program: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x39) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00, 0xc00}]) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000200)={0x2, 0x2, 0x1000, 0x0, 0x0, 0xfffffe09, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000040), 0xf2dee521eeab63d}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)) (async) creat(&(0x7f0000000000)='./bus\x00', 0x39) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) (async) io_setup(0x2, &(0x7f0000002380)) (async) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00, 0xc00}]) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000200)={0x2, 0x2, 0x1000, 0x0, 0x0, 0xfffffe09, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000040), 0xf2dee521eeab63d}) (async) [ 153.494232][ T5312] Bluetooth: hci0: command tx timeout [ 153.684622][ T5334] ------------[ cut here ]------------ [ 153.687284][ T5334] 1 [ 153.687295][ T5334] WARNING: mm/page_alloc.c:5225 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5334 [ 153.693349][ T5334] Modules linked in: [ 153.695351][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 153.699221][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.703696][ T5334] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.706422][ T5334] Code: 74 10 4c 89 e7 89 54 24 0c e8 0b 47 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 01 81 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 153.714796][ T5334] RSP: 0018:ffffc9000e187940 EFLAGS: 00010246 [ 153.717678][ T5334] RAX: ffffc9000e187900 RBX: 0000000000000013 RCX: 0000000000000000 [ 153.720975][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e1879a8 [ 153.724483][ T5334] RBP: ffffc9000e187a30 R08: ffffc9000e1879a7 R09: 0000000000000000 [ 153.727837][ T5334] R10: ffffc9000e187980 R11: fffff52001c30f35 R12: 0000000000000000 [ 153.731194][ T5334] R13: 1ffff92001c30f2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 153.734665][ T5334] FS: 00007f00874d26c0(0000) GS:ffff88808ca62000(0000) knlGS:0000000000000000 [ 153.738376][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.740869][ T5334] CR2: 00007f00874d0fa8 CR3: 0000000042924000 CR4: 0000000000352ef0 [ 153.744124][ T5334] Call Trace: [ 153.745541][ T5334] [ 153.746629][ T5334] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.749216][ T5334] ? __pfx_policy_nodemask+0x10/0x10 [ 153.751217][ T5334] alloc_pages_mpol+0x232/0x4a0 [ 153.753581][ T5334] ___kmalloc_large_node+0x4e/0x150 [ 153.755939][ T5334] __kmalloc_large_node_noprof+0x18/0x90 [ 153.758434][ T5334] __kmalloc_noprof+0x3e8/0x760 [ 153.760535][ T5334] ? drm_syncobj_array_find+0x3a/0x440 [ 153.763456][ T5334] drm_syncobj_array_find+0x3a/0x440 [ 153.766445][ T5334] drm_syncobj_reset_ioctl+0x17b/0x450 [ 153.768689][ T5334] drm_ioctl_kernel+0x2df/0x3b0 [ 153.771022][ T5334] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 153.773758][ T5334] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 153.776174][ T5334] drm_ioctl+0x6ba/0xb80 [ 153.778121][ T5334] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 153.780687][ T5334] ? __pfx_drm_ioctl+0x10/0x10 [ 153.782987][ T5334] ? __fget_files+0x2a/0x420 [ 153.785055][ T5334] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.787345][ T5334] ? __pfx_drm_ioctl+0x10/0x10 [ 153.789444][ T5334] __se_sys_ioctl+0xfc/0x170 [ 153.791366][ T5334] do_syscall_64+0x14d/0xf80 [ 153.793500][ T5334] ? trace_irq_disable+0x3b/0x150 [ 153.795941][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.798739][ T5334] ? clear_bhb_loop+0x40/0x90 [ 153.800958][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.803729][ T5334] RIP: 0033:0x7f008659bf79 [ 153.805785][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.814210][ T5334] RSP: 002b:00007f00874d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.817515][ T5334] RAX: ffffffffffffffda RBX: 00007f0086816090 RCX: 00007f008659bf79 [ 153.820667][ T5334] RDX: 00002000000000c0 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 153.823978][ T5334] RBP: 00007f00866327e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.827135][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.830407][ T5334] R13: 00007f0086816128 R14: 00007f0086816090 R15: 00007ffe1c2b09a8 [ 153.833903][ T5334] [ 153.835283][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.838339][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 