Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 2025/12/17 09:22:46 parsed 1 programs [ 91.066465][ T5831] cgroup: Unknown subsys name 'net' [ 91.215903][ T5831] cgroup: Unknown subsys name 'cpuset' [ 91.226916][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.066287][ T1225] cfg80211: failed to load regulatory.db [ 92.983105][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.322107][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.357394][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 97.440718][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.448509][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.456278][ T5856] bridge_slave_0: entered allmulticast mode [ 97.464244][ T5856] bridge_slave_0: entered promiscuous mode [ 97.473525][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.480713][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.488007][ T5856] bridge_slave_1: entered allmulticast mode [ 97.495366][ T5856] bridge_slave_1: entered promiscuous mode [ 97.528257][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.540366][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.576304][ T5856] team0: Port device team_slave_0 added [ 97.584501][ T5856] team0: Port device team_slave_1 added [ 97.614918][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.622399][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.648368][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.661079][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.668124][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.694229][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.741847][ T5856] hsr_slave_0: entered promiscuous mode [ 97.748442][ T5856] hsr_slave_1: entered promiscuous mode [ 97.927654][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.940287][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.951870][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.965515][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.999480][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.006743][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.014868][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.022050][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.082553][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.103440][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.113027][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.130844][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.145746][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.152923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.168404][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.175628][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.364864][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.418336][ T5856] veth0_vlan: entered promiscuous mode [ 98.430365][ T5856] veth1_vlan: entered promiscuous mode [ 98.462172][ T5856] veth0_macvtap: entered promiscuous mode [ 98.474922][ T5856] veth1_macvtap: entered promiscuous mode [ 98.501768][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.517004][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.535638][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.545403][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.556156][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.566895][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.734468][ T2969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.822700][ T2969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.897673][ T2969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.019265][ T2969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.377613][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.388146][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.420617][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.429622][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.203830][ T5911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.213160][ T5911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.220675][ T5911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.229711][ T5911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.238020][ T5911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.294944][ T2969] bridge_slave_1: left allmulticast mode [ 101.311848][ T2969] bridge_slave_1: left promiscuous mode [ 101.328286][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.360212][ T2969] bridge_slave_0: left allmulticast mode [ 101.371386][ T2969] bridge_slave_0: left promiscuous mode [ 101.377250][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state 2025/12/17 09:23:00 executed programs: 0 [ 101.570655][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.579193][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.587767][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.605482][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.613406][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.884133][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.896122][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.908106][ T2969] bond0 (unregistering): Released all slaves [ 102.024467][ T2969] hsr_slave_0: left promiscuous mode [ 102.032249][ T2969] hsr_slave_1: left promiscuous mode [ 102.038739][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.046714][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.057781][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.066122][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.088809][ T2969] veth1_macvtap: left promiscuous mode [ 102.094792][ T2969] veth0_macvtap: left promiscuous mode [ 102.102486][ T2969] veth1_vlan: left promiscuous mode [ 102.108015][ T2969] veth0_vlan: left promiscuous mode [ 102.811384][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 102.839305][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 103.326671][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 103.562229][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.569562][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.577338][ T5949] bridge_slave_0: entered allmulticast mode [ 103.591536][ T5949] bridge_slave_0: entered promiscuous mode [ 103.611594][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.618829][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.627244][ T5949] bridge_slave_1: entered allmulticast mode [ 103.636004][ T5949] bridge_slave_1: entered promiscuous mode [ 103.662783][ T52] Bluetooth: hci0: command tx timeout [ 103.713725][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.727831][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.181632][ T5949] team0: Port device team_slave_0 added [ 104.193187][ T5949] team0: Port device team_slave_1 added [ 104.264000][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.272007][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.304163][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.332038][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.339023][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.366583][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.568602][ T5949] hsr_slave_0: entered promiscuous mode [ 104.577093][ T5949] hsr_slave_1: entered promiscuous mode [ 105.437179][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.451104][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.465342][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.478447][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.610530][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.648502][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.669056][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.676310][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.697734][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.705027][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.741305][ T52] Bluetooth: hci0: command tx timeout [ 106.025560][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.104519][ T5949] veth0_vlan: entered promiscuous mode [ 106.124853][ T5949] veth1_vlan: entered