program: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000040)=[r1, r1], 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010400000091ab2f41cffe000095000000000000003d796678b6d0e9d66e65f09828d1e2e1805ad9c3fb0e83c9642530c6dd14e569e88648"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) [ 67.504548][ T4654] Bluetooth: hci0: command tx timeout [ 67.550838][ T5323] ------------[ cut here ]------------ [ 67.553528][ T5323] 1 [ 67.553540][ T5323] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2ce/0x380, CPU#0: syz.0.0/5323 [ 67.567815][ T5323] Modules linked in: [ 67.570179][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.574239][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.578940][ T5323] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.582165][ T5323] Code: 74 10 4c 89 e7 89 54 24 0c e8 5e 23 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 3c 93 f4 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 67.590910][ T5323] RSP: 0018:ffffc9000e13f940 EFLAGS: 00010246 [ 67.593645][ T5323] RAX: ffffc9000e13f900 RBX: 0000000000000016 RCX: 0000000000000000 [ 67.597754][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e13f9a8 [ 67.601095][ T5323] RBP: ffffc9000e13fa38 R08: ffffc9000e13f9a7 R09: 0000000000000000 [ 67.604565][ T5323] R10: ffffc9000e13f980 R11: fffff52001c27f35 R12: 0000000000000000 [ 67.608479][ T5323] R13: 1ffff92001c27f2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 67.612014][ T5323] FS: 00007fd8db7086c0(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000 [ 67.615917][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.619330][ T5323] CR2: 00007fd8db711230 CR3: 000000001fcb5000 CR4: 0000000000352ef0 [ 67.623303][ T5323] Call Trace: [ 67.625054][ T5323] [ 67.626465][ T5323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.629534][ T5323] ? __pfx_policy_nodemask+0x10/0x10 [ 67.632478][ T5323] alloc_pages_mpol+0x212/0x380 [ 67.634993][ T5323] ___kmalloc_large_node+0x4c/0x120 [ 67.637458][ T5323] __kmalloc_large_node_noprof+0x18/0x90 [ 67.639874][ T5323] __kmalloc_noprof+0x3e4/0x750 [ 67.641928][ T5323] ? drm_syncobj_array_find+0x3a/0x440 [ 67.644412][ T5323] ? rcu_is_watching+0x15/0xb0 [ 67.647184][ T5323] drm_syncobj_array_find+0x3a/0x440 [ 67.649943][ T5323] drm_syncobj_reset_ioctl+0x17b/0x450 [ 67.652516][ T5323] drm_ioctl_kernel+0x2df/0x3b0 [ 67.654623][ T5323] ? lock_acquire+0x5f/0x350 [ 67.656781][ T5323] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 67.659665][ T5323] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 67.662509][ T5323] ? __might_fault+0xcb/0x130 [ 67.665042][ T5323] drm_ioctl+0x70e/0xba0 [ 67.667021][ T5323] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 67.669623][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 67.671968][ T5323] ? __fget_files+0x2a/0x420 [ 67.674795][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 67.677912][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 67.680167][ T5323] __se_sys_ioctl+0xfc/0x170 [ 67.682083][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.684675][ T5323] do_syscall_64+0x174/0x580 [ 67.686970][ T5323] ? trace_irq_disable+0x3b/0x140 [ 67.689390][ T5323] ? clear_bhb_loop+0x40/0x90 [ 67.691535][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.694104][ T5323] RIP: 0033:0x7fd8da79ce59 [ 67.696072][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.705625][ T5323] RSP: 002b:00007fd8db707fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.709301][ T5323] RAX: ffffffffffffffda RBX: 00007fd8daa15fa0 RCX: 00007fd8da79ce59 [ 67.712725][ T5323] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 67.716871][ T5323] RBP: 00007fd8da832e6f R08: 0000000000000000 R09: 0000000000000000 [ 67.720564][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.723935][ T5323] R13: 00007fd8daa16038 R14: 00007fd8daa15fa0 R15: 00007ffea1013448 [ 67.727765][ T5323] [ 67.729583][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.734033][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.737836][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.741792][ T5323] Call Trace: [ 67.743182][ T5323] [ 67.744379][ T5323] vpanic+0x56c/0xa60 [ 67.746043][ T5323] ? __pfx__printk+0x10/0x10 [ 67.748200][ T5323] ? __pfx_vpanic+0x10/0x10 [ 67.750494][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 