Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. 2025/12/26 03:27:42 parsed 1 programs [ 106.230278][ T5833] cgroup: Unknown subsys name 'net' [ 106.340168][ T5833] cgroup: Unknown subsys name 'cpuset' [ 106.351418][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 108.270488][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.462033][ T25] cfg80211: failed to load regulatory.db [ 111.783376][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.489288][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.499025][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.508422][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.518876][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.527788][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.810624][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 115.947676][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.956773][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.965410][ T5912] bridge_slave_0: entered allmulticast mode [ 115.978204][ T5912] bridge_slave_0: entered promiscuous mode [ 115.990375][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.998904][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.007349][ T5912] bridge_slave_1: entered allmulticast mode [ 116.016580][ T5912] bridge_slave_1: entered promiscuous mode [ 116.088072][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.106737][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.171436][ T5912] team0: Port device team_slave_0 added [ 116.181412][ T5912] team0: Port device team_slave_1 added [ 116.216376][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.224747][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.253961][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.268949][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.276828][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.304670][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.360857][ T5912] hsr_slave_0: entered promiscuous mode [ 116.368258][ T5912] hsr_slave_1: entered promiscuous mode [ 116.577441][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.592288][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.608452][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.623291][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.663718][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.671471][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.681015][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.689025][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.766127][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.790243][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.800330][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.820685][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.839751][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.848371][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.868662][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.876292][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.099163][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.165740][ T5912] veth0_vlan: entered promiscuous mode [ 117.184019][ T5912] veth1_vlan: entered promiscuous mode [ 117.228886][ T5912] veth0_macvtap: entered promiscuous mode [ 117.241152][ T5912] veth1_macvtap: entered promiscuous mode [ 117.268339][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.288483][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.306809][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.321103][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.332958][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.343279][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.509360][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.598412][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.683178][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.701272][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.713399][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.772967][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.785707][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.821303][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/26 