006] unwind_next_frame+0xc2/0x23d0 [ 108.521279][ T6006] arch_stack_walk+0x11c/0x150 [ 108.521295][ T6006] stack_trace_save+0x9c/0xe0 [ 108.521307][ T6006] save_stack+0xf5/0x1f0 [ 108.521321][ T6006] __reset_page_owner+0x71/0x1f0 [ 108.521334][ T6006] __free_frozen_pages+0xbc8/0xd30 [ 108.521349][ T6006] tlb_remove_table_rcu+0x85/0x100 [ 108.521365][ T6006] rcu_core+0xd70/0x1870 [ 108.521380][ T6006] handle_softirqs+0x27d/0x850 [ 108.521395][ T6006] run_ksoftirqd+0x9b/0x100 [ 108.521411][ T6006] smpboot_thread_fn+0x542/0xa60 [ 108.521428][ T6006] kthread+0x711/0x8a0 [ 108.521446][ T6006] ret_from_fork+0x599/0xb30 [ 108.521458][ T6006] ret_from_fork_asm+0x1a/0x30 [ 108.521478][ T6006] [ 108.521478][ T6006] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 108.521498][ T6006] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.521513][ T6006] __wake_up_common_lock+0x2f/0x1f0 [ 108.521533][ T6006] tty_port_default_wakeup+0xfb/0x170 [ 108.521548][ T6006] serial8250_tx_chars+0x72e/0x970 [ 108.521570][ T6006] serial8250_handle_irq+0x633/0xbb0 [ 108.521582][ T6006] serial8250_default_handle_irq+0xbf/0x200 [ 108.521598][ T6006] serial8250_interrupt+0x8d/0x180 [ 108.521618][ T6006] __handle_irq_event_percpu+0x285/0xa60 [ 108.521638][ T6006] handle_irq_event+0x8b/0x1e0 [ 108.521658][ T6006] handle_edge_irq+0x23b/0xa10 [ 108.521676][ T6006] __common_interrupt+0x141/0x1f0 [ 108.521697][ T6006] common_interrupt+0xb6/0xe0 [ 108.521717][ T6006] asm_common_interrupt+0x26/0x40 [ 108.521730][ T6006] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 108.521745][ T6006] uart_port_unlock_deref+0x111/0x2f0 [ 108.521767][ T6006] uart_write+0xe8/0x130 [ 108.521778][ T6006] n_tty_write+0xd78/0x12a0 [ 108.521795][ T6006] file_tty_write+0x559/0xa20 [ 108.521816][ T6006] vfs_write+0x5c9/0xb30 [ 108.521829][ T6006] ksys_write+0x145/0x250 [ 108.521842][ T6006] do_syscall_64+0xfa/0xf80 [ 108.521859][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.521872][ T6006] [ 108.521872][ T6006] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 108.521892][ T6006] _raw_spin_lock_irqsave+0xa7/0xf0 [ 108.521906][ T6006] serial8250_console_write+0x17e/0x1ba0 [ 108.521920][ T6006] console_flush_all+0x745/0xb60 [ 108.521940][ T6006] console_unlock+0xbb/0x190 [ 108.521958][ T6006] vprintk_emit+0x4f8/0x5f0 [ 108.521975][ T6006] _printk+0xcf/0x120 [ 108.521995][ T6006] register_console+0xa8b/0xf90 [ 108.522017][ T6006] univ8250_console_init+0x3a/0x70 [ 108.522031][ T6006] console_init+0xfc/0x3f0 [ 108.522052][ T6006] start_kernel+0x24d/0x400 [ 108.522067][ T6006] x86_64_start_reservations+0x24/0x30 [ 108.522089][ T6006] x86_64_start_kernel+0x143/0x1c0 [ 108.522110][ T6006] common_startup_64+0x13e/0x147 [ 108.522127][ T6006] [ 108.522127][ T6006] -> #0 (console_owner){....}-{0:0}: [ 108.522147][ T6006] __lock_acquire+0x15a6/0x2cf0 [ 108.522160][ T6006] lock_acquire+0x117/0x340 [ 108.522174][ T6006] console_flush_all+0x6ee/0xb60 [ 108.522193][ T6006] console_unlock+0xbb/0x190 [ 108.522210][ T6006] vprintk_emit+0x4f8/0x5f0 [ 108.522227][ T6006] _printk+0xcf/0x120 [ 108.522246][ T6006] __report_bug+0x305/0x500 [ 108.522269][ T6006] report_bug+0x16a/0x220 [ 108.522284][ T6006] handle_bug+0x98/0x200 [ 108.522303][ T6006] exc_invalid_op+0x1a/0x50 [ 108.522322][ T6006] asm_exc_invalid_op+0x1a/0x20 [ 108.522335][ T6006] sched_change_end+0x4f6/0x640 [ 108.522353][ T6006] rt_mutex_setprio+0x488/0xb70 [ 108.522366][ T6006] remove_waiter+0x7f5/0xaf0 [ 108.522388][ T6006] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 108.522401][ T6006] futex_lock_pi+0x530/0xa90 [ 108.522418][ T6006] do_futex+0x292/0x420 [ 108.522433][ T6006] __se_sys_futex+0x36f/0x400 [ 108.522448][ T6006] do_syscall_64+0xfa/0xf80 [ 108.522465][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.522479][ T6006] [ 108.522479][ T6006] other info that might help us debug this: [ 108.522479][ T6006] [ 108.522484][ T6006] Chain exists of: [ 108.522484][ T6006] console_owner --> &p->pi_lock --> &rq->__lock [ 108.522484][ T6006] [ 108.522507][ T6006] Possible unsafe locking scenario: [ 108.522507][ T6006] [ 108.522511][ T6006] CPU0 CPU1 [ 108.522516][ T6006] ---- ---- [ 108.522520][ T6006] lock(&rq->__lock); [ 108.522530][ T6006] lock(&p->pi_lock); [ 108.522540][ T6006] lock(&rq->__lock); [ 108.522551][ T6006] lock(console_owner); [ 108.522561][ T6006] [ 108.522561][ T6006] *** DEADLOCK *** [ 108.522561][ T6006] [ 108.522565][ T6006] 5 locks held by syz.0.17/6006: [ 108.522573][ T6006] #0: ffff8880729e6328 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 108.522608][ T6006] #1: ffff8880346d65e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 108.522650][ T6006] #2: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 108.522687][ T6006] #3: ffffffff8df359e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 108.522729][ T6006] #4: ffffffff8de1d298 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 108.522770][ T6006] [ 108.522770][ T6006] stack backtrace: [ 108.522792][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.522871][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.522895][ T6006] Call Trace: [ 108.522903][ T6006] [ 108.522909][ T6006] dump_stack_lvl+0x189/0x250 [ 108.522932][ T6006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.522949][ T6006] ? __pfx__printk+0x10/0x10 [ 108.522970][ T6006] ? print_lock_name+0xde/0x100 [ 108.522991][ T6006] print_circular_bug+0x2e2/0x300 [ 108.523021][ T6006] check_noncircular+0x12e/0x150 [ 108.523042][ T6006] __lock_acquire+0x15a6/0x2cf0 [ 108.523065][ T6006] ? console_flush_all+0x131/0xb60 [ 108.523084][ T6006] lock_acquire+0x117/0x340 [ 108.523097][ T6006] ? console_flush_all+0x131/0xb60 [ 108.523120][ T6006] ? do_raw_spin_unlock+0x122/0x240 [ 108.523141][ T6006] ? console_flush_all+0x131/0xb60 [ 108.523160][ T6006] console_flush_all+0x6ee/0xb60 [ 108.523180][ T6006] ? console_flush_all+0x131/0xb60 [ 108.523200][ T6006] ? console_flush_all+0x131/0xb60 [ 108.523222][ T6006] ? __pfx_console_flush_all+0x10/0x10 [ 108.523245][ T6006] ? is_printk_cpu_sync_owner+0x32/0x40 [ 108.523259][ T6006] console_unlock+0xbb/0x190 [ 108.523280][ T6006] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 108.523300][ T6006] ? __pfx_console_unlock+0x10/0x10 [ 108.523320][ T6006] vprintk_emit+0x4f8/0x5f0 [ 108.523339][ T6006] ? __pfx_vprintk_emit+0x10/0x10 [ 108.523358][ T6006] ? __lock_acquire+0x6b6/0x2cf0 [ 108.523373][ T6006] ? __lock_acquire+0x6b6/0x2cf0 [ 108.523389][ T6006] _printk+0xcf/0x120 [ 108.523412][ T6006] ? __pfx__printk+0x10/0x10 [ 108.523433][ T6006] ? find_bug+0xa5/0x370 [ 108.523448][ T6006] ? sched_change_end+0x4f6/0x640 [ 108.523466][ T6006] ? sched_change_end+0x4f6/0x640 [ 108.523484][ T6006] __report_bug+0x305/0x500 [ 108.523499][ T6006] ? sched_change_end+0x4f6/0x640 [ 108.523519][ T6006] ? __pfx___report_bug+0x10/0x10 [ 108.523534][ T6006] ? rcu_read_lock_sched_held+0x89/0x100 [ 108.523556][ T6006] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 108.523578][ T6006] ? sched_change_end+0x4f6/0x640 [ 108.523596][ T6006] report_bug+0x16a/0x220 [ 108.523611][ T6006] ? sched_change_end+0x4f6/0x640 [ 108.523628][ T6006] ? sched_change_end+0x4f8/0x640 [ 108.523646][ T6006] handle_bug+0x98/0x200 [ 108.523666][ T6006] exc_invalid_op+0x1a/0x50 [ 108.523686][ T6006] asm_exc_invalid_op+0x1a/0x20 [ 108.523700][ T6006] RIP: 0010:sched_change_end+0x4f6/0x640 [ 108.523720][ T6006] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 108.523732][ T6006] RSP: 0018:ffffc90003367850 EFLAGS: 00010046 [ 108.523746][ T6006] RAX: 1ffff110068dab70 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 108.523757][ T6006] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880346d5b80 [ 108.523766][ T6006] RBP: ffff8880346d5e28 R08: ffff8880346d5b87 R09: 1ffff110068dab70 [ 108.523776][ T6006] R10: dffffc0000000000 R11: ffffed10068dab71 R12: dffffc0000000000 [ 108.523786][ T6006] R13: ffff8880346d5b80 R14: ffff8880b873a900 R15: ffff8880346d5b80 [ 108.523800][ T6006] ? sched_change_end+0x4af/0x640 [ 108.523830][ T6006] rt_mutex_setprio+0x488/0xb70 [ 108.523853][ T6006] remove_waiter+0x7f5/0xaf0 [ 108.523877][ T6006] ? lockdep_hardirqs_on+0x98/0x140 [ 108.523895][ T6006] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 108.523909][ T6006] futex_lock_pi+0x530/0xa90 [ 108.523932][ T6006] ? __pfx_futex_lock_pi+0x10/0x10 [ 108.523958][ T6006] ? futex_hash+0x40/0x2d0 [ 108.523969][ T6006] ? futex_hash+0x2ad/0x2d0 [ 108.523983][ T6006] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.524004][ T6006] ? __pfx_futex_wake+0x10/0x10 [ 108.524073][ T6006] do_futex+0x292/0x420 [ 108.524090][ T6006] ? __pfx_do_futex+0x10/0x10 [ 108.524109][ T6006] __se_sys_futex+0x36f/0x400 [ 108.524127][ T6006] ? __pfx___se_sys_futex+0x10/0x10 [ 108.524145][ T6006] ? __x64_sys_futex+0x21/0xf0 [ 108.524162][ T6006] do_syscall_64+0xfa/0xf80 [ 108.524179][ T6006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.524193][ T6006] ? clear_bhb_loop+0x60/0xb0 [ 108.524210][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.524224][ T6006] RIP: 0033:0x7f2d1098f749 [ 108.524245][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.524258][ T6006] RSP: 002b:00007ffec3367aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.524274][ T6006] RAX: ffffffffffffffda RBX: 00007f2d10be5fa0 RCX: 00007f2d1098f749 [ 108.524284][ T6006] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 108.524293][ T6006] RBP: 00007f2d10a13f91 R08: 0000000000000000 R09: 00000000fffffffd [ 108.524302][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.524311][ T6006] R13: 00007f2d10be5fa0 R14: 00007f2d10be5fa0 R15: 0000000000000006 [ 108.524326][ T6006] [ 109.781260][ T6006] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6006 [ 109.791338][ T6006] Modules linked in: [ 109.795257][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.804383][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.814636][ T6006] RIP: 0010:sched_change_end+0x4f6/0x640 [ 109.820283][ T6006] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 109.839888][ T6006] RSP: 0018:ffffc90003367850 EFLAGS: 00010046 [ 109.845968][ T6006] RAX: 1ffff110068dab70 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 109.853963][ T6006] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880346d5b80 [ 109.862113][ T6006] RBP: ffff8880346d5e28 R08: ffff8880346d5b87 R09: 1ffff110068dab70 [ 109.870104][ T6006] R10: dffffc0000000000 R11: ffffed10068dab71 R12: dffffc0000000000 [ 109.878195][ T6006] R13: ffff8880346d5b80 R14: ffff8880b873a900 R15: ffff8880346d5b80 [ 109.886171][ T6006] FS: 0000555589ea7500(0000) GS:ffff888125e32000(0000) knlGS:0000000000000000 [ 109.895111][ T6006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.901808][ T6006] CR2: 000055c754493138 CR3: 000000001baee000 CR4: 00000000003526f0 [ 109.909894][ T6006] Call Trace: [ 109.913183][ T6006] [ 109.916112][ T6006] rt_mutex_setprio+0x488/0xb70 [ 109.921033][ T6006] remove_waiter+0x7f5/0xaf0 [ 109.925629][ T6006] ? lockdep_hardirqs_on+0x98/0x140 [ 109.930836][ T6006] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 109.936577][ T6006] futex_lock_pi+0x530/0xa90 [ 109.941178][ T6006] ? __pfx_futex_lock_pi+0x10/0x10 [ 109.946331][ T6006] ? futex_hash+0x40/0x2d0 [ 109.950793][ T6006] ? futex_hash+0x2ad/0x2d0 [ 109.955303][ T6006] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.960608][ T6006] ? __pfx_futex_wake+0x10/0x10 [ 109.965464][ T6006] do_futex+0x292/0x420 [ 109.969793][ T6006] ? __pfx_do_futex+0x10/0x10 [ 109.974470][ T6006] __se_sys_futex+0x36f/0x400 [ 109.979149][ T6006] ? __pfx___se_sys_futex+0x10/0x10 [ 109.984346][ T6006] ? __x64_sys_futex+0x21/0xf0 [ 109.989140][ T6006] do_syscall_64+0xfa/0xf80 [ 109.993773][ T6006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.999861][ T6006] ? clear_bhb_loop+0x60/0xb0 [ 110.004539][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.010428][ T6006] RIP: 0033:0x7f2d1098f749 [ 110.014840][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.034787][ T6006] RSP: 002b:00007ffec3367aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.043199][ T6006] RAX: ffffffffffffffda RBX: 00007f2d10be5fa0 RCX: 00007f2d1098f749 [ 110.051196][ T6006] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 110.059262][ T6006] RBP: 00007f2d10a13f91 R08: 0000000000000000 R09: 00000000fffffffd [ 110.067247][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.075252][ T6006] R13: 00007f2d10be5fa0 R14: 00007f2d10be5fa0 R15: 0000000000000006 [ 110.083251][ T6006] [ 110.086277][ T6006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.093563][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.102685][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.112789][ T6006] Call Trace: [ 110.116097][ T6006] [ 110.119028][ T6006] dump_stack_lvl+0x99/0x250 [ 110.123628][ T6006] ? __asan_memcpy+0x40/0x70 [ 110.128311][ T6006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.133710][ T6006] ? __pfx__printk+0x10/0x10 [ 110.138411][ T6006] vpanic+0x237/0x6d0 [ 110.142486][ T6006] ? __pfx_vpanic+0x10/0x10 [ 110.146991][ T6006] ? is_bpf_text_address+0x292/0x2b0 [ 110.152273][ T6006] ? is_bpf_text_address+0x26/0x2b0 [ 110.157566][ T6006] panic+0xb9/0xc0 [ 