67.753038][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 67.755263][ T5323] panic+0xc5/0xd0 [ 67.756907][ T5323] ? __pfx_panic+0x10/0x10 [ 67.758879][ T5323] __warn+0x315/0x4c0 [ 67.760662][ T5323] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.763736][ T5323] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.766555][ T5323] __report_bug+0x331/0x530 [ 67.768586][ T5323] ? rcu_is_watching+0x15/0xb0 [ 67.770750][ T5323] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.773266][ T5323] ? __pfx___report_bug+0x10/0x10 [ 67.775815][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 67.779047][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 67.781512][ T5323] ? kernel_text_address+0xa5/0xe0 [ 67.783767][ T5323] ? __kernel_text_address+0xd/0x30 [ 67.786059][ T5323] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 67.788766][ T5323] ? arch_stack_walk+0xfb/0x150 [ 67.790924][ T5323] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.793363][ T5323] report_bug+0x16a/0x220 [ 67.795356][ T5323] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.798400][ T5323] ? __alloc_frozen_pages_noprof+0x2d0/0x380 [ 67.801246][ T5323] handle_bug+0x9c/0x200 [ 67.803093][ T5323] exc_invalid_op+0x1a/0x50 [ 67.805017][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 67.807148][ T5323] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 67.810342][ T5323] Code: 74 10 4c 89 e7 89 54 24 0c e8 5e 23 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 3c 93 f4 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 67.819359][ T5323] RSP: 0018:ffffc9000e13f940 EFLAGS: 00010246 [ 67.821877][ T5323] RAX: ffffc9000e13f900 RBX: 0000000000000016 RCX: 0000000000000000 [ 67.825730][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e13f9a8 [ 67.830314][ T5323] RBP: ffffc9000e13fa38 R08: ffffc9000e13f9a7 R09: 0000000000000000 [ 67.833847][ T5323] R10: ffffc9000e13f980 R11: fffff52001c27f35 R12: 0000000000000000 [ 67.837311][ T5323] R13: 1ffff92001c27f2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 67.840993][ T5323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.844375][ T5323] ? __pfx_policy_nodemask+0x10/0x10 [ 67.846993][ T5323] alloc_pages_mpol+0x212/0x380 [ 67.849148][ T5323] ___kmalloc_large_node+0x4c/0x120 [ 67.851494][ T5323] __kmalloc_large_node_noprof+0x18/0x90 [ 67.854272][ T5323] __kmalloc_noprof+0x3e4/0x750 [ 67.856794][ T5323] ? drm_syncobj_array_find+0x3a/0x440 [ 67.859525][ T5323] ? rcu_is_watching+0x15/0xb0 [ 67.861849][ T5323] drm_syncobj_array_find+0x3a/0x440 [ 67.864682][ T5323] drm_syncobj_reset_ioctl+0x17b/0x450 [ 67.867407][ T5323] drm_ioctl_kernel+0x2df/0x3b0 [ 67.869390][ T5323] ? lock_acquire+0x5f/0x350 [ 67.871311][ T5323] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 67.873922][ T5323] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 67.876394][ T5323] ? __might_fault+0xcb/0x130 [ 67.878518][ T5323] drm_ioctl+0x70e/0xba0 [ 67.880378][ T5323] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 67.883055][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 67.885287][ T5323] ? __fget_files+0x2a/0x420 [ 67.887886][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 67.890321][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 67.892429][ T5323] __se_sys_ioctl+0xfc/0x170 [ 67.894848][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.897645][ T5323] do_syscall_64+0x174/0x580 [ 67.899819][ T5323] ? trace_irq_disable+0x3b/0x140 [ 67.902313][ T5323] ? clear_bhb_loop+0x40/0x90 [ 67.904502][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.907182][ T5323] RIP: 0033:0x7fd8da79ce59 [ 67.909451][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.918024][ T5323] RSP: 002b:00007fd8db707fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.922118][ T5323] RAX: ffffffffffffffda RBX: 00007fd8daa15fa0 RCX: 00007fd8da79ce59 [ 67.925791][ T5323] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 67.929395][ T5323] RBP: 00007fd8da832e6f R08: 0000000000000000 R09: 0000000000000000 [ 67.934375][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.938122][ T5323] R13: 00007fd8daa16038 R14: 00007fd8daa15fa0 R15: 00007ffea1013448 [ 67.942009][ T5323] [ 67.944107][ T5323] Kernel Offset: disabled [ 67.946380][ T5323] Rebooting in 86400 seconds..