promiscuous mode [ 106.179061][ T5949] veth0_macvtap: entered promiscuous mode [ 106.194396][ T5949] veth1_macvtap: entered promiscuous mode [ 106.228773][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.251086][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.276981][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.297143][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.323906][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.356671][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.426072][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.437913][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.492123][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.503584][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/17 09:23:05 executed programs: 2 [ 107.821459][ T52] Bluetooth: hci0: command tx timeout [ 109.573936][ T6043] ------------[ cut here ]------------ [ 109.574199][ T6043] [ 109.574205][ T6043] ====================================================== [ 109.574211][ T6043] WARNING: possible circular locking dependency detected [ 109.574218][ T6043] syzkaller #0 Not tainted [ 109.574225][ T6043] ------------------------------------------------------ [ 109.574230][ T6043] syz.0.17/6043 is trying to acquire lock: [ 109.574238][ T6043] ffffffff8e333740 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 109.574280][ T6043] [ 109.574280][ T6043] but task is already holding lock: [ 109.574285][ T6043] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 109.574323][ T6043] [ 109.574323][ T6043] which lock already depends on the new lock. [ 109.574323][ T6043] [ 109.574328][ T6043] [ 109.574328][ T6043] the existing dependency chain (in reverse order) is: [ 109.574333][ T6043] [ 109.574333][ T6043] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 109.574352][ T6043] _raw_spin_lock_nested+0x32/0x50 [ 109.574372][ T6043] raw_spin_rq_lock_nested+0x2a/0x140 [ 109.574391][ T6043] task_rq_lock+0xbc/0x470 [ 109.574410][ T6043] cgroup_move_task+0x92/0x2a0 [ 109.574431][ T6043] css_set_move_task+0x658/0x9e0 [ 109.574451][ T6043] cgroup_post_fork+0x1ef/0x7a0 [ 109.574470][ T6043] copy_process+0x3614/0x3950 [ 109.574490][ T6043] kernel_clone+0x21e/0x820 [ 109.574501][ T6043] user_mode_thread+0xdd/0x140 [ 109.574513][ T6043] rest_init+0x23/0x300 [ 109.574526][ T6043] start_kernel+0x3a7/0x400 [ 109.574538][ T6043] x86_64_start_reservations+0x24/0x30 [ 109.574555][ T6043] x86_64_start_kernel+0x143/0x1c0 [ 109.574571][ T6043] common_startup_64+0x13e/0x147 [ 109.574586][ T6043] [ 109.574586][ T6043] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 109.574604][ T6043] _raw_spin_lock_irqsave+0xa7/0xf0 [ 109.574621][ T6043] try_to_wake_up+0x67/0x12b0 [ 109.574635][ T6043] __wake_up_common_lock+0x137/0x1f0 [ 109.574663][ T6043] tty_port_default_wakeup+0xfb/0x170 [ 109.574681][ T6043] serial8250_tx_chars+0x72e/0x970 [ 109.574696][ T6043] serial8250_handle_irq+0x633/0xbb0 [ 109.574710][ T6043] serial8250_default_handle_irq+0xbf/0x200 [ 109.574728][ T6043] serial8250_interrupt+0x8d/0x180 [ 109.574740][ T6043] __handle_irq_event_percpu+0x285/0xa60 [ 109.574756][ T6043] handle_irq_event+0x8b/0x1e0 [ 109.574772][ T6043] handle_edge_irq+0x23b/0xa10 [ 109.574786][ T6043] __common_interrupt+0x141/0x1f0 [ 109.574802][ T6043] common_interrupt+0xb6/0xe0 [ 109.574816][ T6043] asm_common_interrupt+0x26/0x40 [ 109.574829][ T6043] __asan_memset+0x0/0x50 [ 109.574847][ T6043] unwind_next_frame+0xeae/0x23d0 [ 109.574859][ T6043] arch_stack_walk+0x11c/0x150 [ 109.574871][ T6043] stack_trace_save+0x9c/0xe0 [ 109.574889][ T6043] kasan_save_stack+0x3e/0x60 [ 109.574908][ T6043] kasan_record_aux_stack+0xbd/0xd0 [ 109.574925][ T6043] kmem_cache_free+0x475/0x620 [ 109.574946][ T6043] fput_close_sync+0x113/0x220 [ 109.574963][ T6043] __x64_sys_close+0x7f/0x110 [ 109.574979][ T6043] do_syscall_64+0xfa/0xf80 [ 109.574994][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.575004][ T6043] [ 109.575004][ T6043] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 109.575019][ T6043] _raw_spin_lock_irqsave+0xa7/0xf0 [ 109.575032][ T6043] __wake_up_common_lock+0x2f/0x1f0 [ 109.575045][ T6043] tty_port_default_wakeup+0xfb/0x170 [ 109.575058][ T6043] serial8250_tx_chars+0x72e/0x970 [ 109.575069][ T6043] serial8250_handle_irq+0x633/0xbb0 [ 109.575080][ T6043] serial8250_default_handle_irq+0xbf/0x200 [ 109.575094][ T6043] serial8250_interrupt+0x8d/0x180 [ 109.575103][ T6043] __handle_irq_event_percpu+0x285/0xa60 [ 109.575116][ T6043] handle_irq_event+0x8b/0x1e0 [ 109.575128][ T6043] handle_edge_irq+0x23b/0xa10 [ 109.575139][ T6043] __common_interrupt+0x141/0x1f0 [ 109.575151][ T6043] common_interrupt+0xb6/0xe0 [ 109.575162][ T6043] asm_common_interrupt+0x26/0x40 [ 109.575174][ T6043] pv_native_safe_halt+0x13/0x20 [ 109.575188][ T6043] default_idle+0x13/0x20 [ 109.575197][ T6043] default_idle_call+0x73/0xb0 [ 109.575206][ T6043] do_idle+0x1ea/0x520 [ 109.575215][ T6043] cpu_startup_entry+0x44/0x60 [ 109.575224][ T6043] rest_init+0x2de/0x300 [ 109.575233][ T6043] start_kernel+0x3a7/0x400 [ 109.575242][ T6043] x86_64_start_reservations+0x24/0x30 [ 109.575255][ T6043] x86_64_start_kernel+0x143/0x1c0 [ 109.575268][ T6043] common_startup_64+0x13e/0x147 [ 109.575278][ T6043] [ 109.575278][ T6043] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 109.575293][ T6043] _raw_spin_lock_irqsave+0xa7/0xf0 [ 109.575306][ T6043] serial8250_console_write+0x17e/0x1ba0 [ 109.575319][ T6043] console_flush_all+0x745/0xb60 [ 109.575331][ T6043] console_unlock+0xbb/0x190 [ 109.575341][ T6043] vprintk_emit+0x4f8/0x5f0 [ 109.575351][ T6043] _printk+0xcf/0x120 [ 109.575366][ T6043] register_console+0xa8b/0xf90 [ 109.575378][ T6043] univ8250_console_init+0x3a/0x70 [ 109.575392][ T6043] console_init+0xfc/0x3f0 [ 109.575405][ T6043] start_kernel+0x24d/0x400 [ 109.575419][ T6043] x86_64_start_reservations+0x24/0x30 [ 109.575432][ T6043] x86_64_start_kernel+0x143/0x1c0 [ 109.575445][ T6043] common_startup_64+0x13e/0x147 [ 109.575455][ T6043] [ 109.575455][ T6043] -> #0 (console_owner){....}-{0:0}: [ 109.575470][ T6043] __lock_acquire+0x15a6/0x2cf0 [ 109.575485][ T6043] lock_acquire+0x117/0x340 [ 109.575500][ T6043] console_flush_all+0x6ee/0xb60 [ 109.575512][ T6043] console_unlock+0xbb/0x190 [ 109.575522][ T6043] vprintk_emit+0x4f8/0x5f0 [ 109.575532][ T6043] _printk+0xcf/0x120 [ 109.575547][ T6043] __report_bug+0x305/0x500 [ 109.575560][ T6043] report_bug+0x16a/0x220 [ 109.575573][ T6043] handle_bug+0x98/0x200 [ 109.575582][ T6043] exc_invalid_op+0x1a/0x50 [ 109.575590][ T6043] asm_exc_invalid_op+0x1a/0x20 [ 109.575600][ T6043] sched_change_end+0x4f6/0x640 [ 109.575610][ T6043] rt_mutex_setprio+0x488/0xb70 [ 109.575624][ T6043] remove_waiter+0x7f5/0xaf0 [ 109.575635][ T6043] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 109.575647][ T6043] futex_lock_pi+0x530/0xa90 [ 109.575657][ T6043] do_futex+0x292/0x420 [ 109.575665][ T6043] __se_sys_futex+0x36f/0x400 [ 109.575674][ T6043] do_syscall_64+0xfa/0xf80 [ 109.575688][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.575699][ T6043] [ 109.575699][ T6043] other info that might help us debug this: [ 109.575699][ T6043] [ 109.575702][ T6043] Chain exists of: [ 109.575702][ T6043] console_owner --> &p->pi_lock --> &rq->__lock [ 109.575702][ T6043] [ 109.575719][ T6043] Possible unsafe locking scenario: [ 109.575719][ T6043] [ 109.575722][ T6043] CPU0 CPU1 [ 109.575726][ T6043] ---- ---- [ 109.575729][ T6043] lock(&rq->__lock); [ 109.575736][ T6043] lock(&p->pi_lock); [ 109.575744][ T6043] lock(&rq->__lock); [ 109.575752][ T6043] lock(console_owner); [ 109.575759][ T6043] [ 109.575759][ T6043] *** DEADLOCK *** [ 109.575759][ T6043] [ 109.575762][ T6043] 5 locks held by syz.0.17/6043: [ 109.575769][ T6043] #0: ffff888075065a28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 109.575797][ T6043] #1: ffff888034caa8e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 109.575823][ T6043] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 109.575854][ T6043] #3: ffffffff8e3337a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 