Warning: Permanently added '[localhost]:33739' (ED25519) to the list of known hosts.
2026/07/12 16:08:29 parsed 1 programs
2026/07/12 16:08:29 serving rpc on tcp://40357
syzkaller login: [ 53.240767][ T5610] cgroup: Unknown subsys name 'net'
[ 53.361590][ T5610] cgroup: Unknown subsys name 'cpuset'
[ 53.365658][ T5610] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 54.807960][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 57.012585][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 57.286194][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 57.291123][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 57.295798][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 57.301780][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 57.305039][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 57.850325][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.859243][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.906804][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.913079][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.825213][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.827959][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 58.830311][ T5684] bridge_slave_0: entered allmulticast mode
[ 58.833266][ T5684] bridge_slave_0: entered promiscuous mode
[ 58.838396][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.845536][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 58.849512][ T5684] bridge_slave_1: entered allmulticast mode
[ 58.852315][ T5684] bridge_slave_1: entered promiscuous mode
[ 58.885863][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 58.895276][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 58.918927][ T5684] team0: Port device team_slave_0 added
[ 58.924085][ T5684] team0: Port device team_slave_1 added
[ 58.945166][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 58.947361][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 58.955776][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 58.960538][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 58.962648][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 58.970849][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 58.994435][ T5684] hsr_slave_0: entered promiscuous mode
[ 58.997175][ T5684] hsr_slave_1: entered promiscuous mode
[ 59.114014][ T5684] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 59.122902][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 59.126581][ T5684] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 59.131155][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 59.134272][ T5684] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 59.138498][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 59.146539][ T5684] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 59.150879][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 59.218991][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0
[ 59.234699][ T5684] 8021q: adding VLAN 0 to HW filter on device team0
[ 59.241946][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.244529][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.255548][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.258040][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.464154][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 59.492827][ T5684] veth0_vlan: entered promiscuous mode
[ 59.500388][ T5684] veth1_vlan: entered promiscuous mode
[ 59.520812][ T5684] veth0_macvtap: entered promiscuous mode
[ 59.524651][ T5684] veth1_macvtap: entered promiscuous mode
[ 59.535820][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 59.546735][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 59.561302][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.565047][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.568309][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.572182][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/07/12 16:08:37 executed programs: 0
[ 59.691384][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 59.696104][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 59.700026][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 59.705683][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 59.736237][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 59.740009][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 59.743487][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 59.746202][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 59.748483][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 59.750806][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 59.752793][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 59.756702][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 59.759817][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 59.762914][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 59.765613][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 59.770677][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 59.848305][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 59.920802][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 60.273026][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.275686][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.278282][ T5734] bridge_slave_0: entered allmulticast mode
[ 60.281709][ T5734] bridge_slave_0: entered promiscuous mode
[ 60.298811][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.301807][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.304789][ T5734] bridge_slave_1: entered allmulticast mode
[ 60.308404][ T5734] bridge_slave_1: entered promiscuous mode
[ 60.370858][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.396537][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.425370][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.428230][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.431517][ T5741] bridge_slave_0: entered allmulticast mode
[ 60.434014][ T5741] bridge_slave_0: entered promiscuous mode
[ 60.437318][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.439558][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.441706][ T5735] bridge_slave_0: entered allmulticast mode
[ 60.444276][ T5735] bridge_slave_0: entered promiscuous mode
[ 60.448644][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.450906][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.453060][ T5735] bridge_slave_1: entered allmulticast mode
[ 60.455549][ T5735] bridge_slave_1: entered promiscuous mode
[ 60.460066][ T5734] team0: Port device team_slave_0 added
[ 60.462187][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.465317][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.468022][ T5741] bridge_slave_1: entered allmulticast mode
[ 60.470909][ T5741] bridge_slave_1: entered promiscuous mode
[ 60.495989][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.500050][ T5734] team0: Port device team_slave_1 added
