Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. 2025/12/28 13:27:50 parsed 1 programs [ 95.326809][ T5829] cgroup: Unknown subsys name 'net' [ 95.484118][ T5829] cgroup: Unknown subsys name 'cpuset' [ 95.494126][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.281714][ T37] cfg80211: failed to load regulatory.db [ 97.321354][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.388691][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.568270][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.577115][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.613810][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.628163][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.986435][ T5900] chnl_net:caif_netlink_parms(): no params data found [ 104.112599][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.121632][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.129042][ T5900] bridge_slave_0: entered allmulticast mode [ 104.137609][ T5900] bridge_slave_0: entered promiscuous mode [ 104.154673][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.163842][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.171169][ T5900] bridge_slave_1: entered allmulticast mode [ 104.179423][ T5900] bridge_slave_1: entered promiscuous mode [ 104.218480][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.235652][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.277950][ T5900] team0: Port device team_slave_0 added [ 104.288531][ T5900] team0: Port device team_slave_1 added [ 104.325329][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.332893][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.361684][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.375966][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.384964][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.412408][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.466564][ T5900] hsr_slave_0: entered promiscuous mode [ 104.474014][ T5900] hsr_slave_1: entered promiscuous mode [ 104.675870][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.689234][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.700845][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.713665][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.809537][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.836099][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.850588][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.858111][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.877048][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.884590][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.097960][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.157782][ T5900] veth0_vlan: entered promiscuous mode [ 105.172220][ T5900] veth1_vlan: entered promiscuous mode [ 105.206003][ T5900] veth0_macvtap: entered promiscuous mode [ 105.216711][ T5900] veth1_macvtap: entered promiscuous mode [ 105.243922][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.261820][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.282398][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.292974][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.303641][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.313855][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.456057][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.549770][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.639543][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.673650][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.682329][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.690574][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.699082][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.708227][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.740748][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/28 13:28:05 executed programs: 0 [ 