program:
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9511, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfff, 0x4}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x0) (fail_nth: 13)
[ 74.358134][ T5298] Bluetooth: hci0: command tx timeout
[ 74.400229][ T5314] FAULT_INJECTION: forcing a failure.
[ 74.400229][ T5314] name failslab, interval 1, probability 0, space 0, times 1
[ 74.437542][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc6-syzkaller-00300-g205b2bd7939c #0 PREEMPT(full)
[ 74.437564][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.437572][ T5314] Call Trace:
[ 74.437582][ T5314]
[ 74.437587][ T5314] dump_stack_lvl+0x189/0x250
[ 74.437701][ T5314] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.437718][ T5314] ? __pfx__printk+0x10/0x10
[ 74.437733][ T5314] ? __pfx___might_resched+0x10/0x10
[ 74.437748][ T5314] should_fail_ex+0x414/0x560
[ 74.437793][ T5314] should_failslab+0xa8/0x100
[ 74.437817][ T5314] kmem_cache_alloc_noprof+0x73/0x3c0
[ 74.437832][ T5314] ? ptlock_alloc+0x20/0x70
[ 74.437850][ T5314] ptlock_alloc+0x20/0x70
[ 74.437865][ T5314] pte_alloc_one+0x6d/0x160
[ 74.437880][ T5314] __pte_alloc+0x25/0x160
[ 74.437901][ T5314] remap_pfn_range_notrack+0x9f7/0xc30
[ 74.437911][ T5314] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 74.437936][ T5314] ? __pfx_reserve_pfn_range+0x10/0x10
[ 74.437954][ T5314] ? __pfx_remap_pfn_range_notrack+0x10/0x10
[ 74.437969][ T5314] ? track_pfn_remap+0x2a9/0x360
[ 74.437986][ T5314] remap_pfn_range+0xf0/0x170
[ 74.437999][ T5314] ? __pfx_remap_pfn_range+0x10/0x10
[ 74.438011][ T5314] ? __phys_addr+0xba/0x170
[ 74.438026][ T5314] ? perf_mmap_to_page+0x15d/0x1d0
[ 74.438044][ T5314] map_range+0x16e/0x200
[ 74.438064][ T5314] perf_mmap+0xc6d/0x1470
[ 74.438086][ T5314] mmap_region+0x103e/0x1e50
[ 74.438109][ T5314] ? __pfx_mmap_region+0x10/0x10
[ 74.438126][ T5314] ? validate_chain+0x897/0x2140
[ 74.438174][ T5314] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 74.438197][ T5314] ? cap_mmap_addr+0xb0/0x100
[ 74.438209][ T5314] ? bpf_lsm_mmap_addr+0x9/0x20
[ 74.438222][ T5314] ? security_mmap_addr+0x71/0x270
[ 74.438236][ T5314] ? shmem_mapping+0xd/0x50
[ 74.438246][ T5314] ? memfd_check_seals_mmap+0xc5/0x200
[ 74.438266][ T5314] do_mmap+0xc68/0x1100
[ 74.438286][ T5314] ? __pfx_do_mmap+0x10/0x10
[ 74.438300][ T5314] ? down_write_killable+0x178/0x230
[ 74.438349][ T5314] ? end_current_label_crit_section+0x152/0x180
[ 74.438364][ T5314] ? __pfx_down_write_killable+0x10/0x10
[ 74.438384][ T5314] vm_mmap_pgoff+0x31b/0x4c0
[ 74.438404][ T5314] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 74.438416][ T5314] ? __fget_files+0x2a/0x420
[ 74.438434][ T5314] ? __fget_files+0x2a/0x420
[ 74.438448][ T5314] ? __fget_files+0x2a/0x420
[ 74.438466][ T5314] ksys_mmap_pgoff+0x51f/0x760
[ 74.438484][ T5314] do_syscall_64+0xf6/0x210
[ 74.438502][ T5314] ? clear_bhb_loop+0x60/0xb0
[ 74.438516][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.438528][ T5314] RIP: 0033:0x7fce41b8e969
[ 74.438539][ T5314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.438548][ T5314] RSP: 002b:00007fce42a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 74.438563][ T5314] RAX: ffffffffffffffda RBX: 00007fce41db5fa0 RCX: 00007fce41b8e969
[ 74.438571][ T5314] RDX: 000000000300000c RSI: 0000000000001000 RDI: 0000200000ffd000