[ 60.512180][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.517767][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.534274][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.545021][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.547688][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.557467][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.564767][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.567526][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.577893][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.623066][ T5735] team0: Port device team_slave_0 added
[ 60.626541][ T5735] team0: Port device team_slave_1 added
[ 60.632421][ T5741] team0: Port device team_slave_0 added
[ 60.637032][ T5741] team0: Port device team_slave_1 added
[ 60.692363][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.694739][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.703263][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.710258][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.713030][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.723561][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.733796][ T5734] hsr_slave_0: entered promiscuous mode
[ 60.736880][ T5734] hsr_slave_1: entered promiscuous mode
[ 60.739840][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[ 60.742186][ T5734] Cannot create hsr debugfs directory
[ 60.745024][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.747878][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.757504][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.773128][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.775959][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 60.784251][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.874537][ T5735] hsr_slave_0: entered promiscuous mode
[ 60.877640][ T5735] hsr_slave_1: entered promiscuous mode
[ 60.883150][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[ 60.888909][ T5735] Cannot create hsr debugfs directory
[ 60.929182][ T5741] hsr_slave_0: entered promiscuous mode
[ 60.932065][ T5741] hsr_slave_1: entered promiscuous mode
[ 60.934381][ T5741] debugfs: 'hsr0' already exists in 'hsr'
[ 60.936357][ T5741] Cannot create hsr debugfs directory
[ 61.210539][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 61.214917][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 61.217843][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 61.222711][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 61.225521][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 61.231549][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 61.234401][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 61.238666][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 61.284927][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[ 61.296535][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[ 61.302364][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.304726][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 61.312900][ T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.315805][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 61.518495][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 61.548325][ T5734] veth0_vlan: entered promiscuous mode
[ 61.553409][ T5734] veth1_vlan: entered promiscuous mode
[ 61.569748][ T5734] veth0_macvtap: entered promiscuous mode
[ 61.574437][ T5734] veth1_macvtap: entered promiscuous mode
[ 61.585674][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 61.595726][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 61.607755][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 61.621648][ T5688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.625430][ T5688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.631335][ T5688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.634631][ T5688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.684570][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.690303][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.710669][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.713511][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.754065][ T5809] BUG: sleeping function called from invalid context at mm/migrate.c:1741
[ 61.757137][ T5809] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5809, name: syz.0.17
[ 61.760341][ T5809] preempt_count: 1, expected: 0
[ 61.762146][ T5809] RCU nest depth: 0, expected: 0
[ 61.763806][ T5809] 1 lock held by syz.0.17/5809:
[ 61.765265][ T5809] #0: ffff88817766d6d8 (ptlock_ptr(ptdesc)){+.+.}-{3:3}, at: huge_pte_lock+0x17b/0x1e0
[ 61.768155][ T5809] Preemption disabled at:
[ 61.768160][ T5809] [<0000000000000000>] 0x0
[ 61.771745][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 61.771754][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 61.771758][ T5809] Call Trace:
[ 61.771761][ T5809]
[ 61.771764][ T5809] dump_stack_lvl+0xe8/0x150
[ 61.771776][ T5809] __might_resched+0x378/0x4d0
[ 61.771785][ T5809] migrate_pages+0x49b/0x27e0
[ 61.771797][ T5809] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 61.771809][ T5809] ? __pfx_migrate_pages+0x10/0x10
[ 61.771817][ T5809] ? current_cpuset_is_being_rebound+0x1d/0x300
[ 61.771823][ T5809] ? current_cpuset_is_being_rebound+0x1d/0x300
[ 61.771834][ T5809] ? __se_sys_mbind+0xe40/0x10e0
[ 61.771845][ T5809] __se_sys_mbind+0xe82/0x10e0
[ 61.771854][ T5809] ? __pfx___se_sys_mbind+0x10/0x10
[ 61.771861][ T5809] ? vm_mmap_pgoff+0x353/0x4e0
[ 61.771871][ T5809] ? __se_sys_futex+0x3a8/0x450
[ 61.771882][ T5809] ? rcu_is_watching+0x15/0xb0
[ 61.771892][ T5809] ? __x64_sys_mbind+0x21/0xf0
[ 61.771899][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.771906][ T5809] do_syscall_64+0x174/0x580
[ 61.771915][ T5809] ? trace_irq_disable+0x3b/0x140
[ 61.771923][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.771930][ T5809] RIP: 0033:0x7fc92ad9ce59
[ 61.771937][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.771942][ T5809] RSP: 002b:00007fc92bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 61.771951][ T5809] RAX: ffffffffffffffda RBX: 00007fc92b015fa0 RCX: 00007fc92ad9ce59
[ 61.771956][ T5809] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000
[ 61.771960][ T5809] RBP: 00007fc92ae32e6f R08: 0000000000000000 R09: 0000000000000003
[ 61.771966][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 61.771970][ T5809] R13: 00007fc92b016038 R14: 00007fc92b015fa0 R15: 00007ffed35b2a68
[ 61.771980][ T5809]
[ 61.772013][ T5809]
[ 61.838283][ T5809] ======================================================
[ 61.840607][ T5809] WARNING: possible circular locking dependency detected
[ 61.842964][ T5809] syzkaller #0 Tainted: G W
[ 61.844962][ T5809] ------------------------------------------------------
[ 61.847326][ T5809] syz.0.17/5809 is trying to acquire lock:
[ 61.849400][ T5809] ffffffff8ea84300 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600
[ 61.852491][ T5809]
[ 61.852491][ T5809] but task is already holding lock:
[ 61.855096][ T5809] ffff88817766d6d8 (ptlock_ptr(ptdesc)){+.+.}-{3:3}, at: huge_pte_lock+0x17b/0x1e0
[ 61.858362][ T5809]
[ 61.858362][ T5809] which lock already depends on the new lock.
