Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts.
2026/01/03 06:17:54 parsed 1 programs
[ 91.065007][ T5829] cgroup: Unknown subsys name 'net'
[ 91.180797][ T5829] cgroup: Unknown subsys name 'cpuset'
[ 91.190382][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 93.088414][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.440875][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 97.309488][ T38] cfg80211: failed to load regulatory.db
[ 97.407417][ T5869] chnl_net:caif_netlink_parms(): no params data found
[ 97.542632][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.550824][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.558915][ T5869] bridge_slave_0: entered allmulticast mode
[ 97.567737][ T5869] bridge_slave_0: entered promiscuous mode
[ 97.581754][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.589027][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.596638][ T5869] bridge_slave_1: entered allmulticast mode
[ 97.604884][ T5869] bridge_slave_1: entered promiscuous mode
[ 97.643362][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.656474][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.700119][ T5869] team0: Port device team_slave_0 added
[ 97.709200][ T5869] team0: Port device team_slave_1 added
[ 97.741099][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.748622][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.775053][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.788297][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.795613][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.823632][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.877951][ T5869] hsr_slave_0: entered promiscuous mode
[ 97.884744][ T5869] hsr_slave_1: entered promiscuous mode
[ 98.074173][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.088699][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.100318][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.114295][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.207269][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.234259][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.249279][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.256603][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.274520][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.281759][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.492589][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.548375][ T5869] veth0_vlan: entered promiscuous mode
[ 98.563232][ T5869] veth1_vlan: entered promiscuous mode
[ 98.595826][ T5869] veth0_macvtap: entered promiscuous mode
[ 98.607024][ T5869] veth1_macvtap: entered promiscuous mode
[ 98.630810][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.645797][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.662189][ T3457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.675687][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.687895][ T3457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.697168][ T3457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.878527][ T4521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.949174][ T4521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.024912][ T4521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.130558][ T4521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.356646][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.371679][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.410673][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.419477][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.373495][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.382349][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.394721][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.406150][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.415072][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.782315][ T4521] bridge_slave_1: left allmulticast mode
