Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. 2026/01/01 04:57:56 parsed 1 programs [ 79.884228][ T5832] cgroup: Unknown subsys name 'net' [ 80.014518][ T5832] cgroup: Unknown subsys name 'cpuset' [ 80.023057][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.449740][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.252347][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.686493][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.694895][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.705922][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.714452][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.727504][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.813200][ T24] cfg80211: failed to load regulatory.db [ 86.995944][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 87.111928][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.119635][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.126949][ T5901] bridge_slave_0: entered allmulticast mode [ 87.134225][ T5901] bridge_slave_0: entered promiscuous mode [ 87.144928][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.152439][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.159581][ T5901] bridge_slave_1: entered allmulticast mode [ 87.166858][ T5901] bridge_slave_1: entered promiscuous mode [ 87.201569][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.213378][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.244605][ T5901] team0: Port device team_slave_0 added [ 87.253501][ T5901] team0: Port device team_slave_1 added [ 87.284915][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.292229][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.318339][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.331614][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.338760][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.365639][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.409215][ T5901] hsr_slave_0: entered promiscuous mode [ 87.416130][ T5901] hsr_slave_1: entered promiscuous mode [ 87.559839][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.573032][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.583441][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.595022][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.623937][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.631176][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.639107][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.646490][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.698708][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.718942][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.727543][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.744631][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.758112][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.765575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.778510][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.785696][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.949248][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.993126][ T5901] veth0_vlan: entered promiscuous mode [ 88.005454][ T5901] veth1_vlan: entered promiscuous mode [ 88.034243][ T5901] veth0_macvtap: entered promiscuous mode [ 88.043850][ T5901] veth1_macvtap: entered promiscuous mode [ 88.063802][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.078450][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.100086][ T4108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.110666][ T4108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.121535][ T4108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.138085][ T4108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.266428][ T4108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.349147][ T4108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.442783][ T4108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.540730][ T4108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.570586][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.582465][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.613115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.622007][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/01 04:58:07 executed programs: 0 [ 89.161927][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.169927][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.181642][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.189513][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.198241][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.348487][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 89.436285][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443706][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.451587][ T5943] bridge_slave_0: entered allmulticast mode [ 89.459401][ T5943] bridge_slave_0: entered promiscuous mode [ 89.468012][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.475377][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.483116][ T5943] bridge_slave_1: entered allmulticast mode [ 89.490159][ T5943] bridge_slave_1: entered promiscuous mode [ 89.526660][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.539884][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.573307][ T5943] team0: Port device team_slave_0 added [ 89.581188][ T5943] team0: Port device team_slave_1 added [ 89.608213][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.615781][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.642678][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.655554][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.662764][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.689228][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.739790][ T5943] hsr_slave_0: entered promiscuous mode [ 89.746819][ T5943] hsr_slave_1: entered promiscuous mode [ 89.753694][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 89.759496][ T5943] Cannot create hsr debugfs directory [ 90.816443][ T4108] bridge_slave_1: left allmulticast mode [ 90.824936][ T4108] bridge_slave_1: left promiscuous mode [ 90.834327][ T4108] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.845989][ T4108] bridge_slave_0: left allmulticast mode [ 90.853000][ T4108] bridge_slave_0: left promiscuous mode [ 90.858688][ T4108] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.096399][ T4108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.108182][ T4108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.118755][ T4108] bond0 (unregistering): Released all slaves [ 91.234794][ T4108] hsr_slave_0: left promiscuous mode [ 91.251416][ T4108] hsr_slave_1: left promiscuous mode [ 91.257761][ T4108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.266694][ T4108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.276241][ T4108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.284107][ T4108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.299270][ T5149] Bluetooth: hci0: command tx timeout [ 91.315935][ T4108] veth1_macvtap: left promiscuous mode [ 91.322618][ T4108] veth0_macvtap: left promiscuous mode [ 91.328449][ T4108] veth1_vlan: left promiscuous mode [ 91.335082][ T4108] veth0_vlan: left promiscuous mode [ 91.773313][ T4108] team0 (unregistering): Port device team_slave_1 removed [ 91.800029][ T4108] team0 (unregistering): Port device team_slave_0 removed [ 92.342905][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.358332][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.369820][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.386025][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.714313][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.755241][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.778706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.785963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.877537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.884954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.266473][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.317918][ T5943] veth0_vlan: entered promiscuous mode [ 93.330600][ T5943] veth1_vlan: entered promiscuous mode [ 93.357006][ T5943] veth0_macvtap: entered promiscuous mode [ 93.366254][ T5943] veth1_macvtap: entered promiscuous mode [ 93.373704][ T5149] Bluetooth: hci0: command tx timeout [ 93.393219][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.409233][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.422768][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.432846][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.443195][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.452608][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.508008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.520073][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.544002][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.551941][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.435842][ T6005] ------------[ cut here ]------------ [ 94.436154][ T6005] [ 94.436159][ T6005] ====================================================== [ 94.436162][ T6005] WARNING: possible circular locking dependency detected [ 94.436172][ T6005] syzkaller #0 Not tainted [ 94.436177][ T6005] ------------------------------------------------------ [ 94.436180][ T6005] syz.0.17/6005 is trying to acquire lock: [ 94.436185][ T6005] ffffffff8e333180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 94.436232][ T6005] [ 94.436232][ T6005] but task is already holding lock: [ 94.436235][ T6005] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 94.436258][ T6005] [ 94.436258][ T6005] which lock already depends on the new lock. [ 94.436258][ T6005] [ 94.436261][ T6005] [ 94.436261][ T6005] the existing dependency chain (in reverse order) is: [ 94.436265][ T6005] [ 94.436265][ T6005] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 94.436276][ T6005] _raw_spin_lock_nested+0x32/0x50 [ 94.436286][ T6005] raw_spin_rq_lock_nested+0x2a/0x140 [ 94.436297][ T6005] task_rq_lock+0xbc/0x470 [ 94.436308][ T6005] cgroup_move_task+0x92/0x2a0 [ 94.436316][ T6005] css_set_move_task+0x658/0x9e0 [ 94.436329][ T6005] cgroup_post_fork+0x1ef/0x7a0 [ 94.436340][ T6005] copy_process+0x3614/0x3950 [ 94.436352][ T6005] kernel_clone+0x21e/0x820 [ 94.436358][ T6005] user_mode_thread+0xdd/0x140 [ 94.436365][ T6005] rest_init+0x23/0x300 [ 94.436375][ T6005] start_kernel+0x3ac/0x400 [ 94.436382][ T6005] x86_64_start_reservations+0x24/0x30 [ 94.436392][ T6005] x86_64_start_kernel+0x143/0x1c0 [ 94.436401][ T6005] common_startup_64+0x13e/0x147 [ 94.436416][ T6005] [ 94.436416][ T6005] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 94.436427][ T6005] _raw_spin_lock_irqsave+0xa7/0xf0 [ 94.436434][ T6005] try_to_wake_up+0x67/0x12b0 [ 94.436443][ T6005] create_worker+0x503/0x720 [ 94.436452][ T6005] workqueue_init+0x3ea/0x690 [ 94.436463][ T6005] kernel_init_freeable+0x302/0x4b0 [ 94.436470][ T6005] kernel_init+0x1d/0x1d0 [ 94.436481][ T6005] ret_from_fork+0x599/0xb30 [ 94.436491][ T6005] ret_from_fork_asm+0x1a/0x30 [ 94.436501][ T6005] [ 94.436501][ T6005] -> #3 (&pool->lock){-.-.}-{2:2}: [ 94.436512][ T6005] _raw_spin_lock+0x2e/0x40 [ 94.436518][ T6005] __queue_work+0x7eb/0xf90 [ 94.436530][ T6005] queue_work_on+0x181/0x270 [ 94.436541][ T6005] rpm_suspend+0xe44/0x1700 [ 94.436549][ T6005] __pm_runtime_idle+0x12f/0x1a0 [ 94.436555][ T6005] __device_attach+0x342/0x430 [ 94.436563][ T6005] device_initial_probe+0xa1/0xd0 [ 94.436571][ T6005] bus_probe_device+0x12a/0x220 [ 94.436582][ T6005] device_add+0x7b6/0xb80 [ 94.436588][ T6005] serial_base_port_add+0x18f/0x260 [ 94.436600][ T6005] serial_core_register_port+0x369/0x2800 [ 94.436609][ T6005] serial8250_register_8250_port+0x1658/0x1fd0 [ 94.436617][ T6005] serial_pnp_probe+0x527/0x7d0 [ 94.436625][ T6005] pnp_device_probe+0x30b/0x4c0 [ 94.436633][ T6005] really_probe+0x26d/0xad0 [ 94.436641][ T6005] __driver_probe_device+0x18c/0x320 [ 94.436649][ T6005] driver_probe_device+0x4f/0x240 [ 94.436657][ T6005] __driver_attach+0x349/0x650 [ 94.436665][ T6005] bus_for_each_dev+0x233/0x2b0 [ 94.436675][ T6005] bus_add_driver+0x345/0x670 [ 94.436685][ T6005] driver_register+0x23a/0x320 [ 94.436694][ T6005] serial8250_init+0x8f/0x160 [ 94.436706][ T6005] do_one_initcall+0x1fb/0x820 [ 94.436714][ T6005] do_initcall_level+0x104/0x190 [ 94.436721][ T6005] do_initcalls+0x59/0xa0 [ 94.436728][ T6005] kernel_init_freeable+0x334/0x4b0 [ 94.436736][ T6005] kernel_init+0x1d/0x1d0 [ 94.436746][ T6005] ret_from_fork+0x599/0xb30 [ 94.436755][ T6005] ret_from_fork_asm+0x1a/0x30 [ 94.436764][ T6005] [ 94.436764][ T6005] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 94.436775][ T6005] _raw_spin_lock_irqsave+0xa7/0xf0 [ 94.436782][ T6005] __pm_runtime_resume+0x10f/0x180 [ 94.436789][ T6005] __uart_start+0x171/0x460 [ 94.436797][ T6005] uart_write+0xdc/0x130 [ 94.436805][ T6005] n_tty_write+0xd78/0x12a0 [ 94.436816][ T6005] file_tty_write+0x559/0xa20 [ 94.436824][ T6005] vfs_write+0x5c9/0xb30 [ 94.436835][ T6005] ksys_write+0x145/0x250 [ 94.436845][ T6005] do_syscall_64+0xfa/0xf80 [ 94.436854][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.436862][ T6005] [ 94.436862][ T6005] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 94.436873][ T6005] _raw_spin_lock_irqsave+0xa7/0xf0 [ 94.436880][ T6005] serial8250_console_write+0x17e/0x1ba0 [ 94.436890][ T6005] console_flush_all+0x745/0xb60 [ 94.436898][ T6005] console_unlock+0xbb/0x190 [ 94.436906][ T6005] vprintk_emit+0x4f8/0x5f0 [ 94.436913][ T6005] _printk+0xcf/0x120 [ 94.436925][ T6005] register_console+0xa8b/0xf90 [ 94.436934][ T6005] univ8250_console_init+0x3a/0x70 [ 94.436944][ T6005] console_init+0xfc/0x3f0 [ 94.436953][ T6005] start_kernel+0x252/0x400 [ 94.436960][ T6005] x86_64_start_reservations+0x24/0x30 [ 94.436969][ T6005] x86_64_start_kernel+0x143/0x1c0 [ 94.436979][ T6005] common_startup_64+0x13e/0x147 [ 94.436986][ T6005] [ 94.436986][ T6005] -> #0 (console_owner){....}-{0:0}: [ 94.436997][ T6005] __lock_acquire+0x15a6/0x2cf0 [ 94.437008][ T6005] lock_acquire+0x117/0x340 [ 94.437019][ T6005] console_flush_all+0x6ee/0xb60 [ 94.437027][ T6005] console_unlock+0xbb/0x190 [ 94.437035][ T6005] vprintk_emit+0x4f8/0x5f0 [ 94.437042][ T6005] _printk+0xcf/0x120 [ 94.437053][ T6005] __report_bug+0x305/0x500 [ 94.437060][ T6005] report_bug+0x16a/0x220 [ 94.437067][ T6005] handle_bug+0x98/0x200 [ 94.437076][ T6005] exc_invalid_op+0x1a/0x50 [ 94.437086][ T6005] asm_exc_invalid_op+0x1a/0x20 [ 94.437093][ T6005] sched_change_end+0x4f6/0x640 [ 94.437101][ T6005] rt_mutex_setprio+0x488/0xb70 [ 94.437111][ T6005] remove_waiter+0x7f5/0xaf0 [ 94.437122][ T6005] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 94.437133][ T6005] futex_wait_requeue_pi+0x481/0x850 [ 94.437141][ T6005] do_futex+0x181/0x420 [ 94.437153][ T6005] __se_sys_futex+0x36f/0x400 [ 94.437164][ T6005] do_syscall_64+0xfa/0xf80 [ 94.437172][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.437180][ T6005] [ 94.437180][ T6005] other info that might help us debug this: [ 94.437180][ T6005] [ 94.437183][ T6005] Chain exists of: [ 94.437183][ T6005] console_owner --> &p->pi_lock --> &rq->__lock [ 94.437183][ T6005] [ 94.437196][ T6005] Possible unsafe locking scenario: [ 94.437196][ T6005] [ 94.437198][ T6005] CPU0 CPU1 [ 94.437201][ T6005] ---- ---- [ 94.437204][ T6005] lock(&rq->__lock); [ 94.437209][ T6005] lock(&p->pi_lock); [ 94.437215][ T6005] lock(&rq->__lock); [ 94.437221][ T6005] lock(console_owner); [ 94.437226][ T6005] [ 94.437226][ T6005] *** DEADLOCK *** [ 94.437226][ T6005] [ 94.437228][ T6005] 5 locks held by syz.0.17/6005: [ 94.437233][ T6005] #0: ffff888076f40128 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 94.437257][ T6005] #1: ffff8880263f65e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 94.437279][ T6005] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 94.437301][ T6005] #3: ffffffff8e3331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 94.437324][ T6005] #4: ffffffff8e21aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 94.437344][ T6005] [ 94.437344][ T6005] stack backtrace: [ 94.437356][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 94.437366][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.437377][ T6005] Call Trace: [ 94.437381][ T6005] [ 94.437384][ T6005] dump_stack_lvl+0x189/0x250 [ 94.437394][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.437402][ T6005] ? __pfx__printk+0x10/0x10 [ 94.437419][ T6005] ? print_lock_name+0xde/0x100 [ 94.437432][ T6005] print_circular_bug+0x2e2/0x300 [ 94.437441][ T6005] check_noncircular+0x12e/0x150 [ 94.437451][ T6005] __lock_acquire+0x15a6/0x2cf0 [ 94.437467][ T6005] ? console_flush_all+0x131/0xb60 [ 94.437477][ T6005] lock_acquire+0x117/0x340 [ 94.437488][ T6005] ? console_flush_all+0x131/0xb60 [ 94.437499][ T6005] ? do_raw_spin_unlock+0x122/0x240 [ 94.437509][ T6005] ? console_flush_all+0x131/0xb60 [ 94.437518][ T6005] console_flush_all+0x6ee/0xb60 [ 94.437527][ T6005] ? console_flush_all+0x131/0xb60 [ 94.437537][ T6005] ? console_flush_all+0x131/0xb60 [ 94.437547][ T6005] ? __pfx_console_flush_all+0x10/0x10 [ 94.437557][ T6005] ? is_bpf_text_address+0x26/0x2b0 [ 94.437571][ T6005] ? is_printk_cpu_sync_owner+0x32/0x40 [ 94.437582][ T6005] console_unlock+0xbb/0x190 [ 94.437590][ T6005] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 94.437600][ T6005] ? __pfx_console_unlock+0x10/0x10 [ 94.437610][ T6005] vprintk_emit+0x4f8/0x5f0 [ 94.437619][ T6005] ? __pfx_vprintk_emit+0x10/0x10 [ 94.437627][ T6005] ? __bfs+0x154/0x290 [ 94.437639][ T6005] ? __pfx_hlock_conflict+0x10/0x10 [ 94.437648][ T6005] ? check_noncircular+0xda/0x150 [ 94.437657][ T6005] _printk+0xcf/0x120 [ 94.437669][ T6005] ? __lock_acquire+0x146f/0x2cf0 [ 94.437682][ T6005] ? __pfx__printk+0x10/0x10 [ 94.437695][ T6005] ? find_bug+0xa5/0x370 [ 94.437702][ T6005] ? sched_change_end+0x4f6/0x640 [ 94.437710][ T6005] ? sched_change_end+0x4f6/0x640 [ 94.437718][ T6005] __report_bug+0x305/0x500 [ 94.437726][ T6005] ? sched_change_end+0x4f6/0x640 [ 94.437736][ T6005] ? __pfx___report_bug+0x10/0x10 [ 94.437744][ T6005] ? rcu_read_lock_sched_held+0x89/0x100 [ 94.437753][ T6005] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 94.437764][ T6005] ? sched_change_end+0x4f6/0x640 [ 94.437772][ T6005] report_bug+0x16a/0x220 [ 94.437780][ T6005] ? sched_change_end+0x4f6/0x640 [ 94.437788][ T6005] ? sched_change_end+0x4f8/0x640 [ 94.437796][ T6005] handle_bug+0x98/0x200 [ 94.437806][ T6005] exc_invalid_op+0x1a/0x50 [ 94.437816][ T6005] asm_exc_invalid_op+0x1a/0x20 [ 94.437824][ T6005] RIP: 0010:sched_change_end+0x4f6/0x640 [ 94.437834][ T6005] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 94.437842][ T6005] RSP: 0018:ffffc90002fa7850 EFLAGS: 00010046 [ 94.437849][ T6005] RAX: 1ffff11004c7eb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f [ 94.437856][ T6005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880263f5b80 [ 94.437862][ T6005] RBP: ffff8880263f5e28 R08: ffff8880263f5b87 R09: 1ffff11004c7eb70 [ 94.437868][ T6005] R10: dffffc0000000000 R11: ffffed1004c7eb71 R12: dffffc0000000000 [ 94.437874][ T6005] R13: ffff8880263f5b80 R14: ffff8880b873ab00 R15: ffff8880263f5b80 [ 94.437882][ T6005] ? sched_change_end+0x4af/0x640 [ 94.437893][ T6005] rt_mutex_setprio+0x488/0xb70 [ 94.437907][ T6005] remove_waiter+0x7f5/0xaf0 [ 94.437919][ T6005] ? lockdep_hardirqs_on+0x98/0x140 [ 94.437929][ T6005] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 94.437942][ T6005] futex_wait_requeue_pi+0x481/0x850 [ 94.437952][ T6005] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 94.437963][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.437976][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.437989][ T6005] do_futex+0x181/0x420 [ 94.438002][ T6005] ? __pfx_do_futex+0x10/0x10 [ 94.438016][ T6005] __se_sys_futex+0x36f/0x400 [ 94.438030][ T6005] ? __pfx___se_sys_futex+0x10/0x10 [ 94.438043][ T6005] ? __x64_sys_futex+0x21/0xf0 [ 94.438056][ T6005] do_syscall_64+0xfa/0xf80 [ 94.438065][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.438074][ T6005] ? clear_bhb_loop+0x60/0xb0 [ 94.438083][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.438091][ T6005] RIP: 0033:0x7f5e4fb8f749 [ 94.438102][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.438109][ T6005] RSP: 002b:00007f5e5095a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.438118][ T6005] RAX: ffffffffffffffda RBX: 00007f5e4fde5fa0 RCX: 00007f5e4fb8f749 [ 94.438124][ T6005] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 94.438129][ T6005] RBP: 00007f5e4fc13f91 R08: 0000200000048000 R09: 0000000000000300 [ 94.438135][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.438140][ T6005] R13: 00007f5e4fde6038 R14: 00007f5e4fde5fa0 R15: 00007ffcea26c5a8 [ 94.438149][ T6005] [ 95.681654][ T6005] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#1: syz.0.17/6005 [ 95.691612][ T6005] Modules linked in: [ 95.695513][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 95.704951][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.714980][ T6005] RIP: 0010:sched_change_end+0x4f6/0x640 [ 95.720592][ T6005] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 95.740170][ T6005] RSP: 0018:ffffc90002fa7850 EFLAGS: 00010046 [ 95.746211][ T6005] RAX: 1ffff11004c7eb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f [ 95.754170][ T6005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880263f5b80 [ 95.762325][ T6005] RBP: ffff8880263f5e28 R08: ffff8880263f5b87 R09: 1ffff11004c7eb70 [ 95.770309][ T6005] R10: dffffc0000000000 R11: ffffed1004c7eb71 R12: dffffc0000000000 [ 95.778267][ T6005] R13: ffff8880263f5b80 R14: ffff8880b873ab00 R15: ffff8880263f5b80 [ 95.786223][ T6005] FS: 00007f5e5095a6c0(0000) GS:ffff888125adc000(0000) knlGS:0000000000000000 [ 95.795128][ T6005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.801684][ T6005] CR2: 00007f5e4f1fdf98 CR3: 0000000076ca0000 CR4: 00000000003526f0 [ 95.809639][ T6005] Call Trace: [ 95.812899][ T6005] [ 95.815811][ T6005] rt_mutex_setprio+0x488/0xb70 [ 95.820643][ T6005] remove_waiter+0x7f5/0xaf0 [ 95.825312][ T6005] ? lockdep_hardirqs_on+0x98/0x140 [ 95.830497][ T6005] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 95.836217][ T6005] futex_wait_requeue_pi+0x481/0x850 [ 95.841915][ T6005] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 95.847695][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.852956][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.858221][ T6005] do_futex+0x181/0x420 [ 95.862376][ T6005] ? __pfx_do_futex+0x10/0x10 [ 95.867048][ T6005] __se_sys_futex+0x36f/0x400 [ 95.871705][ T6005] ? __pfx___se_sys_futex+0x10/0x10 [ 95.876881][ T6005] ? __x64_sys_futex+0x21/0xf0 [ 95.881620][ T6005] do_syscall_64+0xfa/0xf80 [ 95.886098][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.892136][ T6005] ? clear_bhb_loop+0x60/0xb0 [ 95.896787][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.902651][ T6005] RIP: 0033:0x7f5e4fb8f749 [ 95.907044][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.926636][ T6005] RSP: 002b:00007f5e5095a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.935034][ T6005] RAX: ffffffffffffffda RBX: 00007f5e4fde5fa0 RCX: 00007f5e4fb8f749 [ 95.942984][ T6005] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 95.950946][ T6005] RBP: 00007f5e4fc13f91 R08: 0000200000048000 R09: 0000000000000300 [ 95.958895][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.966891][ T6005] R13: 00007f5e4fde6038 R14: 