Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. 2026/10/11 02:17:07 parsed 1 programs 2026/10/11 02:17:07 serving rpc on tcp://34489 [ 66.492832][ T4197] cgroup: Unknown subsys name 'net' [ 66.612829][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.078525][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.099430][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.108995][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.127303][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.150316][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.158763][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.167721][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.250704][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.257843][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.568418][ T155] ODEBUG: Out of memory. ODEBUG disabled [ 71.757393][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 71.846622][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.854495][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.863045][ T4261] device bridge_slave_0 entered promiscuous mode [ 71.872773][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.880215][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.888613][ T4261] device bridge_slave_1 entered promiscuous mode [ 71.918695][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.930086][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.953555][ T4261] team0: Port device team_slave_0 added [ 71.967364][ T4261] team0: Port device team_slave_1 added [ 71.990062][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.997148][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.023205][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.040483][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.047600][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.073640][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.104401][ T4261] device hsr_slave_0 entered promiscuous mode [ 72.111272][ T4261] device hsr_slave_1 entered promiscuous mode [ 72.206608][ T4261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.218476][ T4261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.228082][ T4261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.238103][ T4261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.293805][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.308044][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.315955][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.327652][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.337977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.347402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.356470][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.363712][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.372065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.384130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.393484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.402209][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.409348][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.420594][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.450487][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.462225][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.471859][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.480697][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.492271][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.501102][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.513699][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.522654][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.533575][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.543464][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.572106][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.695594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.703268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.715664][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.733772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.743784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.778943][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.787851][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.797335][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.805163][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.815348][ T4261] device veth0_vlan entered promiscuous mode [ 72.849143][ T4261] device veth1_vlan entered promiscuous mode [ 72.870353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.878667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.888333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.897853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.908576][ T4261] device veth0_macvtap entered promiscuous mode [ 72.919597][ T4261] device veth1_macvtap entered promiscuous mode [ 