program: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r0, 0x0) (fail_nth: 14) [ 81.633795][ T4665] Bluetooth: hci0: command tx timeout [ 81.637618][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.640271][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.729665][ T5325] FAULT_INJECTION: forcing a failure. [ 81.729665][ T5325] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 81.741720][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 81.745558][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.749438][ T5325] Call Trace: [ 81.750782][ T5325] [ 81.751811][ T5325] dump_stack_lvl+0x241/0x360 [ 81.753461][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.755535][ T5325] ? __pfx__printk+0x10/0x10 [ 81.757321][ T5325] should_fail_ex+0x3b0/0x4e0 [ 81.759239][ T5325] prepare_alloc_pages+0x1da/0x5b0 [ 81.761245][ T5325] __alloc_pages_noprof+0x16f/0x710 [ 81.763343][ T5325] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 81.765610][ T5325] alloc_pages_mpol_noprof+0x3e8/0x680 [ 81.767741][ T5325] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 81.770074][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 81.772065][ T5325] ? alloc_pages_noprof+0xef/0x170 [ 81.774045][ T5325] pte_alloc_one+0x8f/0x510 [ 81.775784][ T5325] ? __pfx_pte_alloc_one+0x10/0x10 [ 81.777787][ T5325] __pte_alloc+0x79/0x3c0 [ 81.779492][ T5325] ? __pfx___pte_alloc+0x10/0x10 [ 81.781559][ T5325] remap_pfn_range_notrack+0xb58/0xe10 [ 81.783649][ T5325] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 81.785923][ T5325] ? track_pfn_remap+0x319/0x3f0 [ 81.787727][ T5325] remap_pfn_range+0x12c/0x1b0 [ 81.789296][ T5325] ? __pfx_remap_pfn_range+0x10/0x10 [ 81.791295][ T5325] usbdev_mmap+0x537/0x970 [ 81.792970][ T5325] ? __pfx_usbdev_mmap+0x10/0x10 [ 81.794984][ T5325] ? __mas_set_range+0x133/0x3c0 [ 81.796777][ T5325] __mmap_region+0x2204/0x2cd0 [ 81.798631][ T5325] ? __pfx___mmap_region+0x10/0x10 [ 81.800517][ T5325] ? __lock_acquire+0x1397/0x2100 [ 81.802425][ T5325] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 81.804924][ T5325] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 81.807514][ T5325] ? cap_mmap_addr+0x163/0x2c0 [ 81.809333][ T5325] mmap_region+0x226/0x2c0 [ 81.811197][ T5325] do_mmap+0x8f0/0x1000 [ 81.812834][ T5325] ? __pfx_do_mmap+0x10/0x10 [ 81.814787][ T5325] ? __pfx_down_write_killable+0x10/0x10 [ 81.816839][ T5325] ? common_file_perm+0x1a6/0x210 [ 81.818738][ T5325] vm_mmap_pgoff+0x1dd/0x3d0 [ 81.820385][ T5325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 81.822270][ T5325] ? __fget_files+0x2a/0x410 [ 81.823945][ T5325] ? __fget_files+0x395/0x410 [ 81.825646][ T5325] ? __fget_files+0x2a/0x410 [ 81.827332][ T5325] ksys_mmap_pgoff+0x4eb/0x720 [ 81.829111][ T5325] ? __x64_sys_mmap+0x7f/0x140 [ 81.830869][ T5325] do_syscall_64+0xf3/0x230 [ 81.832547][ T5325] ? clear_bhb_loop+0x35/0x90 [ 81.834371][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.836561][ T5325] RIP: 0033:0x7fc001185d29 [ 81.838052][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.845110][ T5325] RSP: 002b:00007fc001f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.848284][ T5325] RAX: ffffffffffffffda RBX: 00007fc001375fa0 RCX: 00007fc001185d29 [ 81.851159][ T5325] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000020371000 [ 81.854073][ T5325] RBP: 00007fc001f23090 R08: 0000000000000003 R09: 0000000000000000 [ 81.856981][ T5325] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 81.860003][ T5325] R13: 0000000000000000 R14: 00007fc001375fa0 R15: 00007fff8b7d1768 [ 81.862929][ T5325] [ 81.875146][ T5325] ------------[ cut here ]------------ [ 81.877206][ T5325] WARNING: CPU: 0 PID: 5325 at arch/x86/mm/pat/memtype.c:983 get_pat_info+0x1eb/0x3f0 [ 81.880778][ T5325] Modules linked in: [ 81.882419][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 81.886892][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.891034][ T5325] RIP: 0010:get_pat_info+0x1eb/0x3f0 [ 81.893253][ T5325] Code: 00 00 00 48 89 de e8 a4 26 51 00 48 83 fb 20 75 13 48 83 7c 24 10 00 0f 84 5e 01 00 00 e8 ad 21 51 00 eb 09 e8 a6 21 51 00 90 <0f> 0b 90 b8 ea ff ff ff 48 c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 [ 81.901251][ T5325] RSP: 0018:ffffc9000d2aeee0 EFLAGS: 00010293 [ 81.903833][ T5325] RAX: ffffffff814e524a RBX: 0000000000000028 RCX: ffff888000cf4880 [ 81.907020][ T5325] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 81.910057][ T5325] RBP: ffffc9000d2aefd0 R08: ffffffff814e522c R09: 1ffffffff2032f36 [ 81.913150][ T5325] R10: dffffc0000000000 R11: fffffbfff2032f37 R12: 1ffff92001a55de0 [ 81.916190][ T5325] R13: 1ffff110001fe3d5 R14: ffffc9000d2aef20 R15: ffff888000ff1e88 [ 81.919115][ T5325] FS: 00007fc001f236c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 81.922734][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.925373][ T5325] CR2: 00007fc001ead9b8 CR3: 0000000040bc0000 CR4: 0000000000352ef0 [ 81.928427][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.931455][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.934662][ T5325] Call Trace: [ 81.935958][ T5325] [ 81.937128][ T5325] ? __warn+0x165/0x4d0 [ 81.938762][ T5325] ? get_pat_info+0x1eb/0x3f0 [ 81.940622][ T5325] ? report_bug+0x2b3/0x500 [ 81.942533][ T5325] ? get_pat_info+0x1eb/0x3f0 [ 81.944312][ T5325] ? handle_bug+0x60/0x90 [ 81.945902][ T5325] ? exc_invalid_op+0x1a/0x50 [ 81.947755][ T5325] ? asm_exc_invalid_op+0x1a/0x20 [ 81.949470][ T5325] ? get_pat_info+0x1cc/0x3f0 [ 81.951302][ T5325] ? get_pat_info+0x1ea/0x3f0 [ 81.953000][ T5325] ? get_pat_info+0x1eb/0x3f0 [ 81.954586][ T5325] ? __pfx_get_pat_info+0x10/0x10 [ 81.956271][ T5325] untrack_pfn+0x327/0x640 [ 81.957827][ T5325] ? __pfx_untrack_pfn+0x10/0x10 [ 81.959560][ T5325] ? zap_page_range_single+0x397/0x630 [ 81.961450][ T5325] ? __pfx_lock_release+0x10/0x10 [ 81.963400][ T5325] ? uprobe_munmap+0x183/0x460 [ 81.965298][ T5325] ? alloc_pages_mpol_noprof+0x417/0x680 [ 81.967502][ T5325] unmap_single_vma+0x1f6/0x2b0 [ 81.969357][ T5325] zap_page_range_single+0x45c/0x630 [ 81.971623][ T5325] ? alloc_pages_noprof+0xef/0x170 [ 81.973939][ T5325] ? __pfx_zap_page_range_single+0x10/0x10 [ 81.976174][ T5325] ? __pfx___pte_alloc+0x10/0x10 [ 81.978140][ T5325] remap_pfn_range_notrack+0xc8e/0xe10 [ 81.980382][ T5325] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 81.982773][ T5325] ? track_pfn_remap+0x319/0x3f0 [ 81.984658][ T5325] remap_pfn_range+0x12c/0x1b0 [ 81.986577][ T5325] ? __pfx_remap_pfn_range+0x10/0x10 [ 81.988629][ T5325] usbdev_mmap+0x537/0x970 [ 81.990349][ T5325] ? __pfx_usbdev_mmap+0x10/0x10 [ 81.992337][ T5325] ? __mas_set_range+0x133/0x3c0 [ 81.994296][ T5325] __mmap_region+0x2204/0x2cd0 [ 81.996263][ T5325] ? __pfx___mmap_region+0x10/0x10 [ 81.998220][ T5325] ? __lock_acquire+0x1397/0x2100 [ 82.000209][ T5325] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 82.002800][ T5325] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 82.005357][ T5325] ? cap_mmap_addr+0x163/0x2c0 [ 82.007286][ T5325] mmap_region+0x226/0x2c0 [ 82.009050][ T5325] do_mmap+0x8f0/0x1000 [ 82.010690][ T5325] ? __pfx_do_mmap+0x10/0x10 [ 82.012588][ T5325] ? __pfx_down_write_killable+0x10/0x10 [ 82.014580][ T5325] ? common_file_perm+0x1a6/0x210 [ 82.016404][ T5325] vm_mmap_pgoff+0x1dd/0x3d0 [ 82.018073][ T5325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.019974][ T5325] ? __fget_files+0x2a/0x410 [ 82.021683][ T5325] ? __fget_files+0x395/0x410 [ 82.023488][ T5325] ? __fget_files+0x2a/0x410 [ 82.025253][ T5325] ksys_mmap_pgoff+0x4eb/0x720 [ 82.027069][ T5325] ? __x64_sys_mmap+0x7f/0x140 [ 82.028816][ T5325] do_syscall_64+0xf3/0x230 [ 82.030477][ T5325] ? clear_bhb_loop+0x35/0x90 [ 82.032358][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.034733][ T5325] RIP: 0033:0x7fc001185d29 [ 82.036399][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.043675][ T5325] RSP: 002b:00007fc001f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.046897][ T5325] RAX: ffffffffffffffda RBX: 00007fc001375fa0 RCX: 00007fc001185d29 [ 82.050024][ T5325] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000020371000 [ 82.053295][ T5325] RBP: 00007fc001f23090 R08: 0000000000000003 R09: 0000000000000000 [ 82.056463][ T5325] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 82.059563][ T5325] R13: 0000000000000000 R14: 00007fc001375fa0 R15: 00007fff8b7d1768 [ 82.062783][ T5325] [ 82.064019][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.066915][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 82.070970][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.075144][ T5325] Call Trace: [ 82.076466][ T5325] [ 82.077622][ T5325] dump_stack_lvl+0x241/0x360 [ 82.079508][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.081538][ T5325] ? __pfx__printk+0x10/0x10 [ 82.083385][ T5325] ? _printk+0xd5/0x120 [ 82.085088][ T5325] ? __init_begin+0x41000/0x41000 [ 82.087196][ T5325] ? vscnprintf+0x5d/0x90 [ 82.088915][ T5325] panic+0x349/0x880 [ 82.090514][ T5325] ? __warn+0x174/0x4d0 [ 82.092159][ T5325] ? __pfx_panic+0x10/0x10 [ 82.093855][ T5325] __warn+0x344/0x4d0 [ 82.095484][ T5325] ? get_pat_info+0x1eb/0x3f0 [ 82.097340][ T5325] report_bug+0x2b3/0x500 [ 82.099061][ T5325] ? get_pat_info+0x1eb/0x3f0 [ 82.100998][ T5325] handle_bug+0x60/0x90 [ 82.102686][ T5325] exc_invalid_op+0x1a/0x50 [ 82.104500][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 82.106447][ T5325] RIP: 0010:get_pat_info+0x1eb/0x3f0 [ 82.108679][ T5325] Code: 00 00 00 48 89 de e8 a4 26 51 00 48 83 fb 20 75 13 48 83 7c 24 10 00 0f 84 5e 01 00 00 e8 ad 21 51 00 eb 09 e8 a6 21 51 00 90 <0f> 0b 90 b8 ea ff ff ff 48 c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 [ 82.116272][ T5325] RSP: 0018:ffffc9000d2aeee0 EFLAGS: 00010293 [ 82.118634][ T5325] RAX: ffffffff814e524a RBX: 0000000000000028 RCX: ffff888000cf4880 [ 82.121787][ T5325] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 82.124727][ T5325] RBP: ffffc9000d2aefd0 R08: ffffffff814e522c R09: 1ffffffff2032f36 [ 82.127959][ T5325] R10: dffffc0000000000 R11: fffffbfff2032f37 R12: 1ffff92001a55de0 [ 82.130990][ T5325] R13: 1ffff110001fe3d5 R14: ffffc9000d2aef20 R15: ffff888000ff1e88 [ 82.133829][ T5325] ? get_pat_info+0x1cc/0x3f0 [ 82.135601][ T5325] ? get_pat_info+0x1ea/0x3f0 [ 82.137337][ T5325] ? __pfx_get_pat_info+0x10/0x10 [ 82.139180][ T5325] untrack_pfn+0x327/0x640 [ 82.140792][ T5325] ? __pfx_untrack_pfn+0x10/0x10 [ 82.142625][ T5325] ? zap_page_range_single+0x397/0x630 [ 82.144560][ T5325] ? __pfx_lock_release+0x10/0x10 [ 82.146415][ T5325] ? uprobe_munmap+0x183/0x460 [ 82.148176][ T5325] ? alloc_pages_mpol_noprof+0x417/0x680 [ 82.150354][ T5325] unmap_single_vma+0x1f6/0x2b0 [ 82.152298][ T5325] zap_page_range_single+0x45c/0x630 [ 82.154382][ T5325] ? alloc_pages_noprof+0xef/0x170 [ 82.156457][ T5325] ? __pfx_zap_page_range_single+0x10/0x10 [ 82.158529][ T5325] ? __pfx___pte_alloc+0x10/0x10 [ 82.160197][ T5325] remap_pfn_range_notrack+0xc8e/0xe10 [ 82.162316][ T5325] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 82.164603][ T5325] ? track_pfn_remap+0x319/0x3f0 [ 82.166648][ T5325] remap_pfn_range+0x12c/0x1b0 [ 82.168601][ T5325] ? __pfx_remap_pfn_range+0x10/0x10 [ 82.170707][ T5325] usbdev_mmap+0x537/0x970 [ 82.172495][ T5325] ? __pfx_usbdev_mmap+0x10/0x10 [ 82.174514][ T5325] ? __mas_set_range+0x133/0x3c0 [ 82.176546][ T5325] __mmap_region+0x2204/0x2cd0 [ 82.178501][ T5325] ? __pfx___mmap_region+0x10/0x10 [ 82.180568][ T5325] ? __lock_acquire+0x1397/0x2100 [ 82.182668][ T5325] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 82.185082][ T5325] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 82.187752][ T5325] ? cap_mmap_addr+0x163/0x2c0 [ 82.189644][ T5325] mmap_region+0x226/0x2c0 [ 82.191429][ T5325] do_mmap+0x8f0/0x1000 [ 82.193110][ T5325] ? __pfx_do_mmap+0x10/0x10 [ 82.195010][ T5325] ? __pfx_down_write_killable+0x10/0x10 [ 82.197248][ T5325] ? common_file_perm+0x1a6/0x210 [ 82.199274][ T5325] vm_mmap_pgoff+0x1dd/0x3d0 [ 82.201108][ T5325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.203031][ T5325] ? __fget_files+0x2a/0x410 [ 82.204652][ T5325] ? __fget_files+0x395/0x410 [ 82.206484][ T5325] ? __fget_files+0x2a/0x410 [ 82.208296][ T5325] ksys_mmap_pgoff+0x4eb/0x720 [ 82.210178][ T5325] ? __x64_sys_mmap+0x7f/0x140 [ 82.212011][ T5325] do_syscall_64+0xf3/0x230 [ 82.213716][ T5325] ? clear_bhb_loop+0x35/0x90 [ 82.215566][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.217656][ T5325] RIP: 0033:0x7fc001185d29 [ 82.219197][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.225928][ T5325] RSP: 002b:00007fc001f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.229007][ T5325] RAX: ffffffffffffffda RBX: 00007fc001375fa0 RCX: 00007fc001185d29 [ 82.231999][ T5325] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000020371000 [ 82.235001][ T5325] RBP: 00007fc001f23090 R08: 0000000000000003 R09: 0000000000000000 [ 82.237944][ T5325] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 82.241077][ T5325] R13: 0000000000000000 R14: 00007fc001375fa0 R15: 00007fff8b7d1768 [ 82.243762][ T5325] [ 82.245031][ T5325] Kernel Offset: disabled [ 82.246565][ T5325] Rebooting in 86400 seconds..