00007f5e4fde5fa0 R15: 00007ffcea26c5a8 [ 95.974859][ T6005] [ 95.977868][ T6005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.985144][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 95.994333][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.004383][ T6005] Call Trace: [ 96.007645][ T6005] [ 96.010560][ T6005] dump_stack_lvl+0x99/0x250 [ 96.015132][ T6005] ? __asan_memcpy+0x40/0x70 [ 96.019702][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.024874][ T6005] ? __pfx__printk+0x10/0x10 [ 96.029442][ T6005] vpanic+0x237/0x6d0 [ 96.033402][ T6005] ? __pfx_vpanic+0x10/0x10 [ 96.038833][ T6005] ? is_bpf_text_address+0x292/0x2b0 [ 96.044634][ T6005] ? is_bpf_text_address+0x26/0x2b0 [ 96.049820][ T6005] panic+0xb9/0xc0 [ 96.053613][ T6005] ? __pfx_panic+0x10/0x10 [ 96.058025][ T6005] __warn+0x317/0x4b0 [ 96.062070][ T6005] ? sched_change_end+0x4f6/0x640 [ 96.067158][ T6005] ? sched_change_end+0x4f6/0x640 [ 96.072157][ T6005] __report_bug+0x288/0x500 [ 96.076634][ T6005] ? sched_change_end+0x4f6/0x640 [ 96.081633][ T6005] ? __pfx___report_bug+0x10/0x10 [ 96.086630][ T6005] ? rcu_read_lock_sched_held+0x89/0x100 [ 96.092240][ T6005] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 96.098315][ T6005] ? sched_change_end+0x4f6/0x640 [ 96.103337][ T6005] report_bug+0x16a/0x220 [ 96.107655][ T6005] ? sched_change_end+0x4f6/0x640 [ 96.112663][ T6005] ? sched_change_end+0x4f8/0x640 [ 96.117668][ T6005] handle_bug+0x98/0x200 [ 96.121895][ T6005] exc_invalid_op+0x1a/0x50 [ 96.126373][ T6005] asm_exc_invalid_op+0x1a/0x20 [ 96.131196][ T6005] RIP: 0010:sched_change_end+0x4f6/0x640 [ 96.136800][ T6005] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 96.156464][ T6005] RSP: 0018:ffffc90002fa7850 EFLAGS: 00010046 [ 96.162522][ T6005] RAX: 1ffff11004c7eb70 RBX: ffffffff8dcbdf90 RCX: ffffffff8193220f [ 96.170470][ T6005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880263f5b80 [ 96.178418][ T6005] RBP: ffff8880263f5e28 R08: ffff8880263f5b87 R09: 1ffff11004c7eb70 [ 96.186537][ T6005] R10: dffffc0000000000 R11: ffffed1004c7eb71 R12: dffffc0000000000 [ 96.194485][ T6005] R13: ffff8880263f5b80 R14: ffff8880b873ab00 R15: ffff8880263f5b80 [ 96.203587][ T6005] ? sched_change_end+0x4af/0x640 [ 96.208605][ T6005] rt_mutex_setprio+0x488/0xb70 [ 96.213440][ T6005] remove_waiter+0x7f5/0xaf0 [ 96.218011][ T6005] ? lockdep_hardirqs_on+0x98/0x140 [ 96.223205][ T6005] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 96.228908][ T6005] futex_wait_requeue_pi+0x481/0x850 [ 96.234170][ T6005] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 96.239951][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.245242][ T6005] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.250599][ T6005] do_futex+0x181/0x420 [ 96.254737][ T6005] ? __pfx_do_futex+0x10/0x10 [ 96.259408][ T6005] __se_sys_futex+0x36f/0x400 [ 96.264065][ T6005] ? __pfx___se_sys_futex+0x10/0x10 [ 96.269266][ T6005] ? __x64_sys_futex+0x21/0xf0 [ 96.274012][ T6005] do_syscall_64+0xfa/0xf80 [ 96.278492][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.284552][ T6005] ? clear_bhb_loop+0x60/0xb0 [ 96.289303][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.295171][ T6005] RIP: 0033:0x7f5e4fb8f749 [ 96.299736][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.319401][ T6005] RSP: 002b:00007f5e5095a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.327814][ T6005] RAX: ffffffffffffffda RBX: 00007f5e4fde5fa0 RCX: 00007f5e4fb8f749 [ 96.335760][ T6005] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 96.343725][ T6005] RBP: 00007f5e4fc13f91 R08: 0000200000048000 R09: 0000000000000300 [ 96.351772][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.359735][ T6005] R13: 00007f5e4fde6038 R14: 00007f5e4fde5fa0 R15: 00007ffcea26c5a8 [ 96.367709][ T6005] [ 97.466364][ T6005] Shutting down cpus with NMI [ 97.471457][ T6005] Kernel Offset: disabled [ 97.475770][ T6005] Rebooting in 86400 seconds..