03:27:58 executed programs: 0 [ 118.491133][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.502117][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.513802][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.528927][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.538409][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.767921][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 118.883993][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.892732][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.902398][ T5944] bridge_slave_0: entered allmulticast mode [ 118.913659][ T5944] bridge_slave_0: entered promiscuous mode [ 118.923232][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.930735][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.939902][ T5944] bridge_slave_1: entered allmulticast mode [ 118.948378][ T5944] bridge_slave_1: entered promiscuous mode [ 118.994958][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.009961][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.054559][ T5944] team0: Port device team_slave_0 added [ 119.064021][ T5944] team0: Port device team_slave_1 added [ 119.102393][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.111145][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.141620][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.158255][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.165641][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.196472][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.254042][ T5944] hsr_slave_0: entered promiscuous mode [ 119.261955][ T5944] hsr_slave_1: entered promiscuous mode [ 119.268982][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 119.275234][ T5944] Cannot create hsr debugfs directory [ 119.795871][ T12] bridge_slave_1: left allmulticast mode [ 119.802819][ T12] bridge_slave_1: left promiscuous mode [ 119.810963][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.828776][ T12] bridge_slave_0: left allmulticast mode [ 119.835034][ T12] bridge_slave_0: left promiscuous mode [ 119.841366][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.162949][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.176779][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.188097][ T12] bond0 (unregistering): Released all slaves [ 120.293220][ T12] hsr_slave_0: left promiscuous mode [ 120.310582][ T12] hsr_slave_1: left promiscuous mode [ 120.319370][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.329452][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.340612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.348480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.372997][ T12] veth1_macvtap: left promiscuous mode [ 120.379078][ T12] veth0_macvtap: left promiscuous mode [ 120.385172][ T12] veth1_vlan: left promiscuous mode [ 120.392136][ T12] veth0_vlan: left promiscuous mode [ 120.625113][ T52] Bluetooth: hci0: command tx timeout [ 120.974782][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.022969][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.758900][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.781604][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.795200][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.927503][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.220103][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.285417][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.310038][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.318929][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.355486][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.363688][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.696319][ T52] Bluetooth: hci0: command tx timeout [ 122.714220][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.799899][ T5944] veth0_vlan: entered promiscuous mode [ 122.818598][ T5944] veth1_vlan: entered promiscuous mode [ 122.875829][ T5944] veth0_macvtap: entered promiscuous mode [ 122.892606][ T5944] veth1_macvtap: entered promiscuous mode [ 122.928798][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.952739][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.979642][ T1316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.002933][ T1316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.025567][ T1316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.062363][ T1316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.141368][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.158150][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.208275][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.218481][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.776303][ T52] Bluetooth: hci0: command tx timeout [ 126.292635][ T6012] ------------[ cut here ]------------ [ 126.293350][ T6012] [ 126.293357][ T6012] ====================================================== [ 126.293363][ T6012] WARNING: possible circular locking dependency detected [ 126.293377][ T6012] syzkaller #0 Not tainted [ 126.293384][ T6012] ------------------------------------------------------ [ 126.293389][ T6012] syz.0.17/6012 is trying to acquire lock: [ 126.293396][ T6012] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 126.293440][ T6012] [ 126.293440][ T6012] but task is already holding lock: [ 126.293444][ T6012] ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 126.293476][ T6012] [ 126.293476][ T6012] which lock already depends on the new lock. [ 126.293476][ T6012] [ 126.293481][ T6012] [ 126.293481][ T6012] the existing dependency chain (in reverse order) is: [ 126.293486][ T6012] [ 126.293486][ T6012] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 126.293504][ T6012] _raw_spin_lock_nested+0x32/0x50 [ 126.293524][ T6012] raw_spin_rq_lock_nested+0x2a/0x140 [ 126.293537][ T6012] task_rq_lock+0xbc/0x470 [ 126.293549][ T6012] cgroup_move_task+0x92/0x2a0 [ 126.293567][ T6012] css_set_move_task+0x658/0x9e0 [ 126.293615][ T6012] cgroup_post_fork+0x1ef/0x7a0 [ 126.293630][ T6012] copy_process+0x3614/0x3950 [ 126.293646][ T6012] kernel_clone+0x21e/0x820 [ 126.293662][ T6012] user_mode_thread+0xdd/0x140 [ 126.293679][ T6012] rest_init+0x23/0x300 [ 126.293693][ T6012] start_kernel+0x3ac/0x400 [ 126.293710][ T6012] x86_64_start_reservations+0x24/0x30 [ 126.293733][ T6012] x86_64_start_kernel+0x143/0x1c0 [ 126.293753][ T6012] common_startup_64+0x13e/0x147 [ 126.293774][ T6012] [ 126.293774][ T6012] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 126.293794][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0 [ 126.293817][ T6012] try_to_wake_up+0x67/0x12b0 [ 126.293837][ T6012] create_worker+0x503/0x720 [ 126.293858][ T6012] workqueue_init+0x3ea/0x690 [ 126.293881][ T6012] kernel_init_freeable+0x302/0x4b0 [ 126.293898][ T6012] kernel_init+0x1d/0x1d0 [ 126.293912][ T6012] ret_from_fork+0x599/0xb30 [ 126.293925][ T6012] ret_from_fork_asm+0x1a/0x30 [ 126.293953][ T6012] [ 126.293953][ T6012] -> #3 (&pool->lock){-.-.}-{2:2}: [ 126.293973][ T6012] _raw_spin_lock+0x2e/0x40 [ 126.293989][ T6012] __queue_work+0x7eb/0xf90 [ 126.294005][ T6012] queue_work_on+0x181/0x270 [ 126.294020][ T6012] rpm_suspend+0xe44/0x1700 [ 126.294042][ T6012] __pm_runtime_idle+0x12f/0x1a0 [ 126.294064][ T6012] __device_attach+0x342/0x430 [ 126.294077][ T6012] device_initial_probe+0xa1/0xd0 [ 126.294090][ T6012] bus_probe_device+0x12a/0x220 [ 126.294109][ T6012] device_add+0x7b6/0xb80 [ 126.294130][ T6012] serial_base_port_add+0x18f/0x260 [ 126.294151][ T6012] serial_core_register_port+0x369/0x2800 [ 126.294166][ T6012] serial8250_register_8250_port+0x1658/0x1fd0 [ 126.294191][ T6012] serial_pnp_probe+0x527/0x7d0 [ 126.294204][ T6012] pnp_device_probe+0x30b/0x4c0 [ 126.294218][ T6012] really_probe+0x26d/0xad0 [ 126.294231][ T6012] __driver_probe_device+0x18c/0x320 [ 126.294245][ T6012] driver_probe_device+0x4f/0x240 [ 126.294259][ T6012] __driver_attach+0x349/0x650 [ 126.294272][ T6012] bus_for_each_dev+0x233/0x2b0 [ 126.294292][ T6012] bus_add_driver+0x345/0x670 [ 126.294310][ T6012] driver_register+0x23a/0x320 [ 126.294325][ T6012] serial8250_init+0x8f/0x160 [ 126.294349][ T6012] do_one_initcall+0x1fb/0x820 [ 126.294368][ T6012] do_initcall_level+0x104/0x190 [ 126.294385][ T6012] do_initcalls+0x59/0xa0 [ 126.294401][ T6012] kernel_init_freeable+0x334/0x4b0 [ 126.294417][ T6012] kernel_init+0x1d/0x1d0 [ 126.294431][ T6012] ret_from_fork+0x599/0xb30 [ 126.294444][ T6012] ret_from_fork_asm+0x1a/0x30 [ 126.294464][ T6012] [ 126.294464][ T6012] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 126.294485][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0 [ 126.294503][ T6012] __pm_runtime_resume+0x10f/0x180 [ 126.294525][ T6012] __uart_start+0x171/0x460 [ 126.294539][ T6012] uart_write+0xdc/0x130 [ 126.294553][ T6012] n_tty_write+0xd78/0x12a0 [ 126.294573][ T6012] file_tty_write+0x559/0xa20 [ 126.294587][ T6012] vfs_write+0x5c9/0xb30 [ 126.294603][ T6012] ksys_write+0x145/0x250 [ 126.294617][ T6012] do_syscall_64+0xfa/0xf80 [ 126.294637][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.294652][ T6012] [ 126.294652][ T6012] -> #1 (&port_lock_key){-...}-{3:3}: [ 126.294672][ T6012] _raw_spin_lock_irqsave+0xa7/0xf0 [ 126.294690][ T6012] serial8250_console_write+0x17e/0x1ba0 [ 126.294710][ T6012] console_flush_all+0x745/0xb60 [ 126.294730][ T6012] console_unlock+0xbb/0x190 [ 126.294748][ T6012] vprintk_emit+0x4f8/0x5f0 [ 126.294766][ T6012] _printk+0xcf/0x120 [ 126.294787][ T6012] register_console+0xa8b/0xf90 [ 126.294814][ T6012] univ8250_console_init+0x3a/0x70 [ 126.294837][ T6012] console_init+0xfc/0x3f0 [ 126.294858][ T6012] start_kernel+0x252/0x400 [ 126.294873][ T6012] x86_64_start_reservations+0x24/0x30 [ 126.294894][ T6012] x86_64_start_kernel+0x143/0x1c0 [ 126.294928][ T6012] common_startup_64+0x13e/0x147 [ 126.294954][ T6012] [ 126.294954][ T6012] -> #0 (console_owner){....}-{0:0}: [ 126.294974][ T6012] __lock_acquire+0x15a6/0x2cf0 [ 126.294989][ T6012] lock_acquire+0x117/0x340 [ 126.295003][ T6012] console_flush_all+0x6ee/0xb60 [ 126.295023][ T6012] console_unlock+0xbb/0x190 [ 126.295041][ T6012] vprintk_emit+0x4f8/0x5f0 [ 126.295063][ T6012] _printk+0xcf/0x120 [ 126.295084][ T6012] __report_bug+0x305/0x500 [ 126.295103][ T6012] report_bug+0x16a/0x220 [ 126.295121][ T6012] handle_bug+0x98/0x200 [ 126.295132][ T6012] exc_invalid_op+0x1a/0x50 [ 126.295144][ T6012] asm_exc_invalid_op+0x1a/0x20 [ 126.295158][ T6012] sched_change_end+0x4f6/0x640 [ 126.295176][ T6012] rt_mutex_setprio+0x488/0xb70 [ 126.295189][ T6012] remove_waiter+0x7f5/0xaf0 [ 126.295204][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 126.295219][ T6012] futex_lock_pi+0x530/0xa90 [ 126.295238][ T6012] do_futex+0x292/0x420 [ 126.295253][ T6012] __se_sys_futex+0x36f/0x400 [ 126.295270][ T6012] do_syscall_64+0xfa/0xf80 [ 126.295290][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.295304][ T6012] [ 126.295304][ T6012] other info that might help us debug this: [ 126.295304][ T6012] [ 126.295310][ T6012] Chain exists of: [ 126.295310][ T6012] console_owner --> &p->pi_lock --> &rq->__lock [ 126.295310][ T6012] [ 126.295333][ T6012] Possible unsafe locking scenario: [ 126.295333][ T6012] [ 126.295338][ T6012] CPU0 CPU1 [ 126.295343][ T6012] ---- ---- [ 126.295348][ T6012] lock(&rq->__lock); [ 126.295358][ T6012] lock(&p->pi_lock); [ 126.295369][ T6012] lock(&rq->__lock); [ 126.295379][ T6012] lock(console_owner); [ 126.295389][ T6012] [ 126.295389][ T6012] *** DEADLOCK *** [ 126.295389][ T6012] [ 126.295394][ T6012] 5 locks held by syz.0.17/6012: [ 126.295402][ T6012] #0: ffff8880283c0428 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 126.295441][ T6012] #1: ffff8880265fc768 