From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oi1-f206.google.com (mail-oi1-f206.google.com [209.85.167.206]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 586B44B04BE for ; Sun, 16 Aug 2026 19:25:49 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.206 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786908350; cv=none; b=hsHy8ubo88RYylSNp0+H7VFzwWaAk/6689w4Rg2KJWu3J462NAKr/LqA7IJJn9p7jomED8178NokGTnkRwoHNVp6WXcYC82NH9GPdp1nHKYiV8GUuEXZOiOoYU7nHrTmRMD4HHxlIzsXdXh5e28gjxO3/PBKIOL6S+f/tCcR/ec= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786908350; c=relaxed/simple; bh=sv6ua1fZllZMt1oO278bi2Beai8UrmhS6ShYwBU3GSc=; h=MIME-Version:Date:Message-ID:Subject:From:To:Content-Type; b=ct/MvKLrom3OthpVBAwpWKdMp+4dY1r95Z7H7CAaAedqx4f2VbRbEdyTRmWVn8X4GQK3GGAY+wAVLmjmKu36xNkM/+77ffw3SsJ/Fp1z3vuX/qOHi4m7Qv6zPXOYPpTXYnkytyr2wNVn0x4ZqJK4Av6npQ55Nj8r8by0wOI4kfI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.167.206 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f206.google.com with SMTP id 5614622812f47-4ab4af22d09so3042888b6e.0 for ; Sun, 16 Aug 2026 12:25:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786908348; x=1787513148; h=content-type:to:from:subject:message-id:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=PkLfJOtZCJUEYqKnEJPEBIbrj4TsjKobwYXChdt+4cI=; b=Nob1t7rt15GUMGMsemcDE6qLwm+sUHc0iTKfLzYlK4Ligkqxp+muk58jW9EtaK7MaQ SNvz2i7HkXCylAJq6ltRzjgXSRhTQLSLQz1eB76CtZ2WHaZg4yQU9LpfmX7dfIsJUXIh KwyTe3uS/c2iqe1zUbP02rr/OAgVfcs7hSzGDKxwTT5AByZuXVafKpyROxS1Eh8rcNiH Vq5hNgY6jyKnBU4pLqzZ/yb+9q1XapCAW4UkB3Fmtsh84Ao0F021Rz6lQQxk4/LXTw7w YySzkkuCXkX/J32bBlkFwgIBNLZtMxX4VC6z6am3wrADy6GJ37mjkE9xFC+goeEN+Qh3 ZxDQ== X-Forwarded-Encrypted: i=1; AHgh+RrFEAEzvB5PcPEMLou+zLNoJJeApnPYiKRHHEcIrfOvPQejxuGfcmq7jgezi3UfG03NsrFa2XKbGNyzZTY=@vger.kernel.org X-Gm-Message-State: AOJu0YzpEpx1dE8GUBMrvxirC96zNpUtbJpjs2q8s4vme1oK9yvhJpAu UT7C2fmDustDYOKkliKxiODxuOgpmg6NhKOrc6ZYByJXffq9ArVTAsTMtO8b8eEBQ+TVoPLtWRy 6HNLGmGtDCS0NFGPHmvgEs86UlScWXL2qjLywMVibrImzk5W9nb4XY4hAx+U= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6808:3502:b0:4a4:adaf:5570 with SMTP id 5614622812f47-4b2412a4b5fmr18581659b6e.4.1786908348223; Sun, 16 Aug 2026 12:25:48 -0700 (PDT) Date: Sun, 16 Aug 2026 12:25:48 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6a820ebc.9ebadd4d.20b15e.001b.GAE@google.com> Subject: [syzbot] [mm?] WARNING in ep_write_iter From: syzbot To: akpm@linux-foundation.org, apopple@nvidia.com, byungchul@sk.com, david@kernel.org, gourry@gourry.net, joshua.hahnjy@gmail.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org, matthew.brost@intel.com, rakie.kim@sk.com, syzkaller-bugs@googlegroups.com, ying.huang@linux.alibaba.com, ziy@nvidia.com Content-Type: text/plain; charset="UTF-8" Hello, syzbot found the following issue on: HEAD commit: 3d6d817622b0 Merge tag 'scsi-fixes' of git://git.kernel.or.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=15927479580000 kernel config: https://syzkaller.appspot.com/x/.config?x=a59830cba91a1981 dashboard link: https://syzkaller.appspot.com/bug?extid=805630f1453e490427fa compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 Unfortunately, I don't have any reproducer for this issue yet. Downloadable assets: disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/d900f083ada3/non_bootable_disk-3d6d8176.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/d19e0514c02a/vmlinux-3d6d8176.xz kernel image: https://storage.googleapis.com/syzbot-assets/f6da706811f4/bzImage-3d6d8176.xz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+805630f1453e490427fa@syzkaller.appspotmail.com gadgetfs: bound to dummy_udc driver ------------[ cut here ]------------ 1 WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2ce/0x380 mm/page_alloc.c:5280, CPU#0: syz.0.0/5319 Modules linked in: CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 mm/page_alloc.c:5280 Code: 74 10 4c 89 e7 89 54 24 0c e8 0e 2c 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 95 d2 18 0e 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 RSP: 0018:ffffc9000e13fa20 EFLAGS: 00010246 RAX: ffffc9000e13fa00 RBX: 0000000000000013 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e13fa88 RBP: ffffc9000e13fb08 R08: ffffc9000e13fa87 R09: 0000000000000000 R10: ffffc9000e13fa60 R11: fffff52001c27f51 R12: 0000000000000000 R13: 1ffff92001c27f48 R14: 0000000000040cc0 R15: dffffc0000000000 FS: 00007f6f4a58c6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002000000010a0 CR3: 000000004323d000 CR4: 0000000000352ef0 Call Trace: alloc_pages_mpol+0x212/0x380 mm/mempolicy.c:2490 ___kmalloc_large_node+0x4c/0x120 mm/slub.c:5274 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:5305 __do_kmalloc_node mm/slub.c:5322 [inline] __kmalloc_noprof+0x405/0x720 mm/slub.c:5359 _kmalloc_noprof include/linux/slab.h:992 [inline] ep_write_iter+0x1bc/0x500 drivers/usb/gadget/legacy/inode.c:669 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6f4979e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4a58bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f6f49a25fa0 RCX: 00007f6f4979e0d9 RDX: 00000000ffffffb9 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f6f49835024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6f49a26038 R14: 00007f6f49a25fa0 R15: 00007ffc6cf49328 --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. If the report is already addressed, let syzbot know by replying with: #syz fix: exact-commit-title If you want to overwrite report's subsystems, reply with: #syz set subsystems: new-subsystem (See the list of subsystem names on the web dashboard) If the report is a duplicate of another one, reply with: #syz dup: exact-subject-of-another-report If you want to undo deduplication, reply with: #syz undup