program: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={0x0, 0xfff, 0xfffffffffffffe4c}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r1) [ 93.322029][ T55] cfg80211: failed to load regulatory.db [ 93.325644][ T4701] Bluetooth: hci0: command tx timeout [ 93.449255][ T5355] ------------[ cut here ]------------ [ 93.451911][ T5355] WARNING: CPU: 0 PID: 5355 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.457193][ T5355] Modules linked in: [ 93.458965][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.462906][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.468590][ T5355] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.471566][ T5355] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4e 08 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.480501][ T5355] RSP: 0018:ffffc9000d4b78e0 EFLAGS: 00010246 [ 93.483030][ T5355] RAX: ffffc9000d4b7900 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.486368][ T5355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4b7948 [ 93.489976][ T5355] RBP: ffffc9000d4b79c8 R08: ffffc9000d4b7947 R09: 0000000000000000 [ 93.494056][ T5355] R10: ffffc9000d4b7920 R11: fffff52001a96f29 R12: 0000000000000000 [ 93.497648][ T5355] R13: 1ffff92001a96f20 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.501118][ T5355] FS: 00007ff59f11a6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 93.505155][ T5355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.507994][ T5355] CR2: 000055e6baab9f40 CR3: 000000003058c000 CR4: 0000000000352ef0 [ 93.511524][ T5355] Call Trace: [ 93.513084][ T5355] [ 93.514438][ T5355] ? stack_depot_save_flags+0x40/0x860 [ 93.517027][ T5355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.520090][ T5355] ? kasan_save_track+0x4f/0x80 [ 93.522274][ T5355] ? kasan_save_track+0x3e/0x80 [ 93.524663][ T5355] ? policy_nodemask+0x27c/0x720 [ 93.527064][ T5355] ? do_syscall_64+0xfa/0x3b0 [ 93.529376][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.532163][ T5355] alloc_pages_mpol+0x232/0x4a0 [ 93.534628][ T5355] ___kmalloc_large_node+0x5f/0x1b0 [ 93.537283][ T5355] __kmalloc_large_node_noprof+0x18/0x90 [ 93.539993][ T5355] __kmalloc_noprof+0x36f/0x4f0 [ 93.542135][ T5355] ? drm_syncobj_array_find+0x3a/0x450 [ 93.544807][ T5355] drm_syncobj_array_find+0x3a/0x450 [ 93.547467][ T5355] drm_syncobj_wait_ioctl+0x208/0x520 [ 93.550226][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.553543][ T5355] drm_ioctl_kernel+0x2cf/0x390 [ 93.556076][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.559179][ T5355] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.561946][ T5355] drm_ioctl+0x67f/0xb10 [ 93.564214][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.567110][ T5355] ? __pfx_drm_ioctl+0x10/0x10 [ 93.569531][ T5355] ? __fget_files+0x2a/0x420 [ 93.571671][ T5355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.574149][ T5355] ? __pfx_drm_ioctl+0x10/0x10 [ 93.576473][ T5355] __se_sys_ioctl+0xf9/0x170 [ 93.578631][ T5355] do_syscall_64+0xfa/0x3b0 [ 93.580628][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.583059][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.585648][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 93.587783][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.590334][ T5355] RIP: 0033:0x7ff59e38ebe9 [ 93.592134][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.600071][ T5355] RSP: 002b:00007ff59f11a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.603775][ T5355] RAX: ffffffffffffffda RBX: 00007ff59e5b5fa0 RCX: 00007ff59e38ebe9 [ 93.607273][ T5355] RDX: 0000200000000080 RSI: 00000000c02864c3 RDI: 0000000000000003 [ 93.610828][ T5355] RBP: 00007ff59e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 93.614631][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.618985][ T5355] R13: 00007ff59e5b6038 R14: 00007ff59e5b5fa0 R15: 00007ffd70bcd2a8 [ 93.623235][ T5355] [ 93.624917][ T5355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.628842][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.633419][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.638160][ T5355] Call Trace: [ 93.639651][ T5355] [ 93.641004][ T5355] dump_stack_lvl+0x99/0x250 [ 93.643027][ T5355] ? __asan_memcpy+0x40/0x70 [ 93.644922][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.647453][ T5355] ? __pfx__printk+0x10/0x10 [ 93.649800][ T5355] vpanic+0x281/0x750 [ 93.651735][ T5355] ? __pfx__printk+0x10/0x10 [ 93.653769][ T5355] ? __pfx_vpanic+0x10/0x10 [ 93.655712][ T5355] ? is_bpf_text_address+0x26/0x2b0 [ 93.657922][ T5355] panic+0xb9/0xc0 [ 93.659514][ T5355] ? __pfx_panic+0x10/0x10 [ 93.661457][ T5355] __warn+0x31b/0x4b0 [ 93.663272][ T5355] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.666284][ T5355] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.669191][ T5355] report_bug+0x2be/0x4f0 [ 93.671076][ T5355] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.673786][ T5355] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.676527][ T5355] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 93.679162][ T5355] handle_bug+0x84/0x160 [ 93.681048][ T5355] exc_invalid_op+0x1a/0x50 [ 93.683039][ T5355] asm_exc_invalid_op+0x1a/0x20 [ 93.685102][ T5355] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 93.687995][ T5355] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4e 08 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.696187][ T5355] RSP: 0018:ffffc9000d4b78e0 EFLAGS: 00010246 [ 93.699125][ T5355] RAX: ffffc9000d4b7900 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.702930][ T5355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4b7948 [ 93.705856][ T5355] RBP: ffffc9000d4b79c8 R08: ffffc9000d4b7947 R09: 0000000000000000 [ 93.708957][ T5355] R10: ffffc9000d4b7920 R11: fffff52001a96f29 R12: 0000000000000000 [ 93.712011][ T5355] R13: 1ffff92001a96f20 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.715763][ T5355] ? stack_depot_save_flags+0x40/0x860 [ 93.718061][ T5355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.720902][ T5355] ? kasan_save_track+0x4f/0x80 [ 93.723112][ T5355] ? kasan_save_track+0x3e/0x80 [ 93.725364][ T5355] ? policy_nodemask+0x27c/0x720 [ 93.727809][ T5355] ? do_syscall_64+0xfa/0x3b0 [ 93.730313][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.732908][ T5355] alloc_pages_mpol+0x232/0x4a0 [ 93.734982][ T5355] ___kmalloc_large_node+0x5f/0x1b0 [ 93.737368][ T5355] __kmalloc_large_node_noprof+0x18/0x90 [ 93.740546][ T5355] __kmalloc_noprof+0x36f/0x4f0 [ 93.743167][ T5355] ? drm_syncobj_array_find+0x3a/0x450 [ 93.746242][ T5355] drm_syncobj_array_find+0x3a/0x450 [ 93.749656][ T5355] drm_syncobj_wait_ioctl+0x208/0x520 [ 93.752877][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.756097][ T5355] drm_ioctl_kernel+0x2cf/0x390 [ 93.758796][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.761774][ T5355] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.764135][ T5355] drm_ioctl+0x67f/0xb10 [ 93.766531][ T5355] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 93.769500][ T5355] ? __pfx_drm_ioctl+0x10/0x10 [ 93.771685][ T5355] ? __fget_files+0x2a/0x420 [ 93.773924][ T5355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.776240][ T5355] ? __pfx_drm_ioctl+0x10/0x10 [ 93.778434][ T5355] __se_sys_ioctl+0xf9/0x170 [ 93.780499][ T5355] do_syscall_64+0xfa/0x3b0 [ 93.782605][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.784907][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.787553][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 93.789628][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.792254][ T5355] RIP: 0033:0x7ff59e38ebe9 [ 93.794267][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.803027][ T5355] RSP: 002b:00007ff59f11a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.806587][ T5355] RAX: ffffffffffffffda RBX: 00007ff59e5b5fa0 RCX: 00007ff59e38ebe9 [ 93.809960][ T5355] RDX: 0000200000000080 RSI: 00000000c02864c3 RDI: 0000000000000003 [ 93.813209][ T5355] RBP: 00007ff59e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 93.816821][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.820716][ T5355] R13: 00007ff59e5b6038 R14: 00007ff59e5b5fa0 R15: 00007ffd70bcd2a8 [ 93.824232][ T5355] [ 93.825945][ T5355] Kernel Offset: disabled [ 93.827886][ T5355] Rebooting in 86400 seconds..