program: syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendto$rose(r0, &(0x7f0000000900)="08590d81e76ab0c0e84e74e4d47e943432edae88922e84be128715ce2c1b71b8b44ea93c02e715ca892908d8294a32c26a7afd0595584a7583069151fea66c2e59ab0cef1bbabee69550ac70f70ea32f1f27252d14df1096d03c662cd40785eced40224c7b0265b5fd7d93eebd7871682a503a705f7f77854ae0dd333f7cc470ef0df8bd2198fea66c3e716d80133fe6655a2bd81f11002f765bcc78", 0x9c, 0x48044, &(0x7f0000000840)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@bcast, @default, @bcast, @null, @null, @default]}, 0x40) (async) sendto$rose(r0, &(0x7f0000000900)="08590d81e76ab0c0e84e74e4d47e943432edae88922e84be128715ce2c1b71b8b44ea93c02e715ca892908d8294a32c26a7afd0595584a7583069151fea66c2e59ab0cef1bbabee69550ac70f70ea32f1f27252d14df1096d03c662cd40785eced40224c7b0265b5fd7d93eebd7871682a503a705f7f77854ae0dd333f7cc470ef0df8bd2198fea66c3e716d80133fe6655a2bd81f11002f765bcc78", 0x9c, 0x48044, &(0x7f0000000840)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@bcast, @default, @bcast, @null, @null, @default]}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xf1b43ed1d1ce3437}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0xa, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x8003, 0x36, 0x4, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x8001, 0x837, 0xffffffff, 0x0, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0x8000, 0xfffffff1, 0x7, 0x4, 0xf, 0x5, 0x40, 0xb, 0x5, 0x200, 0xff32, 0x3, 0x7fff, 0x4ec1, 0x1, 0x9, 0x5, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8d, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0xb, 0x800, 0x3, 0x8, 0x0, 0x4, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x0, 0xfffffffe, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x3, 0x2, 0x7, 0x111, 0x8, 0x5c20, 0x7f, 0x0, 0xe, 0x80000001, 0x6, 0x391, 0x0, 0x0, 0x7, 0xf, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x104, 0x7, 0x0, 0x109, 0xfffffffe, 0x9, 0x7f, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x8, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x3, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x9b38, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x7fffffff, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x8000000, 0xfffffff8, 0x7, 0x3, 0x10, 0x1, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xc5}, {0x7, 0x2, 0x5, 0xfff8, 0xffc}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xf1b43ed1d1ce3437}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0xa, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x8003, 0x36, 0x4, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x8001, 0x837, 0xffffffff, 0x0, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0x8000, 0xfffffff1, 0x7, 0x4, 0xf, 0x5, 0x40, 0xb, 0x5, 0x200, 0xff32, 0x3, 0x7fff, 0x4ec1, 0x1, 0x9, 0x5, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8d, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0xb, 0x800, 0x3, 0x8, 0x0, 0x4, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x0, 0xfffffffe, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x3, 0x2, 0x7, 0x111, 0x8, 0x5c20, 0x7f, 0x0, 0xe, 0x80000001, 0x6, 0x391, 0x0, 0x0, 0x7, 0xf, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x104, 0x7, 0x0, 0x109, 0xfffffffe, 0x9, 0x7f, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x8, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x3, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x9b38, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x7fffffff, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x8000000, 0xfffffff8, 0x7, 0x3, 0x10, 0x1, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xc5}, {0x7, 0x2, 0x5, 0xfff8, 0xffc}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r11, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r11], 0x10) (async) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r11], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}]}}) socket$netlink(0x10, 0x3, 0x0) [ 68.071550][ T5328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.091932][ T5309] Bluetooth: hci0: command tx timeout [ 68.121521][ T5330] tipc: Started in network mode [ 68.123740][ T5330] tipc: Node identity ac141441, cluster