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 126.295477][ T6012] #2: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 126.295514][ T6012] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 126.295556][ T6012] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 126.295598][ T6012] [ 126.295598][ T6012] stack backtrace: [ 126.295624][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.295649][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.295665][ T6012] Call Trace: [ 126.295671][ T6012] [ 126.295678][ T6012] dump_stack_lvl+0x189/0x250 [ 126.295698][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.295716][ T6012] ? __pfx__printk+0x10/0x10 [ 126.295738][ T6012] ? print_lock_name+0xde/0x100 [ 126.295771][ T6012] print_circular_bug+0x2e2/0x300 [ 126.295791][ T6012] check_noncircular+0x12e/0x150 [ 126.295811][ T6012] __lock_acquire+0x15a6/0x2cf0 [ 126.295835][ T6012] ? console_flush_all+0x131/0xb60 [ 126.295854][ T6012] lock_acquire+0x117/0x340 [ 126.295867][ T6012] ? console_flush_all+0x131/0xb60 [ 126.295890][ T6012] ? do_raw_spin_unlock+0x122/0x240 [ 126.295911][ T6012] ? console_flush_all+0x131/0xb60 [ 126.295930][ T6012] console_flush_all+0x6ee/0xb60 [ 126.295954][ T6012] ? console_flush_all+0x131/0xb60 [ 126.295975][ T6012] ? console_flush_all+0x131/0xb60 [ 126.295997][ T6012] ? __pfx_console_flush_all+0x10/0x10 [ 126.296020][ T6012] ? is_printk_cpu_sync_owner+0x32/0x40 [ 126.296044][ T6012] console_unlock+0xbb/0x190 [ 126.296061][ T6012] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 126.296082][ T6012] ? __pfx_console_unlock+0x10/0x10 [ 126.296103][ T6012] vprintk_emit+0x4f8/0x5f0 [ 126.296122][ T6012] ? __pfx_vprintk_emit+0x10/0x10 [ 126.296141][ T6012] ? __lock_acquire+0x6b6/0x2cf0 [ 126.296156][ T6012] ? __lock_acquire+0x6b6/0x2cf0 [ 126.296173][ T6012] _printk+0xcf/0x120 [ 126.296195][ T6012] ? __pfx__printk+0x10/0x10 [ 126.296217][ T6012] ? find_bug+0xa5/0x370 [ 126.296233][ T6012] ? sched_change_end+0x4f6/0x640 [ 126.296251][ T6012] ? sched_change_end+0x4f6/0x640 [ 126.296269][ T6012] __report_bug+0x305/0x500 [ 126.296287][ T6012] ? sched_change_end+0x4f6/0x640 [ 126.296307][ T6012] ? __pfx___report_bug+0x10/0x10 [ 126.296325][ T6012] ? rcu_read_lock_sched_held+0x89/0x100 [ 126.296344][ T6012] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 126.296366][ T6012] ? sched_change_end+0x4f6/0x640 [ 126.296384][ T6012] report_bug+0x16a/0x220 [ 126.296402][ T6012] ? sched_change_end+0x4f6/0x640 [ 126.296418][ T6012] ? sched_change_end+0x4f8/0x640 [ 126.296435][ T6012] handle_bug+0x98/0x200 [ 126.296448][ T6012] exc_invalid_op+0x1a/0x50 [ 126.296460][ T6012] asm_exc_invalid_op+0x1a/0x20 [ 126.296473][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640 [ 126.296493][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 126.296505][ T6012] RSP: 0018:ffffc90003557850 EFLAGS: 00010046 [ 126.296517][ T6012] RAX: 1ffff11004cbf7a0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 126.296528][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880265fbd00 [ 126.296538][ T6012] RBP: ffff8880265fbfa8 R08: ffff8880265fbd07 R09: 1ffff11004cbf7a0 [ 126.296548][ T6012] R10: dffffc0000000000 R11: ffffed1004cbf7a1 R12: dffffc0000000000 [ 126.296559][ T6012] R13: ffff8880265fbd00 R14: ffff8880b863ab00 R15: ffff8880265fbd00 [ 126.296573][ T6012] ? sched_change_end+0x4af/0x640 [ 126.296597][ T6012] rt_mutex_setprio+0x488/0xb70 [ 126.296614][ T6012] remove_waiter+0x7f5/0xaf0 [ 126.296631][ T6012] ? lockdep_hardirqs_on+0x98/0x140 [ 126.296652][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 126.296668][ T6012] futex_lock_pi+0x530/0xa90 [ 126.296690][ T6012] ? __pfx_futex_lock_pi+0x10/0x10 [ 126.296717][ T6012] ? futex_hash+0x40/0x2d0 [ 126.296730][ T6012] ? futex_hash+0x2ad/0x2d0 [ 126.296743][ T6012] ? __pfx_futex_wake_mark+0x10/0x10 [ 126.296764][ T6012] ? __pfx_futex_wake+0x10/0x10 [ 126.296786][ T6012] ? handle_mm_fault+0xdb/0x32b0 [ 126.296810][ T6012] do_futex+0x292/0x420 [ 126.296828][ T6012] ? __pfx_do_futex+0x10/0x10 [ 126.296846][ T6012] __se_sys_futex+0x36f/0x400 [ 126.296869][ T6012] ? __pfx___se_sys_futex+0x10/0x10 [ 126.297081][ T6012] ? __x64_sys_futex+0x21/0xf0 [ 126.297101][ T6012] do_syscall_64+0xfa/0xf80 [ 126.297123][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.297138][ T6012] ? clear_bhb_loop+0x60/0xb0 [ 126.297155][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.297169][ T6012] RIP: 0033:0x7f2df758f749 [ 126.297194][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.297205][ T6012] RSP: 002b:00007fff00d4cd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.297221][ T6012] RAX: ffffffffffffffda RBX: 00007f2df77e5fa0 RCX: 00007f2df758f749 [ 126.297232][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 126.297241][ T6012] RBP: 00007f2df7613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 126.297251][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.297259][ T6012] R13: 00007f2df77e5fa0 R14: 00007f2df77e5fa0 R15: 0000000000000006 [ 126.297276][ T6012] [ 127.753335][ T6012] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#1: syz.0.17/6012 [ 127.764497][ T6012] Modules linked in: [ 127.768804][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 127.779838][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.791496][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640 [ 127.797797][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 127.820228][ T6012] RSP: 0018:ffffc90003557850 EFLAGS: 00010046 [ 127.827433][ T6012] RAX: 1ffff11004cbf7a0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 127.836148][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880265fbd00 [ 127.844711][ T6012] RBP: ffff8880265fbfa8 R08: ffff8880265fbd07 R09: 1ffff11004cbf7a0 [ 127.853385][ T6012] R10: dffffc0000000000 R11: ffffed1004cbf7a1 R12: dffffc0000000000 [ 127.862259][ T6012] R13: ffff8880265fbd00 R14: ffff8880b863ab00 R15: ffff8880265fbd00 [ 127.870842][ T6012] FS: 000055556536b500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 127.880809][ T6012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.888005][ T6012] CR2: 000055ea4c948138 CR3: 0000000074c9a000 CR4: 00000000003526f0 [ 127.896364][ T6012] Call Trace: [ 127.899771][ T6012] [ 127.903022][ T6012] rt_mutex_setprio+0x488/0xb70 [ 127.908605][ T6012] remove_waiter+0x7f5/0xaf0 [ 127.914505][ T6012] ? lockdep_hardirqs_on+0x98/0x140 [ 127.919845][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 127.926888][ T6012] futex_lock_pi+0x530/0xa90 [ 127.931701][ T6012] ? __pfx_futex_lock_pi+0x10/0x10 [ 127.937218][ T6012] ? futex_hash+0x40/0x2d0 [ 127.942006][ T6012] ? futex_hash+0x2ad/0x2d0 [ 127.947664][ T6012] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.954154][ T6012] ? __pfx_futex_wake+0x10/0x10 [ 127.960008][ T6012] ? handle_mm_fault+0xdb/0x32b0 [ 127.965242][ T6012] do_futex+0x292/0x420 [ 127.970703][ T6012] ? __pfx_do_futex+0x10/0x10 [ 127.976369][ T6012] __se_sys_futex+0x36f/0x400 [ 127.982496][ T6012] ? __pfx___se_sys_futex+0x10/0x10 [ 127.989631][ T6012] ? __x64_sys_futex+0x21/0xf0 [ 127.996558][ T6012] do_syscall_64+0xfa/0xf80 [ 128.002141][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.009249][ T6012] ? clear_bhb_loop+0x60/0xb0 [ 128.014050][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.020407][ T6012] RIP: 0033:0x7f2df758f749 [ 128.025342][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.048812][ T6012] RSP: 002b:00007fff00d4cd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.058529][ T6012] RAX: ffffffffffffffda RBX: 00007f2df77e5fa0 RCX: 00007f2df758f749 [ 128.067306][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 128.076290][ T6012] RBP: 00007f2df7613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 128.085256][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.093800][ T6012] R13: 00007f2df77e5fa0 R14: 00007f2df77e5fa0 R15: 0000000000000006 [ 128.102899][ T6012] [ 128.106628][ T6012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.114607][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.124440][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.135734][ T6012] Call Trace: [ 128.141586][ T6012] [ 128.145525][ T6012] dump_stack_lvl+0x99/0x250 [ 128.150675][ T6012] ? __asan_memcpy+0x40/0x70 [ 128.157963][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.164244][ T6012] ? __pfx__printk+0x10/0x10 [ 128.169524][ T6012] vpanic+0x237/0x6d0 [ 128.176200][ T6012] ? __pfx_vpanic+0x10/0x10 [ 128.181404][ T6012] ? is_bpf_text_address+0x292/0x2b0 [ 128.187663][ T6012] ? is_bpf_text_address+0x26/0x2b0 [ 128.193789][ T6012] panic+0xb9/0xc0 [ 128.197746][ T6012] ? __pfx_panic+0x10/0x10 [ 128.202611][ T6012] __warn+0x317/0x4b0 [ 128.207018][ T6012] ? sched_change_end+0x4f6/0x640 [ 128.212775][ T6012] ? sched_change_end+0x4f6/0x640 [ 128.218008][ T6012] __report_bug+0x288/0x500 [ 128.223412][ T6012] ? sched_change_end+0x4f6/0x640 [ 128.229697][ T6012] ? __pfx___report_bug+0x10/0x10 [ 128.235424][ T6012] ? rcu_read_lock_sched_held+0x89/0x100 [ 128.242724][ T6012] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 128.251525][ T6012] ? sched_change_end+0x4f6/0x640 [ 128.257131][ T6012] report_bug+0x16a/0x220 [ 128.262355][ T6012] ? sched_change_end+0x4f6/0x640 [ 128.267937][ T6012] ? sched_change_end+0x4f8/0x640 [ 128.273425][ T6012] handle_bug+0x98/0x200 [ 128.277883][ T6012] exc_invalid_op+0x1a/0x50 [ 128.283082][ T6012] asm_exc_invalid_op+0x1a/0x20 [ 128.288752][ T6012] RIP: 0010:sched_change_end+0x4f6/0x640 [ 128.295321][ T6012] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 128.317809][ T6012] RSP: 0018:ffffc90003557850 EFLAGS: 00010046 [ 128.324738][ T6012] RAX: 1ffff11004cbf7a0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 128.334824][ T6012] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880265fbd00 [ 128.343694][ T6012] RBP: ffff8880265fbfa8 R08: ffff8880265fbd07 R09: 1ffff11004cbf7a0 [ 128.354216][ T6012] R10: dffffc0000000000 R11: ffffed1004cbf7a1 R12: dffffc0000000000 [ 128.362743][ T6012] R13: ffff8880265fbd00 R14: ffff8880b863ab00 R15: ffff8880265fbd00 [ 128.372127][ T6012] ? sched_change_end+0x4af/0x640 [ 128.378689][ T6012] rt_mutex_setprio+0x488/0xb70 [ 128.384172][ T6012] remove_waiter+0x7f5/0xaf0 [ 128.390838][ T6012] ? lockdep_hardirqs_on+0x98/0x140 [ 128.396493][ T6012] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 128.402780][ T6012] futex_lock_pi+0x530/0xa90 [ 128.408310][ T6012] ? __pfx_futex_lock_pi+0x10/0x10 [ 128.414019][ T6012] ? futex_hash+0x40/0x2d0 [ 128.419354][ T6012] ? futex_hash+0x2ad/0x2d0 [ 128.424846][ T6012] ? __pfx_futex_wake_mark+0x10/0x10 [ 128.431024][ T6012] ? __pfx_futex_wake+0x10/0x10 [ 128.436194][ T6012] ? handle_mm_fault+0xdb/0x32b0 [ 128.442073][ T6012] do_futex+0x292/0x420 [ 128.447408][ T6012] ? __pfx_do_futex+0x10/0x10 [ 128.452195][ T6012] __se_sys_futex+0x36f/0x400 [ 128.458100][ T6012] ? __pfx___se_sys_futex+0x10/0x10 [ 128.464389][ T6012] ? __x64_sys_futex+0x21/0xf0 [ 128.469790][ T6012] do_syscall_64+0xfa/0xf80 [ 128.475734][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.482475][ T6012] ? clear_bhb_loop+0x60/0xb0 [ 128.488159][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.494894][ T6012] RIP: 0033:0x7f2df758f749 [ 128.499808][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.522255][ T6012] RSP: 002b:00007fff00d4cd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.531384][ T6012] RAX: ffffffffffffffda RBX: 00007f2df77e5fa0 RCX: 00007f2df758f749 [ 128.540528][ T6012] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 128.549753][ T6012] RBP: 00007f2df7613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 128.559604][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.569305][ T6012] R13: 00007f2df77e5fa0 R14: 00007f2df77e5fa0 R15: 0000000000000006 [ 128.580785][ T6012] [ 129.786224][ T6012] Shutting down cpus with NMI [ 129.792283][ T6012] Kernel Offset: disabled [ 129.797741][ T6012] Rebooting in 86400 seconds..