[ 101.790133][ T4521] bridge_slave_1: left promiscuous mode
[ 101.797711][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.810893][ T4521] bridge_slave_0: left allmulticast mode
[ 101.819889][ T4521] bridge_slave_0: left promiscuous mode
[ 101.826185][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state
2026/01/03 06:18:09 executed programs: 0
[ 102.431154][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.462616][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.480745][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.500838][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.509207][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.519572][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.537987][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.548406][ T4521] bond0 (unregistering): Released all slaves
[ 102.672181][ T4521] hsr_slave_0: left promiscuous mode
[ 102.683840][ T4521] hsr_slave_1: left promiscuous mode
[ 102.690000][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.706298][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.718258][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.725811][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.749537][ T4521] veth1_macvtap: left promiscuous mode
[ 102.755646][ T4521] veth0_macvtap: left promiscuous mode
[ 102.761418][ T4521] veth1_vlan: left promiscuous mode
[ 102.767295][ T4521] veth0_vlan: left promiscuous mode
[ 103.279007][ T4521] team0 (unregistering): Port device team_slave_1 removed
[ 103.310029][ T4521] team0 (unregistering): Port device team_slave_0 removed
[ 103.782160][ T5954] chnl_net:caif_netlink_parms(): no params data found
[ 104.000548][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.015050][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.022369][ T5954] bridge_slave_0: entered allmulticast mode
[ 104.037256][ T5954] bridge_slave_0: entered promiscuous mode
[ 104.046960][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.054586][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.062025][ T5954] bridge_slave_1: entered allmulticast mode
[ 104.070571][ T5954] bridge_slave_1: entered promiscuous mode
[ 104.569684][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.583995][ T5147] Bluetooth: hci0: command tx timeout
[ 104.598357][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.678515][ T5954] team0: Port device team_slave_0 added
[ 104.691186][ T5954] team0: Port device team_slave_1 added
[ 104.760928][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.768681][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.809880][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.925115][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.932131][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.959423][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.036165][ T5954] hsr_slave_0: entered promiscuous mode
[ 105.043444][ T5954] hsr_slave_1: entered promiscuous mode
[ 106.014222][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.028782][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.040552][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.054155][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.177767][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.219644][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.238997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.246395][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.268536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.275857][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.570871][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.640565][ T5954] veth0_vlan: entered promiscuous mode
[ 106.656274][ T5954] veth1_vlan: entered promiscuous mode
[ 106.663047][ T5147] Bluetooth: hci0: command tx timeout
[ 106.706105][ T5954] veth0_macvtap: entered promiscuous mode
