program:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) (async)
r1 = memfd_create(&(0x7f0000000180)='^&}/-.)\'\x00', 0x1)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x100000000, 0x1000000000000}) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
socketpair(0x1a, 0x1, 0x0, &(0x7f0000000200))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x3, 0x1, 0xb, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) (async)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000380)=0xfefffffe)
[ 76.449383][ T4649] Bluetooth: hci0: command tx timeout
[ 76.532955][ T5317] ------------[ cut here ]------------
[ 76.532963][ T5317] !(flags & __GFP_NOWARN)
[ 76.532966][ T5317] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x798/0x820, CPU#0: syz.0.0/5317
[ 76.541696][ T5317] Modules linked in:
[ 76.543342][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.546981][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 76.551201][ T5317] RIP: 0010:__kvmalloc_node_noprof+0x798/0x820
[ 76.553799][ T5317] Code: ff 48 c7 c7 b0 93 e9 8e 48 89 de e8 52 69 f0 02 e9 1b fc ff ff 48 c7 c7 f0 93 e9 8e 48 89 de e8 3e 69 f0 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f
[ 76.561665][ T5317] RSP: 0018:ffffc9000f41fae0 EFLAGS: 00010246
[ 76.564341][ T5317] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001
[ 76.567715][ T5317] RDX: 0000008000000000 RSI: ffffffff8c6dcd60 RDI: ffffffff8c6dcd20
[ 76.571153][ T5317] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff
[ 76.574588][ T5317] R10: 0000000000000006 R11: 0000000000000000 R12: 0000008000000000
[ 76.578063][ T5317] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff8659c0cc
[ 76.581558][ T5317] FS: 00007f9141f336c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000
[ 76.585456][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.588472][ T5317] CR2: 00007f104a1239a0 CR3: 000000001d38b000 CR4: 0000000000352ef0
[ 76.592153][ T5317] Call Trace:
[ 76.593432][ T5317]
[ 76.594744][ T5317] ? __kmalloc_cache_noprof+0x321/0x600
[ 76.597345][ T5317] ? udmabuf_create+0xd0/0xf50
[ 76.599455][ T5317] ? udmabuf_create+0x2dc/0xf50
[ 76.601676][ T5317] udmabuf_create+0x2dc/0xf50
[ 76.603781][ T5317] ? tomoyo_path_number_perm+0x219/0x5f0
[ 76.606296][ T5317] ? do_vfs_ioctl+0x116f/0x1530
[ 76.608337][ T5317] ? __pfx_udmabuf_create+0x10/0x10
[ 76.610548][ T5317] udmabuf_ioctl+0x1f3/0x300
[ 76.613245][ T5317] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 76.615598][ T5317] ? __fget_files+0x2a/0x420
[ 76.617503][ T5317] ? __fget_files+0x2a/0x420
[ 76.619489][ T5317] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.622051][ T5317] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 76.624297][ T5317] __se_sys_ioctl+0xfc/0x170
[ 76.626292][ T5317] do_syscall_64+0x166/0x520
[ 76.631508][ T5317] ? trace_irq_disable+0x3b/0x140
[ 76.633788][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.636243][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 76.638230][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.640733][ T5317] RIP: 0033:0x7f9140f9e159
[ 76.642774][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 76.651157][ T5317] RSP: 002b:00007f9141f32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.655045][ T5317] RAX: ffffffffffffffda RBX: 00007f9141225fa0 RCX: 00007f9140f9e159
[ 76.658533][ T5317] RDX: 00002000000001c0 RSI: 0000000040187542 RDI: 0000000000000003
[ 76.662078][ T5317] RBP: 00007f914103506b R08: 0000000000000000 R09: 0000000000000000
[ 76.665490][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.668900][ T5317] R13: 00007f9141226038 R14: 00007f9141225fa0 R15: 00007ffe299bf648
[ 76.672782][ T5317]
[ 76.674145][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.677313][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.681401][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 76.685882][ T5317] Call Trace:
[ 76.687320][ T5317]
[ 76.688601][ T5317] vpanic+0x56d/0xa60
[ 76.690263][ T5317] ? __pfx__printk+0x10/0x10
[ 76.692154][ T5317] ? __pfx_vpanic+0x10/0x10
[ 76.694061][ T5317] ? is_bpf_text_address+0x292/0x2b0
[ 76.696346][ T5317] ? is_bpf_text_address+0x26/0x2b0
[ 76.698843][ T5317] panic+0xc5/0xd0
[ 76.700507][ T5317] ? __pfx_panic+0x10/0x10
[ 76.702453][ T5317] __warn+0x315/0x4c0
[ 76.704253][ T5317] ? __kvmalloc_node_noprof+0x798/0x820
[ 76.706726][ T5317] ? __kvmalloc_node_noprof+0x798/0x820
[ 76.709025][ T5317] __report_bug+0x276/0x570
[ 76.711087][ T5317] ? __kvmalloc_node_noprof+0x798/0x820
[ 76.713494][ T5317] ? __pfx___report_bug+0x10/0x10
[ 76.715742][ T5317] ? __asan_memset+0x22/0x50
[ 76.717858][ T5317] ? __alloc_frozen_pages_noprof+0xa7/0x5a0
[ 76.720730][ T5317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 76.723584][ T5317] ? __kvmalloc_node_noprof+0x798/0x820
[ 76.726003][ T5317] report_bug+0x16b/0x220
[ 76.727981][ T5317] ? __kvmalloc_node_noprof+0x798/0x820
[ 76.730427][ T5317] ? __kvmalloc_node_noprof+0x79a/0x820
[ 76.732737][ T5317] handle_bug+0x9c/0x200
[ 76.734553][ T5317] exc_invalid_op+0x1a/0x50
[ 76.736540][ T5317] asm_exc_invalid_op+0x1a/0x20
[ 76.738610][ T5317] RIP: 0010:__kvmalloc_node_noprof+0x798/0x820
[ 76.741247][ T5317] Code: ff 48 c7 c7 b0 93 e9 8e 48 89 de e8 52 69 f0 02 e9 1b fc ff ff 48 c7 c7 f0 93 e9 8e 48 89 de e8 3e 69 f0 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f
[ 76.750317][ T5317] RSP: 0018:ffffc9000f41fae0 EFLAGS: 00010246
[ 76.752874][ T5317] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 8000000000000001
[ 76.756201][ T5317] RDX: 0000008000000000 RSI: ffffffff8c6dcd60 RDI: ffffffff8c6dcd20
[ 76.759506][ T5317] RBP: 00000000ffffffff R08: 00000000000028c0 R09: 00000000ffffffff
[ 76.762897][ T5317] R10: 0000000000000006 R11: 0000000000000000 R12: 0000008000000000
[ 76.766226][ T5317] R13: 00000000000028c0 R14: 0000001000000000 R15: ffffffff8659c0cc
[ 76.769521][ T5317] ? udmabuf_create+0x2dc/0xf50
[ 76.771564][ T5317] ? __kmalloc_cache_noprof+0x321/0x600
[ 76.773948][ T5317] ? udmabuf_create+0xd0/0xf50
[ 76.776083][ T5317] ? udmabuf_create+0x2dc/0xf50
[ 76.778180][ T5317] udmabuf_create+0x2dc/0xf50
[ 76.780264][ T5317] ? tomoyo_path_number_perm+0x219/0x5f0
[ 76.782611][ T5317] ? do_vfs_ioctl+0x116f/0x1530
[ 76.784697][ T5317] ? __pfx_udmabuf_create+0x10/0x10
[ 76.787004][ T5317] udmabuf_ioctl+0x1f3/0x300
[ 76.788990][ T5317] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 76.791159][ T5317] ? __fget_files+0x2a/0x420
[ 76.793170][ T5317] ? __fget_files+0x2a/0x420
[ 76.795161][ T5317] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.797329][ T5317] ? __pfx_udmabuf_ioctl+0x10/0x10
[ 76.799572][ T5317] __se_sys_ioctl+0xfc/0x170
[ 76.801642][ T5317] do_syscall_64+0x166/0x520
[ 76.803638][ T5317] ? trace_irq_disable+0x3b/0x140
[ 76.805653][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.808089][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 76.810114][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.812453][ T5317] RIP: 0033:0x7f9140f9e159
[ 76.814362][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 76.822475][ T5317] RSP: 002b:00007f9141f32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.825807][ T5317] RAX: ffffffffffffffda RBX: 00007f9141225fa0 RCX: 00007f9140f9e159
[ 76.829041][ T5317] RDX: 00002000000001c0 RSI: 0000000040187542 RDI: 0000000000000003
[ 76.832402][ T5317] RBP: 00007f914103506b R08: 0000000000000000 R09: 0000000000000000
[ 76.835741][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.839028][ T5317] R13: 00007f9141226038 R14: 00007f9141225fa0 R15: 00007ffe299bf648
[ 76.842318][ T5317]
[ 76.844063][ T5317] Kernel Offset: disabled
[ 76.845995][ T5317] Rebooting in 86400 seconds..