program:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x0, 0x1}) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x80005}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@nodelalloc}, {@acl}, {@user_xattr}]}, 0xfc, 0x56b, &(0x7f0000000e40)="$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")
[ 88.409083][ T5329] ------------[ cut here ]------------
[ 88.411515][ T5329] 1
[ 88.411526][ T5329] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5329
[ 88.417753][ T5329] Modules linked in:
[ 88.419665][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.423610][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.428069][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.430873][ T5329] Code: 74 10 4c 89 e7 89 54 24 0c e8 fb db 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 8b 22 f6 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 88.440193][ T5329] RSP: 0018:ffffc9000e1478a0 EFLAGS: 00010246
[ 88.442765][ T5329] RAX: ffffc9000e147800 RBX: 0000000000000014 RCX: 0000000000000000
[ 88.446448][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e147908
[ 88.456249][ T5329] RBP: ffffc9000e147990 R08: ffffc9000e147907 R09: 0000000000000000
[ 88.460673][ T5329] R10: ffffc9000e1478e0 R11: fffff52001c28f21 R12: 0000000000000000
[ 88.464377][ T5329] R13: 1ffff92001c28f18 R14: 0000000000040cc0 R15: dffffc0000000000
[ 88.468272][ T5329] FS: 00007fd1ee7f86c0(0000) GS:ffff88808c87e000(0000) knlGS:0000000000000000
[ 88.472098][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.474866][ T5329] CR2: 00007fd1e1800400 CR3: 0000000042eaf000 CR4: 0000000000352ef0
[ 88.478303][ T5329] Call Trace:
[ 88.479806][ T5329]
[ 88.481050][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 88.483755][ T5329] ? __pfx_policy_nodemask+0x10/0x10
[ 88.486155][ T5329] ? kasan_save_track+0x4f/0x80
[ 88.488379][ T5329] ? kasan_save_track+0x3e/0x80
[ 88.490605][ T5329] ? kasan_save_free_info+0x46/0x50
[ 88.492960][ T5329] ? kfree+0x1c5/0x640
[ 88.494826][ T5329] ? tomoyo_path_number_perm+0x501/0x630
[ 88.497576][ T5329] ? security_file_ioctl+0xc3/0x2a0
[ 88.499998][ T5329] ? __se_sys_ioctl+0x47/0x170
[ 88.502063][ T5329] alloc_pages_mpol+0x235/0x490
[ 88.504244][ T5329] ___kmalloc_large_node+0x4e/0x120
[ 88.506670][ T5329] __kmalloc_large_node_noprof+0x18/0x90
[ 88.509291][ T5329] __kmalloc_noprof+0x3e8/0x760
[ 88.511463][ T5329] ? drm_syncobj_array_find+0x3a/0x440
[ 88.513869][ T5329] drm_syncobj_array_find+0x3a/0x440
[ 88.516276][ T5329] drm_syncobj_query_ioctl+0x1c3/0xae0
[ 88.518605][ T5329] ? drm_dev_enter+0x49/0x150
[ 88.520481][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.523235][ T5329] drm_ioctl_kernel+0x2df/0x3b0
[ 88.525505][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.528432][ T5329] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 88.530879][ T5329] drm_ioctl+0x6ba/0xb80
[ 88.532672][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.535126][ T5329] ? __pfx_drm_ioctl+0x10/0x10
[ 88.537274][ T5329] ? __fget_files+0x2a/0x420
[ 88.539511][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20
[ 88.541958][ T5329] ? __pfx_drm_ioctl+0x10/0x10
[ 88.544264][ T5329] __se_sys_ioctl+0xfc/0x170
[ 88.546496][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.549158][ T5329] do_syscall_64+0x15f/0xf80
[ 88.551370][ T5329] ? trace_irq_disable+0x3b/0x140
[ 88.553733][ T5329] ? clear_bhb_loop+0x40/0x90
[ 88.555875][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.558572][ T5329] RIP: 0033:0x7fd1ed99ce59
[ 88.560643][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.569831][ T5329] RSP: 002b:00007fd1ee7f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 88.573630][ T5329] RAX: ffffffffffffffda RBX: 00007fd1edc15fa0 RCX: 00007fd1ed99ce59
[ 88.578081][ T5329] RDX: 0000200000000300 RSI: 00000000c01864cb RDI: 0000000000000003
[ 88.581787][ T5329] RBP: 00007fd1eda32d6f R08: 0000000000000000 R09: 0000000000000000
[ 88.585200][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.588608][ T5329] R13: 00007fd1edc16038 R14: 00007fd1edc15fa0 R15: 00007fff84134818
[ 88.592055][ T5329]
[ 88.593467][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.596438][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.600206][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.603943][ T5329] Call Trace:
[ 88.605282][ T5329]
[ 88.606481][ T5329] vpanic+0x56c/0xa60