106.435349][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.444958][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.454010][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.462666][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.472085][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.742018][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 106.850157][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.858197][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.867848][ T5938] bridge_slave_0: entered allmulticast mode [ 106.876205][ T5938] bridge_slave_0: entered promiscuous mode [ 106.887405][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.895359][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.902967][ T5938] bridge_slave_1: entered allmulticast mode [ 106.911383][ T5938] bridge_slave_1: entered promiscuous mode [ 106.952909][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.968046][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.019062][ T5938] team0: Port device team_slave_0 added [ 107.029453][ T5938] team0: Port device team_slave_1 added [ 107.068014][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.075311][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.103576][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.116780][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.125521][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.153736][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.211481][ T5938] hsr_slave_0: entered promiscuous mode [ 107.218280][ T5938] hsr_slave_1: entered promiscuous mode [ 107.224938][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 107.231090][ T5938] Cannot create hsr debugfs directory [ 108.562567][ T52] Bluetooth: hci0: command tx timeout [ 108.589271][ T36] bridge_slave_1: left allmulticast mode [ 108.595256][ T36] bridge_slave_1: left promiscuous mode [ 108.603163][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.615282][ T36] bridge_slave_0: left allmulticast mode [ 108.623834][ T36] bridge_slave_0: left promiscuous mode [ 108.629717][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.905807][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.919570][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.934923][ T36] bond0 (unregistering): Released all slaves [ 109.031045][ T36] hsr_slave_0: left promiscuous mode [ 109.038067][ T36] hsr_slave_1: left promiscuous mode [ 109.045325][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.054676][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.067695][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.082149][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.107363][ T36] veth1_macvtap: left promiscuous mode [ 109.113680][ T36] veth0_macvtap: left promiscuous mode [ 109.120822][ T36] veth1_vlan: left promiscuous mode [ 109.127460][ T36] veth0_vlan: left promiscuous mode [ 109.685494][ T36] team0 (unregistering): Port device team_slave_1 removed [ 109.723086][ T36] team0 (unregistering): Port device team_slave_0 removed [ 110.414751][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.429187][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.612810][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.636928][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.641572][ T52] Bluetooth: hci0: command tx timeout [ 110.862550][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.893488][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.906144][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.913699][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.938328][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.945644][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.154814][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.208521][ T5938] veth0_vlan: entered promiscuous mode [ 111.224118][ T5938] veth1_vlan: entered promiscuous mode [ 111.259585][ T5938] veth0_macvtap: entered