109.575885][ T6043] #4: ffffffff8e21b058 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 109.575913][ T6043] [ 109.575913][ T6043] stack backtrace: [ 109.575919][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.575933][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.575940][ T6043] Call Trace: [ 109.575945][ T6043] [ 109.575950][ T6043] dump_stack_lvl+0x189/0x250 [ 109.575962][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.575973][ T6043] ? __pfx__printk+0x10/0x10 [ 109.575990][ T6043] ? print_lock_name+0xde/0x100 [ 109.576007][ T6043] print_circular_bug+0x2e2/0x300 [ 109.576020][ T6043] check_noncircular+0x12e/0x150 [ 109.576033][ T6043] __lock_acquire+0x15a6/0x2cf0 [ 109.576055][ T6043] ? console_flush_all+0x131/0xb60 [ 109.576067][ T6043] lock_acquire+0x117/0x340 [ 109.576083][ T6043] ? console_flush_all+0x131/0xb60 [ 109.576098][ T6043] ? do_raw_spin_unlock+0x122/0x240 [ 109.576111][ T6043] ? console_flush_all+0x131/0xb60 [ 109.576124][ T6043] console_flush_all+0x6ee/0xb60 [ 109.576136][ T6043] ? console_flush_all+0x131/0xb60 [ 109.576150][ T6043] ? console_flush_all+0x131/0xb60 [ 109.576165][ T6043] ? __pfx_console_flush_all+0x10/0x10 [ 109.576181][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 109.576197][ T6043] ? is_printk_cpu_sync_owner+0x32/0x40 [ 109.576213][ T6043] console_unlock+0xbb/0x190 [ 109.576224][ T6043] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 109.576238][ T6043] ? __pfx_console_unlock+0x10/0x10 [ 109.576251][ T6043] vprintk_emit+0x4f8/0x5f0 [ 109.576263][ T6043] ? __pfx_vprintk_emit+0x10/0x10 [ 109.576275][ T6043] ? __lock_acquire+0x6b6/0x2cf0 [ 109.576292][ T6043] ? __lock_acquire+0x6b6/0x2cf0 [ 109.576309][ T6043] _printk+0xcf/0x120 [ 109.576327][ T6043] ? __pfx__printk+0x10/0x10 [ 109.576344][ T6043] ? find_bug+0xa5/0x370 [ 109.576358][ T6043] ? sched_change_end+0x4f6/0x640 [ 109.576369][ T6043] ? sched_change_end+0x4f6/0x640 [ 109.576380][ T6043] __report_bug+0x305/0x500 [ 109.576395][ T6043] ? sched_change_end+0x4f6/0x640 [ 109.576407][ T6043] ? __pfx___report_bug+0x10/0x10 [ 109.576429][ T6043] ? rcu_read_lock_sched_held+0x89/0x100 [ 109.576441][ T6043] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 109.576456][ T6043] ? sched_change_end+0x4f6/0x640 [ 109.576467][ T6043] report_bug+0x16a/0x220 [ 109.576481][ T6043] ? sched_change_end+0x4f6/0x640 [ 109.576492][ T6043] ? sched_change_end+0x4f8/0x640 [ 109.576503][ T6043] handle_bug+0x98/0x200 [ 109.576513][ T6043] exc_invalid_op+0x1a/0x50 [ 109.576523][ T6043] asm_exc_invalid_op+0x1a/0x20 [ 109.576533][ T6043] RIP: 0010:sched_change_end+0x4f6/0x640 [ 109.576546][ T6043] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 58 d6 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 109.576556][ T6043] RSP: 0018:ffffc900030a7850 EFLAGS: 00010046 [ 109.576566][ T6043] RAX: 1ffff110069953d0 RBX: ffffffff8dcbb490 RCX: ffffffff8193232f [ 109.576575][ T6043] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888034ca9e80 [ 109.576582][ T6043] RBP: ffff888034caa128 R08: ffff888034ca9e87 R09: 1ffff110069953d0 [ 109.576591][ T6043] R10: dffffc0000000000 R11: ffffed10069953d1 R12: dffffc0000000000 [ 109.576599][ T6043] R13: ffff888034ca9e80 R14: ffff8880b873ab00 R15: ffff888034ca9e80 [ 109.576609][ T6043] ? sched_change_end+0x4af/0x640 [ 109.576624][ T6043] rt_mutex_setprio+0x488/0xb70 [ 109.576642][ T6043] remove_waiter+0x7f5/0xaf0 [ 109.576655][ T6043] ? lockdep_hardirqs_on+0x98/0x140 [ 109.576671][ T6043] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 109.576684][ T6043] futex_lock_pi+0x530/0xa90 [ 109.576698][ T6043] ? __pfx_futex_lock_pi+0x10/0x10 [ 109.576714][ T6043] ? futex_hash+0x40/0x2d0 [ 109.576727][ T6043] ? futex_hash+0x2ad/0x2d0 [ 109.576743][ T6043] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.576756][ T6043] ? __pfx_futex_wake+0x10/0x10 [ 109.576770][ T6043] ? handle_mm_fault+0xdb/0x32b0 [ 109.576785][ T6043] do_futex+0x292/0x420 [ 109.576795][ T6043] ? __pfx_do_futex+0x10/0x10 [ 109.576807][ T6043] __se_sys_futex+0x36f/0x400 [ 