Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts.
2025/12/15 14:06:18 parsed 1 programs
[ 90.372908][ T5828] cgroup: Unknown subsys name 'net'
[ 90.529402][ T5828] cgroup: Unknown subsys name 'cpuset'
[ 90.538678][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.006918][ T24] cfg80211: failed to load regulatory.db
[ 92.369328][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.373254][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 95.874542][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.883207][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.891617][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.900838][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.909325][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.262666][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.271209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.305977][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.314609][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.883404][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 97.987156][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.994897][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.003021][ T5886] bridge_slave_0: entered allmulticast mode
[ 98.011542][ T5886] bridge_slave_0: entered promiscuous mode
[ 98.020724][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.028055][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.035176][ T5886] bridge_slave_1: entered allmulticast mode
[ 98.042738][ T5886] bridge_slave_1: entered promiscuous mode
[ 98.074462][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.088068][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.120360][ T5886] team0: Port device team_slave_0 added
[ 98.128944][ T5886] team0: Port device team_slave_1 added
[ 98.158013][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.165056][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.191253][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.204040][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.212062][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.238224][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.283633][ T5886] hsr_slave_0: entered promiscuous mode
[ 98.290494][ T5886] hsr_slave_1: entered promiscuous mode
[ 98.459042][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.471308][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.481950][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.492882][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.574896][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.600301][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.613661][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.621016][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.639625][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.646838][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.832537][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.877342][ T5886] veth0_vlan: entered promiscuous mode
[ 98.890396][ T5886] veth1_vlan: entered promiscuous mode
[ 98.923458][ T5886] veth0_macvtap: entered promiscuous mode
[ 98.933206][ T5886] veth1_macvtap: entered promiscuous mode
[ 98.954571][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.971538][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.990062][ T3421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.999653][ T3421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.011169][ T3421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.021016][ T3421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.190068][ T3421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.261913][ T3421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.351740][ T3421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.436703][ T3421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/12/15 14:06:30 executed programs: 0