[ 106.717678][ T5954] veth1_macvtap: entered promiscuous mode
[ 106.756858][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.775379][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.799098][ T4521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.824400][ T4521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.848129][ T4521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.863508][ T4521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.923708][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.931604][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.005758][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.014939][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.743154][ T5147] Bluetooth: hci0: command tx timeout
[ 110.080869][ T6042] ------------[ cut here ]------------
[ 110.081242][ T6042]
[ 110.081249][ T6042] ======================================================
[ 110.081255][ T6042] WARNING: possible circular locking dependency detected
[ 110.081268][ T6042] syzkaller #0 Not tainted
[ 110.081276][ T6042] ------------------------------------------------------
[ 110.081282][ T6042] syz.0.17/6042 is trying to acquire lock:
[ 110.081289][ T6042] ffffffff8e333180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 110.081333][ T6042]
[ 110.081333][ T6042] but task is already holding lock:
[ 110.081338][ T6042] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 110.081379][ T6042]
[ 110.081379][ T6042] which lock already depends on the new lock.
[ 110.081379][ T6042]
[ 110.081384][ T6042]
[ 110.081384][ T6042] the existing dependency chain (in reverse order) is:
[ 110.081389][ T6042]
[ 110.081389][ T6042] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 110.081409][ T6042] _raw_spin_lock_nested+0x32/0x50
[ 110.081426][ T6042] raw_spin_rq_lock_nested+0x2a/0x140
[ 110.081446][ T6042] task_rq_lock+0xbc/0x470
[ 110.081467][ T6042] cgroup_move_task+0x92/0x2a0
[ 110.081481][ T6042] css_set_move_task+0x658/0x9e0
[ 110.081503][ T6042] cgroup_post_fork+0x1ef/0x7a0
[ 110.081523][ T6042] copy_process+0x3614/0x3950
[ 110.081545][ T6042] kernel_clone+0x21e/0x820
[ 110.081557][ T6042] user_mode_thread+0xdd/0x140
[ 110.081569][ T6042] rest_init+0x23/0x300
[ 110.081588][ T6042] start_kernel+0x3ac/0x400
[ 110.081601][ T6042] x86_64_start_reservations+0x24/0x30
[ 110.081619][ T6042] x86_64_start_kernel+0x143/0x1c0
[ 110.081637][ T6042] common_startup_64+0x13e/0x147
[ 110.081652][ T6042]
[ 110.081652][ T6042] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 110.081671][ T6042] _raw_spin_lock_irqsave+0xa7/0xf0
[ 110.081684][ T6042] try_to_wake_up+0x67/0x12b0
[ 110.081699][ T6042] __wake_up_common_lock+0x137/0x1f0
[ 110.081717][ T6042] tty_port_default_wakeup+0xfb/0x170
[ 110.081737][ T6042] serial8250_tx_chars+0x72e/0x970
[ 110.081754][ T6042] serial8250_handle_irq+0x633/0xbb0
[ 110.081771][ T6042] serial8250_default_handle_irq+0xbf/0x200
[ 110.081791][ T6042] serial8250_interrupt+0x8d/0x180
[ 110.081805][ T6042] __handle_irq_event_percpu+0x285/0xa60
[ 110.081823][ T6042] handle_irq_event+0x8b/0x1e0
[ 110.081839][ T6042] handle_edge_irq+0x23b/0xa10
[ 110.081854][ T6042] __common_interrupt+0x141/0x1f0
[ 110.081872][ T6042] common_interrupt+0xb6/0xe0
[ 110.081893][ T6042] asm_common_interrupt+0x26/0x40
[ 110.081907][ T6042] do_exit+0x37/0x25b0
[ 110.081922][ T6042] do_group_exit+0x21c/0x2d0
[ 110.081937][ T6042] __x64_sys_exit_group+0x3f/0x40
[ 110.081953][ T6042] __pfx_syscall_get_nr+0x0/0x10
[ 110.081969][ T6042] do_syscall_64+0xfa/0xf80
[ 110.081984][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.081998][ T6042]
[ 110.081998][ T6042] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[ 110.082018][ T6042] _raw_spin_lock_irqsave+0xa7/0xf0
[ 110.082030][ T6042] __wake_up_common_lock+0x2f/0x1f0
[ 110.082047][ T6042] tty_port_default_wakeup+0xfb/0x170
[ 110.082066][ T6042] serial8250_tx_chars+0x72e/0x970