109.576818][ T6043] ? __pfx___se_sys_futex+0x10/0x10 [ 109.576829][ T6043] ? __x64_sys_futex+0x21/0xf0 [ 109.576839][ T6043] do_syscall_64+0xfa/0xf80 [ 109.576855][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.576866][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 109.576878][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.576889][ T6043] RIP: 0033:0x7f142998f749 [ 109.576900][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.576909][ T6043] RSP: 002b:00007ffec9311458 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.576920][ T6043] RAX: ffffffffffffffda RBX: 00007f1429be5fa0 RCX: 00007f142998f749 [ 109.576928][ T6043] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000020000000cffc [ 109.576935][ T6043] RBP: 00007f1429a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.576942][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.576949][ T6043] R13: 00007f1429be5fa0 R14: 00007f1429be5fa0 R15: 0000000000000006 [ 109.576960][ T6043] [ 110.823580][ T6043] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/6043 [ 110.833557][ T6043] Modules linked in: [ 110.837443][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.846536][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.856579][ T6043] RIP: 0010:sched_change_end+0x4f6/0x640 [ 110.862208][ T6043] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 58 d6 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 110.881802][ T6043] RSP: 0018:ffffc900030a7850 EFLAGS: 00010046 [ 110.887861][ T6043] RAX: 1ffff110069953d0 RBX: ffffffff8dcbb490 RCX: ffffffff8193232f [ 110.895821][ T6043] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888034ca9e80 [ 110.903868][ T6043] RBP: ffff888034caa128 R08: ffff888034ca9e87 R09: 1ffff110069953d0 [ 110.911827][ T6043] R10: dffffc0000000000 R11: ffffed10069953d1 R12: dffffc0000000000 [ 110.919792][ T6043] R13: ffff888034ca9e80 R14: ffff8880b873ab00 R15: ffff888034ca9e80 [ 110.927852][ T6043] FS: 0000555563f54500(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 110.936855][ T6043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.943424][ T6043] CR2: 000056163bf09000 CR3: 0000000075390000 CR4: 00000000003526f0 [ 110.951410][ T6043] Call Trace: [ 110.954681][ T6043] [ 110.957604][ T6043] rt_mutex_setprio+0x488/0xb70 [ 110.962450][ T6043] remove_waiter+0x7f5/0xaf0 [ 110.967042][ T6043] ? lockdep_hardirqs_on+0x98/0x140 [ 110.972267][ T6043] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 110.977974][ T6043] futex_lock_pi+0x530/0xa90 [ 110.982551][ T6043] ? __pfx_futex_lock_pi+0x10/0x10 [ 110.987664][ T6043] ? futex_hash+0x40/0x2d0 [ 110.992070][ T6043] ? futex_hash+0x2ad/0x2d0 [ 110.996574][ T6043] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.001870][ T6043] ? __pfx_futex_wake+0x10/0x10 [ 111.006721][ T6043] ? handle_mm_fault+0xdb/0x32b0 [ 111.011652][ T6043] do_futex+0x292/0x420 [ 111.015796][ T6043] ? __pfx_do_futex+0x10/0x10 [ 111.020467][ T6043] __se_sys_futex+0x36f/0x400 [ 111.025129][ T6043] ? __pfx___se_sys_futex+0x10/0x10 [ 111.030311][ T6043] ? __x64_sys_futex+0x21/0xf0 [ 111.035058][ T6043] do_syscall_64+0xfa/0xf80 [ 111.039552][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.045603][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 111.050263][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.056140][ T6043] RIP: 0033:0x7f142998f749 [ 111.060544][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.080137][ T6043] RSP: 002b:00007ffec9311458 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.088538][ T6043] RAX: ffffffffffffffda RBX: 00007f1429be5fa0 RCX: 00007f142998f749 [ 111.096498][ T6043] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000020000000cffc [ 111.104454][ T6043] RBP: 00007f1429a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.112450][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.120440][ T6043] R13: 00007f1429be5fa0 R14: 00007f1429be5fa0 R15: 0000000000000006 [ 111.128421][ T6043] [ 111.131436][ T6043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.138711][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 