72.955136][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.964289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.972587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.981595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.990551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.001847][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.011980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.020918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.031271][ T4261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040333][ T4261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.049271][ T4261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.058680][ T4261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/11 02:17:17 executed programs: 0 [ 73.899976][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 73.975383][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.983912][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.993812][ T4306] device bridge_slave_0 entered promiscuous mode [ 74.003999][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.012649][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.022407][ T4306] device bridge_slave_1 entered promiscuous mode [ 74.052497][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.065836][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.103104][ T4306] team0: Port device team_slave_0 added [ 74.111745][ T4306] team0: Port device team_slave_1 added [ 74.139816][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.147382][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.174492][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.189803][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.197161][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.226095][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.269211][ T4306] device hsr_slave_0 entered promiscuous mode [ 74.279600][ T4306] device hsr_slave_1 entered promiscuous mode [ 74.286810][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.294941][ T4306] Cannot create hsr debugfs directory [ 74.397877][ T4306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.816987][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 77.027700][ T4306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.886313][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 78.251805][ T4306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.334882][ T4306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.438816][ T4306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.450313][ T4306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.464867][ T4306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.475033][ T4306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.537367][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.562718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.571618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.582329][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.604448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.614844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.623905][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.631044][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.653280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.661592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.671121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.680171][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.687303][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.699233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.710755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.733344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.742563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.752211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.767252][ T155] device hsr_slave_0 left promiscuous mode [ 78.774380][ T155] device hsr_slave_1 left promiscuous mode [ 78.781234][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.788917][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.798568][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.806307][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.813951][ T155] device bridge_slave_1 left promiscuous mode [ 78.821201][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.834794][ T155] device bridge_slave_0 left promiscuous mode [ 78.842206][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.860633][ T155] device veth1_macvtap left promiscuous mode [ 78.866984][ T155] device veth0_macvtap left promiscuous mode [ 78.873031][ T155] device veth1_vlan left promiscuous mode [ 78.879437][ T155] device veth0_vlan left promiscuous mode [ 79.027716][ T155] team0 (unregistering): Port device team_slave_1 removed [ 79.041223][ T155] team0 (unregistering): Port device team_slave_0 removed [ 79.054846][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.071013][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.126667][ T155] bond0 (unregistering): Released