[ 61.858362][ T5809]
[ 61.861905][ T5809]
[ 61.861905][ T5809] the existing dependency chain (in reverse order) is:
[ 61.865026][ T5809]
[ 61.865026][ T5809] -> #2 (ptlock_ptr(ptdesc)){+.+.}-{3:3}:
[ 61.867594][ T5809] _raw_spin_lock+0x2e/0x40
[ 61.869280][ T5809] __split_huge_pmd+0x1eb/0x2e0
[ 61.871122][ T5809] vma_adjust_trans_huge+0x244/0x390
[ 61.873101][ T5809] __split_vma+0x8ec/0xbf0
[ 61.874777][ T5809] vma_modify+0x84a/0x1c70
[ 61.876448][ T5809] vma_modify_flags+0x248/0x330
[ 61.878339][ T5809] mprotect_fixup+0x51a/0xad0
[ 61.880169][ T5809] do_mprotect_pkey+0x9d3/0xcd0
[ 61.882063][ T5809] __x64_sys_mprotect+0x80/0x90
[ 61.883948][ T5809] do_syscall_64+0x174/0x580
[ 61.885737][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.887950][ T5809]
[ 61.887950][ T5809] -> #1 (&mapping->i_mmap_rwsem){++++}-{4:4}:
[ 61.890692][ T5809] down_write+0x96/0x200
[ 61.892301][ T5809] dma_resv_lockdep+0x3a4/0x670
[ 61.894176][ T5809] do_one_initcall+0x250/0x870
[ 61.895950][ T5809] do_initcall_level+0x10a/0x1a0
[ 61.897826][ T5809] do_initcalls+0x59/0xa0
[ 61.899564][ T5809] kernel_init_freeable+0x29d/0x3e0
[ 61.901507][ T5809] kernel_init+0x1d/0x1d0
[ 61.903197][ T5809] ret_from_fork+0x514/0xb70
[ 61.904970][ T5809] ret_from_fork_asm+0x1a/0x30
[ 61.906777][ T5809]
[ 61.906777][ T5809] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 61.909314][ T5809] __lock_acquire+0x15ff/0x2e50
[ 61.911185][ T5809] lock_acquire+0x115/0x350
[ 61.912943][ T5809] fs_reclaim_acquire+0x71/0x100
[ 61.914826][ T5809] prepare_alloc_pages+0x149/0x600
[ 61.916722][ T5809] __alloc_frozen_pages_noprof+0x185/0x5a0
[ 61.918817][ T5809] only_alloc_fresh_hugetlb_folio+0x135/0x450
[ 61.921061][ T5809] alloc_hugetlb_folio_nodemask+0x287/0x540
[ 61.923247][ T5809] migrate_pages+0x5a3/0x27e0
[ 61.925120][ T5809] __se_sys_mbind+0xe82/0x10e0
[ 61.926943][ T5809] do_syscall_64+0x174/0x580
[ 61.928747][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.931050][ T5809]
[ 61.931050][ T5809] other info that might help us debug this:
[ 61.931050][ T5809]
[ 61.934646][ T5809] Chain exists of:
[ 61.934646][ T5809] fs_reclaim --> &mapping->i_mmap_rwsem --> ptlock_ptr(ptdesc)
[ 61.934646][ T5809]
[ 61.939315][ T5809] Possible unsafe locking scenario:
[ 61.939315][ T5809]
[ 61.941967][ T5809] CPU0 CPU1
[ 61.943886][ T5809] ---- ----
[ 61.945793][ T5809] lock(ptlock_ptr(ptdesc));
[ 61.947458][ T5809] lock(&mapping->i_mmap_rwsem);
[ 61.949937][ T5809] lock(ptlock_ptr(ptdesc));
[ 61.952350][ T5809] lock(fs_reclaim);
[ 61.953716][ T5809]
[ 61.953716][ T5809] *** DEADLOCK ***
[ 61.953716][ T5809]
[ 61.956544][ T5809] 1 lock held by syz.0.17/5809:
[ 61.958219][ T5809] #0: ffff88817766d6d8 (ptlock_ptr(ptdesc)){+.+.}-{3:3}, at: huge_pte_lock+0x17b/0x1e0
[ 61.961533][ T5809]
[ 61.961533][ T5809] stack backtrace:
[ 61.963563][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.0.17 Tainted: G W syzkaller #0 PREEMPT(full)
[ 61.963576][ T5809] Tainted: [W]=WARN
[ 61.963579][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 61.963585][ T5809] Call Trace:
[ 61.963591][ T5809]