110.161293][ T6006] ? __pfx_panic+0x10/0x10 [ 110.165736][ T6006] __warn+0x317/0x4b0 [ 110.169717][ T6006] ? sched_change_end+0x4f6/0x640 [ 110.174748][ T6006] ? sched_change_end+0x4f6/0x640 [ 110.179807][ T6006] __report_bug+0x288/0x500 [ 110.184508][ T6006] ? sched_change_end+0x4f6/0x640 [ 110.189550][ T6006] ? __pfx___report_bug+0x10/0x10 [ 110.194593][ T6006] ? rcu_read_lock_sched_held+0x89/0x100 [ 110.200256][ T6006] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 110.206328][ T6006] ? sched_change_end+0x4f6/0x640 [ 110.211368][ T6006] report_bug+0x16a/0x220 [ 110.215824][ T6006] ? sched_change_end+0x4f6/0x640 [ 110.221416][ T6006] ? sched_change_end+0x4f8/0x640 [ 110.226458][ T6006] handle_bug+0x98/0x200 [ 110.231170][ T6006] exc_invalid_op+0x1a/0x50 [ 110.235734][ T6006] asm_exc_invalid_op+0x1a/0x20 [ 110.240690][ T6006] RIP: 0010:sched_change_end+0x4f6/0x640 [ 110.246379][ T6006] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 110.266066][ T6006] RSP: 0018:ffffc90003367850 EFLAGS: 00010046 [ 110.272231][ T6006] RAX: 1ffff110068dab70 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 110.280225][ T6006] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880346d5b80 [ 110.288295][ T6006] RBP: ffff8880346d5e28 R08: ffff8880346d5b87 R09: 1ffff110068dab70 [ 110.296317][ T6006] R10: dffffc0000000000 R11: ffffed10068dab71 R12: dffffc0000000000 [ 110.304293][ T6006] R13: ffff8880346d5b80 R14: ffff8880b873a900 R15: ffff8880346d5b80 [ 110.312270][ T6006] ? sched_change_end+0x4af/0x640 [ 110.317326][ T6006] rt_mutex_setprio+0x488/0xb70 [ 110.322201][ T6006] remove_waiter+0x7f5/0xaf0 [ 110.326916][ T6006] ? lockdep_hardirqs_on+0x98/0x140 [ 110.332131][ T6006] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 110.337854][ T6006] futex_lock_pi+0x530/0xa90 [ 110.342458][ T6006] ? __pfx_futex_lock_pi+0x10/0x10 [ 110.347576][ T6006] ? futex_hash+0x40/0x2d0 [ 110.351987][ T6006] ? futex_hash+0x2ad/0x2d0 [ 110.356488][ T6006] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.361780][ T6006] ? __pfx_futex_wake+0x10/0x10 [ 110.366655][ T6006] do_futex+0x292/0x420 [ 110.370814][ T6006] ? __pfx_do_futex+0x10/0x10 [ 110.375493][ T6006] __se_sys_futex+0x36f/0x400 [ 110.380172][ T6006] ? __pfx___se_sys_futex+0x10/0x10 [ 110.385369][ T6006] ? __x64_sys_futex+0x21/0xf0 [ 110.390136][ T6006] do_syscall_64+0xfa/0xf80 [ 110.394651][ T6006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.400712][ T6006] ? clear_bhb_loop+0x60/0xb0 [ 110.405389][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.411278][ T6006] RIP: 0033:0x7f2d1098f749 [ 110.415719][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.435426][ T6006] RSP: 002b:00007ffec3367aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.443861][ T6006] RAX: ffffffffffffffda RBX: 00007f2d10be5fa0 RCX: 00007f2d1098f749 [ 110.451846][ T6006] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 110.459922][ T6006] RBP: 00007f2d10a13f91 R08: 0000000000000000 R09: 00000000fffffffd [ 110.467914][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.475987][ T6006] R13: 00007f2d10be5fa0 R14: 00007f2d10be5fa0 R15: 0000000000000006 [ 110.483981][ T6006] [ 111.607833][ T6006] Shutting down cpus with NMI [ 111.613087][ T6006] Kernel Offset: disabled [ 111.617445][ T6006] Rebooting in 86400 seconds..