Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 2025/12/15 16:50:16 parsed 1 programs [ 92.478967][ T5834] cgroup: Unknown subsys name 'net' [ 92.646600][ T5834] cgroup: Unknown subsys name 'cpuset' [ 92.657897][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.428904][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.009942][ T24] cfg80211: failed to load regulatory.db [ 97.588535][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.600552][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.634019][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.643889][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.690002][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.152649][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.161459][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.170418][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.179555][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.190762][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.683896][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 99.805633][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.813989][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.821509][ T5887] bridge_slave_0: entered allmulticast mode [ 99.829319][ T5887] bridge_slave_0: entered promiscuous mode [ 99.839811][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.847610][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.855589][ T5887] bridge_slave_1: entered allmulticast mode [ 99.863111][ T5887] bridge_slave_1: entered promiscuous mode [ 99.900748][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.913216][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.949144][ T5887] team0: Port device team_slave_0 added [ 99.958834][ T5887] team0: Port device team_slave_1 added [ 99.989647][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.997064][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.023889][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.037228][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.044411][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.070445][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.120257][ T5887] hsr_slave_0: entered promiscuous mode [ 100.126959][ T5887] hsr_slave_1: entered promiscuous mode [ 100.315766][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.329328][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.340503][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.354135][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.392082][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.400004][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.408260][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.415499][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.488469][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.511897][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.523969][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.545337][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.562358][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.570973][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.589174][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.598059][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.809035][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.864090][ T5887] veth0_vlan: entered promiscuous mode [ 100.876234][ T5887] veth1_vlan: entered promiscuous mode [ 100.912638][ T5887] veth0_macvtap: entered promiscuous mode [ 100.923710][ T5887] veth1_macvtap: entered promiscuous mode [ 100.950408][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.967997][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.986747][ T767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.999635][ T767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.015217][ T767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.025335][ T767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.200495][ T767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.259633][ T767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.328946][ T767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.414819][ T767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/15 16:50:30 executed programs: 0 [ 103.120246][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.128714][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.137778][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.146737][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.154587][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.339419][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 103.435044][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.442700][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.450010][ T5940] bridge_slave_0: entered allmulticast mode [ 103.458035][ T5940] bridge_slave_0: entered promiscuous mode [ 103.466407][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.473829][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.481088][ T5940] bridge_slave_1: entered allmulticast mode [ 103.489150][ T5940] bridge_slave_1: entered promiscuous mode [ 103.527291][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.539633][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.578945][ T5940] team0: Port device team_slave_0 added [ 103.587553][ T5940] team0: Port device team_slave_1 added [ 103.619824][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.626998][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.655054][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.670270][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.677596][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.704191][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.754700][ T5940] hsr_slave_0: entered promiscuous mode [ 103.761389][ T5940] hsr_slave_1: entered promiscuous mode [ 103.767916][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 103.773858][ T5940] Cannot create hsr debugfs directory [ 104.042072][ T767] bridge_slave_1: left allmulticast mode [ 104.047961][ T767] bridge_slave_1: left promiscuous mode [ 104.054767][ T767] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.068446][ T767] bridge_slave_0: left allmulticast mode [ 104.076871][ T767] bridge_slave_0: left promiscuous mode [ 104.082884][ T767] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.487256][ T767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.500058][ T767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.519882][ T767] bond0 (unregistering): Released all slaves [ 104.662210][ T767] hsr_slave_0: left promiscuous mode [ 104.669226][ T767] hsr_slave_1: left promiscuous mode [ 104.678361][ T767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.686381][ T767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.696396][ T767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.711713][ T767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.737652][ T767] veth1_macvtap: left promiscuous mode [ 104.745232][ T767] veth0_macvtap: left promiscuous mode [ 104.752718][ T767] veth1_vlan: left promiscuous mode [ 104.760193][ T767] veth0_vlan: left promiscuous mode [ 105.199753][ T767] team0 (unregistering): Port device team_slave_1 removed [ 105.234861][ T767] team0 (unregistering): Port device team_slave_0 removed [ 105.253701][ T52] Bluetooth: hci0: command tx timeout [ 105.863377][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.892755][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.907333][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.921121][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.471236][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.498046][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.519310][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.527284][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.550660][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.558010][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.815994][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.870825][ T5940] veth0_vlan: entered promiscuous mode [ 106.887446][ T5940] veth1_vlan: entered promiscuous mode [ 106.921327][ T5940] veth0_macvtap: entered promiscuous mode [ 106.933969][ T5940] veth1_macvtap: entered promiscuous mode [ 106.955075][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.972721][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.995132][ T1339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.008232][ T1339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.018707][ T1339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.033807][ T1339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.104378][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.116956][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.149901][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.160037][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.321943][ T52] Bluetooth: hci0: command tx timeout [ 109.402253][ T52] Bluetooth: hci0: command tx timeout [ 110.214847][ T5989] ------------[ cut here ]------------ [ 110.215469][ T5989] [ 110.215476][ T5989] ====================================================== [ 110.215482][ T5989] WARNING: possible circular locking dependency detected [ 110.215493][ T5989] syzkaller #0 Not tainted [ 110.215500][ T5989] ------------------------------------------------------ [ 110.215505][ T5989] syz.0.17/5989 is trying to acquire lock: [ 110.215513][ T5989] ffffffff8df35980 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 110.215555][ T5989] [ 110.215555][ T5989] but task is already holding lock: [ 110.215560][ T5989] ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 110.215590][ T5989] [ 110.215590][ T5989] which lock already depends on the new lock. [ 110.215590][ T5989] [ 110.215595][ T5989] [ 110.215595][ T5989] the existing dependency chain (in reverse order) is: [ 110.215600][ T5989] [ 110.215600][ T5989] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 110.215618][ T5989] _raw_spin_lock_nested+0x32/0x50 [ 110.215634][ T5989] raw_spin_rq_lock_nested+0x2a/0x140 [ 110.215647][ T5989] task_rq_lock+0xbc/0x470 [ 110.215659][ T5989] cgroup_move_task+0x92/0x2a0 [ 110.215676][ T5989] css_set_move_task+0x658/0x9e0 [ 110.215689][ T5989] cgroup_post_fork+0x1ef/0x7a0 [ 110.215702][ T5989] copy_process+0x3614/0x3950 [ 110.215716][ T5989] kernel_clone+0x21e/0x820 [ 110.215731][ T5989] user_mode_thread+0xdd/0x140 [ 110.215745][ T5989] rest_init+0x23/0x300 [ 110.215765][ T5989] start_kernel+0x3a7/0x400 [ 110.215785][ T5989] x86_64_start_reservations+0x24/0x30 [ 110.215811][ T5989] x86_64_start_kernel+0x143/0x1c0 [ 110.215833][ T5989] common_startup_64+0x13e/0x147 [ 110.215851][ T5989] [ 110.215851][ T5989] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 110.215872][ T5989] _raw_spin_lock_irqsave+0xa7/0xf0 [ 110.215887][ T5989] try_to_wake_up+0x67/0x12b0 [ 110.215906][ T5989] __wake_up_common_lock+0x137/0x1f0 [ 110.215927][ T5989] tty_port_default_wakeup+0xfb/0x170 [ 110.215944][ T5989] serial8250_tx_chars+0x72e/0x970 [ 110.215967][ T5989] serial8250_handle_irq+0x633/0xbb0 [ 110.215979][ T5989] serial8250_default_handle_irq+0xbf/0x200 [ 110.215996][ T5989] serial8250_interrupt+0x8d/0x180 [ 110.216016][ T5989] __handle_irq_event_percpu+0x285/0xa60 [ 110.216037][ T5989] handle_irq_event+0x8b/0x1e0 [ 110.216058][ T5989] handle_edge_irq+0x23b/0xa10 [ 110.216077][ T5989] __common_interrupt+0x141/0x1f0 [ 110.216100][ T5989] common_interrupt+0xb6/0xe0 [ 110.216123][ T5989] asm_common_interrupt+0x26/0x40 [ 110.216136][ T5989] smp_call_function_many_cond+0xccf/0x12b0 [ 110.216160][ T5989] on_each_cpu_cond_mask+0x3f/0x80 [ 110.216172][ T5989] flush_tlb_mm_range+0x6b1/0x1280 [ 110.216194][ T5989] ptep_clear_flush+0x120/0x170 [ 110.216215][ T5989] do_wp_page+0x1bb1/0x5810 [ 110.216236][ T5989] handle_mm_fault+0x14c5/0x32b0 [ 110.216257][ T5989] do_user_addr_fault+0xa7c/0x1380 [ 110.216271][ T5989] exc_page_fault+0x82/0x100 [ 110.216287][ T5989] asm_exc_page_fault+0x26/0x30 [ 110.216300][ T5989] [ 110.216300][ T5989] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 110.216320][ T5989] _raw_spin_lock_irqsave+0xa7/0xf0 [ 110.216341][ T5989] __wake_up_common_lock+0x2f/0x1f0 [ 110.216362][ T5989] tty_port_default_wakeup+0xfb/0x170 [ 110.216378][ T5989] serial8250_tx_chars+0x72e/0x970 [ 110.216400][ T5989] serial8250_handle_irq+0x633/0xbb0 [ 110.216412][ T5989] serial8250_default_handle_irq+0xbf/0x200 [ 110.216428][ T5989] serial8250_interrupt+0x8d/0x180 [ 110.216448][ T5989] __handle_irq_event_percpu+0x285/0xa60 [ 110.216469][ T5989] handle_irq_event+0x8b/0x1e0 [ 110.216489][ T5989] handle_edge_irq+0x23b/0xa10 [ 110.216507][ T5989] __common_interrupt+0x141/0x1f0 [ 110.216528][ T5989] common_interrupt+0xb6/0xe0 [ 110.216548][ T5989] asm_common_interrupt+0x26/0x40 [ 110.216561][ T5989] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 110.216576][ T5989] uart_port_unlock_deref+0x111/0x2f0 [ 110.216599][ T5989] uart_write+0xe8/0x130 [ 110.216609][ T5989] n_tty_write+0xd78/0x12a0 [ 110.216626][ T5989] file_tty_write+0x559/0xa20 [ 110.216647][ T5989] vfs_write+0x5c9/0xb30 [ 110.216660][ T5989] ksys_write+0x145/0x250 [ 110.216673][ T5989] do_syscall_64+0xfa/0xf80 [ 110.216689][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.216703][ T5989] [ 110.216703][ T5989] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 110.216723][ T5989] _raw_spin_lock_irqsave+0xa7/0xf0 [ 110.216737][ T5989] serial8250_console_write+0x17e/0x1ba0 [ 110.216751][ T5989] console_flush_all+0x745/0xb60 [ 110.216771][ T5989] console_unlock+0xbb/0x190 [ 110.216788][ T5989] vprintk_emit+0x4f8/0x5f0 [ 110.216806][ T5989] _printk+0xcf/0x120 [ 110.216825][ T5989] register_console+0xa8b/0xf90 [ 110.216845][ T5989] univ8250_console_init+0x3a/0x70 [ 110.216859][ T5989] console_init+0xfc/0x3f0 [ 110.216880][ T5989] start_kernel+0x24d/0x400 [ 110.216896][ T5989] x86_64_start_reservations+0x24/0x30 [ 110.216918][ T5989] x86_64_start_kernel+0x143/0x1c0 [ 110.216940][ T5989] common_startup_64+0x13e/0x147 [ 110.216958][ T5989] [ 110.216958][ T5989] -> #0 (console_owner){....}-{0:0}: [ 110.216977][ T5989] __lock_acquire+0x15a6/0x2cf0 [ 110.216991][ T5989] lock_acquire+0x117/0x340 [ 110.217005][ T5989] console_flush_all+0x6ee/0xb60 [ 110.217024][ T5989] console_unlock+0xbb/0x190 [ 110.217042][ T5989] vprintk_emit+0x4f8/0x5f0 [ 110.217059][ T5989] _printk+0xcf/0x120 [ 110.217079][ T5989] __report_bug+0x305/0x500 [ 110.217097][ T5989] report_bug+0x16a/0x220 [ 110.217112][ T5989] handle_bug+0x98/0x200 [ 110.217131][ T5989] exc_invalid_op+0x1a/0x50 [ 110.217150][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 110.217163][ T5989] sched_change_end+0x4f6/0x640 [ 110.217182][ T5989] rt_mutex_setprio+0x488/0xb70 [ 110.217195][ T5989] remove_waiter+0x7f5/0xaf0 [ 110.217218][ T5989] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 110.217230][ T5989] futex_lock_pi+0x530/0xa90 [ 110.217248][ T5989] do_futex+0x292/0x420 [ 110.217263][ T5989] __se_sys_futex+0x36f/0x400 [ 110.217278][ T5989] do_syscall_64+0xfa/0xf80 [ 110.217295][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.217308][ T5989] [ 110.217308][ T5989] other info that might help us debug this: [ 110.217308][ T5989] [ 110.217313][ T5989] Chain exists of: [ 110.217313][ T5989] console_owner --> &p->pi_lock --> &rq->__lock [ 110.217313][ T5989] [ 110.217342][ T5989] Possible unsafe locking scenario: [ 110.217342][ T5989] [ 110.217346][ T5989] CPU0 CPU1 [ 110.217351][ T5989] ---- ---- [ 110.217355][ T5989] lock(&rq->__lock); [ 110.217365][ T5989] lock(&p->pi_lock); [ 110.217376][ T5989] lock(&rq->__lock); [ 110.217386][ T5989] lock(console_owner); [ 110.217396][ T5989] [ 110.217396][ T5989] *** DEADLOCK *** [ 110.217396][ T5989] [ 110.217400][ T5989] 5 locks held by syz.0.17/5989: [ 110.217408][ T5989] #0: ffff888075548a28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 