program: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffff89, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b6, 0x0, 0x4}]}) r4 = socket(0x11, 0x800000003, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r9, 0xc008ae91, &(0x7f0000004280)) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffe50, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024400010100c07d090400fe1602020000052446000005240000000d240f01000000000000000000090581030000087f8109058202600204000009050302"], 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) [ 92.835849][ T10] cfg80211: failed to load regulatory.db [ 92.847137][ T4663] Bluetooth: hci0: command tx timeout [ 93.040261][ T5323] ------------[ cut here ]------------ [ 93.042966][ T5323] 1 [ 93.042982][ T5323] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5323 [ 93.049548][ T5323] Modules linked in: [ 93.051446][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.055412][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.060421][ T5323] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.063405][ T5323] Code: 74 10 4c 89 e7 89 54 24 0c e8 3b 47 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 27 79 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.073593][ T5323] RSP: 0018:ffffc9000e4ff8a0 EFLAGS: 00010246 [ 93.076412][ T5323] RAX: ffffc9000e4ff800 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.080413][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e4ff908 [ 93.085143][ T5323] RBP: ffffc9000e4ff988 R08: ffffc9000e4ff907 R09: 0000000000000000 [ 93.088890][ T5323] R10: ffffc9000e4ff8e0 R11: fffff52001c9ff21 R12: 0000000000000000 [ 93.092424][ T5323] R13: 1ffff92001c9ff18 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.095901][ T5323] FS: 00007f314dafa6c0(0000) GS:ffff88808ca58000(0000) knlGS:0000000000000000 [ 93.100748][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.103913][ T5323] CR2: 00007f314cdec6b8 CR3: 000000004174a000 CR4: 0000000000352ef0 [ 93.107388][ T5323] Call Trace: [ 93.109113][ T5323] [ 93.110585][ T5323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.114047][ T5323] ? __pfx_policy_nodemask+0x10/0x10 [ 93.116703][ T5323] ? kasan_save_track+0x4f/0x80 [ 93.120412][ T5323] ? kasan_save_track+0x3e/0x80 [ 93.122927][ T5323] ? kasan_save_free_info+0x46/0x50 [ 93.125635][ T5323] ? kfree+0x1c1/0x630 [ 93.128534][ T5323] ? tomoyo_path_number_perm+0x501/0x630 [ 93.131617][ T5323] ? security_file_ioctl+0xc3/0x2a0 [ 93.134092][ T5323] alloc_pages_mpol+0x232/0x4a0 [ 93.136247][ T5323] ___kmalloc_large_node+0x4e/0x150 [ 93.139045][ T5323] __kmalloc_large_node_noprof+0x18/0x90 [ 93.141924][ T5323] __kmalloc_noprof+0x3e8/0x760 [ 93.144783][ T5323] ? drm_syncobj_array_find+0x3a/0x440 [ 93.148216][ T5323] drm_syncobj_array_find+0x3a/0x440 [ 93.150440][ T5323] ? __lock_acquire+0x6b5/0x2cf0 [ 93.152773][ T5323] drm_syncobj_query_ioctl+0x1c3/0xb70 [ 93.155200][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.158407][ T5323] drm_ioctl_kernel+0x2df/0x3b0 [ 93.161064][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.163837][ T5323] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.166297][ T5323] drm_ioctl+0x6ba/0xb80 [ 93.168255][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.170862][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 93.173369][ T5323] ? __fget_files+0x2a/0x420 [ 93.175636][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.178181][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 93.180426][ T5323] __se_sys_ioctl+0xfc/0x170 [ 93.182428][ T5323] do_syscall_64+0x14d/0xf80 [ 93.184329][ T5323] ? trace_irq_disable+0x3b/0x150 [ 93.186435][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.189421][ T5323] ? clear_bhb_loop+0x40/0x90 [ 93.191800][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.194533][ T5323] RIP: 0033:0x7f314cb9c799 [ 93.196438][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.205528][ T5323] RSP: 002b:00007f314daf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.209321][ T5323] RAX: ffffffffffffffda RBX: 00007f314ce15fa0 RCX: 00007f314cb9c799 [ 93.212777][ T5323] RDX: 00002000000004c0 RSI: 00000000c01864cb RDI: 0000000000000004 [ 93.217811][ T5323] RBP: 00007f314cc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 93.221907][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.225335][ T5323] R13: 00007f314ce16038 R14: 00007f314ce15fa0 R15: 00007ffd50ecd768 [ 93.229370][ T5323] [ 93.230785][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.234440][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.239678][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.243835][ T5323] Call Trace: [ 93.245338][ T5323] [ 93.246700][ T5323] vpanic+0x56c/0xa60 [ 93.248666][ T5323] ? __pfx__printk+0x10/0x10 [ 93.251055][ T5323] ? __pfx_vpanic+0x10/0x10 [ 93.253506][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 93.256041][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 93.258301][ T5323] panic+0xc5/0xd0 [ 93.260048][ T5323] ? __pfx_panic+0x10/0x10 [ 93.262071][ T5323] __warn+0x315/0x4f0 [ 93.264174][ T5323] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.267717][ T5323] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.270346][ T5323] __report_bug+0x29a/0x540 [ 93.272470][ T5323] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.275065][ T5323] ? __pfx___report_bug+0x10/0x10 [ 93.277238][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 93.279495][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 93.282291][ T5323] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.285452][ T5323] report_bug+0x16a/0x220 [ 93.287404][ T5323] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.290044][ T5323] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 93.292694][ T5323] handle_bug+0x9c/0x200 [ 93.294516][ T5323] exc_invalid_op+0x1a/0x50 [ 93.296664][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 93.298857][ T5323] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 93.301697][ T5323] Code: 74 10 4c 89 e7 89 54 24 0c e8 3b 47 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 27 79 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.309934][ T5323] RSP: 0018:ffffc9000e4ff8a0 EFLAGS: 00010246 [ 93.312447][ T5323] RAX: ffffc9000e4ff800 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.315615][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e4ff908 [ 93.319665][ T5323] RBP: ffffc9000e4ff988 R08: ffffc9000e4ff907 R09: 0000000000000000 [ 93.323164][ T5323] R10: ffffc9000e4ff8e0 R11: fffff52001c9ff21 R12: 0000000000000000 [ 93.326620][ T5323] R13: 1ffff92001c9ff18 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.330366][ T5323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.334253][ T5323] ? __pfx_policy_nodemask+0x10/0x10 [ 93.337230][ T5323] ? kasan_save_track+0x4f/0x80 [ 93.339529][ T5323] ? kasan_save_track+0x3e/0x80 [ 93.342318][ T5323] ? kasan_save_free_info+0x46/0x50 [ 93.344834][ T5323] ? kfree+0x1c1/0x630 [ 93.346624][ T5323] ? tomoyo_path_number_perm+0x501/0x630 [ 93.349353][ T5323] ? security_file_ioctl+0xc3/0x2a0 [ 93.352544][ T5323] alloc_pages_mpol+0x232/0x4a0 [ 93.355427][ T5323] ___kmalloc_large_node+0x4e/0x150 [ 93.357906][ T5323] __kmalloc_large_node_noprof+0x18/0x90 [ 93.360415][ T5323] __kmalloc_noprof+0x3e8/0x760 [ 93.362590][ T5323] ? drm_syncobj_array_find+0x3a/0x440 [ 93.364978][ T5323] drm_syncobj_array_find+0x3a/0x440 [ 93.367423][ T5323] ? __lock_acquire+0x6b5/0x2cf0 [ 93.369601][ T5323] drm_syncobj_query_ioctl+0x1c3/0xb70 [ 93.372110][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.374798][ T5323] drm_ioctl_kernel+0x2df/0x3b0 [ 93.376979][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.379667][ T5323] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.382104][ T5323] drm_ioctl+0x6ba/0xb80 [ 93.383884][ T5323] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 93.387073][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 93.389204][ T5323] ? __fget_files+0x2a/0x420 [ 93.391391][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.393692][ T5323] ? __pfx_drm_ioctl+0x10/0x10 [ 93.396190][ T5323] __se_sys_ioctl+0xfc/0x170 [ 93.398367][ T5323] do_syscall_64+0x14d/0xf80 [ 93.400714][ T5323] ? trace_irq_disable+0x3b/0x150 [ 93.402864][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.405688][ T5323] ? clear_bhb_loop+0x40/0x90 [ 93.408374][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.412260][ T5323] RIP: 0033:0x7f314cb9c799 [ 93.414832][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.423120][ T5323] RSP: 002b:00007f314daf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.426497][ T5323] RAX: ffffffffffffffda RBX: 00007f314ce15fa0 RCX: 00007f314cb9c799 [ 93.430389][ T5323] RDX: 00002000000004c0 RSI: 00000000c01864cb RDI: 0000000000000004 [ 93.434923][ T5323] RBP: 00007f314cc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 93.438541][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.442428][ T5323] R13: 00007f314ce16038 R14: 00007f314ce15fa0 R15: 00007ffd50ecd768 [ 93.446108][ T5323] [ 93.448045][ T5323] Kernel Offset: disabled [ 93.450220][ T5323] Rebooting in 86400 seconds..