program: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000362200000000000000000085000000bf0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x90) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000300), &(0x7f0000000400), 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x800, 0x7, 0x4, 0x7, 0x0, 0xbd9]}, &(0x7f0000000100)=0x78) write$P9_RSTATu(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0802"], 0x239) r6 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}, {@nodelalloc}]}, 0xd, 0x4a8, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80043, 0x10e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x9) pread64(r2, &(0x7f00000001c0)=""/90, 0x5a, 0x9) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000200)={0x0, 0xfffffffffffffdaf}) [ 109.680084][ T5286] Bluetooth: hci0: command tx timeout [ 109.842039][ T5329] loop0: detected capacity change from 0 to 512 [ 109.851935][ T5329] EXT4-fs: Ignoring removed orlov option [ 109.941926][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.952581][ T5329] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.978077][ T5329] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.0: corrupted xattr block 32: invalid header [ 109.988567][ T5329] EXT4-fs (loop0): Remounting filesystem read-only [ 109.993677][ T24] audit: type=1800 audit(1782987633.819:2): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 110.006268][ T5329] ------------[ cut here ]------------ [ 110.008836][ T5329] 1 [ 110.008849][ T5329] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2ce/0x380, CPU#0: syz.0.0/5329 [ 110.015485][ T5329] Modules linked in: [ 110.017265][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.021066][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.025068][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.028015][ T5329] Code: 74 10 4c 89 e7 89 54 24 0c e8 4e 2c 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 de 9d f5 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 110.038226][ T5329] RSP: 0018:ffffc90006177920 EFLAGS: 00010246 [ 110.041026][ T5329] RAX: ffffc90006177900 RBX: 0000000000000016 RCX: 0000000000000000 [ 110.044848][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90006177988 [ 110.049395][ T5329] RBP: ffffc90006177a08 R08: ffffc90006177987 R09: 0000000000000000 [ 110.052828][ T5329] R10: ffffc90006177960 R11: fffff52000c2ef31 R12: 0000000000000000 [ 110.056414][ T5329] R13: 1ffff92000c2ef28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 110.059781][ T5329] FS: 00007fcd286d36c0(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 [ 110.065568][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.069196][ T5329] CR2: 00007f473be82000 CR3: 0000000043a6c000 CR4: 0000000000352ef0 [ 110.073073][ T5329] Call Trace: [ 110.074703][ T5329] [ 110.076417][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 110.079511][ T5329] ? __pfx_policy_nodemask+0x10/0x10 [ 110.082023][ T5329] alloc_pages_mpol+0x212/0x380 [ 110.084746][ T5329] ___kmalloc_large_node+0x4c/0x120 [ 110.087722][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.090382][ T5329] __kmalloc_large_node_noprof+0x18/0x90 [ 110.092859][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.095477][ T5329] __kmalloc_noprof+0x405/0x720 [ 110.097683][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.100334][ T5329] drm_syncobj_array_find+0x3a/0x440 [ 110.103306][ T5329] drm_syncobj_signal_ioctl+0x179/0x570 [ 110.106050][ T5329] ? drm_dev_exit+0x3a/0x60 [ 110.108045][ T5329] drm_ioctl_kernel+0x2df/0x3b0 [ 110.110361][ T5329] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 110.113382][ T5329] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 110.116532][ T5329] drm_ioctl+0x70e/0xba0 [ 110.118855][ T5329] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 110.121500][ T5329] ? __pfx_drm_ioctl+0x10/0x10 [ 110.123651][ T5329] ? __fget_files+0x2a/0x420 [ 110.126374][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.128882][ T5329] ? __pfx_drm_ioctl+0x10/0x10 [ 110.131338][ T5329] __se_sys_ioctl+0xfc/0x170 [ 110.133599][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.136561][ T5329] do_syscall_64+0x174/0x580 [ 110.139692][ T5329] ? trace_irq_disable+0x3b/0x140 [ 110.142119][ T5329] ? clear_bhb_loop+0x40/0x90 [ 110.145015][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.147689][ T5329] RIP: 0033:0x7fcd2779de59 [ 110.149532][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.157282][ T5329] RSP: 002b:00007fcd286d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.161061][ T5329] RAX: ffffffffffffffda RBX: 00007fcd27a25fa0 RCX: 00007fcd2779de59 [ 110.166103][ T5329] RDX: 0000200000000200 RSI: 00000000c01064c5 RDI: 000000000000000b [ 110.169468][ T5329] RBP: 00007fcd27833e6f R08: 0000000000000000 