Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 2025/12/24 21:06:43 parsed 1 programs [ 80.932341][ T5837] cgroup: Unknown subsys name 'net' [ 81.099945][ T5837] cgroup: Unknown subsys name 'cpuset' [ 81.109848][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.684726][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.387859][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.460411][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.468171][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.475462][ T5847] bridge_slave_0: entered allmulticast mode [ 85.483021][ T5847] bridge_slave_0: entered promiscuous mode [ 85.491984][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.499289][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.506437][ T5847] bridge_slave_1: entered allmulticast mode [ 85.514539][ T5847] bridge_slave_1: entered promiscuous mode [ 85.543270][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.554937][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.586398][ T5847] team0: Port device team_slave_0 added [ 85.594145][ T5847] team0: Port device team_slave_1 added [ 85.619746][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.627454][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.653375][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.666032][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.673021][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.698927][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.741903][ T5847] hsr_slave_0: entered promiscuous mode [ 85.748342][ T5847] hsr_slave_1: entered promiscuous mode [ 85.895878][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.908871][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.919291][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.930155][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.960727][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.967923][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.975760][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.982960][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.035732][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.053551][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.063084][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.080307][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.094949][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.102179][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.116186][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.123434][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.282486][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.325909][ T5847] veth0_vlan: entered promiscuous mode [ 86.339098][ T5847] veth1_vlan: entered promiscuous mode [ 86.370134][ T5847] veth0_macvtap: entered promiscuous mode [ 86.380445][ T5847] veth1_macvtap: entered promiscuous mode [ 86.399209][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.414512][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.429629][ T4531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440458][ T4531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.456364][ T4531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.465602][ T4531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.525638][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.655110][ T3510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.745287][ T3510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.776069][ T52] cfg80211: failed to load regulatory.db [ 86.794686][ T3510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.899694][ T3510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.141678][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.149719][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.192429][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.201735][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.469793][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.478487][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.486282][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.494916][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.503144][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.188772][ T3510] bridge_slave_1: left allmulticast mode [ 89.195161][ T3510] bridge_slave_1: left promiscuous mode [ 89.208534][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.271822][ T3510] bridge_slave_0: left allmulticast mode [ 89.286688][ T3510] bridge_slave_0: left promiscuous mode [ 89.292536][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.719001][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.731330][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.742896][ T3510] bond0 (unregistering): Released all slaves [ 89.870307][ T3510] hsr_slave_0: left promiscuous mode [ 89.881423][ T3510] hsr_slave_1: left promiscuous mode [ 89.898259][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.916667][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.942524][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.967577][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.999389][ T3510] veth1_macvtap: left promiscuous mode [ 90.005132][ T3510] veth0_macvtap: left promiscuous mode [ 90.011835][ T3510] veth1_vlan: left promiscuous mode [ 90.017439][ T3510] veth0_vlan: left promiscuous mode [ 90.622161][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 90.650394][ T3510] team0 (unregistering): Port device team_slave_0 removed 2025/12/24 21:06:56 executed programs: 0 [ 91.601607][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.620284][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.628142][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.636212][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.644845][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.376271][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 92.683644][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.693090][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.700466][ T5987] bridge_slave_0: entered allmulticast mode [ 92.708413][ T5987] bridge_slave_0: entered promiscuous mode [ 92.722562][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.732772][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.740208][ T5987] bridge_slave_1: entered allmulticast mode [ 92.747376][ T5987] bridge_slave_1: entered promiscuous mode [ 92.819399][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.832890][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.921701][ T5987] team0: Port device team_slave_0 added [ 92.935488][ T5987] team0: Port device team_slave_1 added [ 93.021248][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.028765][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.054808][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.070392][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.077658][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.104147][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.176032][ T5987] hsr_slave_0: entered promiscuous mode [ 93.187271][ T5987] hsr_slave_1: entered promiscuous mode [ 93.728333][ T5153] Bluetooth: hci0: command tx timeout [ 93.751362][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.763984][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.777847][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.798133][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.940771][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.967788][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.983309][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.990556][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.008653][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.015859][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.282218][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.353245][ T5987] veth0_vlan: entered promiscuous mode [ 94.368893][ T5987] veth1_vlan: entered promiscuous mode [ 94.420442][ T5987] veth0_macvtap: entered promiscuous mode [ 94.432091][ T5987] veth1_macvtap: entered promiscuous mode [ 94.460316][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.477566][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.500141][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519302][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541988][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.559631][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623559][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.644949][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.684089][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.693327][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.816758][ T5153] Bluetooth: hci0: command tx timeout [ 97.760286][ T6067] ------------[ cut here ]------------ [ 97.760607][ T6067] [ 97.760612][ T6067] ====================================================== [ 97.760616][ T6067] WARNING: possible circular locking dependency detected [ 97.760625][ T6067] syzkaller #0 Not tainted [ 97.760631][ T6067] ------------------------------------------------------ [ 97.760634][ T6067] syz.0.17/6067 is trying to acquire lock: [ 97.760639][ T6067] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 97.760669][ T6067] [ 97.760669][ T6067] but task is already holding lock: [ 97.760672][ T6067] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 97.760696][ T6067] [ 97.760696][ T6067] which lock already depends on the new lock. [ 97.760696][ T6067] [ 97.760700][ T6067] [ 97.760700][ T6067] the existing dependency chain (in reverse order) is: [ 97.760705][ T6067] [ 97.760705][ T6067] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 97.760721][ T6067] _raw_spin_lock_nested+0x32/0x50 [ 97.760737][ T6067] raw_spin_rq_lock_nested+0x2a/0x140 [ 97.760748][ T6067] task_rq_lock+0xbc/0x470 [ 97.760758][ T6067] cgroup_move_task+0x92/0x2a0 [ 97.760771][ T6067] css_set_move_task+0x658/0x9e0 [ 97.760783][ T6067] cgroup_post_fork+0x1ef/0x7a0 [ 97.760794][ T6067] copy_process+0x3614/0x3950 [ 97.760805][ T6067] kernel_clone+0x21e/0x820 [ 97.760817][ T6067] user_mode_thread+0xdd/0x140 [ 97.760829][ T6067] rest_init+0x23/0x300 [ 97.760839][ T6067] start_kernel+0x3ac/0x400 [ 97.760850][ T6067] x86_64_start_reservations+0x24/0x30 [ 97.760865][ T6067] x86_64_start_kernel+0x143/0x1c0 [ 97.760879][ T6067] common_startup_64+0x13e/0x147 [ 97.760894][ T6067] [ 97.760894][ T6067] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 97.760909][ T6067] _raw_spin_lock_irqsave+0xa7/0xf0 [ 97.760922][ T6067] try_to_wake_up+0x67/0x12b0 [ 97.760935][ T6067] create_worker+0x503/0x720 [ 97.760950][ T6067] workqueue_init+0x3ea/0x690 [ 97.760966][ T6067] kernel_init_freeable+0x302/0x4b0 [ 97.760978][ T6067] kernel_init+0x1d/0x1d0 [ 97.760988][ T6067] ret_from_fork+0x599/0xb30 [ 97.760998][ T6067] ret_from_fork_asm+0x1a/0x30 [ 97.761013][ T6067] [ 97.761013][ T6067] -> #3 (&pool->lock){-.-.}-{2:2}: [ 97.761028][ T6067] _raw_spin_lock+0x2e/0x40 [ 97.761040][ T6067] __queue_work+0x7eb/0xf90 [ 97.761051][ T6067] queue_work_on+0x181/0x270 [ 97.761062][ T6067] rpm_suspend+0xe44/0x1700 [ 97.761078][ T6067] __pm_runtime_idle+0x12f/0x1a0 [ 97.761093][ T6067] __device_attach+0x342/0x430 [ 97.761103][ T6067] device_initial_probe+0xa1/0xd0 [ 97.761112][ T6067] bus_probe_device+0x12a/0x220 [ 97.761125][ T6067] device_add+0x7b6/0xb80 [ 97.761140][ T6067] serial_base_port_add+0x18f/0x260 [ 97.761155][ T6067] serial_core_register_port+0x369/0x2800 [ 97.761166][ T6067] serial8250_register_8250_port+0x1658/0x1fd0 [ 97.761183][ T6067] serial_pnp_probe+0x527/0x7d0 [ 97.761192][ T6067] pnp_device_probe+0x30b/0x4c0 [ 97.761203][ T6067] really_probe+0x26d/0xad0 [ 97.761213][ T6067] __driver_probe_device+0x18c/0x320 [ 97.761223][ T6067] driver_probe_device+0x4f/0x240 [ 97.761233][ T6067] __driver_attach+0x349/0x650 [ 97.761242][ T6067] bus_for_each_dev+0x233/0x2b0 [ 97.761255][ T6067] bus_add_driver+0x345/0x670 [ 97.761268][ T6067] driver_register+0x23a/0x320 [ 97.761279][ T6067] serial8250_init+0x8f/0x160 [ 97.761294][ T6067] do_one_initcall+0x1fb/0x820 [ 97.761308][ T6067] do_initcall_level+0x104/0x190 [ 97.761320][ T6067] do_initcalls+0x59/0xa0 [ 97.761331][ T6067] kernel_init_freeable+0x334/0x4b0 [ 97.761343][ T6067] kernel_init+0x1d/0x1d0 [ 97.761353][ T6067] ret_from_fork+0x599/0xb30 [ 97.761363][ T6067] ret_from_fork_asm+0x1a/0x30 [ 97.761377][ T6067] [ 97.761377][ T6067] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 97.761392][ T6067] _raw_spin_lock_irqsave+0xa7/0xf0 [ 97.761405][ T6067] __pm_runtime_resume+0x10f/0x180 [ 97.761420][ T6067] __uart_start+0x171/0x460 [ 97.761430][ T6067] uart_write+0xdc/0x130 [ 97.761440][ T6067] n_tty_write+0xd78/0x12a0 [ 97.761454][ T6067] file_tty_write+0x559/0xa20 [ 97.761465][ T6067] vfs_write+0x5c9/0xb30 [ 97.761475][ T6067] ksys_write+0x145/0x250 [ 97.761482][ T6067] do_syscall_64+0xfa/0xf80 [ 97.761493][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.761501][ T6067] [ 97.761501][ T6067] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 97.761512][ T6067] _raw_spin_lock_irqsave+0xa7/0xf0 [ 97.761521][ T6067] serial8250_console_write+0x17e/0x1ba0 [ 97.761536][ T6067] console_flush_all+0x745/0xb60 [ 97.761547][ T6067] console_unlock+0xbb/0x190 [ 97.761556][ T6067] vprintk_emit+0x4f8/0x5f0 [ 97.761570][ T6067] _printk+0xcf/0x120 [ 97.761582][ T6067] register_console+0xa8b/0xf90 [ 97.761593][ T6067] univ8250_console_init+0x3a/0x70 [ 97.761605][ T6067] console_init+0xfc/0x3f0 [ 97.761616][ T6067] start_kernel+0x252/0x400 [ 97.761624][ T6067] x86_64_start_reservations+0x24/0x30 [ 97.761635][ T6067] x86_64_start_kernel+0x143/0x1c0 [ 97.761646][ T6067] common_startup_64+0x13e/0x147 [ 97.761655][ T6067] [ 97.761655][ T6067] -> #0 (console_owner){....}-{0:0}: [ 97.761666][ T6067] __lock_acquire+0x15a6/0x2cf0 [ 97.761674][ T6067] lock_acquire+0x117/0x340 [ 97.761682][ T6067] console_flush_all+0x6ee/0xb60 [ 97.761692][ T6067] console_unlock+0xbb/0x190 [ 97.761701][ T6067] vprintk_emit+0x4f8/0x5f0 [ 97.761711][ T6067] _printk+0xcf/0x120 [ 97.761721][ T6067] __report_bug+0x305/0x500 [ 97.761731][ T6067] report_bug+0x16a/0x220 [ 97.761741][ T6067] handle_bug+0x98/0x200 [ 97.761747][ T6067] exc_invalid_op+0x1a/0x50 [ 97.761753][ T6067] asm_exc_invalid_op+0x1a/0x20 [ 97.761760][ T6067] sched_change_end+0x4f6/0x640 [ 97.761771][ T6067] rt_mutex_setprio+0x488/0xb70 [ 97.761777][ T6067] remove_waiter+0x7f5/0xaf0 [ 97.761785][ T6067] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 97.761793][ T6067] futex_lock_pi+0x530/0xa90 [ 97.761804][ T6067] do_futex+0x292/0x420 [ 97.761812][ T6067] __se_sys_futex+0x36f/0x400 [ 97.761820][ T6067] do_syscall_64+0xfa/0xf80 [ 97.761830][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.761838][ T6067] [ 97.761838][ T6067] other info that might help us debug this: [ 97.761838][ T6067] [ 97.761841][ T6067] Chain exists of: [ 97.761841][ T6067] console_owner --> &p->pi_lock --> &rq->__lock [ 97.761841][ T6067] [ 97.761854][ T6067] Possible unsafe locking scenario: [ 97.761854][ T6067] [ 97.761857][ T6067] CPU0 CPU1 [ 97.761859][ T6067] ---- ---- [ 97.761862][ T6067] lock(&rq->__lock); [ 97.761867][ T6067] lock(&p->pi_lock); [ 97.761873][ T6067] lock(&rq->__lock); [ 97.761879][ T6067] lock(console_owner); [ 97.761884][ T6067] [ 97.761884][ T6067] *** DEADLOCK *** [ 97.761884][ T6067] [ 97.761887][ T6067] 5 locks held by syz.0.17/6067: [ 97.761892][ T6067] #0: ffff88807ea65b28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 97.761913][ T6067] #1: ffff8880281e0a68 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 97.761932][ T6067] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 