all slaves [ 79.148133][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.157424][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.167919][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.176946][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.195288][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.205487][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.220597][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.327043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.334536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.349313][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.369725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.380940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.399776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.408914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.419316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.427409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.438912][ T4306] device veth0_vlan entered promiscuous mode [ 79.451063][ T4306] device veth1_vlan entered promiscuous mode [ 79.470064][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.478394][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.486897][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.495555][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.507569][ T4306] device veth0_macvtap entered promiscuous mode [ 79.517487][ T4306] device veth1_macvtap entered promiscuous mode [ 79.538993][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.547073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.555820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.564246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.574681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.590792][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.598868][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.608531][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.621074][ T4306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.630956][ T4306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.640177][ T4306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.649550][ T4306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.712672][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.726330][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.736261][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.756721][ T1427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.764810][ T1427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.774271][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.832897][ T18] [ 79.835376][ T18] ====================================================== [ 79.842506][ T18] WARNING: possible circular locking dependency detected [ 79.849569][ T18] syzkaller #0 Not tainted [ 79.854012][ T18] ------------------------------------------------------ [ 79.861057][ T18] cpuhp/1/18 is trying to acquire lock: [ 79.866835][ T18] ffff88802b954490 (kn->active#32){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 [ 79.876650][ T18] [ 79.876650][ T18] but task is already holding lock: [ 79.884065][ T18] ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 [ 79.893460][ T18] [ 79.893460][ T18] which lock already depends on the new lock. [ 79.893460][ T18] [ 79.904067][ T18] [ 79.904067][ T18] the existing dependency chain (in reverse order) is: [ 79.913104][ T18] [ 79.913104][ T18] -> #4 (cpuhp_state-down){+.+.}-{0:0}: [ 79.920885][ T18] cpuhp_lock_acquire+0x3a/0x40 [ 79.926289][ T18] cpuhp_kick_ap_work+0x7f/0x1b0 [ 79.931775][ T18] _cpu_down+0x35b/0xbb0 [ 79.936555][ T18] cpu_device_down+0x69/0xa0 [ 79.941702][ T18] device_offline+0x259/0x3a0 [ 79.946929][ T18] acpi_bus_offline+0x23e/0x400 [ 79.952347][ T18] acpi_device_hotplug+0x56c/0xc60 [ 79.958005][ T18] acpi_hotplug_work_fn+0x8f/0xc0 [ 79.963577][ T18] process_one_work+0x867/0xff0 [ 79.968976][ T18] worker_thread+0xad7/0x12a0 [ 79.974194][ T18] kthread+0x42e/0x520 [ 79.978833][ T18] ret_from_fork+0x1f/0x30 [ 79.983791][ T18] [ 79.983791][ T18] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 79.987569][ T1334] Bluetooth: hci0: command 0x040f tx timeout [ 79.991559][ T18] percpu_down_write+0x52/0x2f0 [ 80.002936][ T18] _cpu_up+0x77/0x810 [ 80.007472][ T18] cpu_up+0x16d/0x1a0 [ 80.012025][ T18] bringup_nonboot_cpus+0x100/0x1a0 [ 80.017773][ T18] smp_init+0x3a/0x150 [ 80.022394][ T18] kernel_init_freeable+0x3bc/0x560 [ 80.028138][ T18] kernel_init+0x19/0x1b0 [ 80.033011][ T18] ret_from_fork+0x1f/0x30 [ 80.038000][ T18] [ 80.038000][ T18] -> #2 (cpu_add_remove_lock){+.+.}-{3:3}: [ 80.046024][ T18] __mutex_lock_common+0x1e5/0x2400 [ 80.051770][ T18] mutex_lock_nested+0x17/0x20 [ 80.057075][ T18] cpu_device_down+0x3a/0xa0 [ 80.062209][ T18] device_offline+0x259/0x3a0 [ 80.067435][ T18] acpi_bus_offline+0x23e/0x400 [ 80.072836][ T18] acpi_device_hotplug+0x56c/0xc60 [ 80.078494][ T18] acpi_hotplug_work_fn+0x8f/0xc0 [ 80.084067][ T18] process_one_work+0x867/0xff0 [ 80.089469][ T18] worker_thread+0xad7/0x12a0 [ 80.094698][ T18] kthread+0x42e/0x520 [ 80.099320][ T18] ret_from_fork+0x1f/0x30 [ 80.104281][ T18] [ 80.104281][ T18] -> #1 (&device->physical_node_lock){+.