110.217444][ T5989] #1: ffff88807e44a8e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 110.217486][ T5989] #2: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 110.217523][ T5989] #3: ffffffff8df359e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 110.217565][ T5989] #4: ffffffff8de1d298 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 110.217608][ T5989] [ 110.217608][ T5989] stack backtrace: [ 110.217630][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.217647][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.217664][ T5989] Call Trace: [ 110.217671][ T5989] [ 110.217679][ T5989] dump_stack_lvl+0x189/0x250 [ 110.217700][ T5989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.217718][ T5989] ? __pfx__printk+0x10/0x10 [ 110.217742][ T5989] ? print_lock_name+0xde/0x100 [ 110.217766][ T5989] print_circular_bug+0x2e2/0x300 [ 110.217788][ T5989] check_noncircular+0x12e/0x150 [ 110.217932][ T5989] __lock_acquire+0x15a6/0x2cf0 [ 110.217961][ T5989] ? console_flush_all+0x131/0xb60 [ 110.217981][ T5989] lock_acquire+0x117/0x340 [ 110.217994][ T5989] ? console_flush_all+0x131/0xb60 [ 110.218017][ T5989] ? do_raw_spin_unlock+0x122/0x240 [ 110.218038][ T5989] ? console_flush_all+0x131/0xb60 [ 110.218104][ T5989] console_flush_all+0x6ee/0xb60 [ 110.218124][ T5989] ? console_flush_all+0x131/0xb60 [ 110.218145][ T5989] ? console_flush_all+0x131/0xb60 [ 110.218168][ T5989] ? __pfx_console_flush_all+0x10/0x10 [ 110.218192][ T5989] ? is_printk_cpu_sync_owner+0x32/0x40 [ 110.218207][ T5989] console_unlock+0xbb/0x190 [ 110.218226][ T5989] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 110.218246][ T5989] ? __pfx_console_unlock+0x10/0x10 [ 110.218268][ T5989] vprintk_emit+0x4f8/0x5f0 [ 110.218287][ T5989] ? __pfx_vprintk_emit+0x10/0x10 [ 110.218309][ T5989] ? __lock_acquire+0x6b6/0x2cf0 [ 110.218325][ T5989] ? __lock_acquire+0x6b6/0x2cf0 [ 110.218342][ T5989] _printk+0xcf/0x120 [ 110.218365][ T5989] ? __pfx__printk+0x10/0x10 [ 110.218388][ T5989] ? find_bug+0xa5/0x370 [ 110.218402][ T5989] ? sched_change_end+0x4f6/0x640 [ 110.218422][ T5989] ? sched_change_end+0x4f6/0x640 [ 110.218440][ T5989] __report_bug+0x305/0x500 [ 110.218457][ T5989] ? sched_change_end+0x4f6/0x640 [ 110.218477][ T5989] ? __pfx___report_bug+0x10/0x10 [ 110.218501][ T5989] ? rcu_read_lock_sched_held+0x89/0x100 [ 110.218522][ T5989] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 110.218544][ T5989] ? sched_change_end+0x4f6/0x640 [ 110.218562][ T5989] report_bug+0x16a/0x220 [ 110.218578][ T5989] ? sched_change_end+0x4f6/0x640 [ 110.218597][ T5989] ? sched_change_end+0x4f8/0x640 [ 110.218614][ T5989] handle_bug+0x98/0x200 [ 110.218635][ T5989] exc_invalid_op+0x1a/0x50 [ 110.218656][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 110.218670][ T5989] RIP: 0010:sched_change_end+0x4f6/0x640 [ 110.218694][ T5989] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 110.218706][ T5989] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 110.218720][ T5989] RAX: 1ffff1100fc893d0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 110.218731][ T5989] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807e449e80 [ 110.218740][ T5989] RBP: ffff88807e44a128 R08: ffff88807e449e87 R09: 1ffff1100fc893d0 [ 110.218751][ T5989] R10: dffffc0000000000 R11: ffffed100fc893d1 R12: dffffc0000000000 [ 110.218761][ T5989] R13: ffff88807e449e80 R14: ffff8880b863a900 R15: ffff88807e449e80 [ 110.218775][ T5989] ? sched_change_end+0x4af/0x640 [ 110.218800][ T5989] rt_mutex_setprio+0x488/0xb70 [ 110.218819][ T5989] remove_waiter+0x7f5/0xaf0 [ 110.218843][ T5989] ? lockdep_hardirqs_on+0x98/0x140 [ 110.218861][ T5989] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 110.218876][ T5989] futex_lock_pi+0x530/0xa90 [ 110.218899][ T5989] ? __pfx_futex_lock_pi+0x10/0x10 [ 110.218925][ T5989] ? futex_hash+0x40/0x2d0 [ 110.218937][ T5989] ? futex_hash+0x2ad/0x2d0 [ 110.218950][ T5989] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.218971][ T5989] ? __pfx_futex_wake+0x10/0x10 [ 110.218994][ T5989] do_futex+0x292/0x420 [ 110.219013][ T5989] ? __pfx_do_futex+0x10/0x10 [ 110.219031][ T5989] __se_sys_futex+0x36f/0x400 [ 110.219056][ T5989] ? __pfx___se_sys_futex+0x10/0x10 [ 110.219076][ T5989] ? __x64_sys_futex+0x21/0xf0 [ 110.219092][ T5989] do_syscall_64+0xfa/0xf80 [ 110.219110][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.219123][ T5989] ? clear_bhb_loop+0x60/0xb0 [ 110.219139][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.219153][ T5989] RIP: 0033:0x7fd65a18f749 [ 110.219176][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.219187][ T5989] RSP: 002b:00007ffd2a315e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.219201][ T5989] RAX: ffffffffffffffda RBX: 00007fd65a3e5fa0 RCX: 00007fd65a18f749 [ 110.219211][ T5989] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 110.219220][ T5989] RBP: 00007fd65a213f91 R08: 0000000000000000 R09: 00000000fffffffd [ 110.219230][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.219237][ T5989] R13: 00007fd65a3e5fa0 R14: 00007fd65a3e5fa0 R15: 0000000000000006 [ 110.219254][ T5989] [ 111.456565][ T5989] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#1: syz.0.17/5989 [ 111.466641][ T5989] Modules linked in: [ 111.470578][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 111.479701][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.489771][ T5989] RIP: 0010:sched_change_end+0x4f6/0x640 [ 111.495522][ T5989] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 111.515871][ T5989] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 111.522163][ T5989] RAX: 1ffff1100fc893d0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 111.530531][ T5989] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807e449e80 [ 111.539568][ T5989] RBP: ffff88807e44a128 R08: ffff88807e449e87 R09: 1ffff1100fc893d0 [ 111.547826][ T5989] R10: dffffc0000000000 R11: ffffed100fc893d1 R12: dffffc0000000000 [ 111.555923][ T5989] R13: ffff88807e449e80 R14: ffff8880b863a900 R15: ffff88807e449e80 [ 111.564186][ T5989] FS: 00005555918e3500(0000) GS:ffff888125f32000(0000) knlGS:0000000000000000 [ 111.573134][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.579913][ T5989] CR2: 0000001b2ff63fff CR3: 000000007388a000 CR4: 00000000003526f0 [ 111.587997][ T5989] Call Trace: [ 111.591283][ T5989] [ 111.594231][ T5989] rt_mutex_setprio+0x488/0xb70 [ 111.599086][ T5989] remove_waiter+0x7f5/0xaf0 [ 111.603683][ T5989] ? lockdep_hardirqs_on+0x98/0x140 [ 111.608895][ T5989] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 111.614637][ T5989] futex_lock_pi+0x530/0xa90 [ 111.619504][ T5989] ? __pfx_futex_lock_pi+0x10/0x10 [ 111.624628][ T5989] ? futex_hash+0x40/0x2d0 [ 111.629098][ T5989] ? futex_hash+0x2ad/0x2d0 [ 111.633599][ T5989] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.639100][ T5989] ? __pfx_futex_wake+0x10/0x10 [ 111.644068][ T5989] do_futex+0x292/0x420 [ 111.648249][ T5989] ? __pfx_do_futex+0x10/0x10 [ 111.652948][ T5989] __se_sys_futex+0x36f/0x400 [ 111.657729][ T5989] ? __pfx___se_sys_futex+0x10/0x10 [ 111.662950][ T5989] ? __x64_sys_futex+0x21/0xf0 [ 111.667713][ T5989] do_syscall_64+0xfa/0xf80 [ 111.672217][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.678296][ T5989] ? clear_bhb_loop+0x60/0xb0 [ 111.682985][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.688885][ T5989] RIP: 0033:0x7fd65a18f749 [ 111.693303][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.712966][ T5989] RSP: 002b:00007ffd2a315e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.721405][ T5989] RAX: ffffffffffffffda RBX: 00007fd65a3e5fa0 RCX: 00007fd65a18f749 [ 111.729474][ T5989] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 111.737571][ T5989] RBP: 00007fd65a213f91 R08: 0000000000000000 R09: 00000000fffffffd [ 111.745551][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.753792][ T5989] R13: 00007fd65a3e5fa0 R14: 00007fd65a3e5fa0 R15: 0000000000000006 [ 111.761883][ T5989] [ 111.765060][ T5989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.772340][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 111.781656][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.791904][ T5989] Call Trace: [ 111.795188][ T5989] [ 111.798379][ T5989] dump_stack_lvl+0x99/0x250 [ 111.802987][ T5989] ? __asan_memcpy+0x40/0x70 [ 111.807580][ T5989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.812820][ T5989] ? __pfx__printk+0x10/0x10 [ 111.817548][ T5989] vpanic+0x237/0x6d0 [ 111.821563][ T5989] ? __pfx_vpanic+0x10/0x10 [ 111.826118][ T5989] ? is_bpf_text_address+0x292/0x2b0 [ 111.831513][ T5989] ? is_bpf_text_address+0x26/0x2b0 [ 111.836822][ T5989] panic+0xb9/0xc0 [ 111.840567][ T5989] ? __pfx_panic+0x10/0x10 [ 111.845100][ T5989] __warn+0x317/0x4b0 [ 111.849091][ T5989] ? sched_change_end+0x4f6/0x640 [ 111.854259][ T5989] ? sched_change_end+0x4f6/0x640 [ 111.859403][ T5989] __report_bug+0x288/0x500 [ 111.864123][ T5989] ? sched_change_end+0x4f6/0x640 [ 111.869397][ T5989] ? __pfx___report_bug+0x10/0x10 [ 111.874439][ T5989] ? rcu_read_lock_sched_held+0x89/0x100 [ 111.880086][ T5989] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 111.886218][ T5989] ? sched_change_end+0x4f6/0x640 [ 111.891277][ T5989] report_bug+0x16a/0x220 [ 111.895634][ T5989] ? sched_change_end+0x4f6/0x640 [ 111.900669][ T5989] ? sched_change_end+0x4f8/0x640 [ 111.905874][ T5989] handle_bug+0x98/0x200 [ 111.910272][ T5989] exc_invalid_op+0x1a/0x50 [ 111.914884][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 111.919740][ T5989] RIP: 0010:sched_change_end+0x4f6/0x640 [ 111.925376][ T5989] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 111.945150][ T5989] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 111.951319][ T5989] RAX: 1ffff1100fc893d0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f [ 111.959298][ T5989] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807e449e80 [ 111.967274][ T5989] RBP: ffff88807e44a128 R08: ffff88807e449e87 R09: 1ffff1100fc893d0 [ 111.975266][ T5989] R10: dffffc0000000000 R11: ffffed100fc893d1 R12: dffffc0000000000 [ 111.983256][ T5989] R13: ffff88807e449e80 R14: ffff8880b863a900 R15: ffff88807e449e80 [ 111.991246][ T5989] ? sched_change_end+0x4af/0x640 [ 111.996334][ T5989] rt_mutex_setprio+0x488/0xb70 [ 112.001311][ T5989] remove_waiter+0x7f5/0xaf0 [ 112.006089][ T5989] ? lockdep_hardirqs_on+0x98/0x140 [ 112.011319][ T5989] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 112.017073][ T5989] futex_lock_pi+0x530/0xa90 [ 112.021677][ T5989] ? __pfx_futex_lock_pi+0x10/0x10 [ 112.027027][ T5989] ? futex_hash+0x40/0x2d0 [ 112.031663][ T5989] ? futex_hash+0x2ad/0x2d0 [ 112.036199][ T5989] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.041540][ T5989] ? __pfx_futex_wake+0x10/0x10 [ 112.046411][ T5989] do_futex+0x292/0x420 [ 112.050652][ T5989] ? __pfx_do_futex+0x10/0x10 [ 112.055557][ T5989] __se_sys_futex+0x36f/0x400 [ 112.060326][ T5989] ? __pfx___se_sys_futex+0x10/0x10 [ 112.065619][ T5989] ? __x64_sys_futex+0x21/0xf0 [ 112.070391][ T5989] do_syscall_64+0xfa/0xf80 [ 112.074944][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.081185][ T5989] ? clear_bhb_loop+0x60/0xb0 [ 112.086006][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.092020][ T5989] RIP: 0033:0x7fd65a18f749 [ 112.096449][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.116241][ T5989] RSP: 002b:00007ffd2a315e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.124669][ T5989] RAX: ffffffffffffffda RBX: 00007fd65a3e5fa0 RCX: 00007fd65a18f749 [ 112.132688][ T5989] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 112.140679][ T5989] RBP: 00007fd65a213f91 R08: 0000000000000000 R09: 00000000fffffffd [ 112.148676][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.156691][ T5989] R13: 00007fd65a3e5fa0 R14: 00007fd65a3e5fa0 R15: 0000000000000006 [ 112.164696][ T5989] [ 113.296618][ T5989] Shutting down cpus with NMI [ 113.302025][ T5989] Kernel Offset: disabled [ 113.306649][ T5989] Rebooting in 86400 seconds..