promiscuous mode [ 111.271982][ T5938] veth1_macvtap: entered promiscuous mode [ 111.300815][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.316643][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.332421][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.343717][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.355648][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.367195][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.443742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.452416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/28 13:28:10 executed programs: 2 [ 111.494335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.504562][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.720308][ T52] Bluetooth: hci0: command tx timeout [ 114.560077][ T5987] ------------[ cut here ]------------ [ 114.560754][ T5987] [ 114.560763][ T5987] ====================================================== [ 114.560769][ T5987] WARNING: possible circular locking dependency detected [ 114.560783][ T5987] syzkaller #0 Not tainted [ 114.560791][ T5987] ------------------------------------------------------ [ 114.560797][ T5987] syz.0.17/5987 is trying to acquire lock: [ 114.560805][ T5987] ffffffff8e133180 (console_owner){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 114.560853][ T5987] [ 114.560853][ T5987] but task is already holding lock: [ 114.560857][ T5987] ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 114.560891][ T5987] [ 114.560891][ T5987] which lock already depends on the new lock. [ 114.560891][ T5987] [ 114.560897][ T5987] [ 114.560897][ T5987] the existing dependency chain (in reverse order) is: [ 114.560902][ T5987] [ 114.560902][ T5987] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 114.560922][ T5987] _raw_spin_lock_nested+0x32/0x50 [ 114.560942][ T5987] raw_spin_rq_lock_nested+0x2a/0x140 [ 114.560958][ T5987] task_rq_lock+0xbc/0x470 [ 114.560972][ T5987] cgroup_move_task+0x92/0x2a0 [ 114.560991][ T5987] css_set_move_task+0x658/0x9e0 [ 114.561006][ T5987] cgroup_post_fork+0x1ef/0x7a0 [ 114.561020][ T5987] copy_process+0x3614/0x3950 [ 114.561036][ T5987] kernel_clone+0x21e/0x820 [ 114.561052][ T5987] user_mode_thread+0xdd/0x140 [ 114.561068][ T5987] rest_init+0x23/0x300 [ 114.561081][ T5987] start_kernel+0x3ac/0x400 [ 114.561097][ T5987] x86_64_start_reservations+0x24/0x30 [ 114.561118][ T5987] x86_64_start_kernel+0x143/0x1c0 [ 114.561138][ T5987] common_startup_64+0x13e/0x147 [ 114.561157][ T5987] [ 114.561157][ T5987] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 114.561177][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0 [ 114.561201][ T5987] try_to_wake_up+0x67/0x12b0 [ 114.561220][ T5987] __wake_up_common_lock+0x137/0x1f0 [ 114.561243][ T5987] tty_port_default_wakeup+0xfb/0x170 [ 114.561263][ T5987] serial8250_tx_chars+0x72e/0x970 [ 114.561278][ T5987] serial8250_handle_irq+0x633/0xbb0 [ 114.561293][ T5987] serial8250_default_handle_irq+0xbf/0x200 [ 114.561312][ T5987] serial8250_interrupt+0x8d/0x180 [ 114.561335][ T5987] __handle_irq_event_percpu+0x285/0xa60 [ 114.561357][ T5987] handle_irq_event+0x8b/0x1e0 [ 114.561378][ T5987] handle_edge_irq+0x23b/0xa10 [ 114.561396][ T5987] __common_interrupt+0x141/0x1f0 [ 114.561418][ T5987] common_interrupt+0xb6/0xe0 [ 114.561432][ T5987] asm_common_interrupt+0x26/0x40 [ 114.561446][ T5987] pv_native_safe_halt+0x13/0x20 [ 114.561465][ T5987] default_idle+0x13/0x20 [ 114.561476][ T5987] default_idle_call+0x73/0xb0 [ 114.561488][ T5987] do_idle+0x1ea/0x520 [ 114.561503][ T5987] cpu_startup_entry+0x44/0x60 [ 114.561519][ T5987] rest_init+0x2de/0x300 [ 114.561532][ T5987] start_kernel+0x3ac/0x400 [ 114.561546][ T5987] x86_64_start_reservations+0x24/0x30 [ 114.561567][ T5987] x86_64_start_kernel+0x143/0x1c0 [ 114.561587][ T5987] common_startup_64+0x13e/0x147 [ 114.561605][ T5987] [ 114.561605][ T5987] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 