program: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000040)={0xcd, 0xd, &(0x7f0000000380)}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f00000001c0)=[r1, r1, r3], &(0x7f0000000080)=[0xffffffff], 0x3ffffffffffffd43}) [ 86.895574][ T10] cfg80211: failed to load regulatory.db [ 86.898842][ T5339] Bluetooth: hci0: command tx timeout [ 87.002561][ T5361] ------------[ cut here ]------------ [ 87.005573][ T5361] WARNING: CPU: 0 PID: 5361 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.010043][ T5361] Modules linked in: [ 87.012088][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.015832][ T5361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.020371][ T5361] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.023503][ T5361] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 5e 09 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 87.032346][ T5361] RSP: 0018:ffffc9000d3ff940 EFLAGS: 00010246 [ 87.035083][ T5361] RAX: ffffc9000d3ff900 RBX: 0000000000000016 RCX: 0000000000000000 [ 87.038889][ T5361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3ff9a8 [ 87.043015][ T5361] RBP: ffffc9000d3ffa40 R08: ffffc9000d3ff9a7 R09: 0000000000000000 [ 87.046279][ T5361] R10: ffffc9000d3ff980 R11: fffff52001a7ff35 R12: 0000000000000000 [ 87.049656][ T5361] R13: 1ffff92001a7ff2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 87.053395][ T5361] FS: 00007fb8939bc6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 87.057184][ T5361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.062070][ T5361] CR2: 00007fd5015b7a28 CR3: 00000000434fc000 CR4: 0000000000352ef0 [ 87.066648][ T5361] Call Trace: [ 87.068149][ T5361] [ 87.069458][ T5361] ? kasan_save_track+0x3e/0x80 [ 87.071421][ T5361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.074869][ T5361] ? security_file_ioctl+0xcb/0x2d0 [ 87.077506][ T5361] ? policy_nodemask+0x27c/0x720 [ 87.079595][ T5361] alloc_pages_mpol+0x232/0x4a0 [ 87.082129][ T5361] ___kmalloc_large_node+0x5f/0x1b0 [ 87.084389][ T5361] __kmalloc_large_node_noprof+0x18/0x90 [ 87.086966][ T5361] __kmalloc_noprof+0x36f/0x4f0 [ 87.089447][ T5361] ? drm_syncobj_array_find+0x3a/0x450 [ 87.092955][ T5361] drm_syncobj_array_find+0x3a/0x450 [ 87.095413][ T5361] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0 [ 87.098368][ T5361] ? drm_dev_exit+0x3a/0x60 [ 87.100403][ T5361] drm_ioctl_kernel+0x2cf/0x390 [ 87.102700][ T5361] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 87.105476][ T5361] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 87.107744][ T5361] drm_ioctl+0x67f/0xb10 [ 87.109562][ T5361] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 87.112627][ T5361] ? __pfx_drm_ioctl+0x10/0x10 [ 87.114849][ T5361] ? __fget_files+0x2a/0x420 [ 87.116992][ T5361] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.119295][ T5361] ? __pfx_drm_ioctl+0x10/0x10 [ 87.121554][ T5361] __se_sys_ioctl+0xfc/0x170 [ 87.123679][ T5361] do_syscall_64+0xfa/0x3b0 [ 87.125734][ T5361] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.128073][ T5361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.130875][ T5361] ? clear_bhb_loop+0x60/0xb0 [ 87.132985][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.135590][ T5361] RIP: 0033:0x7fb892b8ebe9 [ 87.137598][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.147165][ T5361] RSP: 002b:00007fb8939bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.151210][ T5361] RAX: ffffffffffffffda RBX: 00007fb892db5fa0 RCX: 00007fb892b8ebe9 [ 87.154747][ T5361] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 87.158111][ T5361] RBP: 00007fb892c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 87.161606][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.165011][ T5361] R13: 00007fb892db6038 R14: 00007fb892db5fa0 R15: 00007ffed002a428 [ 87.168493][ T5361] [ 87.170087][ T5361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.173599][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.177530][ T5361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.182086][ T5361] Call Trace: [ 87.183609][ T5361] [ 87.185182][ T5361] dump_stack_lvl+0x99/0x250 [ 87.187522][ T5361] ? __asan_memcpy+0x40/0x70 [ 87.189853][ T5361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.192282][ T5361] ? __pfx__printk+0x10/0x10 [ 87.194431][ T5361] vpanic+0x281/0x750 [ 87.196320][ T5361] ? __pfx__printk+0x10/0x10 [ 87.198373][ T5361] ? __pfx_vpanic+0x10/0x10 [ 87.200408][ T5361] ? is_bpf_text_address+0x26/0x2b0 [ 87.202734][ T5361] panic+0xb9/0xc0 [ 87.204512][ T5361] ? __pfx_panic+0x10/0x10 [ 87.206547][ T5361] __warn+0x31b/0x4b0 [ 87.208496][ T5361] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.211223][ T5361] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.213955][ T5361] report_bug+0x2be/0x4f0 [ 87.215925][ T5361] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.218384][ T5361] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.220911][ T5361] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 87.223608][ T5361] handle_bug+0x84/0x160 [ 87.225584][ T5361] exc_invalid_op+0x1a/0x50 [ 87.227811][ T5361] asm_exc_invalid_op+0x1a/0x20 [ 87.229900][ T5361] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 87.232602][ T5361] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 5e 09 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 87.240754][ T5361] RSP: 0018:ffffc9000d3ff940 EFLAGS: 00010246 [ 87.243524][ T5361] RAX: ffffc9000d3ff900 RBX: 0000000000000016 RCX: 0000000000000000 [ 87.247087][ T5361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3ff9a8 [ 87.250484][ T5361] RBP: ffffc9000d3ffa40 R08: ffffc9000d3ff9a7 R09: 0000000000000000 [ 87.253823][ T5361] R10: ffffc9000d3ff980 R11: fffff52001a7ff35 R12: 0000000000000000 [ 87.257307][ T5361] R13: 1ffff92001a7ff2c R14: 0000000000040cc0 R15: dffffc0000000000 [ 87.260909][ T5361] ? kasan_save_track+0x3e/0x80 [ 87.263092][ T5361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.265754][ T5361] ? security_file_ioctl+0xcb/0x2d0 [ 87.268019][ T5361] ? policy_nodemask+0x27c/0x720 [ 87.270228][ T5361] alloc_pages_mpol+0x232/0x4a0 [ 87.272379][ T5361] ___kmalloc_large_node+0x5f/0x1b0 [ 87.274832][ T5361] __kmalloc_large_node_noprof+0x18/0x90 [ 87.277377][ T5361] __kmalloc_noprof+0x36f/0x4f0 [ 87.279488][ T5361] ? drm_syncobj_array_find+0x3a/0x450 [ 87.281984][ T5361] drm_syncobj_array_find+0x3a/0x450 [ 87.284518][ T5361] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0 [ 87.287649][ T5361] ? drm_dev_exit+0x3a/0x60 [ 87.289819][ T5361] drm_ioctl_kernel+0x2cf/0x390 [ 87.291931][ T5361] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 87.294837][ T5361] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 87.297122][ T5361] drm_ioctl+0x67f/0xb10 [ 87.298973][ T5361] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 87.302157][ T5361] ? __pfx_drm_ioctl+0x10/0x10 [ 87.304453][ T5361] ? __fget_files+0x2a/0x420 [ 87.306656][ T5361] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.308811][ T5361] ? __pfx_drm_ioctl+0x10/0x10 [ 87.310837][ T5361] __se_sys_ioctl+0xfc/0x170 [ 87.312917][ T5361] do_syscall_64+0xfa/0x3b0 [ 87.314970][ T5361] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.317385][ T5361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.320054][ T5361] ? clear_bhb_loop+0x60/0xb0 [ 87.322216][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.324857][ T5361] RIP: 0033:0x7fb892b8ebe9 [ 87.326866][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.335326][ T5361] RSP: 002b:00007fb8939bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.339072][ T5361] RAX: ffffffffffffffda RBX: 00007fb892db5fa0 RCX: 00007fb892b8ebe9 [ 87.342559][ T5361] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 87.346509][ T5361] RBP: 00007fb892c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 87.350280][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.354006][ T5361] R13: 00007fb892db6038 R14: 00007fb892db5fa0 R15: 00007ffed002a428 [ 87.357599][ T5361] [ 87.359310][ T5361] Kernel Offset: disabled [ 87.361247][ T5361] Rebooting in 86400 seconds..