[ 110.082082][ T6042] serial8250_handle_irq+0x633/0xbb0
[ 110.082099][ T6042] serial8250_default_handle_irq+0xbf/0x200
[ 110.082119][ T6042] serial8250_interrupt+0x8d/0x180
[ 110.082132][ T6042] __handle_irq_event_percpu+0x285/0xa60
[ 110.082155][ T6042] handle_irq_event+0x8b/0x1e0
[ 110.082171][ T6042] handle_edge_irq+0x23b/0xa10
[ 110.082186][ T6042] __common_interrupt+0x141/0x1f0
[ 110.082203][ T6042] common_interrupt+0xb6/0xe0
[ 110.082222][ T6042] asm_common_interrupt+0x26/0x40
[ 110.082235][ T6042] pv_native_safe_halt+0x13/0x20
[ 110.082249][ T6042] default_idle+0x13/0x20
[ 110.082266][ T6042] default_idle_call+0x73/0xb0
[ 110.082284][ T6042] do_idle+0x1ea/0x520
[ 110.082295][ T6042] cpu_startup_entry+0x44/0x60
[ 110.082307][ T6042] rest_init+0x2de/0x300
[ 110.082325][ T6042] start_kernel+0x3ac/0x400
[ 110.082336][ T6042] x86_64_start_reservations+0x24/0x30
[ 110.082355][ T6042] x86_64_start_kernel+0x143/0x1c0
[ 110.082372][ T6042] common_startup_64+0x13e/0x147
[ 110.082386][ T6042]
[ 110.082386][ T6042] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 110.082406][ T6042] _raw_spin_lock_irqsave+0xa7/0xf0
[ 110.082418][ T6042] serial8250_console_write+0x17e/0x1ba0
[ 110.082436][ T6042] console_flush_all+0x745/0xb60
[ 110.082452][ T6042] console_unlock+0xbb/0x190
[ 110.082465][ T6042] vprintk_emit+0x4f8/0x5f0
[ 110.082479][ T6042] _printk+0xcf/0x120
[ 110.082500][ T6042] register_console+0xa8b/0xf90
[ 110.082516][ T6042] univ8250_console_init+0x3a/0x70
[ 110.082536][ T6042] console_init+0xfc/0x3f0
[ 110.082553][ T6042] start_kernel+0x252/0x400
[ 110.082565][ T6042] x86_64_start_reservations+0x24/0x30
[ 110.082583][ T6042] x86_64_start_kernel+0x143/0x1c0
[ 110.082600][ T6042] common_startup_64+0x13e/0x147
[ 110.082614][ T6042]
[ 110.082614][ T6042] -> #0 (console_owner){....}-{0:0}:
[ 110.082633][ T6042] __lock_acquire+0x15a6/0x2cf0
[ 110.082654][ T6042] lock_acquire+0x117/0x340
[ 110.082673][ T6042] console_flush_all+0x6ee/0xb60
[ 110.082689][ T6042] console_unlock+0xbb/0x190
[ 110.082703][ T6042] vprintk_emit+0x4f8/0x5f0
[ 110.082716][ T6042] _printk+0xcf/0x120
[ 110.082736][ T6042] __report_bug+0x305/0x500
[ 110.082749][ T6042] report_bug+0x16a/0x220
[ 110.082762][ T6042] handle_bug+0x98/0x200
[ 110.082779][ T6042] exc_invalid_op+0x1a/0x50
[ 110.082796][ T6042] asm_exc_invalid_op+0x1a/0x20
[ 110.082809][ T6042] sched_change_end+0x4f6/0x640
[ 110.082822][ T6042] rt_mutex_setprio+0x488/0xb70
[ 110.082847][ T6042] remove_waiter+0x7f5/0xaf0
[ 110.082867][ T6042] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 110.082889][ T6042] futex_lock_pi+0x530/0xa90
[ 110.082903][ T6042] do_futex+0x292/0x420
[ 110.082924][ T6042] __se_sys_futex+0x36f/0x400
[ 110.082946][ T6042] do_syscall_64+0xfa/0xf80
[ 110.082960][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.082974][ T6042]
[ 110.082974][ T6042] other info that might help us debug this:
[ 110.082974][ T6042]
[ 110.082979][ T6042] Chain exists of:
[ 110.082979][ T6042] console_owner --> &p->pi_lock --> &rq->__lock
[ 110.082979][ T6042]
[ 110.083002][ T6042] Possible unsafe locking scenario:
[ 110.083002][ T6042]
[ 110.083007][ T6042] CPU0 CPU1
[ 110.083011][ T6042] ---- ----
[ 110.083016][ T6042] lock(&rq->__lock);
[ 110.083025][ T6042] lock(&p->pi_lock);
[ 110.083036][ T6042] lock(&rq->__lock);
[ 110.083046][ T6042] lock(console_owner);
[ 110.083056][ T6042]
[ 110.083056][ T6042] *** DEADLOCK ***
[ 110.083056][ T6042]
[ 110.083060][ T6042] 5 locks held by syz.0.17/6042:
[ 110.083068][ T6042] #0: ffff888145f9b728 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100
[ 110.083111][ T6042] #1: ffff88802fca28e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0
[ 110.083162][ T6042] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 110.083200][ T6042] #3: ffffffff8e3331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 110.083237][ T6042] #4: ffffffff8e21aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 110.083272][ T6042]
