program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x33, 0x2000000, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36)
nanosleep(&(0x7f0000000500)={0x0, 0x17d78400}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)="0705810240000007058102000200", 0xffffffc6)
write(r1, &(0x7f0000000800)='AAAA', 0x4)
[ 94.596892][ T4642] Bluetooth: hci0: command tx timeout
[ 94.783058][ T5319] gadgetfs: bound to dummy_udc driver
[ 94.868213][ T5320] ------------[ cut here ]------------
[ 94.868226][ T5320] 1
[ 94.868230][ T5320] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5320
[ 94.875721][ T5320] Modules linked in:
[ 94.877689][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.880998][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.885056][ T5320] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.887823][ T5320] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 aa 9f 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 11 54 0e 67 48 0f b9 3a e9 68
[ 94.897655][ T5320] RSP: 0018:ffffc9000f097a20 EFLAGS: 00010246
[ 94.900633][ T5320] RAX: ffffc9000f097a00 RBX: 1ffff92001e12f48 RCX: 0000000000000000
[ 94.904184][ T5320] RDX: 0000000000000000 RSI: 0000000000000013 RDI: ffffc9000f097a88
[ 94.907525][ T5320] RBP: ffffc9000f097b10 R08: ffffc9000f097a87 R09: 0000000000000000
[ 94.910821][ T5320] R10: ffffc9000f097a60 R11: fffff52001e12f51 R12: 0000000000000000
[ 94.914213][ T5320] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000
[ 94.917490][ T5320] FS: 00007f6fef78c6c0(0000) GS:ffff88808c2c3000(0000) knlGS:0000000000000000
[ 94.921346][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.924493][ T5320] CR2: 00007f6fef78bff8 CR3: 000000001287f000 CR4: 0000000000352ef0
[ 94.927865][ T5320] Call Trace:
[ 94.929347][ T5320]
[ 94.930554][ T5320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 94.933008][ T5320] ? __pfx_policy_nodemask+0x10/0x10
[ 94.935302][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 94.937560][ T5320] alloc_pages_mpol+0x21e/0x390
[ 94.939679][ T5320] ? ep_write_iter+0x1bc/0x500
[ 94.941745][ T5320] ___kmalloc_large_node+0x4f/0x120
[ 94.944110][ T5320] __kmalloc_large_node_noprof+0x18/0x90
[ 94.946539][ T5320] __kmalloc_noprof+0x3fb/0x720
[ 94.948699][ T5320] ? ep_write_iter+0x1bc/0x500
[ 94.951020][ T5320] ep_write_iter+0x1bc/0x500
[ 94.953084][ T5320] vfs_write+0x612/0xba0
[ 94.955130][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 94.957071][ T5320] ? __fget_files+0x2a/0x420
[ 94.958868][ T5320] ksys_write+0x150/0x270
[ 94.960573][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 94.962605][ T5320] do_syscall_64+0x166/0x520
[ 94.964771][ T5320] ? trace_irq_disable+0x3b/0x140
[ 94.966861][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.969333][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 94.971373][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.974066][ T5320] RIP: 0033:0x7f6fee99e159
[ 94.975867][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.985734][ T5320] RSP: 002b:00007f6fef78bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.989383][ T5320] RAX: ffffffffffffffda RBX: 00007f6feec26090 RCX: 00007f6fee99e159
[ 94.992848][ T5320] RDX: 00000000ffffffc6 RSI: 0000200000000700 RDI: 0000000000000004
[ 94.996568][ T5320] RBP: 00007f6feea3506b R08: 0000000000000000 R09: 0000000000000000
[ 94.999827][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.003148][ T5320] R13: 00007f6feec26128 R14: 00007f6feec26090 R15: 00007ffc838aad18
[ 95.007005][ T5320]
[ 95.008286][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.011147][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.014756][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.018845][ T5320] Call Trace:
[ 95.020214][ T5320]
[ 95.021463][ T5320] vpanic+0x56d/0xa60
