Extracting prog: 6m3.595690755s
Minimizing prog: 7m11.56589297s
Simplifying prog options: 0s
Extracting C: 2m8.765440186s
Simplifying C: 15m38.022306776s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
detailed listing:
executing program 0:
request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
executing program 0:
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0)
executing program 3:
syz_usb_connect$uac1(0x0, 0x82, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x9, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x16, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0xf, 0x5, 0x7, 0x9}, @as_header={0x7, 0x24, 0x1, 0x8c, 0xf, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xb, 0x9, 0xb, {0x7, 0x25, 0x1, 0x4, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x1, 0xf8, {0x7, 0x25, 0x1, 0xc, 0x9, 0xff}}}}}}}}]}}, 0x0)
executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x64, 0xc8, 0x0, 0x1}}}, 0x9)
executing program 1:
futex(0x0, 0x83, 0x1, 0x0, 0x0, 0x1)
executing program 1:
syz_usb_connect$uac3(0x3, 0xb5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000020cc1711473fea010203010902a3000301000009080b00010123300e0904000000010130000a2401023f00040000000d241002170dd25a02ae5a047514240201ff01020200000004855d04000200f9ff14240206050204090100000004000b0000040400090401000001023000090401010230000905010900020301010a252504000000005000090402000001023000090402"], 0x0)
executing program 0:
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x6, 0x6}, {0x7fff, 0x800, [0xbd]}}}}, 0x13)
executing program 0:
syz_usb_connect$midi(0x3, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x50, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xdc, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd3, 0x4, {0x5, 0x25, 0x1, 0x1, "e0"}}}]}}}}}]}}, 0x0)
executing program 2:
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
executing program 3:
mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x1, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d]}}]})
executing program 2:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)
executing program 3:
socket$inet_sctp(0x2, 0x1, 0x84)
executing program 1:
landlock_create_ruleset(&(0x7f00000002c0)={0x4055}, 0xfffffeb6, 0x0)
executing program 2:
keyctl$clear(0x7, 0x0)
executing program 3:
mount(&(0x7f0000000000)=@sg0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000040)='ecryptfs\x00', 0x200000, 0x0)
executing program 1:
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000403512108240000102030109026e0003017f0006080b0002012430230904000000010130000a2401100a000900000009040100ffff02"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
executing program 2:
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
executing program 3:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
executing program 2:
prctl$PR_MCE_KILL(0x48, 0x1, 0x1)
executing program 0:
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x99, 0xba, 0xd9, 0x20, 0x5ac, 0x231, 0xe090, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x7, 0x0, 0x7b, "", [{{0x9, 0x4, 0x2a, 0xff, 0x0, 0x3, 0x58, 0x2, 0x4}}]}}]}}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
executing program 1:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)
executing program 3:
syz_usb_connect(0x2, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program crashed: WARNING in get_from_partial_node
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(0x0, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
program crashed: WARNING in get_from_partial_node
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program crashed: WARNING in get_from_partial_node
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program crashed: WARNING in get_from_partial_node
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex
detailed listing:
executing program 0:
futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2)

program crashed: WARNING in get_from_partial_node
validation run: crashed=true
reproducing took 35m47.404747725s
repro crashed as (corrupted=false):
------------[ cut here ]------------
debug_locks && !(!get_current()->pi_blocked_on)
WARNING: kernel/locking/spinlock_rt.c:40 at rtlock_lock kernel/locking/spinlock_rt.c:40 [inline], CPU#1: syz.2.651/6716
WARNING: kernel/locking/spinlock_rt.c:40 at __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline], CPU#1: syz.2.651/6716
WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400 kernel/locking/spinlock_rt.c:57, CPU#1: syz.2.651/6716
Modules linked in:
CPU: 1 UID: 0 PID: 6716 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:rtlock_lock kernel/locking/spinlock_rt.c:40 [inline]
RIP: 0010:__rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline]
