program: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x2, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@flowinfo={{0x10, 0x29, 0xb, 0x9}}], 0x10}}], 0x2, 0x4000084) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) writev(r1, &(0x7f0000000040), 0x2) (async) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000ac0), 0x0, 0x40000000000000, 0x40000112, 0x1}) (async) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000300)='./file0\x00') [ 120.682487][ T4663] Bluetooth: hci0: command tx timeout [ 120.755431][ T5328] ------------[ cut here ]------------ [ 120.758018][ T5328] WARNING: CPU: 0 PID: 5328 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x3c5/0x710 [ 120.762395][ T5328] Modules linked in: [ 120.763980][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 120.768054][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.772421][ T5328] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710 [ 120.774601][ T5328] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 f3 64 ed 0d 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e [ 120.781924][ T5328] RSP: 0018:ffffc9000d3b78c0 EFLAGS: 00010246 [ 120.784290][ T5328] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 120.787283][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3b7948 [ 120.790305][ T5328] RBP: ffffc9000d3b79d8 R08: ffffc9000d3b7947 R09: 0000000000000000 [ 120.793317][ T5328] R10: ffffc9000d3b7920 R11: fffff52001a76f29 R12: 0000000000000015 [ 120.796195][ T5328] R13: 0000000000040cc0 R14: 1ffff92001a76f20 R15: 1ffff92001a76f1c [ 120.799135][ T5328] FS: 00007f9881dac6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 120.802663][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.805144][ T5328] CR2: 00007f9881cdd680 CR3: 00000000445e0000 CR4: 0000000000352ef0 [ 120.808138][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.811388][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.814345][ T5328] Call Trace: [ 120.815635][ T5328] [ 120.816809][ T5328] ? __warn+0x165/0x4d0 [ 120.818371][ T5328] ? __alloc_pages_noprof+0x3c5/0x710 [ 120.820687][ T5328] ? report_bug+0x2b3/0x500 [ 120.822422][ T5328] ? __alloc_pages_noprof+0x3c5/0x710 [ 120.824514][ T5328] ? handle_bug+0x60/0x90 [ 120.826113][ T5328] ? exc_invalid_op+0x1a/0x50 [ 120.827927][ T5328] ? asm_exc_invalid_op+0x1a/0x20 [ 120.829613][ T5328] ? __alloc_pages_noprof+0x3c5/0x710 [ 120.831753][ T5328] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.833786][ T5328] ? kasan_save_track+0x51/0x80 [ 120.835627][ T5328] ? mark_lock+0x9a/0x360 [ 120.837186][ T5328] ? __lock_acquire+0x1397/0x2100 [ 120.839070][ T5328] ___kmalloc_large_node+0x8b/0x1d0 [ 120.841177][ T5328] __kmalloc_large_node_noprof+0x1a/0x80 [ 120.843321][ T5328] __kmalloc_noprof+0x339/0x4c0 [ 120.845063][ T5328] ? drm_syncobj_array_find+0x3a/0x460 [ 120.847083][ T5328] drm_syncobj_array_find+0x3a/0x460 [ 120.848986][ T5328] drm_syncobj_timeline_wait_ioctl+0x220/0x6b0 [ 120.851456][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 120.853951][ T5328] ? drm_dev_enter+0x48/0x160 [ 120.855732][ T5328] drm_ioctl_kernel+0x337/0x440 [ 120.857465][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 120.859852][ T5328] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.861623][ T5328] ? __might_fault+0xaa/0x120 [ 120.863191][ T5328] drm_ioctl+0x60e/0xad0 [ 120.864699][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 120.867232][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 120.869013][ T5328] ? __fget_files+0x2a/0x410 [ 120.870712][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 120.872564][ T5328] __se_sys_ioctl+0xf5/0x170 [ 120.874388][ T5328] do_syscall_64+0xf3/0x230 [ 120.876091][ T5328] ? clear_bhb_loop+0x35/0x90 [ 120.877863][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.880108][ T5328] RIP: 0033:0x7f9880f8cd29 [ 120.881987][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.889177][ T5328] RSP: 002b:00007f9881dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.892388][ T5328] RAX: ffffffffffffffda RBX: 00007f98811a6080 RCX: 00007f9880f8cd29 [ 120.895323][ T5328] RDX: 0000000020000000 RSI: 00000000c03064ca RDI: 