[ 95.023099][ T5320] ? __pfx__printk+0x10/0x10
[ 95.024990][ T5320] ? __pfx_vpanic+0x10/0x10
[ 95.026816][ T5320] ? is_bpf_text_address+0x292/0x2b0
[ 95.028735][ T5320] ? is_bpf_text_address+0x26/0x2b0
[ 95.030759][ T5320] panic+0xc5/0xd0
[ 95.032262][ T5320] ? __pfx_panic+0x10/0x10
[ 95.034056][ T5320] __warn+0x315/0x4c0
[ 95.035880][ T5320] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.038472][ T5320] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.041108][ T5320] __report_bug+0x276/0x570
[ 95.042992][ T5320] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.045339][ T5320] ? __pfx___report_bug+0x10/0x10
[ 95.047558][ T5320] ? check_noncircular+0xdb/0x150
[ 95.049855][ T5320] ? add_lock_to_list+0xc7/0x100
[ 95.051978][ T5320] ? lockdep_unlock+0x5c/0xd0
[ 95.054037][ T5320] ? __lock_acquire+0x1511/0x2de0
[ 95.056166][ T5320] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.058576][ T5320] report_bug+0x16b/0x220
[ 95.060329][ T5320] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.062738][ T5320] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 95.065231][ T5320] handle_bug+0x9c/0x200
[ 95.066934][ T5320] exc_invalid_op+0x1a/0x50
[ 95.068801][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 95.070788][ T5320] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 95.073391][ T5320] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 aa 9f 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 11 54 0e 67 48 0f b9 3a e9 68
[ 95.081034][ T5320] RSP: 0018:ffffc9000f097a20 EFLAGS: 00010246
[ 95.083320][ T5320] RAX: ffffc9000f097a00 RBX: 1ffff92001e12f48 RCX: 0000000000000000
[ 95.086092][ T5320] RDX: 0000000000000000 RSI: 0000000000000013 RDI: ffffc9000f097a88
[ 95.088851][ T5320] RBP: ffffc9000f097b10 R08: ffffc9000f097a87 R09: 0000000000000000
[ 95.091739][ T5320] R10: ffffc9000f097a60 R11: fffff52001e12f51 R12: 0000000000000000
[ 95.094919][ T5320] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000
[ 95.098028][ T5320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 95.100522][ T5320] ? __pfx_policy_nodemask+0x10/0x10
[ 95.102551][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 95.104508][ T5320] alloc_pages_mpol+0x21e/0x390
[ 95.106251][ T5320] ? ep_write_iter+0x1bc/0x500
[ 95.107923][ T5320] ___kmalloc_large_node+0x4f/0x120
[ 95.109890][ T5320] __kmalloc_large_node_noprof+0x18/0x90
[ 95.112050][ T5320] __kmalloc_noprof+0x3fb/0x720
[ 95.114047][ T5320] ? ep_write_iter+0x1bc/0x500
[ 95.116084][ T5320] ep_write_iter+0x1bc/0x500
[ 95.118023][ T5320] vfs_write+0x612/0xba0
[ 95.119813][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 95.121750][ T5320] ? __fget_files+0x2a/0x420
[ 95.123670][ T5320] ksys_write+0x150/0x270
[ 95.125507][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 95.127554][ T5320] do_syscall_64+0x166/0x520
[ 95.129481][ T5320] ? trace_irq_disable+0x3b/0x140
[ 95.131415][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.133953][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 95.135850][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.138302][ T5320] RIP: 0033:0x7f6fee99e159
[ 95.140264][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.148029][ T5320] RSP: 002b:00007f6fef78bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.151440][ T5320] RAX: ffffffffffffffda RBX: 00007f6feec26090 RCX: 00007f6fee99e159
[ 95.154829][ T5320] RDX: 00000000ffffffc6 RSI: 0000200000000700 RDI: 0000000000000004
[ 95.158235][ T5320] RBP: 00007f6feea3506b R08: 0000000000000000 R09: 0000000000000000
[ 95.161617][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.164935][ T5320] R13: 00007f6feec26128 R14: 00007f6feec26090 R15: 00007ffc838aad18
[ 95.168580][ T5320]
[ 95.170445][ T5320] Kernel Offset: disabled
[ 95.172251][ T5320] Rebooting in 86400 seconds..