Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. 2025/12/30 21:48:38 parsed 1 programs [ 72.399513][ T5830] cgroup: Unknown subsys name 'net' [ 72.547473][ T5830] cgroup: Unknown subsys name 'cpuset' [ 72.555669][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.929924][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.556082][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.135828][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 78.221693][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.229347][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.236580][ T5875] bridge_slave_0: entered allmulticast mode [ 78.244035][ T5875] bridge_slave_0: entered promiscuous mode [ 78.255002][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.262134][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.269346][ T5875] bridge_slave_1: entered allmulticast mode [ 78.277108][ T5875] bridge_slave_1: entered promiscuous mode [ 78.335890][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.348768][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.386254][ T5875] team0: Port device team_slave_0 added [ 78.393673][ T5875] team0: Port device team_slave_1 added [ 78.417904][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.426980][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.453423][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.470186][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.477195][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.503172][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.543408][ T5875] hsr_slave_0: entered promiscuous mode [ 78.551303][ T5875] hsr_slave_1: entered promiscuous mode [ 78.705468][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.717512][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.727932][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.738352][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.768494][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.775665][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.783237][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.790427][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.842383][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.861246][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.870514][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.884007][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.899613][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.906795][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.920613][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.927722][ T3943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.096109][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.135788][ T5875] veth0_vlan: entered promiscuous mode [ 79.147840][ T5875] veth1_vlan: entered promiscuous mode [ 79.174149][ T5875] veth0_macvtap: entered promiscuous mode [ 79.184374][ T5875] veth1_macvtap: entered promiscuous mode [ 79.202598][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.217126][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.236607][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.246331][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.257038][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.266472][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.409796][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.413098][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.430785][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.439105][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.447138][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.455130][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.511647][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.596122][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.684305][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.677658][ T3943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.686419][ T3943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.714792][ T3943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.722743][ T3943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/30 21:48:49 executed programs: 0 [ 81.244259][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.252741][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.261920][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.270181][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.277794][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.419689][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 81.485962][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.493113][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.500298][ T5941] bridge_slave_0: entered allmulticast mode [ 81.507510][ T5941] bridge_slave_0: entered promiscuous mode [ 81.517415][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.525436][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.532560][ T5941] bridge_slave_1: entered allmulticast mode [ 81.539772][ T5941] bridge_slave_1: entered promiscuous mode [ 81.591046][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.604239][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.656394][ T5941] team0: Port device team_slave_0 added [ 81.666589][ T5941] team0: Port device team_slave_1 added [ 81.710443][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.718479][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.745748][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.759338][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.767073][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.795364][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.859080][ T5941] hsr_slave_0: entered promiscuous mode [ 81.865729][ T5941] hsr_slave_1: entered promiscuous mode [ 81.871767][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 81.877617][ T5941] Cannot create hsr debugfs directory [ 82.223798][ T146] bridge_slave_1: left allmulticast mode [ 82.231048][ T146] bridge_slave_1: left promiscuous mode [ 82.238339][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.251075][ T146] bridge_slave_0: left allmulticast mode [ 82.259916][ T146] bridge_slave_0: left promiscuous mode [ 82.266054][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.595570][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.609288][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.619860][ T146] bond0 (unregistering): Released all slaves [ 82.728026][ T146] hsr_slave_0: left promiscuous mode [ 82.734196][ T146] hsr_slave_1: left promiscuous mode [ 82.740875][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.748725][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.757908][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.765411][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.786845][ T146] veth1_macvtap: left promiscuous mode [ 82.792510][ T146] veth0_macvtap: left promiscuous mode [ 82.798530][ T146] veth1_vlan: left promiscuous mode [ 82.803949][ T146] veth0_vlan: left promiscuous mode [ 83.254795][ T146] team0 (unregistering): Port device team_slave_1 removed [ 83.282316][ T146] team0 (unregistering): Port device team_slave_0 removed [ 83.305834][ T5147] Bluetooth: hci0: command tx timeout [ 83.786961][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.798817][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.811530][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.824153][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.293953][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.321340][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.344188][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.351419][ T3943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.373556][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.380762][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.823619][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.867275][ T5941] veth0_vlan: entered promiscuous mode [ 84.881153][ T5941] veth1_vlan: entered promiscuous mode [ 84.913756][ T5941] veth0_macvtap: entered promiscuous mode [ 84.931845][ T5941] veth1_macvtap: entered promiscuous mode [ 84.955244][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.967238][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.985569][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007103][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.016896][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.039040][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105018][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.113235][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.138211][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.146733][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.385446][ T5147] Bluetooth: hci0: command tx timeout [ 86.675466][ T48] cfg80211: failed to load regulatory.db [ 87.464663][ T5147] Bluetooth: hci0: command tx timeout [ 88.189850][ T6015] ------------[ cut here ]------------ [ 88.190336][ T6015] [ 88.190341][ T6015] ====================================================== [ 88.190353][ T6015] WARNING: possible circular locking dependency detected [ 88.190362][ T6015] syzkaller #0 Not tainted [ 88.190366][ T6015] ------------------------------------------------------ [ 88.190370][ T6015] syz.0.17/6015 is trying to acquire lock: [ 88.190375][ T6015] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 88.190405][ T6015] [ 88.190405][ T6015] but task is already holding lock: [ 88.190408][ T6015] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 88.190427][ T6015] [ 88.190427][ T6015] which lock already depends on the new lock. [ 88.190427][ T6015] [ 88.190431][ T6015] [ 88.190431][ T6015] the existing dependency chain (in reverse order) is: [ 88.190434][ T6015] [ 88.190434][ T6015] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 88.190445][ T6015] _raw_spin_lock_nested+0x32/0x50 [ 88.190457][ T6015] raw_spin_rq_lock_nested+0x2a/0x140 [ 88.190465][ T6015] task_rq_lock+0xbc/0x470 [ 88.190472][ T6015] cgroup_move_task+0x92/0x2a0 [ 88.190482][ T6015] css_set_move_task+0x658/0x9e0 [ 88.190491][ T6015] cgroup_post_fork+0x1ef/0x7a0 [ 88.190499][ T6015] copy_process+0x3614/0x3950 [ 88.190508][ T6015] kernel_clone+0x21e/0x820 [ 88.190516][ T6015] user_mode_thread+0xdd/0x140 [ 88.190525][ T6015] rest_init+0x23/0x300 [ 88.190533][ T6015] start_kernel+0x3ac/0x400 [ 88.190541][ T6015] x86_64_start_reservations+0x24/0x30 [ 88.190553][ T6015] x86_64_start_kernel+0x143/0x1c0 [ 88.190564][ T6015] common_startup_64+0x13e/0x147 [ 88.190575][ T6015] [ 88.190575][ T6015] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 88.190586][ T6015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 88.190595][ T6015] try_to_wake_up+0x67/0x12b0 [ 88.190605][ T6015] __wake_up_common_lock+0x137/0x1f0 [ 88.190617][ T6015] tty_port_default_wakeup+0xfb/0x170 [ 88.190628][ T6015] serial8250_tx_chars+0x72e/0x970 [ 88.190637][ T6015] serial8250_handle_irq+0x633/0xbb0 [ 88.190645][ T6015] serial8250_default_handle_irq+0xbf/0x200 [ 88.190655][ T6015] serial8250_interrupt+0x8d/0x180 [ 88.190668][ T6015] __handle_irq_event_percpu+0x285/0xa60 [ 88.190680][ T6015] handle_irq_event+0x8b/0x1e0 [ 88.190691][ T6015] handle_edge_irq+0x23b/0xa10 [ 88.190701][ T6015] __common_interrupt+0x141/0x1f0 [ 88.190713][ T6015] common_interrupt+0xb6/0xe0 [ 88.190721][ T6015] asm_common_interrupt+0x26/0x40 [ 88.190729][ T6015] folio_try_get+0xf2/0x340 [ 88.190736][ T6015] next_uptodate_folio+0xcb/0x5d0 [ 88.190745][ T6015] filemap_map_pages+0x150a/0x1fa0 [ 88.190753][ T6015] do_pte_missing+0x20b2/0x3330 [ 88.190762][ T6015] handle_mm_fault+0x1b26/0x32b0 [ 88.190774][ T6015] do_user_addr_fault+0xa7c/0x1380 [ 88.190782][ T6015] exc_page_fault+0x82/0x100 [ 88.190792][ T6015] asm_exc_page_fault+0x26/0x30 [ 88.190799][ T6015] [ 88.190799][ T6015] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 88.190811][ T6015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 88.190822][ T6015] __wake_up_common_lock+0x2f/0x1f0 [ 88.190838][ T6015] tty_port_default_wakeup+0xfb/0x170 [ 88.190852][ T6015] serial8250_tx_chars+0x72e/0x970 [ 88.190863][ T6015] serial8250_handle_irq+0x633/0xbb0 [ 88.190874][ T6015] serial8250_default_handle_irq+0xbf/0x200 [ 88.190887][ T6015] serial8250_interrupt+0x8d/0x180 [ 88.190902][ T6015] __handle_irq_event_percpu+0x285/0xa60 [ 88.190917][ T6015] handle_irq_event+0x8b/0x1e0 [ 88.190932][ T6015] handle_edge_irq+0x23b/0xa10 [ 88.190945][ T6015] __common_interrupt+0x141/0x1f0 [ 88.190959][ T6015] common_interrupt+0xb6/0xe0 [ 88.190969][ T6015] asm_common_interrupt+0x26/0x40 [ 88.190979][ T6015] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 88.190992][ T6015] uart_port_unlock_deref+0x111/0x2f0 [ 88.191004][ T6015] uart_write+0xe8/0x130 [ 88.191014][ T6015] n_tty_write+0xd78/0x12a0 [ 88.191028][ T6015] file_tty_write+0x559/0xa20 [ 88.191038][ T6015] vfs_write+0x5c9/0xb30 [ 88.191048][ T6015] ksys_write+0x145/0x250 [ 88.191058][ T6015] do_syscall_64+0xfa/0xf80 [ 88.191073][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.191083][ T6015] [ 88.191083][ T6015] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 88.191099][ T6015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 88.191113][ T6015] serial8250_console_write+0x17e/0x1ba0 [ 88.191126][ T6015] console_flush_all+0x745/0xb60 [ 88.191140][ T6015] console_unlock+0xbb/0x190 [ 88.191152][ T6015] vprintk_emit+0x4f8/0x5f0 [ 88.191165][ T6015] _printk+0xcf/0x120 [ 88.191179][ T6015] register_console+0xa8b/0xf90 [ 88.191194][ T6015] univ8250_console_init+0x3a/0x70 [ 88.191210][ T6015] console_init+0xfc/0x3f0 [ 88.191224][ T6015] start_kernel+0x252/0x400 [ 88.191234][ T6015] x86_64_start_reservations+0x24/0x30 [ 88.191249][ T6015] x86_64_start_kernel+0x143/0x1c0 [ 88.191263][ T6015] common_startup_64+0x13e/0x147 [ 88.191276][ T6015] [ 88.191276][ T6015] -> #0 (console_owner){....}-{0:0}: [ 88.191291][ T6015] __lock_acquire+0x15a6/0x2cf0 [ 88.191302][ T6015] lock_acquire+0x117/0x340 [ 88.191312][ T6015] console_flush_all+0x6ee/0xb60 [ 88.191326][ T6015] console_unlock+0xbb/0x190 [ 88.191338][ T6015] vprintk_emit+0x4f8/0x5f0 [ 88.191356][ T6015] _printk+0xcf/0x120 [ 88.191370][ T6015] __report_bug+0x305/0x500 [ 88.191383][ T6015] report_bug+0x16a/0x220 [ 88.191396][ T6015] handle_bug+0x98/0x200 [ 88.191404][ T6015] exc_invalid_op+0x1a/0x50 [ 88.191413][ T6015] asm_exc_invalid_op+0x1a/0x20 [ 88.191423][ T6015] sched_change_end+0x4f6/0x640 [ 88.191436][ T6015] rt_mutex_setprio+0x488/0xb70 [ 88.191446][ T6015] remove_waiter+0x7f5/0xaf0 [ 88.191456][ T6015] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 88.191468][ T6015] futex_lock_pi+0x530/0xa90 [ 88.191481][ T6015] do_futex+0x292/0x420 [ 88.191492][ T6015] __se_sys_futex+0x36f/0x400 [ 88.191503][ T6015] do_syscall_64+0xfa/0xf80 [ 88.191516][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.191527][ T6015] [ 88.191527][ T6015] other info that might help us debug this: [ 88.191527][ T6015] [ 88.191531][ T6015] Chain exists of: [ 88.191531][ T6015] console_owner --> &p->pi_lock --> &rq->__lock [ 88.191531][ T6015] [ 88.191549][ T6015] Possible unsafe locking scenario: [ 88.191549][ T6015] [ 88.191553][ T6015] CPU0 CPU1 [ 88.191557][ T6015] ---- ---- [ 88.191561][ T6015] lock(&rq->__lock); [ 88.191568][ T6015] lock(&p->pi_lock); [ 88.191577][ T6015] lock(&rq->__lock); [ 88.191587][ T6015] lock(console_owner); [ 88.191592][ T6015] [ 88.191592][ T6015] *** DEADLOCK *** [ 88.191592][ T6015] [ 88.191595][ T6015] 5 locks held by syz.0.17/6015: [ 88.191600][ T6015] #0: ffff888072604428 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 88.191621][ T6015] #1: ffff888032998a68 