[ 88.608331][ T5329] ? __pfx__printk+0x10/0x10
[ 88.610265][ T5329] ? __pfx_vpanic+0x10/0x10
[ 88.612322][ T5329] ? is_bpf_text_address+0x292/0x2b0
[ 88.614635][ T5329] ? is_bpf_text_address+0x26/0x2b0
[ 88.617117][ T5329] panic+0xc5/0xd0
[ 88.618714][ T5329] ? __pfx_panic+0x10/0x10
[ 88.620613][ T5329] __warn+0x315/0x4c0
[ 88.622314][ T5329] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.625095][ T5329] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.627946][ T5329] __report_bug+0x29a/0x540
[ 88.630080][ T5329] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.632927][ T5329] ? __pfx___report_bug+0x10/0x10
[ 88.635444][ T5329] ? is_bpf_text_address+0x26/0x2b0
[ 88.638041][ T5329] ? is_bpf_text_address+0x292/0x2b0
[ 88.640586][ T5329] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.643328][ T5329] report_bug+0x16a/0x220
[ 88.645281][ T5329] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.647880][ T5329] ? __alloc_frozen_pages_noprof+0x2d3/0x380
[ 88.650482][ T5329] handle_bug+0x9c/0x200
[ 88.652377][ T5329] exc_invalid_op+0x1a/0x50
[ 88.654436][ T5329] asm_exc_invalid_op+0x1a/0x20
[ 88.656656][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380
[ 88.659632][ T5329] Code: 74 10 4c 89 e7 89 54 24 0c e8 fb db 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 8b 22 f6 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 88.668407][ T5329] RSP: 0018:ffffc9000e1478a0 EFLAGS: 00010246
[ 88.671296][ T5329] RAX: ffffc9000e147800 RBX: 0000000000000014 RCX: 0000000000000000
[ 88.674842][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e147908
[ 88.678354][ T5329] RBP: ffffc9000e147990 R08: ffffc9000e147907 R09: 0000000000000000
[ 88.681988][ T5329] R10: ffffc9000e1478e0 R11: fffff52001c28f21 R12: 0000000000000000
[ 88.685665][ T5329] R13: 1ffff92001c28f18 R14: 0000000000040cc0 R15: dffffc0000000000
[ 88.689339][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 88.692202][ T5329] ? __pfx_policy_nodemask+0x10/0x10
[ 88.694603][ T5329] ? kasan_save_track+0x4f/0x80
[ 88.696713][ T5329] ? kasan_save_track+0x3e/0x80
[ 88.698870][ T5329] ? kasan_save_free_info+0x46/0x50
[ 88.701155][ T5329] ? kfree+0x1c5/0x640
[ 88.703003][ T5329] ? tomoyo_path_number_perm+0x501/0x630
[ 88.705515][ T5329] ? security_file_ioctl+0xc3/0x2a0
[ 88.707974][ T5329] ? __se_sys_ioctl+0x47/0x170
[ 88.710178][ T5329] alloc_pages_mpol+0x235/0x490
[ 88.712342][ T5329] ___kmalloc_large_node+0x4e/0x120
[ 88.714645][ T5329] __kmalloc_large_node_noprof+0x18/0x90
[ 88.717094][ T5329] __kmalloc_noprof+0x3e8/0x760
[ 88.719251][ T5329] ? drm_syncobj_array_find+0x3a/0x440
[ 88.721761][ T5329] drm_syncobj_array_find+0x3a/0x440
[ 88.724105][ T5329] drm_syncobj_query_ioctl+0x1c3/0xae0
[ 88.726594][ T5329] ? drm_dev_enter+0x49/0x150
[ 88.728863][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.731747][ T5329] drm_ioctl_kernel+0x2df/0x3b0
[ 88.734106][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.736789][ T5329] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 88.739241][ T5329] drm_ioctl+0x6ba/0xb80
[ 88.741183][ T5329] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 88.743914][ T5329] ? __pfx_drm_ioctl+0x10/0x10
[ 88.746121][ T5329] ? __fget_files+0x2a/0x420
[ 88.748279][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20
[ 88.750583][ T5329] ? __pfx_drm_ioctl+0x10/0x10
[ 88.752755][ T5329] __se_sys_ioctl+0xfc/0x170
[ 88.754893][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.757815][ T5329] do_syscall_64+0x15f/0xf80
[ 88.759848][ T5329] ? trace_irq_disable+0x3b/0x140
[ 88.762032][ T5329] ? clear_bhb_loop+0x40/0x90
[ 88.764178][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.766915][ T5329] RIP: 0033:0x7fd1ed99ce59
[ 88.768923][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.777159][ T5329] RSP: 002b:00007fd1ee7f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 88.781006][ T5329] RAX: ffffffffffffffda RBX: 00007fd1edc15fa0 RCX: 00007fd1ed99ce59
[ 88.784322][ T5329] RDX: 0000200000000300 RSI: 00000000c01864cb RDI: 0000000000000003
[ 88.787450][ T5329] RBP: 00007fd1eda32d6f R08: 0000000000000000 R09: 0000000000000000
[ 88.790766][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.794040][ T5329] R13: 00007fd1edc16038 R14: 00007fd1edc15fa0 R15: 00007fff84134818
[ 88.797334][ T5329]
[ 88.799134][ T5329] Kernel Offset: disabled
[ 88.801014][ T5329] Rebooting in 86400 seconds..