[ 100.814846][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.823526][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.832962][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.841573][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.850631][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.018209][ T5937] chnl_net:caif_netlink_parms(): no params data found
[ 101.098915][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.106190][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.113425][ T5937] bridge_slave_0: entered allmulticast mode
[ 101.121052][ T5937] bridge_slave_0: entered promiscuous mode
[ 101.130202][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.138145][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.145675][ T5937] bridge_slave_1: entered allmulticast mode
[ 101.152867][ T5937] bridge_slave_1: entered promiscuous mode
[ 101.189975][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.202481][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.237717][ T5937] team0: Port device team_slave_0 added
[ 101.246775][ T5937] team0: Port device team_slave_1 added
[ 101.276995][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.283978][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.312649][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.326461][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.333432][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.359801][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.407890][ T5937] hsr_slave_0: entered promiscuous mode
[ 101.414357][ T5937] hsr_slave_1: entered promiscuous mode
[ 101.421056][ T5937] debugfs: 'hsr0' already exists in 'hsr'
[ 101.426952][ T5937] Cannot create hsr debugfs directory
[ 101.829864][ T3421] bridge_slave_1: left allmulticast mode
[ 101.839643][ T3421] bridge_slave_1: left promiscuous mode
[ 101.856603][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.888111][ T3421] bridge_slave_0: left allmulticast mode
[ 101.894244][ T3421] bridge_slave_0: left promiscuous mode
[ 101.916827][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.379872][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.393249][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.404374][ T3421] bond0 (unregistering): Released all slaves
[ 102.514323][ T3421] hsr_slave_0: left promiscuous mode
[ 102.521267][ T3421] hsr_slave_1: left promiscuous mode
[ 102.530053][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.539376][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.548771][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.556949][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.573322][ T3421] veth1_macvtap: left promiscuous mode
[ 102.579166][ T3421] veth0_macvtap: left promiscuous mode
[ 102.585058][ T3421] veth1_vlan: left promiscuous mode
[ 102.590589][ T3421] veth0_vlan: left promiscuous mode
[ 102.896479][ T5146] Bluetooth: hci0: command tx timeout
[ 102.909581][ T3421] team0 (unregistering): Port device team_slave_1 removed
[ 102.942546][ T3421] team0 (unregistering): Port device team_slave_0 removed
[ 103.580343][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.595884][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.610924][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.646061][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.080793][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.252746][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.282312][ T396] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.289713][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.316604][ T137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.323874][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.461611][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 104.760929][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.840096][ T5937] veth0_vlan: entered promiscuous mode
[ 104.858964][ T5937] veth1_vlan: entered promiscuous mode