identity 4711 [ 68.128483][ T5330] tipc: Enabled bearer , priority 10 [ 68.134523][ T5329] tipc: Enabling of bearer rejected, already enabled [ 68.160899][ T5328] ------------[ cut here ]------------ [ 68.163354][ T5328] WARNING: CPU: 0 PID: 5328 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.172155][ T5328] Modules linked in: [ 68.173923][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.177819][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.182506][ T5328] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.185251][ T5328] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 1e 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 37 58 2f 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 68.193783][ T5328] RSP: 0018:ffffc9000d3978c0 EFLAGS: 00010246 [ 68.196430][ T5328] RAX: ffffc9000d397900 RBX: 0000000000000033 RCX: 0000000000000000 [ 68.200037][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d397928 [ 68.203461][ T5328] RBP: ffffc9000d3979c0 R08: ffffc9000d397927 R09: 0000000000000000 [ 68.206969][ T5328] R10: ffffc9000d397900 R11: fffff52001a72f25 R12: 0000000000000000 [ 68.210792][ T5328] R13: 1ffff92001a72f1c R14: 0000000000040d40 R15: dffffc0000000000 [ 68.214243][ T5328] FS: 00007f12b96986c0(0000) GS:ffff88808d967000(0000) knlGS:0000000000000000 [ 68.218054][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.220943][ T5328] CR2: 00007f12b95186ec CR3: 00000000426fa000 CR4: 0000000000352ef0 [ 68.224430][ T5328] Call Trace: [ 68.225928][ T5328] [ 68.227187][ T5328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 68.229906][ T5328] ? kfree+0x18e/0x440 [ 68.231747][ T5328] ? policy_nodemask+0x27c/0x720 [ 68.233925][ T5328] ? p9_client_clunk+0x1b6/0x250 [ 68.235954][ T5328] alloc_pages_mpol+0x232/0x4a0 [ 68.237872][ T5328] ___kmalloc_large_node+0x5f/0x1b0 [ 68.240679][ T5328] __kmalloc_large_node_noprof+0x18/0x90 [ 68.243051][ T5328] __kmalloc_noprof+0x36f/0x4f0 [ 68.245191][ T5328] ? v9fs_fid_get_acl+0x4f/0x100 [ 68.247332][ T5328] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 68.250978][ T5328] v9fs_fid_get_acl+0x4f/0x100 [ 68.253129][ T5328] v9fs_get_acl+0x9a/0x360 [ 68.255114][ T5328] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 68.257583][ T5328] v9fs_mount+0x6eb/0xa50 [ 68.261658][ T5328] ? __pfx_v9fs_mount+0x10/0x10 [ 68.263866][ T5328] legacy_get_tree+0xfd/0x1a0 [ 68.265860][ T5328] ? __pfx_v9fs_mount+0x10/0x10 [ 68.268052][ T5328] vfs_get_tree+0x92/0x2b0 [ 68.270170][ T5328] do_new_mount+0x2a2/0xa30 [ 68.272153][ T5328] ? ns_capable+0x8a/0xf0 [ 68.274051][ T5328] ? __pfx_do_new_mount+0x10/0x10 [ 68.276311][ T5328] ? path_mount+0x61c/0xfe0 [ 68.278353][ T5328] ? user_path_at+0x44/0x60 [ 68.280474][ T5328] __se_sys_mount+0x317/0x410 [ 68.282595][ T5328] ? __pfx___se_sys_mount+0x10/0x10 [ 68.284909][ T5328] ? rcu_is_watching+0x15/0xb0 [ 68.287025][ T5328] ? do_syscall_64+0xbe/0x3b0 [ 68.289086][ T5328] ? __x64_sys_mount+0x20/0xc0 [ 68.291260][ T5328] do_syscall_64+0xfa/0x3b0 [ 68.293212][ T5328] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.295454][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.297983][ T5328] ? clear_bhb_loop+0x60/0xb0 [ 68.300062][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.302553][ T5328] RIP: 0033:0x7f12b878eec9 [ 68.304440][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.312612][ T5328] RSP: 002b:00007f12b9698038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.315943][ T5328] RAX: ffffffffffffffda RBX: 00007f12b89e5fa0 RCX: 00007f12b878eec9 [ 68.319498][ T5328] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 68.322913][ T5328] RBP: 00007f12b8811f91 R08: 0000200000000500 R09: 0000000000000000 [ 68.326171][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.329691][ T5328] R13: 00007f12b89e6038 R14: 00007f12b89e5fa0 R15: 00007ffd09fddf08 [ 68.333161][ T5328] [ 68.334584][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.337847][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.341804][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.346378][ T5328] Call Trace: [ 68.347860][ T5328] [ 68.348964][ T5328] dump_stack_lvl+0x99/0x250 [ 68.350800][ T5328] ? __asan_memcpy+0x40/0x70 [ 68.352780][ T5328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.354953][ T5328] ? __pfx__printk+0x10/0x10 [ 68.356862][ T5328] vpanic+0x281/0x750 [ 68.358598][ T5328] ? __pfx__printk+0x10/0x10 [ 68.360618][ T5328] ? __pfx_vpanic+0x10/0x10 [ 68.362577][ T5328] ? is_bpf_text_address+0x26/0x2b0 [ 68.364726][ T5328] panic+0xb9/0xc0 [ 68.366233][ T5328] ? __pfx_panic+0x10/0x10 [ 68.368239][ T5328] __warn+0x31b/0x4b0 [ 68.369813][ T5328] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.372250][ T5328] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.374870][ T5328] report_bug+0x2be/0x4f0 [ 68.376720][ T5328] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.379486][ T5328] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.382114][ T5328] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 68.384677][ T5328] handle_bug+0x84/0x160 [ 68.386543][ T5328] exc_invalid_op+0x1a/0x50 [ 68.388676][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 68.390956][ T5328] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 68.393818][ T5328] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 1e 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 37 58 2f 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 68.401754][ T5328] RSP: 0018:ffffc9000d3978c0 EFLAGS: 00010246 [ 68.404332][ T5328] RAX: ffffc9000d397900 RBX: 0000000000000033 RCX: 0000000000000000 [ 68.407792][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d397928 [ 68.411000][ T5328] RBP: ffffc9000d3979c0 R08: ffffc9000d397927 R09: 0000000000000000 [ 68.414360][ T5328] R10: ffffc9000d397900 R11: fffff52001a72f25 R12: 0000000000000000 [ 68.417510][ T5328] R13: 1ffff92001a72f1c R14: 0000000000040d40 R15: dffffc0000000000 [ 68.420983][ T5328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 68.423792][ T5328] ? kfree+0x18e/0x440 [ 68.425486][ T5328] ? policy_nodemask+0x27c/0x720 [ 68.427704][ T5328] ? p9_client_clunk+0x1b6/0x250 [ 68.429856][ T5328] alloc_pages_mpol+0x232/0x4a0 [ 68.431934][ T5328] ___kmalloc_large_node+0x5f/0x1b0 [ 68.434269][ T5328] __kmalloc_large_node_noprof+0x18/0x90 [ 68.436626][ T5328] __kmalloc_noprof+0x36f/0x4f0 [ 68.438735][ T5328] ? v9fs_fid_get_acl+0x4f/0x100 [ 68.440867][ T5328] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 68.443793][ T5328] v9fs_fid_get_acl+0x4f/0x100 [ 68.446131][ T5328] v9fs_get_acl+0x9a/0x360 [ 68.448122][ T5328] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 68.450466][ T5328] v9fs_mount+0x6eb/0xa50 [ 68.452303][ T5328] ? __pfx_v9fs_mount+0x10/0x10 [ 68.454463][ T5328] legacy_get_tree+0xfd/0x1a0 [ 68.456520][ T5328] ? __pfx_v9fs_mount+0x10/0x10 [ 68.458593][ T5328] vfs_get_tree+0x92/0x2b0 [ 68.460485][ T5328] do_new_mount+0x2a2/0xa30 [ 68.462472][ T5328] ? ns_capable+0x8a/0xf0 [ 68.464411][ T5328] ? __pfx_do_new_mount+0x10/0x10 [ 68.466623][ T5328] ? path_mount+0x61c/0xfe0 [ 68.468540][ T5328] ? user_path_at+0x44/0x60 [ 68.470621][ T5328] __se_sys_mount+0x317/0x410 [ 68.472867][ T5328] ? __pfx___se_sys_mount+0x10/0x10 [ 68.475060][ T5328] ? rcu_is_watching+0x15/0xb0 [ 68.477134][ T5328] ? do_syscall_64+0xbe/0x3b0 [ 68.479235][ T5328] ? __x64_sys_mount+0x20/0xc0 [ 68.481385][ T5328] do_syscall_64+0xfa/0x3b0 [ 68.483428][ T5328] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.485619][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.488129][ T5328] ? clear_bhb_loop+0x60/0xb0 [ 68.489999][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.492540][ T5328] RIP: 0033:0x7f12b878eec9 [ 68.494432][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.502133][ T5328] RSP: 002b:00007f12b9698038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.505839][ T5328] RAX: ffffffffffffffda RBX: 00007f12b89e5fa0 RCX: 00007f12b878eec9 [ 68.509247][ T5328] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 68.512685][ T5328] RBP: 00007f12b8811f91 R08: 0000200000000500 R09: 0000000000000000 [ 68.515889][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.519405][ T5328] R13: 00007f12b89e6038 R14: 00007f12b89e5fa0 R15: 00007ffd09fddf08 [ 68.522891][ T5328] [ 68.524614][ T5328] Kernel Offset: disabled [ 68.526489][ T5328] Rebooting in 86400 seconds..