Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. 2026/07/02 08:29:07 parsed 1 programs 2026/07/02 08:29:07 serving rpc on tcp://41883 [ 69.140597][ T4203] cgroup: Unknown subsys name 'net' [ 69.266646][ T4203] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.815704][ T4203] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.453480][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460099][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.447427][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 74.522816][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.530696][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.538725][ T4267] device bridge_slave_0 entered promiscuous mode [ 74.548206][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.555482][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.563580][ T4267] device bridge_slave_1 entered promiscuous mode [ 74.584149][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.595456][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.619225][ T4267] team0: Port device team_slave_0 added [ 74.627113][ T4267] team0: Port device team_slave_1 added [ 74.647662][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.654839][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.681770][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.695104][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.702217][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.728837][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.761136][ T4267] device hsr_slave_0 entered promiscuous mode [ 74.768025][ T4267] device hsr_slave_1 entered promiscuous mode [ 74.871120][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.883669][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.893235][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.903749][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.927344][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.934713][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.942961][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.950094][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.023932][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.059112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.069661][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.078157][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.086441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.104128][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.133855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.142577][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.149850][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.190800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.200663][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.207775][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.229531][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.239037][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.275135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.284305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.296648][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.307966][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.436550][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.444627][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.474253][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.494930][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.505119][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.544929][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.554362][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.564233][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.574024][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.584085][ T4267] device veth0_vlan entered promiscuous mode [ 75.620763][ T4267] device veth1_vlan entered promiscuous mode [ 75.641625][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.649963][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.658146][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.667446][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.679454][ T4267] device veth0_macvtap entered promiscuous mode [ 75.692799][ T4267] device veth1_macvtap entered promiscuous mode [ 75.712741][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.723238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.732243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.740681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.749410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.761404][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.771236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.780856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.791594][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802145][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.813439][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822533][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.936634][ T4267] syz-executor (4267) used greatest stack depth: 20976 bytes left [ 76.040898][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.048937][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.067385][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.097703][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.106726][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.117095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/07/02 08:29:17 executed programs: 0 [ 77.034161][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 77.088303][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.095561][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.104641][ T4308] device bridge_slave_0 entered promiscuous mode [ 77.113867][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.121095][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.128958][ T4308] device bridge_slave_1 entered promiscuous mode [ 77.153522][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.165870][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.203421][ T4308] team0: Port device team_slave_0 added [ 77.213875][ T4308] team0: Port device team_slave_1 added [ 77.239168][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.249570][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.278296][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.294292][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.301456][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.331397][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.377337][ T4308] device hsr_slave_0 entered promiscuous mode [ 77.385826][ T4308] device hsr_slave_1 entered promiscuous mode [ 77.392646][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.400765][ T4308] Cannot create hsr debugfs directory [ 77.503491][ T4308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.961485][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 80.118448][ T4308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.489573][ T4308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.573624][ T4308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.676733][ T4308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.697393][ T4308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.706827][ T4308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.716325][ T4308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.783136][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.811171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.819137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.830654][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.843851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.853038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.862507][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869687][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.878591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.888431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.897247][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.904361][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.912955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.935980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.948651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.962301][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.973047][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.982355][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.994657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.004497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.030768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.039523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.043422][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 81.056211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.065079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.086954][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.195317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.204053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.215859][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.242752][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.255444][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.284844][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.295437][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.305377][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.314752][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.332219][ T4308] device veth0_vlan entered promiscuous mode [ 81.344914][ T1161] device hsr_slave_0 left promiscuous mode [ 81.352902][ T1161] device hsr_slave_1 left promiscuous mode [ 81.359504][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.367680][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.377054][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.384762][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.393034][ T1161] device bridge_slave_1 left promiscuous mode [ 81.400151][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.414935][ T1161] device bridge_slave_0 left promiscuous mode [ 81.422321][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.441955][ T1161] device veth1_macvtap left promiscuous mode [ 81.448346][ T1161] device veth0_macvtap left promiscuous mode [ 81.454887][ T1161] device veth1_vlan left promiscuous mode [ 81.460911][ T1161] device veth0_vlan left promiscuous mode [ 81.646716][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 81.663950][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 81.677726][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.693898][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.757613][ T1161] bond0 (unregistering): Released all slaves [ 81.822803][ T4308] device veth1_vlan entered promiscuous mode [ 81.834120][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.863268][ T4308] device veth0_macvtap entered promiscuous mode [ 81.871272][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.887899][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.903329][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.912668][ T4308] device veth1_macvtap entered promiscuous mode [ 81.928495][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.937059][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.945519][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.955025][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.967043][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.986508][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.995601][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.008657][ T4308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.017742][ T4308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.026517][ T4308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035265][ T4308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.110867][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.118863][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.129539][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.152361][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.162146][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.171078][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.219226][ T4323] FAULT_INJECTION: forcing a failure. [ 82.219226][ T4323] name failslab, interval 1, probability 0, space 0, times 1 [ 82.219410][ T4323] [ 82.219415][ T4323] ====================================================== [ 82.219421][ T4323] WARNING: possible circular locking dependency detected [ 82.219431][ T4323] syzkaller #0 Not tainted [ 82.219440][ T4323] ------------------------------------------------------ [ 82.219446][ T4323] syz.0.17/4323 is trying to acquire lock: [ 82.219454][ T4323] ffffffff8c3139a0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 82.219511][ T4323] [ 82.219511][ T4323] but task is already holding lock: [ 82.219515][ T4323] ffff888076e94958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 82.219559][ T4323] [ 82.219559][ T4323] which lock already depends on the new lock. [ 82.219559][ T4323] [ 82.219564][ T4323] [ 82.219564][ T4323] the existing dependency chain (in reverse order) is: [ 82.219569][ T4323] [ 82.219569][ T4323] -> #2 (&port->lock){-.-.}-{2:2}: [ 82.219591][ T4323] _raw_spin_lock_irqsave+0xb0/0x100 [ 82.219611][ T4323] tty_port_default_wakeup+0x1f/0xf0 [ 82.219629][ T4323] serial8250_tx_chars+0x615/0x800 [ 82.219649][ T4323] serial8250_handle_irq+0x4f5/0x5f0 [ 82.219669][ T4323] serial8250_default_handle_irq+0xb4/0x1a0 [ 82.219690][ T4323] serial8250_interrupt+0x9b/0x1c0 [ 82.219709][ T4323] __handle_irq_event_percpu+0x299/0x9d0 [ 82.219727][ T4323] handle_irq_event+0xa5/0x220 [ 82.219744][ T4323] handle_edge_irq+0x242/0xb20 [ 82.219763][ T4323] __common_interrupt+0xd7/0x1e0 [ 82.219781][ T4323] common_interrupt+0xb0/0xd0 [ 82.219799][ T4323] asm_common_interrupt+0x22/0x40 [ 82.219817][ T4323] default_idle+0xb/0x10 [ 82.219832][ T4323] default_idle_call+0x81/0xc0 [ 82.219854][ T4323] do_idle+0x251/0x650 [ 82.219877][ T4323] cpu_startup_entry+0x14/0x20 [ 82.219894][ T4323] start_secondary+0x32f/0x430 [ 82.219913][ T4323] secondary_startup_64_no_verify+0xb1/0xbb [ 82.219932][ T4323] [ 82.219932][ T4323] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 82.219954][ T4323] _raw_spin_lock_irqsave+0xb0/0x100 [ 82.219969][ T4323] serial8250_console_write+0x16c/0xf50 [ 82.219989][ T4323] console_unlock+0xb47/0x10f0 [ 82.220003][ T4323] vprintk_emit+0xc0/0x150 [ 82.220018][ T4323] _printk+0xda/0x130 [ 82.220033][ T4323] register_console+0x693/0x970 [ 82.220049][ T4323] univ8250_console_init+0x41/0x50 [ 82.220066][ T4323] console_init+0x177/0x5d0 [ 82.220084][ T4323] start_kernel+0x2fc/0x540 [ 82.220104][ T4323] secondary_startup_64_no_verify+0xb1/0xbb [ 82.220123][ T4323] [ 82.220123][ T4323] -> #0 (console_owner){....}-{0:0}: [ 82.220145][ T4323] __lock_acquire+0x2c66/0x7b50 [ 82.220166][ T4323] lock_acquire+0x19e/0x400 [ 82.220184][ T4323] console_lock_spinning_enable+0x51/0x60 [ 82.220201][ T4323] console_unlock+0x8b5/0x10f0 [ 82.220216][ T4323] vprintk_emit+0xc0/0x150 [ 82.220231][ T4323] _printk+0xda/0x130 [ 82.220246][ T4323] should_fail+0x364/0x4b0 [ 82.220265][ T4323] should_failslab+0x5/0x20 [ 82.220281][ T4323] slab_pre_alloc_hook+0x51/0xc0 [ 82.220297][ T4323] __kmalloc+0x6b/0x340 [ 82.220311][ T4323] __tty_buffer_request_room+0x1db/0x500 [ 82.220330][ T4323] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 82.220352][ T4323] n_tty_write+0x5dc/0x1220 [ 82.220368][ T4323] file_tty_write+0x50c/0x8a0 [ 82.220388][ T4323] vfs_write+0x748/0xd70 [ 82.220404][ T4323] ksys_write+0x153/0x260 [ 82.220419][ T4323] do_syscall_64+0x4c/0xa0 [ 82.220437][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.220456][ T4323] [ 82.220456][ T4323] other info that might help us debug this: [ 82.220456][ T4323] [ 82.220461][ T4323] Chain exists of: [ 82.220461][ T4323] console_owner --> &port_lock_key --> &port->lock [ 82.220461][ T4323] [ 82.220487][ T4323] Possible unsafe locking scenario: [ 82.220487][ T4323] [ 82.220491][ T4323] CPU0 CPU1 [ 82.220496][ T4323] ---- ---- [ 82.220500][ T4323] lock(&port->lock); [ 82.220510][ T4323] lock(&port_lock_key); [ 82.220522][ T4323] lock(&port->lock); [ 82.220533][ T4323] lock(console_owner); [ 82.220543][ T4323] [ 82.220543][ T4323] *** DEADLOCK *** [ 82.220543][ T4323] [ 82.220547][ T4323] 6 locks held by syz.0.17/4323: [ 82.220557][ T4323] #0: ffff888024787098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 82.220599][ T4323] #1: ffff888024787130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0 [ 82.220643][ T4323] #2: ffff8880247872e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1ec/0x1220 [ 82.220685][ T4323] #3: ffffc9000132c378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x592/0x1220 [ 82.220726][ T4323] #4: ffff888076e94958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 82.220771][ T4323] #5: ffffffff8c313a80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 82.220811][ T4323] [ 82.220811][ T4323] stack backtrace: [ 82.220822][ T4323] CPU: 0 PID: 4323 Comm: syz.0.17 Not tainted syzkaller #0 [ 82.220850][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.220865][ T4323] Call Trace: [ 82.220870][ T4323] [ 82.220877][ T4323] dump_stack_lvl+0x188/0x250 [ 82.220897][ T4323] ? load_image+0x410/0x410 [ 82.220914][ T4323] ? show_regs_print_info+0x20/0x20 [ 82.220937][ T4323] ? print_circular_bug+0x12b/0x1a0 [ 82.220956][ T4323] check_noncircular+0x296/0x330 [ 82.220976][ T4323] ? add_chain_block+0x9b0/0x9b0 [ 82.220993][ T4323] ? lockdep_lock+0xf1/0x1f0 [ 82.221015][ T4323] ? lockdep_unlock+0x143/0x2e0 [ 82.221039][ T4323] __lock_acquire+0x2c66/0x7b50 [ 82.221068][ T4323] ? format_decode+0x19b/0x1330 [ 82.221087][ T4323] ? verify_lock_unused+0x140/0x140 [ 82.221115][ T4323] ? sprintf+0xe4/0x140 [ 82.221134][ T4323] lock_acquire+0x19e/0x400 [ 82.221154][ T4323] ? console_lock_spinning_enable+0x2c/0x60 [ 82.221174][ T4323] ? prb_read_valid+0x60/0x60 [ 82.221194][ T4323] ? read_lock_is_recursive+0x10/0x10 [ 82.221215][ T4323] ? do_raw_spin_lock+0x128/0x2f0 [ 82.221235][ T4323] ? __rwlock_init+0x140/0x140 [ 82.221253][ T4323] ? do_raw_spin_unlock+0x11d/0x230 [ 82.221273][ T4323] console_lock_spinning_enable+0x51/0x60 [ 82.221291][ T4323] ? console_lock_spinning_enable+0x2c/0x60 [ 82.221308][ T4323] console_unlock+0x8b5/0x10f0 [ 82.221325][ T4323] ? read_lock_is_recursive+0x10/0x10 [ 82.221350][ T4323] ? console_trylock_spinning+0x370/0x370 [ 82.221370][ T4323] ? __down_trylock_console_sem+0x19f/0x1f0 [ 82.221388][ T4323] ? vprintk_emit+0xa7/0x150 [ 82.221404][ T4323] ? printk_parse_prefix+0x310/0x310 [ 82.221421][ T4323] ? vprintk_emit+0xa7/0x150 [ 82.221437][ T4323] ? console_trylock+0x70/0x70 [ 82.221453][ T4323] ? __lock_acquire+0x2844/0x7b50 [ 82.221480][ T4323] ? vprintk_emit+0x150/0x150 [ 82.221499][ T4323] ? verify_lock_unused+0x140/0x140 [ 82.221524][ T4323] vprintk_emit+0xc0/0x150 [ 82.221542][ T4323] _printk+0xda/0x130 [ 82.221562][ T4323] ? load_image+0x410/0x410 [ 82.221585][ T4323] should_fail+0x364/0x4b0 [ 82.221608][ T4323] should_failslab+0x5/0x20 [ 82.221625][ T4323] slab_pre_alloc_hook+0x51/0xc0 [ 82.221644][ T4323] __kmalloc+0x6b/0x340 [ 82.221659][ T4323] ? __tty_buffer_request_room+0x1db/0x500 [ 82.221683][ T4323] __tty_buffer_request_room+0x1db/0x500 [ 82.221707][ T4323] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 82.221734][ T4323] n_tty_write+0x5dc/0x1220 [ 82.221761][ T4323] ? n_tty_read+0x1a50/0x1a50 [ 82.221779][ T4323] ? wait_woken+0x1b0/0x1b0 [ 82.221801][ T4323] ? __virt_addr_valid+0x3c6/0x470 [ 82.221819][ T4323] ? __phys_addr_symbol+0x2b/0x70 [ 82.221837][ T4323] ? __check_object_size+0x30c/0x410 [ 82.221867][ T4323] file_tty_write+0x50c/0x8a0 [ 82.221890][ T4323] ? n_tty_read+0x1a50/0x1a50 [ 82.221909][ T4323] vfs_write+0x748/0xd70 [ 82.221926][ T4323] ? lockdep_hardirqs_on+0x94/0x140 [ 82.221951][ T4323] ? file_end_write+0x250/0x250 [ 82.221977][ T4323] ? __fdget_pos+0x1e2/0x370 [ 82.221996][ T4323] ksys_write+0x153/0x260 [ 82.222014][ T4323] ? __ia32_sys_read+0x80/0x80 [ 82.222034][ T4323] ? lockdep_hardirqs_on+0x94/0x140 [ 82.222056][ T4323] do_syscall_64+0x4c/0xa0 [ 82.222074][ T4323] ? clear_bhb_loop+0x30/0x80 [ 82.222093][ T4323] ? clear_bhb_loop+0x30/0x80 [ 82.222113][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.222137][ T4323] RIP: 0033:0x7fa53c67fe59 [ 82.222157][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.222174][ T4323] RSP: 002b:00007ffdb97b8488 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.222192][ T4323] RAX: ffffffffffffffda RBX: 00007fa53c907fa0 RCX: 00007fa53c67fe59 [ 82.222206][ T4323] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 82.222218][ T4323] RBP: 00007ffdb97b84f0 R08: 0000000000000000 R09: 0000000000000000 [ 82.222230][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.222241][ T4323] R13: 00007fa53c907fac R14: 00007fa53c907fa0 R15: 00007fa53c907fa0 [ 82.222261][ T4323] [ 83.122008][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 83.129988][ T4323] CPU: 0 PID: 4323 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.130009][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.130020][ T4323] Call Trace: [ 83.130027][ T4323] [ 83.130035][ T4323] dump_stack_lvl+0x188/0x250 [ 83.130060][ T4323] ? show_regs_print_info+0x20/0x20 [ 83.172967][ T4323] ? load_image+0x410/0x410 [ 83.177521][ T4323] should_fail+0x383/0x4b0 [ 83.181973][ T4323] should_failslab+0x5/0x20 [ 83.186504][ T4323] slab_pre_alloc_hook+0x51/0xc0 [ 83.191471][ T4323] __kmalloc+0x6b/0x340 [ 83.195657][ T4323] ? __tty_buffer_request_room+0x1db/0x500 [ 83.201498][ T4323] __tty_buffer_request_room+0x1db/0x500 [ 83.207173][ T4323] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 83.213897][ T4323] n_tty_write+0x5dc/0x1220 [ 83.218443][ T4323] ? n_tty_read+0x1a50/0x1a50 [ 83.223146][ T4323] ? wait_woken+0x1b0/0x1b0 [ 83.227685][ T4323] ? __virt_addr_valid+0x3c6/0x470 [ 83.232824][ T4323] ? __phys_addr_symbol+0x2b/0x70 [ 83.237892][ T4323] ? __check_object_size+0x30c/0x410 [ 83.243205][ T4323] file_tty_write+0x50c/0x8a0 [ 83.247923][ T4323] ? n_tty_read+0x1a50/0x1a50 [ 83.252633][ T4323] vfs_write+0x748/0xd70 [ 83.256910][ T4323] ? lockdep_hardirqs_on+0x94/0x140 [ 83.262140][ T4323] ? file_end_write+0x250/0x250 [ 83.267030][ T4323] ? __fdget_pos+0x1e2/0x370 [ 83.271654][ T4323] ksys_write+0x153/0x260 [ 83.276057][ T4323] ? __ia32_sys_read+0x80/0x80 [ 83.280858][ T4323] ? lockdep_hardirqs_on+0x94/0x140 [ 83.286112][ T4323] do_syscall_64+0x4c/0xa0 [ 83.290562][ T4323] ? clear_bhb_loop+0x30/0x80 [ 83.295269][ T4323] ? clear_bhb_loop+0x30/0x80 [ 83.300047][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.305975][ T4323] RIP: 0033:0x7fa53c67fe59 [ 83.310461][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.331161][ T4323] RSP: 002b:00007ffdb97b8488 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.339585][ T4323] RAX: ffffffffffffffda RBX: 00007fa53c907fa0 RCX: 00007fa53c67fe59 [ 83.347564][ T4323] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 83.355538][ T4323] RBP: 00007ffdb97b84f0 R08: 0000000000000000 R09: 0000000000000000 [ 83.363513][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.371494][ T4323] R13: 00007fa53c907fac R14: 00007fa53c907fa0 R15: 00007fa53c907fa0 [ 83.379475][ T4323] [ 85.200035][ T23] Bluetooth: hci0: command 0x0419 tx timeout