[ 104.912683][ T5937] veth0_macvtap: entered promiscuous mode
[ 104.925326][ T5937] veth1_macvtap: entered promiscuous mode
[ 104.956573][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.968718][ T5146] Bluetooth: hci0: command tx timeout
[ 104.978312][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.000045][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.018136][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.039375][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.051197][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.139013][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.153178][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.188840][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.197618][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.046040][ T5146] Bluetooth: hci0: command tx timeout
[ 108.279643][ T6012] ------------[ cut here ]------------
[ 108.279892][ T6012]
[ 108.279897][ T6012] ======================================================
[ 108.279901][ T6012] WARNING: possible circular locking dependency detected
[ 108.279906][ T6012] syzkaller #0 Not tainted
[ 108.279912][ T6012] ------------------------------------------------------
[ 108.279915][ T6012] syz.0.17/6012 is trying to acquire lock:
[ 108.279921][ T6012] ffffffff8df35980 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 108.279960][ T6012]
[ 108.279960][ T6012] but task is already holding lock:
[ 108.279963][ T6012] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 108.279987][ T6012]
[ 108.279987][ T6012] which lock already depends on the new lock.
[ 108.279987][ T6012]
[ 108.279991][ T6012]
[ 108.279991][ T6012] the existing dependency chain (in reverse order) is:
[ 108.279994][ T6012]
[ 108.279994][ T6012] -> #5 (&rq->__lock){-.-.}-{2:2}:
[ 108.280013][ T6012] _raw_spin_lock_nested+0x32/0x50
[ 108.280031][ T6012] raw_spin_rq_lock_nested+0x2a/0x140
[ 108.280044][ T6012] task_rq_lock+0xbc/0x470
[ 108.280056][ T6012] cgroup_move_task+0x92/0x2a0
[ 108.280071][ T6012] css_set_move_task+0x658/0x9e0
[ 108.280085][ T6012] cgroup_post_fork+0x1ef/0x7a0
[ 108.280098][ T6012] copy_process+0x3614/0x3950
[ 108.280112][ T6012] kernel_clone+0x21e/0x820
[ 108.280126][ T6012] user_mode_thread+0xdd/0x140
[ 108.280141][ T6012] rest_init+0x23/0x300
[ 108.280159][ T6012] start_kernel+0x3a7/0x400
[ 108.280174][ T6012] x86_64_start_reservations+0x24/0x30
[ 108.280194][ T6012] x86_64_start_kernel+0x143/0x1c0
[ 108.280213][ T6012] common_startup_64+0x13e/0x147
[ 108.280228][ T6012]
[ 108.280228][ T6012] -> #4 (&p->pi_lock){-.-.}-{2:2}:
[ 108.280246][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0
[ 108.280258][ T6012] try_to_wake_up+0x67/0x12b0
[ 108.280283][ T6012] create_worker+0x503/0x720
[ 108.280301][ T6012] workqueue_init+0x3ea/0x690
[ 108.280313][ T6012] kernel_init_freeable+0x302/0x4b0
[ 108.280350][ T6012] kernel_init+0x1d/0x1d0
[ 108.280366][ T6012] ret_from_fork+0x599/0xb30
[ 108.280377][ T6012] ret_from_fork_asm+0x1a/0x30
[ 108.280394][ T6012]
[ 108.280394][ T6012] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 108.280411][ T6012] _raw_spin_lock+0x2e/0x40
[ 108.280422][ T6012] __queue_work+0x7eb/0xf90
[ 108.280435][ T6012] queue_work_on+0x181/0x270
[ 108.280447][ T6012] rpm_suspend+0xe44/0x1700
[ 108.280459][ T6012] __pm_runtime_idle+0x12f/0x1a0
[ 108.280470][ T6012] __device_attach+0x342/0x430
[ 108.280482][ T6012] device_initial_probe+0xa1/0xd0
[ 108.280494][ T6012] bus_probe_device+0x12a/0x220
[ 108.280511][ T6012] device_add+0x7b6/0xb80
[ 108.280521][ T6012] serial_base_port_add+0x18f/0x260
[ 108.280536][ T6012] serial_core_register_port+0x369/0x2800
[ 108.280554][ T6012] serial8250_register_8250_port+0x1658/0x1fd0
[ 108.280571][ T6012] serial_pnp_probe+0x527/0x7d0
[ 108.280588][ T6012] pnp_device_probe+0x30b/0x4c0
[ 108.280605][ T6012] really_probe+0x26d/0xad0
[ 108.280618][ T6012] __driver_probe_device+0x18c/0x320