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 88.191640][ T6015] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 88.191659][ T6015] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 88.191682][ T6015] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 88.191704][ T6015] [ 88.191704][ T6015] stack backtrace: [ 88.191718][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 88.191728][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.191739][ T6015] Call Trace: [ 88.191743][ T6015] [ 88.191747][ T6015] dump_stack_lvl+0x189/0x250 [ 88.191760][ T6015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.191773][ T6015] ? __pfx__printk+0x10/0x10 [ 88.191786][ T6015] ? print_lock_name+0xde/0x100 [ 88.191799][ T6015] print_circular_bug+0x2e2/0x300 [ 88.191810][ T6015] check_noncircular+0x12e/0x150 [ 88.191822][ T6015] __lock_acquire+0x15a6/0x2cf0 [ 88.191835][ T6015] ? console_flush_all+0x131/0xb60 [ 88.191847][ T6015] lock_acquire+0x117/0x340 [ 88.191855][ T6015] ? console_flush_all+0x131/0xb60 [ 88.191868][ T6015] ? do_raw_spin_unlock+0x122/0x240 [ 88.191880][ T6015] ? console_flush_all+0x131/0xb60 [ 88.191891][ T6015] console_flush_all+0x6ee/0xb60 [ 88.191902][ T6015] ? console_flush_all+0x131/0xb60 [ 88.191914][ T6015] ? console_flush_all+0x131/0xb60 [ 88.191927][ T6015] ? __pfx_console_flush_all+0x10/0x10 [ 88.191941][ T6015] ? is_printk_cpu_sync_owner+0x32/0x40 [ 88.191954][ T6015] console_unlock+0xbb/0x190 [ 88.191964][ T6015] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 88.191976][ T6015] ? __pfx_console_unlock+0x10/0x10 [ 88.191988][ T6015] vprintk_emit+0x4f8/0x5f0 [ 88.191999][ T6015] ? __pfx_vprintk_emit+0x10/0x10 [ 88.192010][ T6015] ? __lock_acquire+0x6b6/0x2cf0 [ 88.192019][ T6015] ? __lock_acquire+0x6b6/0x2cf0 [ 88.192029][ T6015] _printk+0xcf/0x120 [ 88.192042][ T6015] ? __pfx__printk+0x10/0x10 [ 88.192054][ T6015] ? find_bug+0xa5/0x370 [ 88.192064][ T6015] ? sched_change_end+0x4f6/0x640 [ 88.192075][ T6015] ? sched_change_end+0x4f6/0x640 [ 88.192085][ T6015] __report_bug+0x305/0x500 [ 88.192095][ T6015] ? sched_change_end+0x4f6/0x640 [ 88.192107][ T6015] ? __pfx___report_bug+0x10/0x10 [ 88.192117][ T6015] ? rcu_read_lock_sched_held+0x89/0x100 [ 88.192128][ T6015] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 88.192139][ T6015] ? trace_pelt_se_tp+0x39/0x120 [ 88.192152][ T6015] ? sched_change_end+0x4f6/0x640 [ 88.192162][ T6015] report_bug+0x16a/0x220 [ 88.192173][ T6015] ? sched_change_end+0x4f6/0x640 [ 88.192183][ T6015] ? sched_change_end+0x4f8/0x640 [ 88.192192][ T6015] handle_bug+0x98/0x200 [ 88.192200][ T6015] exc_invalid_op+0x1a/0x50 [ 88.192208][ T6015] asm_exc_invalid_op+0x1a/0x20 [ 88.192216][ T6015] RIP: 0010:sched_change_end+0x4f6/0x640 [ 88.192227][ T6015] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 88.192234][ T6015] RSP: 0018:ffffc90003667850 EFLAGS: 00010046 [ 88.192242][ T6015] RAX: 1ffff11006533000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 88.192249][ T6015] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888032998000 [ 88.192255][ T6015] RBP: ffff8880329982a8 R08: ffff888032998007 R09: 1ffff11006533000 [ 88.192261][ T6015] R10: dffffc0000000000 R11: ffffed1006533001 R12: dffffc0000000000 [ 88.192267][ T6015] R13: ffff888032998000 R14: ffff8880b873ab00 R15: ffff888032998000 [ 88.192275][ T6015] ? sched_change_end+0x4af/0x640 [ 88.192288][ T6015] rt_mutex_setprio+0x488/0xb70 [ 88.192298][ T6015] remove_waiter+0x7f5/0xaf0 [ 88.192308][ T6015] ? lockdep_hardirqs_on+0x98/0x140 [ 88.192320][ T6015] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 88.192330][ T6015] futex_lock_pi+0x530/0xa90 [ 88.192342][ T6015] ? __pfx_futex_lock_pi+0x10/0x10 [ 88.192360][ T6015] ? futex_hash+0x40/0x2d0 [ 88.192368][ T6015] ? futex_hash+0x2ad/0x2d0 [ 88.192376][ T6015] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.192388][ T6015] ? __pfx_futex_wake+0x10/0x10 [ 88.192401][ T6015] do_futex+0x292/0x420 [ 88.192411][ T6015] ? __pfx_do_futex+0x10/0x10 [ 88.192422][ T6015] __se_sys_futex+0x36f/0x400 [ 88.192433][ T6015] ? __pfx___se_sys_futex+0x10/0x10 [ 88.192443][ T6015] ? __x64_sys_futex+0x21/0xf0 [ 88.192453][ T6015] do_syscall_64+0xfa/0xf80 [ 88.192465][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.192473][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 88.192482][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.192490][ T6015] RIP: 0033:0x7f46c358f749 [ 88.192503][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.192510][ T6015] RSP: 002b:00007ffe5300e148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.192518][ T6015] RAX: ffffffffffffffda RBX: 00007f46c37e5fa0 RCX: 00007f46c358f749 [ 88.192524][ T6015] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 88.192530][ T6015] RBP: 00007f46c3613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 88.192535][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.192540][ T6015] R13: 00007f46c37e5fa0 R14: 00007f46c37e5fa0 R15: 0000000000000006 [ 88.192549][ T6015] [ 89.406544][ T6015] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6015 [ 89.416504][ T6015] Modules linked in: [ 89.420380][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 89.429458][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.439485][ T6015] RIP: 0010:sched_change_end+0x4f6/0x640 [ 89.445093][ T6015] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 89.464673][ T6015] RSP: 0018:ffffc90003667850 EFLAGS: 00010046 [ 89.470715][ T6015] RAX: 1ffff11006533000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 89.478666][ T6015] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888032998000 [ 89.486609][ T6015] RBP: ffff8880329982a8 R08: ffff888032998007 R09: 1ffff11006533000 [ 89.494554][ T6015] R10: dffffc0000000000 R11: ffffed1006533001 R12: dffffc0000000000 [ 89.502496][ T6015] R13: ffff888032998000 R14: ffff8880b873ab00 R15: ffff888032998000 [ 89.510439][ T6015] FS: 000055555639e500(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 89.519343][ T6015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.525898][ T6015] CR2: 0000001b30063fff CR3: 0000000032528000 CR4: 00000000003526f0 [ 89.533847][ T6015] Call Trace: [ 89.537103][ T6015] [ 89.540011][ T6015] rt_mutex_setprio+0x488/0xb70 [ 89.544841][ T6015] remove_waiter+0x7f5/0xaf0 [ 89.549407][ T6015] ? lockdep_hardirqs_on+0x98/0x140 [ 89.554581][ T6015] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 89.560274][ T6015] futex_lock_pi+0x530/0xa90 [ 89.564840][ T6015] ? __pfx_futex_lock_pi+0x10/0x10 [ 89.569929][ T6015] ? futex_hash+0x40/0x2d0 [ 89.574313][ T6015] ? futex_hash+0x2ad/0x2d0 [ 89.578801][ T6015] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.584101][ T6015] ? __pfx_futex_wake+0x10/0x10 [ 89.588945][ T6015] do_futex+0x292/0x420 [ 89.593086][ T6015] ? __pfx_do_futex+0x10/0x10 [ 89.597741][ T6015] __se_sys_futex+0x36f/0x400 [ 89.602395][ T6015] ? __pfx___se_sys_futex+0x10/0x10 [ 89.607568][ T6015] ? __x64_sys_futex+0x21/0xf0 [ 89.612310][ T6015] do_syscall_64+0xfa/0xf80 [ 89.616790][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.622828][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 89.627478][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.633355][ T6015] RIP: 0033:0x7f46c358f749 [ 89.637756][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.657341][ T6015] RSP: 002b:00007ffe5300e148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 89.665739][ T6015] RAX: ffffffffffffffda RBX: 00007f46c37e5fa0 RCX: 00007f46c358f749 [ 89.673688][ T6015] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 89.681633][ T6015] RBP: 00007f46c3613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 89.689576][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.697518][ T6015] R13: 00007f46c37e5fa0 R14: 00007f46c37e5fa0 R15: 0000000000000006 [ 89.705476][ T6015] [ 89.708472][ T6015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.715728][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 89.724806][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.734832][ T6015] Call Trace: [ 89.738089][ T6015] [ 89.740999][ T6015] dump_stack_lvl+0x99/0x250 [ 89.745564][ T6015] ? __asan_memcpy+0x40/0x70 [ 89.750128][ T6015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.755299][ T6015] ? __pfx__printk+0x10/0x10 [ 89.759868][ T6015] vpanic+0x237/0x6d0 [ 89.763832][ T6015] ? __pfx_vpanic+0x10/0x10 [ 89.768306][ T6015] ? is_bpf_text_address+0x292/0x2b0 [ 89.773562][ T6015] ? is_bpf_text_address+0x26/0x2b0 [ 89.778734][ T6015] panic+0xb9/0xc0 [ 89.782433][ T6015] ? __pfx_panic+0x10/0x10 [ 89.786826][ T6015] __warn+0x317/0x4b0 [ 89.790783][ T6015] ? sched_change_end+0x4f6/0x640 [ 89.795782][ T6015] ? sched_change_end+0x4f6/0x640 [ 89.800781][ T6015] __report_bug+0x288/0x500 [ 89.805261][ T6015] ? sched_change_end+0x4f6/0x640 [ 89.810258][ T6015] ? __pfx___report_bug+0x10/0x10 [ 89.815253][ T6015] ? rcu_read_lock_sched_held+0x89/0x100 [ 89.820860][ T6015] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 89.826903][ T6015] ? trace_pelt_se_tp+0x39/0x120 [ 89.831819][ T6015] ? sched_change_end+0x4f6/0x640 [ 89.836816][ T6015] report_bug+0x16a/0x220 [ 89.841129][ T6015] ? sched_change_end+0x4f6/0x640 [ 89.846128][ T6015] ? sched_change_end+0x4f8/0x640 [ 89.851126][ T6015] handle_bug+0x98/0x200 [ 89.855340][ T6015] exc_invalid_op+0x1a/0x50 [ 89.859812][ T6015] asm_exc_invalid_op+0x1a/0x20 [ 89.864635][ T6015] RIP: 0010:sched_change_end+0x4f6/0x640 [ 89.870243][ T6015] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 89.889824][ T6015] RSP: 0018:ffffc90003667850 EFLAGS: 00010046 [ 89.895867][ T6015] RAX: 1ffff11006533000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 89.903818][ T6015] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888032998000 [ 89.911761][ T6015] RBP: ffff8880329982a8 R08: ffff888032998007 R09: 1ffff11006533000 [ 89.919708][ T6015] R10: dffffc0000000000 R11: ffffed1006533001 R12: dffffc0000000000 [ 89.927655][ T6015] R13: ffff888032998000 R14: ffff8880b873ab00 R15: ffff888032998000 [ 89.935602][ T6015] ? sched_change_end+0x4af/0x640 [ 89.940604][ T6015] rt_mutex_setprio+0x488/0xb70 [ 89.945427][ T6015] remove_waiter+0x7f5/0xaf0 [ 89.950009][ T6015] ? lockdep_hardirqs_on+0x98/0x140 [ 89.955196][ T6015] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 89.960900][ T6015] futex_lock_pi+0x530/0xa90 [ 89.965475][ T6015] ? __pfx_futex_lock_pi+0x10/0x10 [ 89.970572][ T6015] ? futex_hash+0x40/0x2d0 [ 89.974963][ T6015] ? futex_hash+0x2ad/0x2d0 [ 89.979442][ T6015] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.984705][ T6015] ? __pfx_futex_wake+0x10/0x10 [ 89.989537][ T6015] do_futex+0x292/0x420 [ 89.993671][ T6015] ? __pfx_do_futex+0x10/0x10 [ 89.998335][ T6015] __se_sys_futex+0x36f/0x400 [ 90.003004][ T6015] ? __pfx___se_sys_futex+0x10/0x10 [ 90.008186][ T6015] ? __x64_sys_futex+0x21/0xf0 [ 90.012939][ T6015] do_syscall_64+0xfa/0xf80 [ 90.017432][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.023476][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 90.028131][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.033999][ T6015] RIP: 0033:0x7f46c358f749 [ 90.038391][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.057972][ T6015] RSP: 002b:00007ffe5300e148 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.066360][ T6015] RAX: ffffffffffffffda RBX: 00007f46c37e5fa0 RCX: 00007f46c358f749 [ 90.074308][ T6015] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 90.082254][ T6015] RBP: 00007f46c3613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 90.090201][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.098144][ T6015] R13: 00007f46c37e5fa0 R14: 00007f46c37e5fa0 R15: 0000000000000006 [ 90.106093][ T6015] [ 91.203597][ T6015] Shutting down cpus with NMI [ 91.208441][ T6015] Kernel Offset: disabled [ 91.212756][ T6015] Rebooting in 86400 seconds..