97.761952][ T6067] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 97.761974][ T6067] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 97.761996][ T6067] [ 97.761996][ T6067] stack backtrace: [ 97.762012][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 97.762022][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.762032][ T6067] Call Trace: [ 97.762037][ T6067] [ 97.762041][ T6067] dump_stack_lvl+0x189/0x250 [ 97.762053][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.762064][ T6067] ? __pfx__printk+0x10/0x10 [ 97.762076][ T6067] ? print_lock_name+0xde/0x100 [ 97.762089][ T6067] print_circular_bug+0x2e2/0x300 [ 97.762101][ T6067] check_noncircular+0x12e/0x150 [ 97.762113][ T6067] __lock_acquire+0x15a6/0x2cf0 [ 97.762126][ T6067] ? console_flush_all+0x131/0xb60 [ 97.762137][ T6067] lock_acquire+0x117/0x340 [ 97.762145][ T6067] ? console_flush_all+0x131/0xb60 [ 97.762158][ T6067] ? do_raw_spin_unlock+0x122/0x240 [ 97.762171][ T6067] ? console_flush_all+0x131/0xb60 [ 97.762182][ T6067] console_flush_all+0x6ee/0xb60 [ 97.762193][ T6067] ? console_flush_all+0x131/0xb60 [ 97.762205][ T6067] ? console_flush_all+0x131/0xb60 [ 97.762217][ T6067] ? __pfx_console_flush_all+0x10/0x10 [ 97.762229][ T6067] ? is_bpf_text_address+0x26/0x2b0 [ 97.762239][ T6067] ? is_printk_cpu_sync_owner+0x32/0x40 [ 97.762253][ T6067] console_unlock+0xbb/0x190 [ 97.762263][ T6067] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 97.762275][ T6067] ? __pfx_console_unlock+0x10/0x10 [ 97.762287][ T6067] vprintk_emit+0x4f8/0x5f0 [ 97.762298][ T6067] ? __pfx_vprintk_emit+0x10/0x10 [ 97.762309][ T6067] ? __lock_acquire+0x6b6/0x2cf0 [ 97.762319][ T6067] ? __lock_acquire+0x6b6/0x2cf0 [ 97.762329][ T6067] _printk+0xcf/0x120 [ 97.762342][ T6067] ? __pfx__printk+0x10/0x10 [ 97.762355][ T6067] ? find_bug+0xa5/0x370 [ 97.762365][ T6067] ? sched_change_end+0x4f6/0x640 [ 97.762375][ T6067] ? sched_change_end+0x4f6/0x640 [ 97.762385][ T6067] __report_bug+0x305/0x500 [ 97.762396][ T6067] ? sched_change_end+0x4f6/0x640 [ 97.762407][ T6067] ? __pfx___report_bug+0x10/0x10 [ 97.762418][ T6067] ? rcu_read_lock_sched_held+0x89/0x100 [ 97.762429][ T6067] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 97.762442][ T6067] ? sched_change_end+0x4f6/0x640 [ 97.762452][ T6067] report_bug+0x16a/0x220 [ 97.762463][ T6067] ? sched_change_end+0x4f6/0x640 [ 97.762473][ T6067] ? sched_change_end+0x4f8/0x640 [ 97.762482][ T6067] handle_bug+0x98/0x200 [ 97.762490][ T6067] exc_invalid_op+0x1a/0x50 [ 97.762497][ T6067] asm_exc_invalid_op+0x1a/0x20 [ 97.762505][ T6067] RIP: 0010:sched_change_end+0x4f6/0x640 [ 97.762517][ T6067] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 97.762525][ T6067] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 97.762533][ T6067] RAX: 1ffff1100503c000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 97.762539][ T6067] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880281e0000 [ 97.762545][ T6067] RBP: ffff8880281e02a8 R08: ffff8880281e0007 R09: 1ffff1100503c000 [ 97.762551][ T6067] R10: dffffc0000000000 R11: ffffed100503c001 R12: dffffc0000000000 [ 97.762558][ T6067] R13: ffff8880281e0000 R14: ffff8880b873ab00 R15: ffff8880281e0000 [ 97.762570][ T6067] ? sched_change_end+0x4af/0x640 [ 97.762584][ T6067] rt_mutex_setprio+0x488/0xb70 [ 97.762594][ T6067] remove_waiter+0x7f5/0xaf0 [ 97.762604][ T6067] ? lockdep_hardirqs_on+0x98/0x140 [ 97.762616][ T6067] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 97.762626][ T6067] futex_lock_pi+0x530/0xa90 [ 97.762638][ T6067] ? __pfx_futex_lock_pi+0x10/0x10 [ 97.762653][ T6067] ? futex_hash+0x40/0x2d0 [ 97.762660][ T6067] ? futex_hash+0x2ad/0x2d0 [ 97.762668][ T6067] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.762680][ T6067] ? __pfx_futex_wake+0x10/0x10 [ 97.762693][ T6067] ? handle_mm_fault+0xdb/0x32b0 [ 97.762707][ T6067] do_futex+0x292/0x420 [ 97.762717][ T6067] ? __pfx_do_futex+0x10/0x10 [ 97.762728][ T6067] __se_sys_futex+0x36f/0x400 [ 97.762738][ T6067] ? __pfx___se_sys_futex+0x10/0x10 [ 97.762749][ T6067] ? __x64_sys_futex+0x21/0xf0 [ 97.762759][ T6067] do_syscall_64+0xfa/0xf80 [ 97.762770][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.762778][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 97.762788][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.762796][ T6067] RIP: 0033:0x7f28d6f8f749 [ 97.762808][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.762815][ T6067] RSP: 002b:00007ffdaef0a198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.762824][ T6067] RAX: ffffffffffffffda RBX: 00007f28d71e5fa0 RCX: 00007f28d6f8f749 [ 97.762830][ T6067] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 97.762835][ T6067] RBP: 00007f28d7013f91 R08: 0000000000000000 R09: 00000000fffffffc [ 97.762841][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.762846][ T6067] R13: 00007f28d71e5fa0 R14: 00007f28d71e5fa0 R15: 0000000000000006 [ 97.762855][ T6067] [ 98.996263][ T6067] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6067 [ 99.006229][ T6067] Modules linked in: [ 99.010118][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 99.019201][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.029247][ T6067] RIP: 0010:sched_change_end+0x4f6/0x640 [ 99.034862][ T6067] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 99.054532][ T6067] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 99.060579][ T6067] RAX: 1ffff1100503c000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 99.068548][ T6067] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880281e0000 [ 99.076502][ T6067] RBP: ffff8880281e02a8 R08: ffff8880281e0007 R09: 1ffff1100503c000 [ 99.084450][ T6067] R10: dffffc0000000000 R11: ffffed100503c001 R12: dffffc0000000000 [ 99.092399][ T6067] R13: ffff8880281e0000 R14: ffff8880b873ab00 R15: ffff8880281e0000 [ 99.100348][ T6067] FS: 000055557012c500(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 99.109257][ T6067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.115817][ T6067] CR2: 000055daeb878138 CR3: 00000000748da000 CR4: 00000000003526f0 [ 99.123766][ T6067] Call Trace: [ 99.127028][ T6067] [ 99.129940][ T6067] rt_mutex_setprio+0x488/0xb70 [ 99.134769][ T6067] remove_waiter+0x7f5/0xaf0 [ 99.139342][ T6067] ? lockdep_hardirqs_on+0x98/0x140 [ 99.144519][ T6067] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 99.150216][ T6067] futex_lock_pi+0x530/0xa90 [ 99.154785][ T6067] ? __pfx_futex_lock_pi+0x10/0x10 [ 99.159877][ T6067] ? futex_hash+0x40/0x2d0 [ 99.164310][ T6067] ? futex_hash+0x2ad/0x2d0 [ 99.168795][ T6067] ? __pfx_futex_wake_mark+0x10/0x10 [ 99.174058][ T6067] ? __pfx_futex_wake+0x10/0x10 [ 99.179071][ T6067] ? handle_mm_fault+0xdb/0x32b0 [ 99.183988][ T6067] do_futex+0x292/0x420 [ 99.188125][ T6067] ? __pfx_do_futex+0x10/0x10 [ 99.192777][ T6067] __se_sys_futex+0x36f/0x400 [ 99.197438][ T6067] ? __pfx___se_sys_futex+0x10/0x10 [ 99.202701][ T6067] ? __x64_sys_futex+0x21/0xf0 [ 99.207440][ T6067] do_syscall_64+0xfa/0xf80 [ 99.211920][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.217955][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 99.222608][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.228475][ T6067] RIP: 0033:0x7f28d6f8f749 [ 99.232874][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.252456][ T6067] RSP: 002b:00007ffdaef0a198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.260850][ T6067] RAX: ffffffffffffffda RBX: 00007f28d71e5fa0 RCX: 00007f28d6f8f749 [ 99.268799][ T6067] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 99.276747][ T6067] RBP: 00007f28d7013f91 R08: 0000000000000000 R09: 00000000fffffffc [ 99.284699][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.292666][ T6067] R13: 00007f28d71e5fa0 R14: 00007f28d71e5fa0 R15: 0000000000000006 [ 99.300620][ T6067] [ 99.303620][ T6067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.310963][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 99.320044][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.330075][ T6067] Call Trace: [ 99.333334][ T6067] [ 99.336244][ T6067] dump_stack_lvl+0x99/0x250 [ 99.340814][ T6067] ? __asan_memcpy+0x40/0x70 [ 99.345399][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.350585][ T6067] ? __pfx__printk+0x10/0x10 [ 99.355156][ T6067] vpanic+0x237/0x6d0 [ 99.359140][ T6067] ? __pfx_vpanic+0x10/0x10 [ 99.363628][ T6067] ? is_bpf_text_address+0x292/0x2b0 [ 99.368894][ T6067] ? is_bpf_text_address+0x26/0x2b0 [ 99.374080][ T6067] panic+0xb9/0xc0 [ 99.377783][ T6067] ? __pfx_panic+0x10/0x10 [ 99.382185][ T6067] __warn+0x317/0x4b0 [ 99.386144][ T6067] ? sched_change_end+0x4f6/0x640 [ 99.391148][ T6067] ? sched_change_end+0x4f6/0x640 [ 99.396151][ T6067] __report_bug+0x288/0x500 [ 99.400637][ T6067] ? sched_change_end+0x4f6/0x640 [ 99.405642][ T6067] ? __pfx___report_bug+0x10/0x10 [ 99.410644][ T6067] ? rcu_read_lock_sched_held+0x89/0x100 [ 99.416259][ T6067] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 99.422306][ T6067] ? sched_change_end+0x4f6/0x640 [ 99.427306][ T6067] report_bug+0x16a/0x220 [ 99.431618][ T6067] ? sched_change_end+0x4f6/0x640 [ 99.436619][ T6067] ? sched_change_end+0x4f8/0x640 [ 99.441630][ T6067] handle_bug+0x98/0x200 [ 99.445848][ T6067] exc_invalid_op+0x1a/0x50 [ 99.450327][ T6067] asm_exc_invalid_op+0x1a/0x20 [ 99.455157][ T6067] RIP: 0010:sched_change_end+0x4f6/0x640 [ 99.460779][ T6067] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 99.480366][ T6067] RSP: 0018:ffffc9000404f850 EFLAGS: 00010046 [ 99.486413][ T6067] RAX: 1ffff1100503c000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 99.494365][ T6067] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880281e0000 [ 99.502317][ T6067] RBP: ffff8880281e02a8 R08: ffff8880281e0007 R09: 1ffff1100503c000 [ 99.510269][ T6067] R10: dffffc0000000000 R11: ffffed100503c001 R12: dffffc0000000000 [ 99.518218][ T6067] R13: ffff8880281e0000 R14: ffff8880b873ab00 R15: ffff8880281e0000 [ 99.526175][ T6067] ? sched_change_end+0x4af/0x640 [ 99.531183][ T6067] rt_mutex_setprio+0x488/0xb70 [ 99.536011][ T6067] remove_waiter+0x7f5/0xaf0 [ 99.540578][ T6067] ? lockdep_hardirqs_on+0x98/0x140 [ 99.545756][ T6067] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 99.551455][ T6067] futex_lock_pi+0x530/0xa90 [ 99.556029][ T6067] ? __pfx_futex_lock_pi+0x10/0x10 [ 99.561125][ T6067] ? futex_hash+0x40/0x2d0 [ 99.565521][ T6067] ? futex_hash+0x2ad/0x2d0 [ 99.570000][ T6067] ? __pfx_futex_wake_mark+0x10/0x10 [ 99.575266][ T6067] ? __pfx_futex_wake+0x10/0x10 [ 99.580098][ T6067] ? handle_mm_fault+0xdb/0x32b0 [ 99.585021][ T6067] do_futex+0x292/0x420 [ 99.589160][ T6067] ? __pfx_do_futex+0x10/0x10 [ 99.593831][ T6067] __se_sys_futex+0x36f/0x400 [ 99.598532][ T6067] ? __pfx___se_sys_futex+0x10/0x10 [ 99.603718][ T6067] ? __x64_sys_futex+0x21/0xf0 [ 99.608467][ T6067] do_syscall_64+0xfa/0xf80 [ 99.612953][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.618990][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 99.623646][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.629530][ T6067] RIP: 0033:0x7f28d6f8f749 [ 99.633940][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.654146][ T6067] RSP: 002b:00007ffdaef0a198 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.662542][ T6067] RAX: ffffffffffffffda RBX: 00007f28d71e5fa0 RCX: 00007f28d6f8f749 [ 99.670500][ T6067] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 99.678450][ T6067] RBP: 00007f28d7013f91 R08: 0000000000000000 R09: 00000000fffffffc [ 99.686401][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.694365][ T6067] R13: 00007f28d71e5fa0 R14: 00007f28d71e5fa0 R15: 0000000000000006 [ 99.702332][ T6067] [ 100.802188][ T6067] Shutting down cpus with NMI [ 100.807309][ T6067] Kernel Offset: disabled [ 100.811615][ T6067] Rebooting in 86400 seconds..