[ 108.280630][ T6012] driver_probe_device+0x4f/0x240
[ 108.280643][ T6012] __driver_attach+0x349/0x650
[ 108.280655][ T6012] bus_for_each_dev+0x233/0x2b0
[ 108.280671][ T6012] bus_add_driver+0x345/0x670
[ 108.280687][ T6012] driver_register+0x23a/0x320
[ 108.280701][ T6012] serial8250_init+0x8f/0x160
[ 108.280713][ T6012] do_one_initcall+0x1fb/0x820
[ 108.280728][ T6012] do_initcall_level+0x104/0x190
[ 108.280742][ T6012] do_initcalls+0x59/0xa0
[ 108.280756][ T6012] kernel_init_freeable+0x334/0x4b0
[ 108.280771][ T6012] kernel_init+0x1d/0x1d0
[ 108.280788][ T6012] ret_from_fork+0x599/0xb30
[ 108.280798][ T6012] ret_from_fork_asm+0x1a/0x30
[ 108.280814][ T6012]
[ 108.280814][ T6012] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[ 108.280832][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0
[ 108.280844][ T6012] __pm_runtime_resume+0x10f/0x180
[ 108.280856][ T6012] __uart_start+0x171/0x460
[ 108.280873][ T6012] uart_write+0xdc/0x130
[ 108.280883][ T6012] n_tty_write+0xd78/0x12a0
[ 108.280897][ T6012] file_tty_write+0x559/0xa20
[ 108.280914][ T6012] vfs_write+0x5c9/0xb30
[ 108.280926][ T6012] ksys_write+0x145/0x250
[ 108.280937][ T6012] do_syscall_64+0xfa/0xf80
[ 108.280951][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.280963][ T6012]
[ 108.280963][ T6012] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 108.280981][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0
[ 108.280993][ T6012] serial8250_console_write+0x17e/0x1ba0
[ 108.281005][ T6012] console_flush_all+0x745/0xb60
[ 108.281021][ T6012] console_unlock+0xbb/0x190
[ 108.281036][ T6012] vprintk_emit+0x4f8/0x5f0
[ 108.281050][ T6012] _printk+0xcf/0x120
[ 108.281066][ T6012] register_console+0xa8b/0xf90
[ 108.281084][ T6012] univ8250_console_init+0x3a/0x70
[ 108.281095][ T6012] console_init+0xfc/0x3f0
[ 108.281113][ T6012] start_kernel+0x24d/0x400
[ 108.281126][ T6012] x86_64_start_reservations+0x24/0x30
[ 108.281144][ T6012] x86_64_start_kernel+0x143/0x1c0
[ 108.281162][ T6012] common_startup_64+0x13e/0x147
[ 108.281176][ T6012]
[ 108.281176][ T6012] -> #0 (console_owner){....}-{0:0}:
[ 108.281193][ T6012] __lock_acquire+0x15a6/0x2cf0
[ 108.281206][ T6012] lock_acquire+0x117/0x340
[ 108.281217][ T6012] console_flush_all+0x6ee/0xb60
[ 108.281233][ T6012] console_unlock+0xbb/0x190
[ 108.281247][ T6012] vprintk_emit+0x4f8/0x5f0
[ 108.281261][ T6012] _printk+0xcf/0x120
[ 108.281277][ T6012] __report_bug+0x305/0x500
[ 108.281290][ T6012] report_bug+0x16a/0x220
[ 108.281303][ T6012] handle_bug+0x98/0x200
[ 108.281318][ T6012] exc_invalid_op+0x1a/0x50
[ 108.281438][ T6012] asm_exc_invalid_op+0x1a/0x20
[ 108.281451][ T6012] sched_change_end+0x4f6/0x640
[ 108.281464][ T6012] rt_mutex_setprio+0x488/0xb70
[ 108.281473][ T6012] remove_waiter+0x7f5/0xaf0
[ 108.281486][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 108.281495][ T6012] futex_lock_pi+0x530/0xa90
[ 108.281507][ T6012] do_futex+0x292/0x420
[ 108.281516][ T6012] __se_sys_futex+0x36f/0x400
[ 108.281526][ T6012] do_syscall_64+0xfa/0xf80
[ 108.281537][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.281547][ T6012]
[ 108.281547][ T6012] other info that might help us debug this:
[ 108.281547][ T6012]
[ 108.281550][ T6012] Chain exists of:
[ 108.281550][ T6012] console_owner --> &p->pi_lock --> &rq->__lock
[ 108.281550][ T6012]
[ 108.281570][ T6012] Possible unsafe locking scenario:
[ 108.281570][ T6012]
[ 108.281573][ T6012] CPU0 CPU1
[ 108.281576][ T6012] ---- ----
[ 108.281580][ T6012] lock(&rq->__lock);
[ 108.281587][ T6012] lock(&p->pi_lock);
[ 108.281594][ T6012] lock(&rq->__lock);
[ 108.281602][ T6012] lock(console_owner);
[ 108.281609][ T6012]
[ 108.281609][ T6012] *** DEADLOCK ***
[ 108.281609][ T6012]
[ 108.281612][ T6012] 5 locks held by syz.0.17/6012:
[ 108.281619][ T6012] #0: ffff888072ee7828 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100
[ 108.281644][ T6012] #1: ffff88802e5bc768 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0