0000000000000006 [ 120.898320][ T5328] RBP: 00007f988100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.901396][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.904524][ T5328] R13: 0000000000000000 R14: 00007f98811a6080 R15: 00007ffdddfe0578 [ 120.908008][ T5328] [ 120.909390][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.912396][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 120.916024][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.919893][ T5328] Call Trace: [ 120.921156][ T5328] [ 120.922317][ T5328] dump_stack_lvl+0x241/0x360 [ 120.924173][ T5328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.926207][ T5328] ? __pfx__printk+0x10/0x10 [ 120.927958][ T5328] ? _printk+0xd5/0x120 [ 120.929518][ T5328] ? __init_begin+0x41000/0x41000 [ 120.931514][ T5328] ? vscnprintf+0x5d/0x90 [ 120.933172][ T5328] panic+0x349/0x880 [ 120.934733][ T5328] ? __warn+0x174/0x4d0 [ 120.936348][ T5328] ? __pfx_panic+0x10/0x10 [ 120.937926][ T5328] __warn+0x344/0x4d0 [ 120.939319][ T5328] ? __alloc_pages_noprof+0x3c5/0x710 [ 120.941208][ T5328] report_bug+0x2b3/0x500 [ 120.942657][ T5328] ? __alloc_pages_noprof+0x3c5/0x710 [ 120.944663][ T5328] handle_bug+0x60/0x90 [ 120.946138][ T5328] exc_invalid_op+0x1a/0x50 [ 120.947785][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 120.949648][ T5328] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710 [ 120.951927][ T5328] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 f3 64 ed 0d 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e [ 120.959284][ T5328] RSP: 0018:ffffc9000d3b78c0 EFLAGS: 00010246 [ 120.961713][ T5328] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 120.964872][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3b7948 [ 120.967898][ T5328] RBP: ffffc9000d3b79d8 R08: ffffc9000d3b7947 R09: 0000000000000000 [ 120.970940][ T5328] R10: ffffc9000d3b7920 R11: fffff52001a76f29 R12: 0000000000000015 [ 120.973974][ T5328] R13: 0000000000040cc0 R14: 1ffff92001a76f20 R15: 1ffff92001a76f1c [ 120.976934][ T5328] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.979301][ T5328] ? kasan_save_track+0x51/0x80 [ 120.981308][ T5328] ? mark_lock+0x9a/0x360 [ 120.982922][ T5328] ? __lock_acquire+0x1397/0x2100 [ 120.984862][ T5328] ___kmalloc_large_node+0x8b/0x1d0 [ 120.986796][ T5328] __kmalloc_large_node_noprof+0x1a/0x80 [ 120.988823][ T5328] __kmalloc_noprof+0x339/0x4c0 [ 120.990614][ T5328] ? drm_syncobj_array_find+0x3a/0x460 [ 120.992515][ T5328] drm_syncobj_array_find+0x3a/0x460 [ 120.994436][ T5328] drm_syncobj_timeline_wait_ioctl+0x220/0x6b0 [ 120.996575][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 120.998914][ T5328] ? drm_dev_enter+0x48/0x160 [ 121.000625][ T5328] drm_ioctl_kernel+0x337/0x440 [ 121.002419][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 121.004979][ T5328] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 121.006941][ T5328] ? __might_fault+0xaa/0x120 [ 121.008779][ T5328] drm_ioctl+0x60e/0xad0 [ 121.010344][ T5328] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 121.012930][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 121.014725][ T5328] ? __fget_files+0x2a/0x410 [ 121.016443][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 121.018217][ T5328] __se_sys_ioctl+0xf5/0x170 [ 121.019941][ T5328] do_syscall_64+0xf3/0x230 [ 121.021522][ T5328] ? clear_bhb_loop+0x35/0x90 [ 121.023149][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.025391][ T5328] RIP: 0033:0x7f9880f8cd29 [ 121.027024][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.034019][ T5328] RSP: 002b:00007f9881dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.037231][ T5328] RAX: ffffffffffffffda RBX: 00007f98811a6080 RCX: 00007f9880f8cd29 [ 121.040249][ T5328] RDX: 0000000020000000 RSI: 00000000c03064ca RDI: 0000000000000006 [ 121.043223][ T5328] RBP: 00007f988100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.046251][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.049237][ T5328] R13: 0000000000000000 R14: 00007f98811a6080 R15: 00007ffdddfe0578 [ 121.052168][ T5328] [ 121.053588][ T5328] Kernel Offset: disabled [ 121.055231][ T5328] Rebooting in 86400 seconds..