[ 61.963595][ T5809] dump_stack_lvl+0xe8/0x150
[ 61.963608][ T5809] print_circular_bug+0x2e2/0x300
[ 61.963619][ T5809] check_noncircular+0x12f/0x150
[ 61.963630][ T5809] __lock_acquire+0x15ff/0x2e50
[ 61.963642][ T5809] ? irq_work_queue+0xc3/0x140
[ 61.963651][ T5809] lock_acquire+0x115/0x350
[ 61.963658][ T5809] ? prepare_alloc_pages+0x149/0x600
[ 61.963669][ T5809] fs_reclaim_acquire+0x71/0x100
[ 61.963677][ T5809] ? prepare_alloc_pages+0x149/0x600
[ 61.963685][ T5809] prepare_alloc_pages+0x149/0x600
[ 61.963694][ T5809] __alloc_frozen_pages_noprof+0x185/0x5a0
[ 61.963703][ T5809] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 61.963713][ T5809] ? do_raw_spin_lock+0x12b/0x2f0
[ 61.963725][ T5809] only_alloc_fresh_hugetlb_folio+0x135/0x450
[ 61.963738][ T5809] alloc_hugetlb_folio_nodemask+0x287/0x540
[ 61.963747][ T5809] ? __pfx_alloc_hugetlb_folio_nodemask+0x10/0x10
[ 61.963756][ T5809] ? alloc_migration_target_by_mpol+0x43e/0x590
[ 61.963769][ T5809] migrate_pages+0x5a3/0x27e0
[ 61.963782][ T5809] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 61.963794][ T5809] ? __pfx_migrate_pages+0x10/0x10
[ 61.963803][ T5809] ? current_cpuset_is_being_rebound+0x1d/0x300
[ 61.963812][ T5809] ? current_cpuset_is_being_rebound+0x1d/0x300
[ 61.963822][ T5809] ? __se_sys_mbind+0xe40/0x10e0
[ 61.963833][ T5809] __se_sys_mbind+0xe82/0x10e0
[ 61.963843][ T5809] ? __pfx___se_sys_mbind+0x10/0x10
[ 61.963851][ T5809] ? vm_mmap_pgoff+0x353/0x4e0
[ 61.963861][ T5809] ? __se_sys_futex+0x3a8/0x450
[ 61.963874][ T5809] ? rcu_is_watching+0x15/0xb0
[ 61.963884][ T5809] ? __x64_sys_mbind+0x21/0xf0
[ 61.963892][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.963901][ T5809] do_syscall_64+0x174/0x580
[ 61.963913][ T5809] ? trace_irq_disable+0x3b/0x140
[ 61.963921][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.963929][ T5809] RIP: 0033:0x7fc92ad9ce59
[ 61.963939][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.963946][ T5809] RSP: 002b:00007fc92bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 61.963955][ T5809] RAX: ffffffffffffffda RBX: 00007fc92b015fa0 RCX: 00007fc92ad9ce59
[ 61.963961][ T5809] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000
[ 61.963967][ T5809] RBP: 00007fc92ae32e6f R08: 0000000000000000 R09: 0000000000000003
[ 61.963972][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 61.963977][ T5809] R13: 00007fc92b016038 R14: 00007fc92b015fa0 R15: 00007ffed35b2a68
[ 61.963986][ T5809]
[ 61.967404][ T54] Bluetooth: hci0: command tx timeout
[ 62.057356][ T54] Bluetooth: hci1: command tx timeout
[ 62.059191][ T54] Bluetooth: hci2: command tx timeout
[ 64.079004][ T54] Bluetooth: hci1: command tx timeout
[ 64.081137][ T54] Bluetooth: hci0: command tx timeout
[ 64.083381][ T5642] Bluetooth: hci2: command tx timeout
[ 66.158965][ T5740] Bluetooth: hci2: command tx timeout
[ 66.160916][ T54] Bluetooth: hci1: command tx timeout
[ 66.163329][ T5642] Bluetooth: hci0: command tx timeout
[ 68.239033][ T5642] Bluetooth: hci0: command tx timeout
[ 68.241385][ T54] Bluetooth: hci1: command tx timeout
[ 68.243654][ T5740] Bluetooth: hci2: command tx timeout