[ 108.281677][ T6012] #2: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 108.281703][ T6012] #3: ffffffff8df359e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 108.281730][ T6012] #4: ffffffff8de1d298 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60
[ 108.281759][ T6012]
[ 108.281759][ T6012] stack backtrace:
[ 108.281766][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 108.281779][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 108.281785][ T6012] Call Trace:
[ 108.281791][ T6012]
[ 108.281796][ T6012] dump_stack_lvl+0x189/0x250
[ 108.281810][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.281822][ T6012] ? __pfx__printk+0x10/0x10
[ 108.281837][ T6012] ? print_lock_name+0xde/0x100
[ 108.281852][ T6012] print_circular_bug+0x2e2/0x300
[ 108.281866][ T6012] check_noncircular+0x12e/0x150
[ 108.281881][ T6012] __lock_acquire+0x15a6/0x2cf0
[ 108.281896][ T6012] ? console_flush_all+0x131/0xb60
[ 108.281910][ T6012] lock_acquire+0x117/0x340
[ 108.281920][ T6012] ? console_flush_all+0x131/0xb60
[ 108.281936][ T6012] ? do_raw_spin_unlock+0x122/0x240
[ 108.281951][ T6012] ? console_flush_all+0x131/0xb60
[ 108.281964][ T6012] console_flush_all+0x6ee/0xb60
[ 108.281985][ T6012] ? console_flush_all+0x131/0xb60
[ 108.281999][ T6012] ? console_flush_all+0x131/0xb60
[ 108.282014][ T6012] ? __pfx_console_flush_all+0x10/0x10
[ 108.282030][ T6012] ? is_printk_cpu_sync_owner+0x32/0x40
[ 108.282040][ T6012] console_unlock+0xbb/0x190
[ 108.282053][ T6012] ? __pfx___down_trylock_console_sem+0x10/0x10
[ 108.282067][ T6012] ? __pfx_console_unlock+0x10/0x10
[ 108.282082][ T6012] vprintk_emit+0x4f8/0x5f0
[ 108.282095][ T6012] ? __pfx_vprintk_emit+0x10/0x10
[ 108.282118][ T6012] ? __lock_acquire+0x6b6/0x2cf0
[ 108.282129][ T6012] ? __lock_acquire+0x6b6/0x2cf0
[ 108.282141][ T6012] _printk+0xcf/0x120
[ 108.282156][ T6012] ? __pfx__printk+0x10/0x10
[ 108.282171][ T6012] ? find_bug+0xa5/0x370
[ 108.282182][ T6012] ? sched_change_end+0x4f6/0x640
[ 108.282195][ T6012] ? sched_change_end+0x4f6/0x640
[ 108.282208][ T6012] __report_bug+0x305/0x500
[ 108.282219][ T6012] ? sched_change_end+0x4f6/0x640
[ 108.282238][ T6012] ? __pfx___report_bug+0x10/0x10
[ 108.282250][ T6012] ? rcu_read_lock_sched_held+0x89/0x100
[ 108.282264][ T6012] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 108.282279][ T6012] ? sched_change_end+0x4f6/0x640
[ 108.282291][ T6012] report_bug+0x16a/0x220
[ 108.282302][ T6012] ? sched_change_end+0x4f6/0x640
[ 108.282314][ T6012] ? sched_change_end+0x4f8/0x640
[ 108.282326][ T6012] handle_bug+0x98/0x200
[ 108.282340][ T6012] exc_invalid_op+0x1a/0x50
[ 108.282354][ T6012] asm_exc_invalid_op+0x1a/0x20
[ 108.282364][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640
[ 108.282379][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 108.282388][ T6012] RSP: 0018:ffffc90003117850 EFLAGS: 00010046
[ 108.282398][ T6012] RAX: 1ffff11005cb77a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 108.282406][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802e5bbd00
[ 108.282413][ T6012] RBP: ffff88802e5bbfa8 R08: ffff88802e5bbd07 R09: 1ffff11005cb77a0
[ 108.282420][ T6012] R10: dffffc0000000000 R11: ffffed1005cb77a1 R12: dffffc0000000000
[ 108.282427][ T6012] R13: ffff88802e5bbd00 R14: ffff8880b873a900 R15: ffff88802e5bbd00
[ 108.282436][ T6012] ? sched_change_end+0x4af/0x640
[ 108.282453][ T6012] rt_mutex_setprio+0x488/0xb70
[ 108.282465][ T6012] remove_waiter+0x7f5/0xaf0
[ 108.282482][ T6012] ? lockdep_hardirqs_on+0x98/0x140
[ 108.282495][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 108.282505][ T6012] futex_lock_pi+0x530/0xa90
[ 108.282519][ T6012] ? __pfx_futex_lock_pi+0x10/0x10
[ 108.282536][ T6012] ? futex_hash+0x40/0x2d0
[ 108.282545][ T6012] ? futex_hash+0x2ad/0x2d0
[ 108.282555][ T6012] ? __pfx_futex_wake_mark+0x10/0x10
[ 108.282569][ T6012] ? __pfx_futex_wake+0x10/0x10
[ 108.282586][ T6012] do_futex+0x292/0x420