[ 110.083272][ T6042] stack backtrace:
[ 110.083286][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 110.083302][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 110.083317][ T6042] Call Trace:
[ 110.083322][ T6042]
[ 110.083328][ T6042] dump_stack_lvl+0x189/0x250
[ 110.083343][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.083356][ T6042] ? __pfx__printk+0x10/0x10
[ 110.083378][ T6042] ? print_lock_name+0xde/0x100
[ 110.083399][ T6042] print_circular_bug+0x2e2/0x300
[ 110.083415][ T6042] check_noncircular+0x12e/0x150
[ 110.083431][ T6042] __lock_acquire+0x15a6/0x2cf0
[ 110.083459][ T6042] ? console_flush_all+0x131/0xb60
[ 110.083474][ T6042] lock_acquire+0x117/0x340
[ 110.083492][ T6042] ? console_flush_all+0x131/0xb60
[ 110.083511][ T6042] ? do_raw_spin_unlock+0x122/0x240
[ 110.083527][ T6042] ? console_flush_all+0x131/0xb60
[ 110.083543][ T6042] console_flush_all+0x6ee/0xb60
[ 110.083558][ T6042] ? console_flush_all+0x131/0xb60
[ 110.083574][ T6042] ? console_flush_all+0x131/0xb60
[ 110.083592][ T6042] ? __pfx_console_flush_all+0x10/0x10
[ 110.083611][ T6042] ? is_printk_cpu_sync_owner+0x32/0x40
[ 110.083631][ T6042] console_unlock+0xbb/0x190
[ 110.083644][ T6042] ? __pfx___down_trylock_console_sem+0x10/0x10
[ 110.083660][ T6042] ? __pfx_console_unlock+0x10/0x10
[ 110.083677][ T6042] vprintk_emit+0x4f8/0x5f0
[ 110.083692][ T6042] ? __pfx_vprintk_emit+0x10/0x10
[ 110.083707][ T6042] ? __lock_acquire+0x6b6/0x2cf0
[ 110.083727][ T6042] ? __lock_acquire+0x6b6/0x2cf0
[ 110.083749][ T6042] _printk+0xcf/0x120
[ 110.083771][ T6042] ? __pfx__printk+0x10/0x10
[ 110.083793][ T6042] ? find_bug+0xa5/0x370
[ 110.083804][ T6042] ? sched_change_end+0x4f6/0x640
[ 110.083819][ T6042] ? sched_change_end+0x4f6/0x640
[ 110.083832][ T6042] __report_bug+0x305/0x500
[ 110.083845][ T6042] ? sched_change_end+0x4f6/0x640
[ 110.083861][ T6042] ? __pfx___report_bug+0x10/0x10
[ 110.083874][ T6042] ? rcu_read_lock_sched_held+0x89/0x100
[ 110.083890][ T6042] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 110.083909][ T6042] ? sched_change_end+0x4f6/0x640
[ 110.083923][ T6042] report_bug+0x16a/0x220
[ 110.083936][ T6042] ? sched_change_end+0x4f6/0x640
[ 110.083949][ T6042] ? sched_change_end+0x4f8/0x640
[ 110.083961][ T6042] handle_bug+0x98/0x200
[ 110.083978][ T6042] exc_invalid_op+0x1a/0x50
[ 110.083995][ T6042] asm_exc_invalid_op+0x1a/0x20
[ 110.084008][ T6042] RIP: 0010:sched_change_end+0x4f6/0x640
[ 110.084023][ T6042] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 110.084034][ T6042] RSP: 0018:ffffc90003457850 EFLAGS: 00010046
[ 110.084046][ T6042] RAX: 1ffff11005f943d0 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 110.084057][ T6042] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802fca1e80
[ 110.084065][ T6042] RBP: ffff88802fca2128 R08: ffff88802fca1e87 R09: 1ffff11005f943d0
[ 110.084076][ T6042] R10: dffffc0000000000 R11: ffffed1005f943d1 R12: dffffc0000000000
[ 110.084086][ T6042] R13: ffff88802fca1e80 R14: ffff8880b873ab00 R15: ffff88802fca1e80
[ 110.084099][ T6042] ? sched_change_end+0x4af/0x640
[ 110.084118][ T6042] rt_mutex_setprio+0x488/0xb70
[ 110.084151][ T6042] remove_waiter+0x7f5/0xaf0
[ 110.084172][ T6042] ? lockdep_hardirqs_on+0x98/0x140
[ 110.084188][ T6042] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 110.084209][ T6042] futex_lock_pi+0x530/0xa90
[ 110.084226][ T6042] ? __pfx_futex_lock_pi+0x10/0x10
[ 110.084247][ T6042] ? futex_hash+0x40/0x2d0
[ 110.084263][ T6042] ? futex_hash+0x2ad/0x2d0
[ 110.084282][ T6042] ? __pfx_futex_wake_mark+0x10/0x10
[ 110.084299][ T6042] ? __pfx_futex_wake+0x10/0x10
[ 110.084316][ T6042] ? handle_mm_fault+0xdb/0x32b0
[ 110.084336][ T6042] do_futex+0x292/0x420
[ 110.084358][ T6042] ? __pfx_do_futex+0x10/0x10
[ 110.084381][ T6042] __se_sys_futex+0x36f/0x400
[ 110.084404][ T6042] ? __pfx___se_sys_futex+0x10/0x10