114.561625][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0 [ 114.561642][ T5987] __wake_up_common_lock+0x2f/0x1f0 [ 114.561663][ T5987] tty_port_default_wakeup+0xfb/0x170 [ 114.561681][ T5987] serial8250_tx_chars+0x72e/0x970 [ 114.561695][ T5987] serial8250_handle_irq+0x633/0xbb0 [ 114.561710][ T5987] serial8250_default_handle_irq+0xbf/0x200 [ 114.561729][ T5987] serial8250_interrupt+0x8d/0x180 [ 114.561751][ T5987] __handle_irq_event_percpu+0x285/0xa60 [ 114.561772][ T5987] handle_irq_event+0x8b/0x1e0 [ 114.561793][ T5987] handle_edge_irq+0x23b/0xa10 [ 114.561811][ T5987] __common_interrupt+0x141/0x1f0 [ 114.561832][ T5987] common_interrupt+0xb6/0xe0 [ 114.561845][ T5987] asm_common_interrupt+0x26/0x40 [ 114.561859][ T5987] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 114.561877][ T5987] uart_port_unlock_deref+0x111/0x2f0 [ 114.561891][ T5987] uart_write+0xe8/0x130 [ 114.561905][ T5987] n_tty_write+0xd78/0x12a0 [ 114.561924][ T5987] file_tty_write+0x559/0xa20 [ 114.561938][ T5987] vfs_write+0x5c9/0xb30 [ 114.561954][ T5987] ksys_write+0x145/0x250 [ 114.561974][ T5987] do_syscall_64+0xfa/0xf80 [ 114.561992][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.562004][ T5987] [ 114.562004][ T5987] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 114.562022][ T5987] _raw_spin_lock_irqsave+0xa7/0xf0 [ 114.562038][ T5987] serial8250_console_write+0x17e/0x1ba0 [ 114.562053][ T5987] console_flush_all+0x745/0xb60 [ 114.562070][ T5987] console_unlock+0xbb/0x190 [ 114.562085][ T5987] vprintk_emit+0x4f8/0x5f0 [ 114.562101][ T5987] _printk+0xcf/0x120 [ 114.562120][ T5987] register_console+0xa8b/0xf90 [ 114.562138][ T5987] univ8250_console_init+0x3a/0x70 [ 114.562158][ T5987] console_init+0xfc/0x3f0 [ 114.562176][ T5987] start_kernel+0x252/0x400 [ 114.562189][ T5987] x86_64_start_reservations+0x24/0x30 [ 114.562212][ T5987] x86_64_start_kernel+0x143/0x1c0 [ 114.562230][ T5987] common_startup_64+0x13e/0x147 [ 114.562246][ T5987] [ 114.562246][ T5987] -> #0 (console_owner){....}-{0:0}: [ 114.562263][ T5987] __lock_acquire+0x15a6/0x2cf0 [ 114.562276][ T5987] lock_acquire+0x117/0x340 [ 114.562288][ T5987] console_flush_all+0x6ee/0xb60 [ 114.562306][ T5987] console_unlock+0xbb/0x190 [ 114.562321][ T5987] vprintk_emit+0x4f8/0x5f0 [ 114.562337][ T5987] _printk+0xcf/0x120 [ 114.562354][ T5987] __report_bug+0x305/0x500 [ 114.562371][ T5987] report_bug+0x16a/0x220 [ 114.562386][ T5987] handle_bug+0x98/0x200 [ 114.562396][ T5987] exc_invalid_op+0x1a/0x50 [ 114.562406][ T5987] asm_exc_invalid_op+0x1a/0x20 [ 114.562418][ T5987] sched_change_end+0x4f6/0x640 [ 114.562443][ T5987] rt_mutex_setprio+0x488/0xb70 [ 114.562454][ T5987] remove_waiter+0x7f5/0xaf0 [ 114.562466][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 114.562480][ T5987] futex_lock_pi+0x530/0xa90 [ 114.562496][ T5987] do_futex+0x292/0x420 [ 114.562509][ T5987] __se_sys_futex+0x36f/0x400 [ 114.562522][ T5987] do_syscall_64+0xfa/0xf80 [ 114.562540][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.562552][ T5987] [ 114.562552][ T5987] other info that might help us debug this: [ 114.562552][ T5987] [ 114.562556][ T5987] Chain exists of: [ 114.562556][ T5987] console_owner --> &p->pi_lock --> &rq->__lock [ 114.562556][ T5987] [ 114.562577][ T5987] Possible unsafe locking scenario: [ 114.562577][ T5987] [ 114.562581][ T5987] CPU0 CPU1 [ 114.562585][ T5987] ---- ---- [ 114.562589][ T5987] lock(&rq->__lock); [ 114.562598][ T5987] lock(&p->pi_lock); [ 114.562607][ T5987] lock(&rq->__lock); [ 114.562617][ T5987] lock(console_owner); [ 114.562625][ T5987] [ 114.562625][ T5987] *** DEADLOCK *** [ 114.562625][ T5987] [ 114.562629][ T5987] 5 locks held by syz.0.17/5987: [ 114.562636][ T5987] #0: ffff8880776f1b28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 114.562670][ T5987] #1: ffff888024daa8e8 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 114.562701][ T5987] #2: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 