[ 74.438577][ T5314] RBP: 00007fce42a8a090 R08: 0000000000000003 R09: 0000000000000000
[ 74.438583][ T5314] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002
[ 74.438591][ T5314] R13: 0000000000000000 R14: 00007fce41db5fa0 R15: 00007ffcfc2f7298
[ 74.438608][ T5314]
[ 74.438719][ T5314] ------------[ cut here ]------------
[ 74.575766][ T5314] WARNING: CPU: 0 PID: 5314 at arch/x86/mm/pat/memtype.c:983 get_pat_info+0x1f2/0x2a0
[ 74.579588][ T5314] Modules linked in:
[ 74.581342][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc6-syzkaller-00300-g205b2bd7939c #0 PREEMPT(full)
[ 74.585711][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.590176][ T5314] RIP: 0010:get_pat_info+0x1f2/0x2a0
[ 74.592311][ T5314] Code: e3 28 bf 20 00 00 00 48 89 de e8 b9 9b 4b 00 48 83 fb 20 75 0f 48 83 7c 24 18 00 74 17 e8 c6 96 4b 00 eb 09 e8 bf 96 4b 00 90 <0f> 0b 90 b8 ea ff ff ff eb 4d e8 af 96 4b 00 49 83 c7 50 4c 89 f8
[ 74.600270][ T5314] RSP: 0018:ffffc9000d1af040 EFLAGS: 00010293
[ 74.602903][ T5314] RAX: ffffffff81745b31 RBX: 0000000000000028 RCX: ffff88801f090000
[ 74.606157][ T5314] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020
[ 74.609580][ T5314] RBP: ffffc9000d1af130 R08: 0000000000000000 R09: 0000000000000000
[ 74.612749][ T5314] R10: 0000000000000000 R11: ffffffff820f41a9 R12: dffffc0000000000
[ 74.615903][ T5314] R13: 1ffff92001a35e0c R14: ffff888041c727a0 R15: ffff888041c72780
[ 74.619287][ T5314] FS: 00007fce42a8a6c0(0000) GS:ffff88808d6c2000(0000) knlGS:0000000000000000
[ 74.622890][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.625590][ T5314] CR2: 00007fce428ed9b8 CR3: 000000003fa95000 CR4: 0000000000352ef0
[ 74.629178][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.632499][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.635784][ T5314] Call Trace:
[ 74.637365][ T5314]
[ 74.638638][ T5314] ? __pfx_get_pat_info+0x10/0x10
[ 74.640819][ T5314] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 74.643657][ T5314] untrack_pfn+0x23a/0x430
[ 74.645637][ T5314] ? __pfx_untrack_pfn+0x10/0x10
[ 74.648154][ T5314] ? zap_page_range_single+0x2df/0x4a0
[ 74.650448][ T5314] unmap_single_vma+0x1ec/0x2a0
[ 74.652675][ T5314] ? zap_page_range_single+0x2df/0x4a0
[ 74.655111][ T5314] zap_page_range_single+0x375/0x4a0
[ 74.657489][ T5314] ? __pfx_zap_page_range_single+0x10/0x10
[ 74.659961][ T5314] ? do_raw_spin_unlock+0x4d/0x240
[ 74.662224][ T5314] ? pte_alloc_one+0x128/0x160
[ 74.664323][ T5314] ? __pte_alloc+0x124/0x160
[ 74.666392][ T5314] remap_pfn_range_notrack+0xaf8/0xc30
[ 74.668713][ T5314] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 74.671253][ T5314] ? __pfx_reserve_pfn_range+0x10/0x10
[ 74.673665][ T5314] ? __pfx_remap_pfn_range_notrack+0x10/0x10
[ 74.676276][ T5314] ? track_pfn_remap+0x2a9/0x360
[ 74.678464][ T5314] remap_pfn_range+0xf0/0x170
[ 74.680460][ T5314] ? __pfx_remap_pfn_range+0x10/0x10
[ 74.682637][ T5314] ? __phys_addr+0xba/0x170
[ 74.684683][ T5314] ? perf_mmap_to_page+0x15d/0x1d0
[ 74.686992][ T5314] map_range+0x16e/0x200
[ 74.688852][ T5314] perf_mmap+0xc6d/0x1470
[ 74.690815][ T5314] mmap_region+0x103e/0x1e50
[ 74.692980][ T5314] ? __pfx_mmap_region+0x10/0x10
[ 74.694998][ T5314] ? validate_chain+0x897/0x2140
[ 74.697128][ T5314] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 74.699861][ T5314] ? cap_mmap_addr+0xb0/0x100
[ 74.701904][ T5314] ? bpf_lsm_mmap_addr+0x9/0x20