111.147806][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.157863][ T6043] Call Trace: [ 111.161134][ T6043] [ 111.164054][ T6043] dump_stack_lvl+0x99/0x250 [ 111.168633][ T6043] ? __asan_memcpy+0x40/0x70 [ 111.173216][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.178430][ T6043] ? __pfx__printk+0x10/0x10 [ 111.183039][ T6043] vpanic+0x237/0x6d0 [ 111.187023][ T6043] ? __pfx_vpanic+0x10/0x10 [ 111.191518][ T6043] ? is_bpf_text_address+0x292/0x2b0 [ 111.196817][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 111.202026][ T6043] panic+0xb9/0xc0 [ 111.205754][ T6043] ? __pfx_panic+0x10/0x10 [ 111.210171][ T6043] __warn+0x317/0x4b0 [ 111.214143][ T6043] ? sched_change_end+0x4f6/0x640 [ 111.219152][ T6043] ? sched_change_end+0x4f6/0x640 [ 111.224251][ T6043] __report_bug+0x288/0x500 [ 111.228772][ T6043] ? sched_change_end+0x4f6/0x640 [ 111.233796][ T6043] ? __pfx___report_bug+0x10/0x10 [ 111.238818][ T6043] ? rcu_read_lock_sched_held+0x89/0x100 [ 111.244543][ T6043] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 111.250601][ T6043] ? sched_change_end+0x4f6/0x640 [ 111.255644][ T6043] report_bug+0x16a/0x220 [ 111.259981][ T6043] ? sched_change_end+0x4f6/0x640 [ 111.265019][ T6043] ? sched_change_end+0x4f8/0x640 [ 111.270044][ T6043] handle_bug+0x98/0x200 [ 111.274280][ T6043] exc_invalid_op+0x1a/0x50 [ 111.278775][ T6043] asm_exc_invalid_op+0x1a/0x20 [ 111.283617][ T6043] RIP: 0010:sched_change_end+0x4f6/0x640 [ 111.289243][ T6043] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 58 d6 09 cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 111.308836][ T6043] RSP: 0018:ffffc900030a7850 EFLAGS: 00010046 [ 111.314901][ T6043] RAX: 1ffff110069953d0 RBX: ffffffff8dcbb490 RCX: ffffffff8193232f [ 111.322864][ T6043] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888034ca9e80 [ 111.330825][ T6043] RBP: ffff888034caa128 R08: ffff888034ca9e87 R09: 1ffff110069953d0 [ 111.338787][ T6043] R10: dffffc0000000000 R11: ffffed10069953d1 R12: dffffc0000000000 [ 111.346750][ T6043] R13: ffff888034ca9e80 R14: ffff8880b873ab00 R15: ffff888034ca9e80 [ 111.354715][ T6043] ? sched_change_end+0x4af/0x640 [ 111.359736][ T6043] rt_mutex_setprio+0x488/0xb70 [ 111.364585][ T6043] remove_waiter+0x7f5/0xaf0 [ 111.369168][ T6043] ? lockdep_hardirqs_on+0x98/0x140 [ 111.374367][ T6043] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 111.380076][ T6043] futex_lock_pi+0x530/0xa90 [ 111.384673][ T6043] ? __pfx_futex_lock_pi+0x10/0x10 [ 111.389778][ T6043] ? futex_hash+0x40/0x2d0 [ 111.394197][ T6043] ? futex_hash+0x2ad/0x2d0 [ 111.398712][ T6043] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.403994][ T6043] ? __pfx_futex_wake+0x10/0x10 [ 111.408839][ T6043] ? handle_mm_fault+0xdb/0x32b0 [ 111.413772][ T6043] do_futex+0x292/0x420 [ 111.417918][ T6043] ? __pfx_do_futex+0x10/0x10 [ 111.422581][ T6043] __se_sys_futex+0x36f/0x400 [ 111.427506][ T6043] ? __pfx___se_sys_futex+0x10/0x10 [ 111.432700][ T6043] ? __x64_sys_futex+0x21/0xf0 [ 111.437455][ T6043] do_syscall_64+0xfa/0xf80 [ 111.441953][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.448024][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 111.452691][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.458662][ T6043] RIP: 0033:0x7f142998f749 [ 111.463155][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.482747][ T6043] RSP: 002b:00007ffec9311458 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.491244][ T6043] RAX: ffffffffffffffda RBX: 00007f1429be5fa0 RCX: 00007f142998f749 [ 111.499202][ T6043] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000020000000cffc [ 111.507177][ T6043] RBP: 00007f1429a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.515135][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.523107][ T6043] R13: 00007f1429be5fa0 R14: 00007f1429be5fa0 R15: 0000000000000006 [ 111.531084][ T6043] [ 112.628072][ T6043] Shutting down cpus with NMI [ 112.632962][ T6043] Kernel Offset: disabled [ 112.637283][ T6043] Rebooting in 86400 seconds..