114.562733][ T5987] #3: ffffffff8e1331e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 114.562769][ T5987] #4: ffffffff8e01aa98 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 114.562806][ T5987] [ 114.562806][ T5987] stack backtrace: [ 114.562824][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 114.562840][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.562855][ T5987] Call Trace: [ 114.562860][ T5987] [ 114.562867][ T5987] dump_stack_lvl+0x189/0x250 [ 114.562886][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.562903][ T5987] ? __pfx__printk+0x10/0x10 [ 114.562923][ T5987] ? print_lock_name+0xde/0x100 [ 114.562945][ T5987] print_circular_bug+0x2e2/0x300 [ 114.562966][ T5987] check_noncircular+0x12e/0x150 [ 114.562986][ T5987] __lock_acquire+0x15a6/0x2cf0 [ 114.563008][ T5987] ? console_flush_all+0x131/0xb60 [ 114.563026][ T5987] lock_acquire+0x117/0x340 [ 114.563039][ T5987] ? console_flush_all+0x131/0xb60 [ 114.563061][ T5987] ? do_raw_spin_unlock+0x122/0x240 [ 114.563081][ T5987] ? console_flush_all+0x131/0xb60 [ 114.563099][ T5987] console_flush_all+0x6ee/0xb60 [ 114.563118][ T5987] ? console_flush_all+0x131/0xb60 [ 114.563138][ T5987] ? console_flush_all+0x131/0xb60 [ 114.563159][ T5987] ? __pfx_console_flush_all+0x10/0x10 [ 114.563181][ T5987] ? is_printk_cpu_sync_owner+0x32/0x40 [ 114.563210][ T5987] console_unlock+0xbb/0x190 [ 114.563227][ T5987] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 114.563247][ T5987] ? __pfx_console_unlock+0x10/0x10 [ 114.563267][ T5987] vprintk_emit+0x4f8/0x5f0 [ 114.563285][ T5987] ? __pfx_vprintk_emit+0x10/0x10 [ 114.563303][ T5987] ? __lock_acquire+0x6b6/0x2cf0 [ 114.563318][ T5987] ? __lock_acquire+0x6b6/0x2cf0 [ 114.563334][ T5987] _printk+0xcf/0x120 [ 114.563355][ T5987] ? __pfx__printk+0x10/0x10 [ 114.563376][ T5987] ? find_bug+0xa5/0x370 [ 114.563392][ T5987] ? sched_change_end+0x4f6/0x640 [ 114.563410][ T5987] ? sched_change_end+0x4f6/0x640 [ 114.563427][ T5987] __report_bug+0x305/0x500 [ 114.563444][ T5987] ? sched_change_end+0x4f6/0x640 [ 114.563463][ T5987] ? __pfx___report_bug+0x10/0x10 [ 114.563480][ T5987] ? rcu_read_lock_sched_held+0x89/0x100 [ 114.563499][ T5987] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 114.563520][ T5987] ? sched_change_end+0x4f6/0x640 [ 114.563537][ T5987] report_bug+0x16a/0x220 [ 114.563554][ T5987] ? sched_change_end+0x4f6/0x640 [ 114.563570][ T5987] ? sched_change_end+0x4f8/0x640 [ 114.563589][ T5987] handle_bug+0x98/0x200 [ 114.563601][ T5987] exc_invalid_op+0x1a/0x50 [ 114.563613][ T5987] asm_exc_invalid_op+0x1a/0x20 [ 114.563626][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640 [ 114.563644][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 114.563656][ T5987] RSP: 0018:ffffc90003457850 EFLAGS: 00010046 [ 114.563668][ T5987] RAX: 1ffff110049b53d0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 114.563679][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888024da9e80 [ 114.563688][ T5987] RBP: ffff888024daa128 R08: ffff888024da9e87 R09: 1ffff110049b53d0 [ 114.563698][ T5987] R10: dffffc0000000000 R11: ffffed10049b53d1 R12: dffffc0000000000 [ 114.563708][ T5987] R13: ffff888024da9e80 R14: ffff8880b873ab00 R15: ffff888024da9e80 [ 114.563722][ T5987] ? sched_change_end+0x4af/0x640 [ 114.563744][ T5987] rt_mutex_setprio+0x488/0xb70 [ 114.563761][ T5987] remove_waiter+0x7f5/0xaf0 [ 114.563777][ T5987] ? lockdep_hardirqs_on+0x98/0x140 [ 114.563797][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 114.563813][ T5987] futex_lock_pi+0x530/0xa90 [ 114.563833][ T5987] ? __pfx_futex_lock_pi+0x10/0x10 [ 114.563858][ T5987] ? futex_hash+0x40/0x2d0 [ 114.563870][ T5987] ? futex_hash+0x2ad/0x2d0 [ 114.563883][ T5987] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.563904][ T5987] ? __pfx_futex_wake+0x10/0x10 [ 114.563927][ T5987] do_futex+0x292/0x420 [ 114.563944][ T5987] ? __pfx_do_futex+0x10/0x10 [ 