[ 74.704030][ T5314] ? security_mmap_addr+0x71/0x270
[ 74.706237][ T5314] ? shmem_mapping+0xd/0x50
[ 74.708322][ T5314] ? memfd_check_seals_mmap+0xc5/0x200
[ 74.710711][ T5314] do_mmap+0xc68/0x1100
[ 74.712468][ T5314] ? __pfx_do_mmap+0x10/0x10
[ 74.714418][ T5314] ? down_write_killable+0x178/0x230
[ 74.716843][ T5314] ? end_current_label_crit_section+0x152/0x180
[ 74.719608][ T5314] ? __pfx_down_write_killable+0x10/0x10
[ 74.721896][ T5314] vm_mmap_pgoff+0x31b/0x4c0
[ 74.724010][ T5314] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 74.726598][ T5314] ? __fget_files+0x2a/0x420
[ 74.728949][ T5314] ? __fget_files+0x2a/0x420
[ 74.730913][ T5314] ? __fget_files+0x2a/0x420
[ 74.732898][ T5314] ksys_mmap_pgoff+0x51f/0x760
[ 74.734907][ T5314] do_syscall_64+0xf6/0x210
[ 74.736987][ T5314] ? clear_bhb_loop+0x60/0xb0
[ 74.739030][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.741517][ T5314] RIP: 0033:0x7fce41b8e969
[ 74.743199][ T5314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.750967][ T5314] RSP: 002b:00007fce42a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 74.754357][ T5314] RAX: ffffffffffffffda RBX: 00007fce41db5fa0 RCX: 00007fce41b8e969
[ 74.757944][ T5314] RDX: 000000000300000c RSI: 0000000000001000 RDI: 0000200000ffd000
[ 74.761210][ T5314] RBP: 00007fce42a8a090 R08: 0000000000000003 R09: 0000000000000000
[ 74.764641][ T5314] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002
[ 74.768155][ T5314] R13: 0000000000000000 R14: 00007fce41db5fa0 R15: 00007ffcfc2f7298
[ 74.771260][ T5314]
[ 74.772678][ T5314] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.775847][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc6-syzkaller-00300-g205b2bd7939c #0 PREEMPT(full)
[ 74.780655][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.784915][ T5314] Call Trace:
[ 74.786190][ T5314]
[ 74.787387][ T5314] dump_stack_lvl+0x99/0x250
[ 74.789266][ T5314] ? __asan_memcpy+0x40/0x70
[ 74.791322][ T5314] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.793612][ T5314] ? __pfx__printk+0x10/0x10
[ 74.795725][ T5314] panic+0x2db/0x790
[ 74.797673][ T5314] ? __pfx_panic+0x10/0x10
[ 74.799688][ T5314] ? show_trace_log_lvl+0x4fb/0x550
[ 74.801973][ T5314] __warn+0x31b/0x4b0
[ 74.803658][ T5314] ? get_pat_info+0x1f2/0x2a0
[ 74.805786][ T5314] ? get_pat_info+0x1f2/0x2a0
[ 74.807827][ T5314] report_bug+0x2be/0x4f0
[ 74.809604][ T5314] ? get_pat_info+0x1f2/0x2a0
[ 74.811603][ T5314] ? get_pat_info+0x1f2/0x2a0
[ 74.813615][ T5314] ? get_pat_info+0x1f4/0x2a0
[ 74.815823][ T5314] handle_bug+0x84/0x160
[ 74.818027][ T5314] exc_invalid_op+0x1a/0x50
[ 74.820366][ T5314] asm_exc_invalid_op+0x1a/0x20
[ 74.823024][ T5314] RIP: 0010:get_pat_info+0x1f2/0x2a0
[ 74.825458][ T5314] Code: e3 28 bf 20 00 00 00 48 89 de e8 b9 9b 4b 00 48 83 fb 20 75 0f 48 83 7c 24 18 00 74 17 e8 c6 96 4b 00 eb 09 e8 bf 96 4b 00 90 <0f> 0b 90 b8 ea ff ff ff eb 4d e8 af 96 4b 00 49 83 c7 50 4c 89 f8
[ 74.833819][ T5314] RSP: 0018:ffffc9000d1af040 EFLAGS: 00010293
[ 74.836954][ T5314] RAX: ffffffff81745b31 RBX: 0000000000000028 RCX: ffff88801f090000
[ 74.840773][ T5314] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020
[ 74.844103][ T5314] RBP: ffffc9000d1af130 R08: 0000000000000000 R09: 0000000000000000
[ 74.847583][ T5314] R10: 0000000000000000 R11: ffffffff820f41a9 R12: dffffc0000000000