[ 108.282598][ T6012] ? __pfx_do_futex+0x10/0x10
[ 108.282611][ T6012] __se_sys_futex+0x36f/0x400
[ 108.282624][ T6012] ? __pfx___se_sys_futex+0x10/0x10
[ 108.282637][ T6012] ? __x64_sys_futex+0x21/0xf0
[ 108.282649][ T6012] do_syscall_64+0xfa/0xf80
[ 108.282661][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.282671][ T6012] ? clear_bhb_loop+0x60/0xb0
[ 108.282683][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.282693][ T6012] RIP: 0033:0x7f478f18f749
[ 108.282703][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 108.282711][ T6012] RSP: 002b:00007ffd790638d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 108.282722][ T6012] RAX: ffffffffffffffda RBX: 00007f478f3e5fa0 RCX: 00007f478f18f749
[ 108.282729][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 108.282736][ T6012] RBP: 00007f478f213f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 108.282742][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.282749][ T6012] R13: 00007f478f3e5fa0 R14: 00007f478f3e5fa0 R15: 0000000000000006
[ 108.282759][ T6012]
[ 109.516114][ T6012] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6012
[ 109.526120][ T6012] Modules linked in:
[ 109.530021][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 109.539218][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 109.549619][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640
[ 109.555347][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 109.574954][ T6012] RSP: 0018:ffffc90003117850 EFLAGS: 00010046
[ 109.581019][ T6012] RAX: 1ffff11005cb77a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 109.588977][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802e5bbd00
[ 109.596934][ T6012] RBP: ffff88802e5bbfa8 R08: ffff88802e5bbd07 R09: 1ffff11005cb77a0
[ 109.604991][ T6012] R10: dffffc0000000000 R11: ffffed1005cb77a1 R12: dffffc0000000000
[ 109.613061][ T6012] R13: ffff88802e5bbd00 R14: ffff8880b873a900 R15: ffff88802e5bbd00
[ 109.621037][ T6012] FS: 000055555ecc3500(0000) GS:ffff888125e32000(0000) knlGS:0000000000000000
[ 109.629966][ T6012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.636561][ T6012] CR2: 00007ff45a5ab6b0 CR3: 000000001e754000 CR4: 00000000003526f0
[ 109.644538][ T6012] Call Trace:
[ 109.647818][ T6012]
[ 109.650933][ T6012] rt_mutex_setprio+0x488/0xb70
[ 109.655961][ T6012] remove_waiter+0x7f5/0xaf0
[ 109.660544][ T6012] ? lockdep_hardirqs_on+0x98/0x140
[ 109.665742][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 109.671447][ T6012] futex_lock_pi+0x530/0xa90
[ 109.676118][ T6012] ? __pfx_futex_lock_pi+0x10/0x10
[ 109.681501][ T6012] ? futex_hash+0x40/0x2d0
[ 109.685904][ T6012] ? futex_hash+0x2ad/0x2d0
[ 109.690486][ T6012] ? __pfx_futex_wake_mark+0x10/0x10
[ 109.695762][ T6012] ? __pfx_futex_wake+0x10/0x10
[ 109.700603][ T6012] do_futex+0x292/0x420
[ 109.704793][ T6012] ? __pfx_do_futex+0x10/0x10
[ 109.709468][ T6012] __se_sys_futex+0x36f/0x400
[ 109.714213][ T6012] ? __pfx___se_sys_futex+0x10/0x10
[ 109.719399][ T6012] ? __x64_sys_futex+0x21/0xf0
[ 109.724178][ T6012] do_syscall_64+0xfa/0xf80
[ 109.728825][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.735075][ T6012] ? clear_bhb_loop+0x60/0xb0
[ 109.739862][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.745748][ T6012] RIP: 0033:0x7f478f18f749
[ 109.750418][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.770271][ T6012] RSP: 002b:00007ffd790638d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 109.779456][ T6012] RAX: ffffffffffffffda RBX: 00007f478f3e5fa0 RCX: 00007f478f18f749
[ 109.787513][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 109.795490][ T6012] RBP: 00007f478f213f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 109.803555][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.811524][ T6012] R13: 00007f478f3e5fa0 R14: 00007f478f3e5fa0 R15: 0000000000000006
[ 109.819591][ T6012]