+.}-{3:3}: [ 80.112993][ T18] __mutex_lock_common+0x1e5/0x2400 [ 80.118744][ T18] mutex_lock_nested+0x17/0x20 [ 80.124079][ T18] acpi_companion_match+0x86/0x110 [ 80.129745][ T18] acpi_device_uevent_modalias+0x16/0x30 [ 80.135919][ T18] platform_uevent+0x38/0xb0 [ 80.141052][ T18] dev_uevent+0x3a5/0x740 [ 80.145923][ T18] kobject_uevent_env+0x465/0x890 [ 80.151501][ T18] kobject_synth_uevent+0x457/0x940 [ 80.157248][ T18] uevent_store+0x22/0x60 [ 80.162127][ T18] kernfs_fop_write_iter+0x3a8/0x500 [ 80.167957][ T18] vfs_write+0x748/0xd70 [ 80.172741][ T18] ksys_write+0x153/0x260 [ 80.177614][ T18] do_syscall_64+0x4c/0xa0 [ 80.182576][ T18] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.189020][ T18] [ 80.189020][ T18] -> #0 (kn->active#32){++++}-{0:0}: [ 80.196526][ T18] __lock_acquire+0x38f7/0x7d40 [ 80.201924][ T18] lock_acquire+0x19f/0x400 [ 80.206972][ T18] __kernfs_remove+0x5da/0xcb0 [ 80.212285][ T18] kernfs_remove_by_name_ns+0x91/0x100 [ 80.218306][ T18] device_del+0x62f/0xa80 [ 80.223178][ T18] device_unregister+0x1c/0xc0 [ 80.228505][ T18] mce_cpu_pre_down+0x33f/0x540 [ 80.233903][ T18] cpuhp_invoke_callback+0x423/0x7e0 [ 80.239736][ T18] cpuhp_thread_fun+0x3b2/0x7f0 [ 80.245137][ T18] smpboot_thread_fn+0x520/0x990 [ 80.250630][ T18] kthread+0x42e/0x520 [ 80.255248][ T18] ret_from_fork+0x1f/0x30 [ 80.260207][ T18] [ 80.260207][ T18] other info that might help us debug this: [ 80.260207][ T18] [ 80.270474][ T18] Chain exists of: [ 80.270474][ T18] kn->active#32 --> cpu_hotplug_lock --> cpuhp_state-down [ 80.270474][ T18] [ 80.283563][ T18] Possible unsafe locking scenario: [ 80.283563][ T18] [ 80.291035][ T18] CPU0 CPU1 [ 80.296427][ T18] ---- ---- [ 80.301814][ T18] lock(cpuhp_state-down); [ 80.306342][ T18] lock(cpu_hotplug_lock); [ 80.313383][ T18] lock(cpuhp_state-down); [ 80.320423][ T18] lock(kn->active#32); [ 80.324689][ T18] [ 80.324689][ T18] *** DEADLOCK *** [ 80.324689][ T18] [ 80.332843][ T18] 2 locks held by cpuhp/1/18: [ 80.337533][ T18] #0: ffffffff8cfbd670 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x5/0x30 [ 80.347932][ T18] #1: ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 [ 80.357739][ T18] [ 80.357739][ T18] stack backtrace: [ 80.363658][ T18] CPU: 1 PID: 18 Comm: cpuhp/1 Not tainted syzkaller #0 [ 80.370700][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.380799][ T18] Call Trace: [ 80.384102][ T18] [ 80.387046][ T18] dump_stack_lvl+0x188/0x250 [ 80.391751][ T18] ? load_image+0x410/0x410 [ 80.396308][ T18] ? show_regs_print_info+0x20/0x20 [ 80.401537][ T18] ? print_circular_bug+0x12b/0x1a0 [ 80.406789][ T18] check_noncircular+0x2f8/0x400 [ 80.411752][ T18] ? print_deadlock_bug+0x5d0/0x5d0 [ 80.416977][ T18] ? lockdep_lock+0xf1/0x1f0 [ 80.421595][ T18] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.427601][ T18] ? mark_lock+0x94/0x320 [ 80.431976][ T18] ? _find_first_zero_bit+0xd1/0xf0 [ 80.437199][ T18] __lock_acquire+0x38f7/0x7d40 [ 80.442128][ T18] ? _raw_spin_unlock+0x40/0x40 [ 80.447006][ T18] ? __lock_acquire+0x13b3/0x7d40 [ 80.452057][ T18] ? verify_lock_unused+0x140/0x140 [ 80.457407][ T18] ? kasan_set_free_info+0x1f/0x40 [ 80.462552][ T18] ? kmem_cache_free+0x8f/0x210 [ 80.467424][ T18] ? device_unregister+0x1c/0xc0 [ 80.472384][ T18] ? kthread+0x42e/0x520 [ 80.476647][ T18] ? ret_from_fork+0x1f/0x30 [ 80.481269][ T18] lock_acquire+0x19f/0x400 [ 80.485796][ T18] ? kernfs_remove_by_name_ns+0x91/0x100 [ 80.491477][ T18] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.497533][ T18] ? read_lock_is_recursive+0x10/0x10 [ 80.502941][ T18] ? up_write+0x1b6/0x410 [ 80.507302][ T18] __kernfs_remove+0x5da/0xcb0 [ 80.512122][ T18] ? kernfs_remove_by_name_ns+0x91/0x100 [ 80.517784][ T18] ? kernfs_next_descendant_post+0x200/0x200 [ 80.523826][ T18] ? kernfs_find_ns+0x49e/0x510 [ 80.528727][ T18] kernfs_remove_by_name_ns+0x91/0x100 [ 80.534211][ T18] device_del+0x62f/0xa80 [ 80.538570][ T18] ? kill_device+0x160/0x160 [ 80.543191][ T18] device_unregister+0x1c/0xc0 [ 80.547982][ T18] mce_cpu_pre_down+0x33f/0x540 [ 80.552855][ T18] ? mce_cpu_online+0x930/0x930 [ 80.557730][ T18] cpuhp_invoke_callback+0x423/0x7e0 [ 80.563049][ T18] cpuhp_thread_fun+0x3b2/0x7f0 [ 80.567929][ T18] ? cpuhp_should_run+0xa0/0xa0 [ 80.572811][ T18] ? trace_raw_output_cpuhp_exit+0x1a0/0x1a0 [ 80.578819][ T18] ? cpuhp_should_run+0xa0/0xa0 [ 80.583696][ T18] smpboot_thread_fn+0x520/0x990 [ 80.588674][ T18] kthread+0x42e/0x520 [ 80.592776][ T18] ? cpu_report_death+0x180/0x180 [ 80.597835][ T18] ? kthread_blkcg+0xd0/0xd0 [ 80.602457][ T18] ret_from_fork+0x1f/0x30 [ 80.606911][ T18] [ 80.628073][ T19] numa_remove_cpu cpu 1 node 0: mask now 0 [ 80.633933][ T19] numa_remove_cpu cpu 1 node 1: mask now 0 [ 80.665001][ T1427] smpboot: CPU 1 is now offline