114.563965][ T5987] __se_sys_futex+0x36f/0x400 [ 114.563986][ T5987] ? __pfx___se_sys_futex+0x10/0x10 [ 114.564006][ T5987] ? __x64_sys_futex+0x21/0xf0 [ 114.564023][ T5987] do_syscall_64+0xfa/0xf80 [ 114.564043][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.564056][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 114.564071][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.564084][ T5987] RIP: 0033:0x7f136258f749 [ 114.564104][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.564114][ T5987] RSP: 002b:00007ffcc45b2488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.564128][ T5987] RAX: ffffffffffffffda RBX: 00007f13627e5fa0 RCX: 00007f136258f749 [ 114.564138][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 114.564146][ T5987] RBP: 00007f1362613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 114.564155][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.564163][ T5987] R13: 00007f13627e5fa0 R14: 00007f13627e5fa0 R15: 0000000000000006 [ 114.564178][ T5987] [ 115.819610][ T5987] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#0: syz.0.17/5987 [ 115.829698][ T5987] Modules linked in: [ 115.833639][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 115.842849][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.853006][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640 [ 115.858665][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 115.878553][ T5987] RSP: 0018:ffffc90003457850 EFLAGS: 00010046 [ 115.884638][ T5987] RAX: 1ffff110049b53d0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 115.892655][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888024da9e80 [ 115.900639][ T5987] RBP: ffff888024daa128 R08: ffff888024da9e87 R09: 1ffff110049b53d0 [ 115.908706][ T5987] R10: dffffc0000000000 R11: ffffed10049b53d1 R12: dffffc0000000000 [ 115.916946][ T5987] R13: ffff888024da9e80 R14: ffff8880b873ab00 R15: ffff888024da9e80 [ 115.925280][ T5987] FS: 0000555584777500(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 115.934225][ T5987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.940914][ T5987] CR2: 0000001b2fd63fff CR3: 00000000774d6000 CR4: 00000000003526f0 [ 115.948986][ T5987] Call Trace: [ 115.952267][ T5987] [ 115.955228][ T5987] rt_mutex_setprio+0x488/0xb70 [ 115.960115][ T5987] remove_waiter+0x7f5/0xaf0 [ 115.965123][ T5987] ? lockdep_hardirqs_on+0x98/0x140 [ 115.970370][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 115.976381][ T5987] futex_lock_pi+0x530/0xa90 [ 115.981269][ T5987] ? __pfx_futex_lock_pi+0x10/0x10 [ 115.986681][ T5987] ? futex_hash+0x40/0x2d0 [ 115.991390][ T5987] ? futex_hash+0x2ad/0x2d0 [ 115.995914][ T5987] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.001476][ T5987] ? __pfx_futex_wake+0x10/0x10 [ 116.006529][ T5987] do_futex+0x292/0x420 [ 116.010722][ T5987] ? __pfx_do_futex+0x10/0x10 [ 116.015414][ T5987] __se_sys_futex+0x36f/0x400 [ 116.020118][ T5987] ? __pfx___se_sys_futex+0x10/0x10 [ 116.025691][ T5987] ? __x64_sys_futex+0x21/0xf0 [ 116.030564][ T5987] do_syscall_64+0xfa/0xf80 [ 116.035090][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.041194][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 116.045886][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.051792][ T5987] RIP: 0033:0x7f136258f749 [ 116.056237][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.075864][ T5987] RSP: 002b:00007ffcc45b2488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.084288][ T5987] RAX: ffffffffffffffda RBX: 00007f13627e5fa0 RCX: 00007f136258f749 [ 116.092262][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 116.100239][ T5987] RBP: 00007f1362613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 116.108959][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.118537][ T5987] R13: 00007f13627e5fa0 R14: 00007f13627e5fa0 R15: 0000000000000006 [ 116.130552][ T5987] [ 116.134376][ T5987] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.142132][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 