program: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1, r1], &(0x7f0000000140)=[0x9], 0x4000000000000070}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000240)={&(0x7f0000000040)=[r1], &(0x7f0000000100)=[0x0], 0xfffffffffffeffff, 0x3ffffdfd, 0xf}) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0xb, 0x284c0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[r1], 0x1}) [ 74.019619][ T4668] Bluetooth: hci0: command tx timeout [ 74.070271][ T5319] ------------[ cut here ]------------ [ 74.073429][ T5319] 1 [ 74.073441][ T5319] WARNING: mm/page_alloc.c:5216 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5319 [ 74.098717][ T5319] Modules linked in: [ 74.100579][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.114063][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.120098][ T5319] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.123409][ T5319] Code: 74 10 4c 89 e7 89 54 24 0c e8 6b 16 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 7a 9a d9 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 74.152276][ T5319] RSP: 0018:ffffc900086178a0 EFLAGS: 00010246 [ 74.154939][ T5319] RAX: ffffc90008617800 RBX: 0000000000000014 RCX: 0000000000000000 [ 74.167531][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90008617908 [ 74.171138][ T5319] RBP: ffffc90008617988 R08: ffffc90008617907 R09: 0000000000000000 [ 74.186484][ T5319] R10: ffffc900086178e0 R11: fffff520010c2f21 R12: 0000000000000000 [ 74.190200][ T5319] R13: 1ffff920010c2f18 R14: 0000000000040cc0 R15: dffffc0000000000 [ 74.193862][ T5319] FS: 00007f580ee1d6c0(0000) GS:ffff88808cacc000(0000) knlGS:0000000000000000 [ 74.208287][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.212188][ T5319] CR2: 00007f580e20e2c8 CR3: 00000000119da000 CR4: 0000000000352ef0 [ 74.226045][ T5319] Call Trace: [ 74.227654][ T5319] [ 74.229111][ T5319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.232148][ T5319] ? __pfx_policy_nodemask+0x10/0x10 [ 74.234550][ T5319] ? kasan_save_track+0x4f/0x80 [ 74.247427][ T5319] ? kasan_save_free_info+0x46/0x50 [ 74.250029][ T5319] ? __kasan_slab_free+0x5c/0x80 [ 74.252514][ T5319] ? kfree+0x1be/0x650 [ 74.254403][ T5319] alloc_pages_mpol+0x232/0x4a0 [ 74.264339][ T5319] ___kmalloc_large_node+0x4e/0x150 [ 74.271454][ T5319] __kmalloc_large_node_noprof+0x18/0x90 [ 74.276383][ T5319] __kmalloc_noprof+0x4b8/0x7e0 [ 74.279741][ T5319] ? drm_syncobj_array_find+0x3a/0x450 [ 74.283680][ T5319] drm_syncobj_array_find+0x3a/0x450 [ 74.288388][ T5319] drm_syncobj_timeline_wait_ioctl+0x19d/0x6b0 [ 74.295411][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.302676][ T5319] drm_ioctl_kernel+0x2df/0x3b0 [ 74.308335][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.313339][ T5319] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 74.317567][ T5319] drm_ioctl+0x6ba/0xb80 [ 74.320727][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.325897][ T5319] ? __pfx_drm_ioctl+0x10/0x10 [ 74.332022][ T5319] ? __fget_files+0x2a/0x420 [ 74.335166][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.340194][ T5319] ? __pfx_drm_ioctl+0x10/0x10 [ 74.345223][ T5319] __se_sys_ioctl+0xfc/0x170 [ 74.351561][ T5319] do_syscall_64+0xe2/0xf80 [ 74.357597][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.366414][ T5319] ? trace_irq_disable+0x37/0x100 [ 74.370488][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 74.373699][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.377236][ T5319] RIP: 0033:0x7f580df9bf79 [ 74.379400][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.391965][ T5319] RSP: 002b:00007f580ee1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.397344][ T5319] RAX: ffffffffffffffda RBX: 00007f580e215fa0 RCX: 00007f580df9bf79 [ 74.404815][ T5319] RDX: 0000200000000240 RSI: 00000000c03064ca RDI: 0000000000000003 [ 74.411719][ T5319] RBP: 00007f580e0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 74.418680][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.429047][ T5319] R13: 00007f580e216038 R14: 00007f580e215fa0 R15: 00007ffda935e6b8 [ 74.435112][ T5319] [ 