R09: 0000000000000000 [ 110.172536][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.176003][ T5329] R13: 00007fcd27a26038 R14: 00007fcd27a25fa0 R15: 00007fff6c691828 [ 110.179459][ T5329] [ 110.180953][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.184527][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.188436][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.192607][ T5329] Call Trace: [ 110.194093][ T5329] [ 110.195676][ T5329] vpanic+0x56c/0xa60 [ 110.197833][ T5329] ? __pfx__printk+0x10/0x10 [ 110.200188][ T5329] ? __pfx_vpanic+0x10/0x10 [ 110.202167][ T5329] ? is_bpf_text_address+0x292/0x2b0 [ 110.204309][ T5329] ? is_bpf_text_address+0x26/0x2b0 [ 110.206635][ T5329] panic+0xc5/0xd0 [ 110.208385][ T5329] ? __pfx_panic+0x10/0x10 [ 110.210360][ T5329] __warn+0x315/0x4c0 [ 110.211999][ T5329] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.214521][ T5329] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.217360][ T5329] __report_bug+0x331/0x530 [ 110.220308][ T5329] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.223637][ T5329] ? __pfx___report_bug+0x10/0x10 [ 110.225901][ T5329] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.228180][ T5329] ? irqentry_exit+0x218/0x8f0 [ 110.230361][ T5329] ? trace_irq_disable+0x3b/0x140 [ 110.232617][ T5329] ? __alloc_frozen_pages_noprof+0x2d0/0x380 [ 110.235231][ T5329] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.237973][ T5329] report_bug+0x16a/0x220 [ 110.240588][ T5329] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.243764][ T5329] ? __alloc_frozen_pages_noprof+0x2d0/0x380 [ 110.246488][ T5329] handle_bug+0x9c/0x200 [ 110.248394][ T5329] exc_invalid_op+0x1a/0x50 [ 110.250502][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 110.252915][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 110.256234][ T5329] Code: 74 10 4c 89 e7 89 54 24 0c e8 4e 2c 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 de 9d f5 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 110.264126][ T5329] RSP: 0018:ffffc90006177920 EFLAGS: 00010246 [ 110.267332][ T5329] RAX: ffffc90006177900 RBX: 0000000000000016 RCX: 0000000000000000 [ 110.271091][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90006177988 [ 110.274376][ T5329] RBP: ffffc90006177a08 R08: ffffc90006177987 R09: 0000000000000000 [ 110.277835][ T5329] R10: ffffc90006177960 R11: fffff52000c2ef31 R12: 0000000000000000 [ 110.281434][ T5329] R13: 1ffff92000c2ef28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 110.285480][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 110.288207][ T5329] ? __pfx_policy_nodemask+0x10/0x10 [ 110.290431][ T5329] alloc_pages_mpol+0x212/0x380 [ 110.292552][ T5329] ___kmalloc_large_node+0x4c/0x120 [ 110.294813][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.297323][ T5329] __kmalloc_large_node_noprof+0x18/0x90 [ 110.300275][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.302979][ T5329] __kmalloc_noprof+0x405/0x720 [ 110.305261][ T5329] ? drm_syncobj_array_find+0x3a/0x440 [ 110.307638][ T5329] drm_syncobj_array_find+0x3a/0x440 [ 110.310018][ T5329] drm_syncobj_signal_ioctl+0x179/0x570 [ 110.312483][ T5329] ? drm_dev_exit+0x3a/0x60 [ 110.314611][ T5329] drm_ioctl_kernel+0x2df/0x3b0 [ 110.316932][ T5329] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 110.319907][ T5329] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 110.322462][ T5329] drm_ioctl+0x70e/0xba0 [ 110.324388][ T5329] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 110.327055][ T5329] ? __pfx_drm_ioctl+0x10/0x10 [ 110.329182][ T5329] ? __fget_files+0x2a/0x420 [ 110.331139][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.333623][ T5329] ? __pfx_drm_ioctl+0x10/0x10 [ 110.336176][ T5329] __se_sys_ioctl+0xfc/0x170 [ 110.338673][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.341317][ T5329] do_syscall_64+0x174/0x580 [ 110.343324][ T5329] ? trace_irq_disable+0x3b/0x140 [ 110.345465][ T5329] ? clear_bhb_loop+0x40/0x90 [ 110.347562][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.350515][ T5329] RIP: 0033:0x7fcd2779de59 [ 110.352887][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.361817][ T5329] RSP: 002b:00007fcd286d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.365418][ T5329] RAX: ffffffffffffffda RBX: 00007fcd27a25fa0 RCX: 00007fcd2779de59 [ 110.368873][ T5329] RDX: 0000200000000200 RSI: 00000000c01064c5 RDI: 000000000000000b [ 110.373937][ T5329] RBP: 00007fcd27833e6f R08: 0000000000000000 R09: 0000000000000000 [ 110.378460][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.381929][ T5329] R13: 00007fcd27a26038 R14: 00007fcd27a25fa0 R15: 00007fff6c691828 [ 110.385460][ T5329] [ 110.387153][ T5329] Kernel Offset: disabled [ 110.388968][ T5329] Rebooting in 86400 seconds..