[ 74.850965][ T5314] R13: 1ffff92001a35e0c R14: ffff888041c727a0 R15: ffff888041c72780
[ 74.854461][ T5314] ? ___pte_offset_map+0x29/0x2a0
[ 74.856625][ T5314] ? get_pat_info+0x1f1/0x2a0
[ 74.858674][ T5314] ? __pfx_get_pat_info+0x10/0x10
[ 74.860938][ T5314] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 74.863546][ T5314] untrack_pfn+0x23a/0x430
[ 74.865634][ T5314] ? __pfx_untrack_pfn+0x10/0x10
[ 74.867722][ T5314] ? zap_page_range_single+0x2df/0x4a0
[ 74.870035][ T5314] unmap_single_vma+0x1ec/0x2a0
[ 74.872117][ T5314] ? zap_page_range_single+0x2df/0x4a0
[ 74.874493][ T5314] zap_page_range_single+0x375/0x4a0
[ 74.876798][ T5314] ? __pfx_zap_page_range_single+0x10/0x10
[ 74.879290][ T5314] ? do_raw_spin_unlock+0x4d/0x240
[ 74.881644][ T5314] ? pte_alloc_one+0x128/0x160
[ 74.883773][ T5314] ? __pte_alloc+0x124/0x160
[ 74.885895][ T5314] remap_pfn_range_notrack+0xaf8/0xc30
[ 74.888301][ T5314] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 74.891008][ T5314] ? __pfx_reserve_pfn_range+0x10/0x10
[ 74.893420][ T5314] ? __pfx_remap_pfn_range_notrack+0x10/0x10
[ 74.895978][ T5314] ? track_pfn_remap+0x2a9/0x360
[ 74.898166][ T5314] remap_pfn_range+0xf0/0x170
[ 74.900319][ T5314] ? __pfx_remap_pfn_range+0x10/0x10
[ 74.902631][ T5314] ? __phys_addr+0xba/0x170
[ 74.904638][ T5314] ? perf_mmap_to_page+0x15d/0x1d0
[ 74.906849][ T5314] map_range+0x16e/0x200
[ 74.908763][ T5314] perf_mmap+0xc6d/0x1470
[ 74.910643][ T5314] mmap_region+0x103e/0x1e50
[ 74.912712][ T5314] ? __pfx_mmap_region+0x10/0x10
[ 74.914869][ T5314] ? validate_chain+0x897/0x2140
[ 74.917060][ T5314] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 74.919755][ T5314] ? cap_mmap_addr+0xb0/0x100
[ 74.921745][ T5314] ? bpf_lsm_mmap_addr+0x9/0x20
[ 74.923854][ T5314] ? security_mmap_addr+0x71/0x270
[ 74.926154][ T5314] ? shmem_mapping+0xd/0x50
[ 74.927960][ T5314] ? memfd_check_seals_mmap+0xc5/0x200
[ 74.930295][ T5314] do_mmap+0xc68/0x1100
[ 74.932118][ T5314] ? __pfx_do_mmap+0x10/0x10
[ 74.934383][ T5314] ? down_write_killable+0x178/0x230
[ 74.937221][ T5314] ? end_current_label_crit_section+0x152/0x180
[ 74.940527][ T5314] ? __pfx_down_write_killable+0x10/0x10
[ 74.943063][ T5314] vm_mmap_pgoff+0x31b/0x4c0
[ 74.944910][ T5314] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 74.946939][ T5314] ? __fget_files+0x2a/0x420
[ 74.948903][ T5314] ? __fget_files+0x2a/0x420
[ 74.950881][ T5314] ? __fget_files+0x2a/0x420
[ 74.952908][ T5314] ksys_mmap_pgoff+0x51f/0x760
[ 74.955111][ T5314] do_syscall_64+0xf6/0x210
[ 74.957196][ T5314] ? clear_bhb_loop+0x60/0xb0
[ 74.959281][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.961785][ T5314] RIP: 0033:0x7fce41b8e969
[ 74.963692][ T5314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.971883][ T5314] RSP: 002b:00007fce42a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 74.975424][ T5314] RAX: ffffffffffffffda RBX: 00007fce41db5fa0 RCX: 00007fce41b8e969
[ 74.978841][ T5314] RDX: 000000000300000c RSI: 0000000000001000 RDI: 0000200000ffd000
[ 74.982259][ T5314] RBP: 00007fce42a8a090 R08: 0000000000000003 R09: 0000000000000000
[ 74.985786][ T5314] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002
[ 74.989245][ T5314] R13: 0000000000000000 R14: 00007fce41db5fa0 R15: 00007ffcfc2f7298
[ 74.992612][ T5314]
[ 74.994304][ T5314] Kernel Offset: disabled
[ 74.996221][ T5314] Rebooting in 86400 seconds..