[ 109.822637][ T6012] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 109.829915][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 109.839153][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 109.849411][ T6012] Call Trace:
[ 109.852860][ T6012]
[ 109.855969][ T6012] dump_stack_lvl+0x99/0x250
[ 109.860553][ T6012] ? __asan_memcpy+0x40/0x70
[ 109.865148][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.870421][ T6012] ? __pfx__printk+0x10/0x10
[ 109.875013][ T6012] vpanic+0x237/0x6d0
[ 109.878986][ T6012] ? __pfx_vpanic+0x10/0x10
[ 109.883560][ T6012] ? is_bpf_text_address+0x292/0x2b0
[ 109.888866][ T6012] ? is_bpf_text_address+0x26/0x2b0
[ 109.894163][ T6012] panic+0xb9/0xc0
[ 109.897888][ T6012] ? __pfx_panic+0x10/0x10
[ 109.902394][ T6012] __warn+0x317/0x4b0
[ 109.906454][ T6012] ? sched_change_end+0x4f6/0x640
[ 109.911475][ T6012] ? sched_change_end+0x4f6/0x640
[ 109.916578][ T6012] __report_bug+0x288/0x500
[ 109.921071][ T6012] ? sched_change_end+0x4f6/0x640
[ 109.926086][ T6012] ? __pfx___report_bug+0x10/0x10
[ 109.931200][ T6012] ? rcu_read_lock_sched_held+0x89/0x100
[ 109.936821][ T6012] ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 109.942966][ T6012] ? sched_change_end+0x4f6/0x640
[ 109.948012][ T6012] report_bug+0x16a/0x220
[ 109.952332][ T6012] ? sched_change_end+0x4f6/0x640
[ 109.957346][ T6012] ? sched_change_end+0x4f8/0x640
[ 109.962380][ T6012] handle_bug+0x98/0x200
[ 109.966615][ T6012] exc_invalid_op+0x1a/0x50
[ 109.971135][ T6012] asm_exc_invalid_op+0x1a/0x20
[ 109.976008][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640
[ 109.981718][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be de cb 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48
[ 110.001502][ T6012] RSP: 0018:ffffc90003117850 EFLAGS: 00010046
[ 110.007645][ T6012] RAX: 1ffff11005cb77a0 RBX: ffffffff8d9a4810 RCX: ffffffff8192ed2f
[ 110.015604][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802e5bbd00
[ 110.023566][ T6012] RBP: ffff88802e5bbfa8 R08: ffff88802e5bbd07 R09: 1ffff11005cb77a0
[ 110.031537][ T6012] R10: dffffc0000000000 R11: ffffed1005cb77a1 R12: dffffc0000000000
[ 110.039500][ T6012] R13: ffff88802e5bbd00 R14: ffff8880b873a900 R15: ffff88802e5bbd00
[ 110.047549][ T6012] ? sched_change_end+0x4af/0x640
[ 110.052572][ T6012] rt_mutex_setprio+0x488/0xb70
[ 110.057448][ T6012] remove_waiter+0x7f5/0xaf0
[ 110.062034][ T6012] ? lockdep_hardirqs_on+0x98/0x140
[ 110.067310][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100
[ 110.073102][ T6012] futex_lock_pi+0x530/0xa90
[ 110.077681][ T6012] ? __pfx_futex_lock_pi+0x10/0x10
[ 110.082869][ T6012] ? futex_hash+0x40/0x2d0
[ 110.087281][ T6012] ? futex_hash+0x2ad/0x2d0
[ 110.091768][ T6012] ? __pfx_futex_wake_mark+0x10/0x10
[ 110.097044][ T6012] ? __pfx_futex_wake+0x10/0x10
[ 110.101887][ T6012] do_futex+0x292/0x420
[ 110.106129][ T6012] ? __pfx_do_futex+0x10/0x10
[ 110.110887][ T6012] __se_sys_futex+0x36f/0x400
[ 110.115643][ T6012] ? __pfx___se_sys_futex+0x10/0x10
[ 110.120850][ T6012] ? __x64_sys_futex+0x21/0xf0
[ 110.125782][ T6012] do_syscall_64+0xfa/0xf80
[ 110.130338][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.136596][ T6012] ? clear_bhb_loop+0x60/0xb0
[ 110.141363][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.147394][ T6012] RIP: 0033:0x7f478f18f749
[ 110.151826][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.171875][ T6012] RSP: 002b:00007ffd790638d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 110.180394][ T6012] RAX: ffffffffffffffda RBX: 00007f478f3e5fa0 RCX: 00007f478f18f749
[ 110.188446][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180
[ 110.196405][ T6012] RBP: 00007f478f213f91 R08: 0000000000000000 R09: 00000000fffffffd
[ 110.204364][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.212504][ T6012] R13: 00007f478f3e5fa0 R14: 00007f478f3e5fa0 R15: 0000000000000006
[ 110.220470][ T6012]
[ 111.312674][ T6012] Shutting down cpus with NMI
[ 111.317836][ T6012] Kernel Offset: disabled
[ 111.322242][ T6012] Rebooting in 86400 seconds..