116.151265][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.162409][ T5987] Call Trace: [ 116.165979][ T5987] [ 116.169302][ T5987] dump_stack_lvl+0x99/0x250 [ 116.174074][ T5987] ? __asan_memcpy+0x40/0x70 [ 116.178702][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.184202][ T5987] ? __pfx__printk+0x10/0x10 [ 116.188843][ T5987] vpanic+0x237/0x6d0 [ 116.192842][ T5987] ? __pfx_vpanic+0x10/0x10 [ 116.197371][ T5987] ? is_bpf_text_address+0x292/0x2b0 [ 116.202687][ T5987] ? is_bpf_text_address+0x26/0x2b0 [ 116.208034][ T5987] panic+0xb9/0xc0 [ 116.211789][ T5987] ? __pfx_panic+0x10/0x10 [ 116.216410][ T5987] __warn+0x317/0x4b0 [ 116.220456][ T5987] ? sched_change_end+0x4f6/0x640 [ 116.225601][ T5987] ? sched_change_end+0x4f6/0x640 [ 116.230653][ T5987] __report_bug+0x288/0x500 [ 116.235174][ T5987] ? sched_change_end+0x4f6/0x640 [ 116.240224][ T5987] ? __pfx___report_bug+0x10/0x10 [ 116.245341][ T5987] ? rcu_read_lock_sched_held+0x89/0x100 [ 116.251164][ T5987] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 116.257437][ T5987] ? sched_change_end+0x4f6/0x640 [ 116.262569][ T5987] report_bug+0x16a/0x220 [ 116.266926][ T5987] ? sched_change_end+0x4f6/0x640 [ 116.273717][ T5987] ? sched_change_end+0x4f8/0x640 [ 116.279040][ T5987] handle_bug+0x98/0x200 [ 116.283573][ T5987] exc_invalid_op+0x1a/0x50 [ 116.288544][ T5987] asm_exc_invalid_op+0x1a/0x20 [ 116.293486][ T5987] RIP: 0010:sched_change_end+0x4f6/0x640 [ 116.299586][ T5987] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 116.319553][ T5987] RSP: 0018:ffffc90003457850 EFLAGS: 00010046 [ 116.325998][ T5987] RAX: 1ffff110049b53d0 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 116.334468][ T5987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888024da9e80 [ 116.343250][ T5987] RBP: ffff888024daa128 R08: ffff888024da9e87 R09: 1ffff110049b53d0 [ 116.351791][ T5987] R10: dffffc0000000000 R11: ffffed10049b53d1 R12: dffffc0000000000 [ 116.360237][ T5987] R13: ffff888024da9e80 R14: ffff8880b873ab00 R15: ffff888024da9e80 [ 116.368700][ T5987] ? sched_change_end+0x4af/0x640 [ 116.374029][ T5987] rt_mutex_setprio+0x488/0xb70 [ 116.378992][ T5987] remove_waiter+0x7f5/0xaf0 [ 116.383770][ T5987] ? lockdep_hardirqs_on+0x98/0x140 [ 116.389513][ T5987] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 116.395338][ T5987] futex_lock_pi+0x530/0xa90 [ 116.400129][ T5987] ? __pfx_futex_lock_pi+0x10/0x10 [ 116.405268][ T5987] ? futex_hash+0x40/0x2d0 [ 116.409773][ T5987] ? futex_hash+0x2ad/0x2d0 [ 116.414405][ T5987] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.419710][ T5987] ? __pfx_futex_wake+0x10/0x10 [ 116.424972][ T5987] do_futex+0x292/0x420 [ 116.429331][ T5987] ? __pfx_do_futex+0x10/0x10 [ 116.434217][ T5987] __se_sys_futex+0x36f/0x400 [ 116.439154][ T5987] ? __pfx___se_sys_futex+0x10/0x10 [ 116.444552][ T5987] ? __x64_sys_futex+0x21/0xf0 [ 116.449487][ T5987] do_syscall_64+0xfa/0xf80 [ 116.454210][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.460499][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 116.465532][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.471776][ T5987] RIP: 0033:0x7f136258f749 [ 116.476532][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.496722][ T5987] RSP: 002b:00007ffcc45b2488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.505456][ T5987] RAX: ffffffffffffffda RBX: 00007f13627e5fa0 RCX: 00007f136258f749 [ 116.514081][ T5987] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 116.523656][ T5987] RBP: 00007f1362613f91 R08: 0000000000000000 R09: 00000000fffffffc [ 116.532619][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.540701][ T5987] R13: 00007f13627e5fa0 R14: 00007f13627e5fa0 R15: 0000000000000006 [ 116.548881][ T5987] [ 117.678072][ T5987] Shutting down cpus with NMI [ 117.683409][ T5987] Kernel Offset: disabled [ 117.687746][ T5987] Rebooting in 86400 seconds..