RIP: 0010:rt_spin_lock+0x31c/0x400 kernel/locking/spinlock_rt.c:57
Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 13 f1 f5 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 1e 13 f1 f5
RSP: 0018:ffffc900043275a0 EFLAGS: 00010282
RAX: 1ffff1100630a53f RBX: 1ffff92000864eb8 RCX: 0000000000000046
RDX: 0000000000000000 RSI: ffffffff8dbf888e RDI: ffffffff8bca4960
RBP: ffffc90004327660 R08: ffffffff8223c0d4 R09: ffff88813ff51758
R10: dffffc0000000000 R11: fffffbfff1f9e17f R12: ffff8880318529f8
R13: dffffc0000000000 R14: ffff88813ff51700 R15: ffffc900043275e0
FS:  000055555bc9d500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2b28597dac CR3: 0000000036c6a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 get_from_partial_node+0x54/0x480 mm/slub.c:3796
 get_from_partial mm/slub.c:3924 [inline]
 ___slab_alloc+0xb2/0x670 mm/slub.c:4440
 __slab_alloc_node mm/slub.c:4510 [inline]
 slab_alloc_node mm/slub.c:4886 [inline]
 kmem_cache_alloc_noprof+0xea/0x680 mm/slub.c:4905
 kmem_alloc_batch lib/debugobjects.c:371 [inline]
 fill_pool+0x156/0x580 lib/debugobjects.c:420
 debug_objects_fill_pool+0x97/0xd0 lib/debugobjects.c:742
 debug_object_assert_init+0x34/0x340 lib/debugobjects.c:1020
 debug_hrtimer_assert_init kernel/time/hrtimer.c:495 [inline]
 hrtimer_start_range_ns+0x3f/0xef0 kernel/time/hrtimer.c:1477
 futex_lock_pi+0x8df/0xb10 kernel/futex/pi.c:1051
 do_futex+0x292/0x420 kernel/futex/syscalls.c:146
 __do_sys_futex kernel/futex/syscalls.c:207 [inline]
 __se_sys_futex+0x3a8/0x450 kernel/futex/syscalls.c:188
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff38c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff31640ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007f7bff605fa0 RCX: 00007f7bff38c819
RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000200000000280
RBP: 00007f7bff422c91 R08: 0000000000000000 R09: 0000000000000002
R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7bff605fac R14: 00007f7bff605fa0 R15: 00007f7bff605fa0
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
debug_locks && !(!get_current()->pi_blocked_on)
WARNING: kernel/locking/spinlock_rt.c:40 at rtlock_lock kernel/locking/spinlock_rt.c:40 [inline], CPU#1: syz.2.651/6716
WARNING: kernel/locking/spinlock_rt.c:40 at __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline], CPU#1: syz.2.651/6716
WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400 kernel/locking/spinlock_rt.c:57, CPU#1: syz.2.651/6716
Modules linked in:
CPU: 1 UID: 0 PID: 6716 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:rtlock_lock kernel/locking/spinlock_rt.c:40 [inline]
RIP: 0010:__rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline]
RIP: 0010:rt_spin_lock+0x31c/0x400 kernel/locking/spinlock_rt.c:57
Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 13 f1 f5 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 1e 13 f1 f5
RSP: 0018:ffffc900043275a0 EFLAGS: 00010282
RAX: 1ffff1100630a53f RBX: 1ffff92000864eb8 RCX: 0000000000000046
RDX: 0000000000000000 RSI: ffffffff8dbf888e RDI: ffffffff8bca4960
RBP: ffffc90004327660 R08: ffffffff8223c0d4 R09: ffff88813ff51758
R10: dffffc0000000000 R11: fffffbfff1f9e17f R12: ffff8880318529f8
R13: dffffc0000000000 R14: ffff88813ff51700 R15: ffffc900043275e0
FS:  000055555bc9d500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2b28597dac CR3: 0000000036c6a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 get_from_partial_node+0x54/0x480 mm/slub.c:3796
 get_from_partial mm/slub.c:3924 [inline]
 ___slab_alloc+0xb2/0x670 mm/slub.c:4440
 __slab_alloc_node mm/slub.c:4510 [inline]
 slab_alloc_node mm/slub.c:4886 [inline]
 kmem_cache_alloc_noprof+0xea/0x680 mm/slub.c:4905
 kmem_alloc_batch lib/debugobjects.c:371 [inline]
 fill_pool+0x156/0x580 lib/debugobjects.c:420
 debug_objects_fill_pool+0x97/0xd0 lib/debugobjects.c:742
 debug_object_assert_init+0x34/0x340 lib/debugobjects.c:1020
 debug_hrtimer_assert_init kernel/time/hrtimer.c:495 [inline]
 hrtimer_start_range_ns+0x3f/0xef0 kernel/time/hrtimer.c:1477
 futex_lock_pi+0x8df/0xb10 kernel/futex/pi.c:1051
 do_futex+0x292/0x420 kernel/futex/syscalls.c:146
 __do_sys_futex kernel/futex/syscalls.c:207 [inline]
 __se_sys_futex+0x3a8/0x450 kernel/futex/syscalls.c:188
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7bff38c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff31640ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007f7bff605fa0 RCX: 00007f7bff38c819
RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000200000000280
RBP: 00007f7bff422c91 R08: 0000000000000000 R09: 0000000000000002
R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7bff605fac R14: 00007f7bff605fa0 R15: 00007f7bff605fa0
 </TASK>