syz.0.0 (5318) used greatest stack depth: 20904 by[   77.352441][ T4672] Bluetooth: hci0: command tx timeout
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 1
CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-03478-gc89756bcf406 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x414/0x560 lib/fault-inject.c:174
 prepare_alloc_pages+0x213/0x610 mm/page_alloc.c:4749
 __alloc_frozen_pages_noprof+0x123/0x370 mm/page_alloc.c:4963
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2301
 alloc_frozen_pages_noprof mm/mempolicy.c:2372 [inline]
 alloc_pages_noprof+0xa9/0x190 mm/mempolicy.c:2392
 pagetable_alloc_noprof include/linux/mm.h:3002 [inline]
 __pte_alloc_one_noprof include/asm-generic/pgalloc.h:70 [inline]
 pte_alloc_one+0x1e/0x160 arch/x86/mm/pgtable.c:18
 __pte_alloc+0x25/0x1a0 mm/memory.c:430
 remap_pte_range mm/memory.c:2677 [inline]
 remap_pmd_range mm/memory.c:2710 [inline]
 remap_pud_range mm/memory.c:2732 [inline]
 remap_p4d_range mm/memory.c:2754 [inline]
 remap_pfn_range_internal mm/memory.c:2806 [inline]
 remap_pfn_range_notrack+0xc30/0x1050 mm/memory.c:2822
 remap_pfn_range+0xf0/0x170 mm/memory.c:2857
 map_range+0x199/0x230 kernel/events/core.c:6887
 perf_mmap+0x10c7/0x1630 kernel/events/core.c:7131
 call_mmap include/linux/fs.h:2264 [inline]
 mmap_file mm/internal.h:167 [inline]
 __mmap_new_file_vma mm/vma.c:2354 [inline]
 __mmap_new_vma mm/vma.c:2418 [inline]
 __mmap_region mm/vma.c:2520 [inline]
 mmap_region+0x103b/0x1e50 mm/vma.c:2598
 do_mmap+0xc68/0x1100 mm/mmap.c:561
 vm_mmap_pgoff+0x31b/0x4c0 mm/util.c:579
 ksys_mmap_pgoff+0x51f/0x760 mm/mmap.c:607
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb80bd8e969
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb80cbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fb80bfb5fa0 RCX: 00007fb80bd8e969
RDX: 8088e3ad132bc192 RSI: 0000000000001000 RDI: 0000200000ffc000
RBP: 00007fb80cbd7090 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000002
R13: 0000000000000000 R14: 00007fb80bfb5fa0 R15: 00007ffe1fe1c288
 </TASK>
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5318 at arch/x86/mm/pat/memtype.c:961 get_pat_info+0x1f2/0x2a0 arch/x86/mm/pat/memtype.c:961
Modules linked in:
CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-03478-gc89756bcf406 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:get_pat_info+0x1f2/0x2a0 arch/x86/mm/pat/memtype.c:961
Code: e3 28 bf 20 00 00 00 48 89 de e8 99 c9 4a 00 48 83 fb 20 75 0f 48 83 7c 24 18 00 74 17 e8 a6 c4 4a 00 eb 09 e8 9f c4 4a 00 90 <0f> 0b 90 b8 ea ff ff ff eb 4d e8 8f c4 4a 00 49 83 c7 50 4c 89 f8
RSP: 0018:ffffc9000d4e7000 EFLAGS: 00010293
RAX: ffffffff81752db1 RBX: 0000000000000028 RCX: ffff888000394880
RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020
RBP: ffffc9000d4e70f0 R08: 0000000000000000 R09: ffffffff820fd739
R10: ffffc9000d4e7050 R11: fffff52001a9ce10 R12: dffffc0000000000
R13: 1ffff92001a9ce04 R14: ffff88803f2472a0 R15: ffff88803f247280
FS:  00007fb80cbd76c0(0000) GS:ffff88808d28f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000055c0 CR3: 000000003fcde000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 untrack_pfn+0x23a/0x430 arch/x86/mm/pat/memtype.c:1076
 unmap_single_vma+0x1ec/0x2a0 mm/memory.c:1918
 zap_page_range_single+0x375/0x4a0 mm/memory.c:2018
 remap_pfn_range_notrack+0xedb/0x1050 mm/memory.c:2832
 remap_pfn_range+0xf0/0x170 mm/memory.c:2857
 map_range+0x199/0x230 kernel/events/core.c:6887
 perf_mmap+0x10c7/0x1630 kernel/events/core.c:7131
 call_mmap include/linux/fs.h:2264 [inline]
 mmap_file mm/internal.h:167 [inline]
 __mmap_new_file_vma mm/vma.c:2354 [inline]
 __mmap_new_vma mm/vma.c:2418 [inline]
 __mmap_region mm/vma.c:2520 [inline]
 mmap_region+0x103b/0x1e50 mm/vma.c:2598
 do_mmap+0xc68/0x1100 mm/mmap.c:561
 vm_mmap_pgoff+0x31b/0x4c0 mm/util.c:579
 ksys_mmap_pgoff+0x51f/0x760 mm/mmap.c:607
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb80bd8e969
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb80cbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fb80bfb5fa0 RCX: 00007fb80bd8e969
RDX: 8088e3ad132bc192 RSI: 0000000000001000 RDI: 0000200000ffc000
RBP: 00007fb80cbd7090 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000002
R13: 0000000000000000 R14: 00007fb80bfb5fa0 R15: 00007ffe1fe1c288
 </TASK>