74.437884][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.445654][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.451927][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.459421][ T5319] Call Trace: [ 74.464177][ T5319] [ 74.466092][ T5319] vpanic+0x1e0/0x670 [ 74.468604][ T5319] panic+0xc5/0xd0 [ 74.470878][ T5319] ? __pfx_panic+0x10/0x10 [ 74.475528][ T5319] __warn+0x315/0x4a0 [ 74.478666][ T5319] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.482294][ T5319] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.486342][ T5319] __report_bug+0x29a/0x540 [ 74.489919][ T5319] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.493563][ T5319] ? __pfx___report_bug+0x10/0x10 [ 74.496743][ T5319] ? is_bpf_text_address+0x26/0x2b0 [ 74.499907][ T5319] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.503788][ T5319] report_bug+0x16a/0x220 [ 74.505643][ T5319] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.508805][ T5319] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 74.511372][ T5319] handle_bug+0x98/0x200 [ 74.513282][ T5319] exc_invalid_op+0x1a/0x50 [ 74.515653][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 74.518126][ T5319] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 74.522291][ T5319] Code: 74 10 4c 89 e7 89 54 24 0c e8 6b 16 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 7a 9a d9 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 74.532317][ T5319] RSP: 0018:ffffc900086178a0 EFLAGS: 00010246 [ 74.537447][ T5319] RAX: ffffc90008617800 RBX: 0000000000000014 RCX: 0000000000000000 [ 74.549633][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90008617908 [ 74.553218][ T5319] RBP: ffffc90008617988 R08: ffffc90008617907 R09: 0000000000000000 [ 74.567696][ T5319] R10: ffffc900086178e0 R11: fffff520010c2f21 R12: 0000000000000000 [ 74.571286][ T5319] R13: 1ffff920010c2f18 R14: 0000000000040cc0 R15: dffffc0000000000 [ 74.574903][ T5319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.592697][ T5319] ? __pfx_policy_nodemask+0x10/0x10 [ 74.595980][ T5319] ? kasan_save_track+0x4f/0x80 [ 74.599110][ T5319] ? kasan_save_free_info+0x46/0x50 [ 74.602198][ T5319] ? __kasan_slab_free+0x5c/0x80 [ 74.604642][ T5319] ? kfree+0x1be/0x650 [ 74.606657][ T5319] alloc_pages_mpol+0x232/0x4a0 [ 74.609047][ T5319] ___kmalloc_large_node+0x4e/0x150 [ 74.611426][ T5319] __kmalloc_large_node_noprof+0x18/0x90 [ 74.613982][ T5319] __kmalloc_noprof+0x4b8/0x7e0 [ 74.626459][ T5319] ? drm_syncobj_array_find+0x3a/0x450 [ 74.637779][ T5319] drm_syncobj_array_find+0x3a/0x450 [ 74.640952][ T5319] drm_syncobj_timeline_wait_ioctl+0x19d/0x6b0 [ 74.644166][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.648867][ T5319] drm_ioctl_kernel+0x2df/0x3b0 [ 74.666319][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.669196][ T5319] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 74.671463][ T5319] drm_ioctl+0x6ba/0xb80 [ 74.673254][ T5319] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 74.676478][ T5319] ? __pfx_drm_ioctl+0x10/0x10 [ 74.678787][ T5319] ? __fget_files+0x2a/0x420 [ 74.681037][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.683395][ T5319] ? __pfx_drm_ioctl+0x10/0x10 [ 74.695801][ T5319] __se_sys_ioctl+0xfc/0x170 [ 74.697710][ T5319] do_syscall_64+0xe2/0xf80 [ 74.699601][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.702061][ T5319] ? trace_irq_disable+0x37/0x100 [ 74.704162][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 74.726442][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.729232][ T5319] RIP: 0033:0x7f580df9bf79 [ 74.731339][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.747183][ T5319] RSP: 002b:00007f580ee1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.756188][ T5319] RAX: ffffffffffffffda RBX: 00007f580e215fa0 RCX: 00007f580df9bf79 [ 74.772777][ T5319] RDX: 0000200000000240 RSI: 00000000c03064ca RDI: 0000000000000003 [ 74.778286][ T5319] RBP: 00007f580e0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 74.783915][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.789911][ T5319] R13: 00007f580e216038 R14: 00007f580e215fa0 R15: 00007ffda935e6b8 [ 74.796723][ T5319] [ 74.798839][ T5319] Kernel Offset: disabled [ 74.801358][ T5319] Rebooting in 86400 seconds..