[ 110.084428][ T6042] ? __x64_sys_futex+0x21/0xf0
[ 110.084449][ T6042] do_syscall_64+0xfa/0xf80
[ 110.084464][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.084478][ T6042] ? clear_bhb_loop+0x60/0xb0
[ 110.084493][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.084506][ T6042] RIP: 0033:0x7f49e038f749
[ 110.084524][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.084535][ T6042] RSP: 002b:00007ffdaa190e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 110.084548][ T6042] RAX: ffffffffffffffda RBX: 00007f49e05e5fa0 RCX: 00007f49e038f749
[ 110.084558][ T6042] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 110.084567][ T6042] RBP: 00007f49e0413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 110.084576][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.084584][ T6042] R13: 00007f49e05e5fa0 R14: 00007f49e05e5fa0 R15: 0000000000000006
[ 110.084599][ T6042]
[ 111.305493][ T6042] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6042
[ 111.315484][ T6042] Modules linked in:
[ 111.319385][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 111.328497][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 111.338557][ T6042] RIP: 0010:sched_change_end+0x4f6/0x640
[ 111.344199][ T6042] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 111.364164][ T6042] RSP: 0018:ffffc90003457850 EFLAGS: 00010046
[ 111.370292][ T6042] RAX: 1ffff11005f943d0 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 111.378283][ T6042] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802fca1e80
[ 111.386271][ T6042] RBP: ffff88802fca2128 R08: ffff88802fca1e87 R09: 1ffff11005f943d0
[ 111.394266][ T6042] R10: dffffc0000000000 R11: ffffed1005f943d1 R12: dffffc0000000000
[ 111.402428][ T6042] R13: ffff88802fca1e80 R14: ffff8880b873ab00 R15: ffff88802fca1e80
[ 111.410415][ T6042] FS: 0000555558312500(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000
[ 111.419359][ T6042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.426063][ T6042] CR2: 00007fd09a373e9c CR3: 0000000033956000 CR4: 00000000003526f0
[ 111.434044][ T6042] Call Trace:
[ 111.437333][ T6042]
[ 111.440274][ T6042] rt_mutex_setprio+0x488/0xb70
[ 111.445229][ T6042] remove_waiter+0x7f5/0xaf0
[ 111.449844][ T6042] ? lockdep_hardirqs_on+0x98/0x140
[ 111.455153][ T6042] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 111.460904][ T6042] futex_lock_pi+0x530/0xa90
[ 111.465509][ T6042] ? __pfx_futex_lock_pi+0x10/0x10
[ 111.470733][ T6042] ? futex_hash+0x40/0x2d0
[ 111.475161][ T6042] ? futex_hash+0x2ad/0x2d0
[ 111.479692][ T6042] ? __pfx_futex_wake_mark+0x10/0x10
[ 111.485011][ T6042] ? __pfx_futex_wake+0x10/0x10
[ 111.489897][ T6042] ? handle_mm_fault+0xdb/0x32b0
[ 111.494852][ T6042] do_futex+0x292/0x420
[ 111.499029][ T6042] ? __pfx_do_futex+0x10/0x10
[ 111.503818][ T6042] __se_sys_futex+0x36f/0x400
[ 111.508607][ T6042] ? __pfx___se_sys_futex+0x10/0x10
[ 111.513817][ T6042] ? __x64_sys_futex+0x21/0xf0
[ 111.518595][ T6042] do_syscall_64+0xfa/0xf80
[ 111.523108][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.529182][ T6042] ? clear_bhb_loop+0x60/0xb0
[ 111.533865][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.539773][ T6042] RIP: 0033:0x7f49e038f749
[ 111.544227][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.563839][ T6042] RSP: 002b:00007ffdaa190e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 111.572439][ T6042] RAX: ffffffffffffffda RBX: 00007f49e05e5fa0 RCX: 00007f49e038f749
[ 111.580419][ T6042] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 111.588399][ T6042] RBP: 00007f49e0413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 111.596383][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.604361][ T6042] R13: 00007f49e05e5fa0 R14: 00007f49e05e5fa0 R15: 0000000000000006
[ 111.612351][ T6042]
[ 111.615380][ T6042] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 111.622707][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 111.631852][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 111.641942][ T6042] Call Trace:
[ 111.645230][ T6042]
[ 111.648166][ T6042] dump_stack_lvl+0x99/0x250
[ 111.652769][ T6042] ? __asan_memcpy+0x40/0x70
[ 111.657380][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.662736][ T6042] ? __pfx__printk+0x10/0x10
[ 111.667357][ T6042] vpanic+0x237/0x6d0
[ 111.671357][ T6042] ? __pfx_vpanic+0x10/0x10
[ 111.675866][ T6042] ? is_bpf_text_address+0x292/0x2b0
[ 111.681250][ T6042] ? is_bpf_text_address+0x26/0x2b0
[ 111.686465][ T6042] panic+0xb9/0xc0
[ 111.690221][ T6042] ? __pfx_panic+0x10/0x10
[ 111.694664][ T6042] __warn+0x317/0x4b0
[ 111.698670][ T6042] ? sched_change_end+0x4f6/0x640
[ 111.703731][ T6042] ? sched_change_end+0x4f6/0x640
[ 111.708771][ T6042] __report_bug+0x288/0x500
[ 111.713284][ T6042] ? sched_change_end+0x4f6/0x640
[ 111.718342][ T6042] ? __pfx___report_bug+0x10/0x10
[ 111.723382][ T6042] ? rcu_read_lock_sched_held+0x89/0x100
[ 111.729108][ T6042] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 111.735213][ T6042] ? sched_change_end+0x4f6/0x640
[ 111.740252][ T6042] report_bug+0x16a/0x220
[ 111.744684][ T6042] ? sched_change_end+0x4f6/0x640
[ 111.749791][ T6042] ? sched_change_end+0x4f8/0x640
[ 111.754840][ T6042] handle_bug+0x98/0x200
[ 111.759111][ T6042] exc_invalid_op+0x1a/0x50
[ 111.763630][ T6042] asm_exc_invalid_op+0x1a/0x20
[ 111.768653][ T6042] RIP: 0010:sched_change_end+0x4f6/0x640
[ 111.774305][ T6042] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 111.793953][ T6042] RSP: 0018:ffffc90003457850 EFLAGS: 00010046
[ 111.800126][ T6042] RAX: 1ffff11005f943d0 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f
[ 111.808194][ T6042] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802fca1e80
[ 111.816271][ T6042] RBP: ffff88802fca2128 R08: ffff88802fca1e87 R09: 1ffff11005f943d0
[ 111.824344][ T6042] R10: dffffc0000000000 R11: ffffed1005f943d1 R12: dffffc0000000000
[ 111.832327][ T6042] R13: ffff88802fca1e80 R14: ffff8880b873ab00 R15: ffff88802fca1e80
[ 111.840331][ T6042] ? sched_change_end+0x4af/0x640
[ 111.845492][ T6042] rt_mutex_setprio+0x488/0xb70
[ 111.850358][ T6042] remove_waiter+0x7f5/0xaf0
[ 111.854961][ T6042] ? lockdep_hardirqs_on+0x98/0x140
[ 111.860253][ T6042] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 111.866072][ T6042] futex_lock_pi+0x530/0xa90
[ 111.870871][ T6042] ? __pfx_futex_lock_pi+0x10/0x10
[ 111.876000][ T6042] ? futex_hash+0x40/0x2d0
[ 111.880444][ T6042] ? futex_hash+0x2ad/0x2d0
[ 111.884967][ T6042] ? __pfx_futex_wake_mark+0x10/0x10
[ 111.890374][ T6042] ? __pfx_futex_wake+0x10/0x10
[ 111.895233][ T6042] ? handle_mm_fault+0xdb/0x32b0
[ 111.900186][ T6042] do_futex+0x292/0x420
[ 111.904364][ T6042] ? __pfx_do_futex+0x10/0x10
[ 111.909071][ T6042] __se_sys_futex+0x36f/0x400
[ 111.914046][ T6042] ? __pfx___se_sys_futex+0x10/0x10
[ 111.919299][ T6042] ? __x64_sys_futex+0x21/0xf0
[ 111.924079][ T6042] do_syscall_64+0xfa/0xf80
[ 111.928589][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.934664][ T6042] ? clear_bhb_loop+0x60/0xb0
[ 111.939452][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.945352][ T6042] RIP: 0033:0x7f49e038f749
[ 111.949968][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.969754][ T6042] RSP: 002b:00007ffdaa190e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 111.978357][ T6042] RAX: ffffffffffffffda RBX: 00007f49e05e5fa0 RCX: 00007f49e038f749
[ 111.986337][ T6042] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc
[ 111.994310][ T6042] RBP: 00007f49e0413f91 R08: 0000000000000000 R09: 00000000fffffffc
[ 112.002287][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 112.010538][ T6042] R13: 00007f49e05e5fa0 R14: 00007f49e05e5fa0 R15: 0000000000000006
[ 112.018716][ T6042]
[ 113.128805][ T6042] Shutting down cpus with NMI
[ 113.134328][ T6042] Kernel Offset: disabled
[ 113.138708][ T6042] Rebooting in 86400 seconds..