153.842135][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.847012][ T5334] Call Trace: [ 153.848573][ T5334] [ 153.849896][ T5334] vpanic+0x56c/0xa60 [ 153.851738][ T5334] ? __pfx__printk+0x10/0x10 [ 153.853866][ T5334] ? __pfx_vpanic+0x10/0x10 [ 153.855934][ T5334] ? is_bpf_text_address+0x292/0x2b0 [ 153.858221][ T5334] ? is_bpf_text_address+0x26/0x2b0 [ 153.860534][ T5334] panic+0xc5/0xd0 [ 153.862262][ T5334] ? __pfx_panic+0x10/0x10 [ 153.864252][ T5334] __warn+0x315/0x4f0 [ 153.866022][ T5334] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.868606][ T5334] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.871249][ T5334] __report_bug+0x29a/0x540 [ 153.873327][ T5334] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.875977][ T5334] ? __pfx___report_bug+0x10/0x10 [ 153.878148][ T5334] ? is_bpf_text_address+0x292/0x2b0 [ 153.880437][ T5334] ? is_bpf_text_address+0x26/0x2b0 [ 153.882684][ T5334] ? kernel_text_address+0xa5/0xe0 [ 153.884899][ T5334] ? __kernel_text_address+0xd/0x30 [ 153.887165][ T5334] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.889831][ T5334] ? arch_stack_walk+0xfb/0x150 [ 153.891988][ T5334] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.894538][ T5334] report_bug+0x16a/0x220 [ 153.896431][ T5334] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.899093][ T5334] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 153.901727][ T5334] handle_bug+0x98/0x200 [ 153.903591][ T5334] exc_invalid_op+0x1a/0x50 [ 153.905681][ T5334] asm_exc_invalid_op+0x1a/0x20 [ 153.907825][ T5334] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 153.910746][ T5334] Code: 74 10 4c 89 e7 89 54 24 0c e8 0b 47 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 01 81 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 153.919144][ T5334] RSP: 0018:ffffc9000e187940 EFLAGS: 00010246 [ 153.921710][ T5334] RAX: ffffc9000e187900 RBX: 0000000000000013 RCX: 0000000000000000 [ 153.925073][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e1879a8 [ 153.928371][ T5334] RBP: ffffc9000e187a30 R08: ffffc9000e1879a7 R09: 0000000000000000 [ 153.931806][ T5334] R10: ffffc9000e187980 R11: fffff52001c30f35 R12: 0000000000000000 [ 153.935030][ T5334] R13: 1ffff92001c30f2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 153.938441][ T5334] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.941228][ T5334] ? __pfx_policy_nodemask+0x10/0x10 [ 153.943388][ T5334] alloc_pages_mpol+0x232/0x4a0 [ 153.945273][ T5334] ___kmalloc_large_node+0x4e/0x150 [ 153.947492][ T5334] __kmalloc_large_node_noprof+0x18/0x90 [ 153.949807][ T5334] __kmalloc_noprof+0x3e8/0x760 [ 153.951806][ T5334] ? drm_syncobj_array_find+0x3a/0x440 [ 153.954028][ T5334] drm_syncobj_array_find+0x3a/0x440 [ 153.956237][ T5334] drm_syncobj_reset_ioctl+0x17b/0x450 [ 153.958603][ T5334] drm_ioctl_kernel+0x2df/0x3b0 [ 153.960777][ T5334] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 153.963292][ T5334] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 153.965699][ T5334] drm_ioctl+0x6ba/0xb80 [ 153.967472][ T5334] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 153.970111][ T5334] ? __pfx_drm_ioctl+0x10/0x10 [ 153.971982][ T5334] ? __fget_files+0x2a/0x420 [ 153.973823][ T5334] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.975823][ T5334] ? __pfx_drm_ioctl+0x10/0x10 [ 153.977982][ T5334] __se_sys_ioctl+0xfc/0x170 [ 153.980074][ T5334] do_syscall_64+0x14d/0xf80 [ 153.982201][ T5334] ? trace_irq_disable+0x3b/0x150 [ 153.984465][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.987046][ T5334] ? clear_bhb_loop+0x40/0x90 [ 153.989126][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.991717][ T5334] RIP: 0033:0x7f008659bf79 [ 153.993775][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.003490][ T5334] RSP: 002b:00007f00874d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.010804][ T5334] RAX: ffffffffffffffda RBX: 00007f0086816090 RCX: 00007f008659bf79 [ 154.015354][ T5334] RDX: 00002000000000c0 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 154.019229][ T5334] RBP: 00007f00866327e0 R08: 0000000000000000 R09: 0000000000000000 [ 154.023054][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.026615][ T5334] R13: 00007f0086816128 R14: 00007f0086816090 R15: 00007ffe1c2b09a8 [ 154.030056][ T5334] [ 154.031779][ T5334] Kernel Offset: disabled [ 154.033784][ T5334] Rebooting in 86400 seconds..