program: r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="4001b9000000b90b78752ca84f97c674823e94fa79f4c627b631af62d17325a545a03f1042fefb820e112a378bd90862f8df23629653421a8e76df303b8bbc22eda8aa952c8a1e67b84181aa9d124484ed70b21304880b9e4035cdfaf8eb82044c8d25dc7dc7bed3bcb77396dff0074887854d3ebf94035ad235fde4231372e8293615f2e033a89a6e15813d4af601c8930a4d65cc6971ae0c40bb738907d2e800a66e7314964df8a35720712de7807041776ec115b016ad51ebbc35303610"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="008172621400e39e30dea3fc"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x3, 0x0, 0x1ff, 0xc3a, 0x7, 0x6, 0x7, 0x8, 0x6, 0x3, 0x47f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r1, 0xc4c85513, 0x0) r2 = syz_mount_image$nilfs2(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x101042, 0x42) pwrite64(r3, &(0x7f0000001000)='/', 0x1, 0x2f70000) r4 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) write(r2, &(0x7f0000001480)="98c82c52a09a55fc801d87f401ac992743aa8e0141a9cceb0fa06daf8db89b0051d901c1afb915077d5d4c28db3afcd790dade915e8ca0ff2647a8fb7693f4d89f022ee6", 0x44) r5 = syz_open_dev$dri(&(0x7f0000001140), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000001180), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000001580)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000015c0)={0x0}) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000002880)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r9, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002900)=0x14) sendmsg$nl_route(r9, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000003240)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000003200)={&(0x7f0000002a00)={0x7f0, 0x0, 0x5, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x33}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x30, 0x4, 0x800}, {0x5, 0xec, 0x20, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xde2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1800000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}]}}]}, 0x7f0}}, 0x2000c040) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000001600)={&(0x7f0000001640)=[r7], 0x0, 0x100000000000004, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000001680)={&(0x7f00000016c0)=[r8], 0x3ffffcc8}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001980)={0x14, &(0x7f0000001800)={0x20, 0x22, 0x5e, {0x5e, 0x23, "f710c99f1431eb67e4d2f04a9e21e37491203e8789e6c17f8ae8683af4bf3a67160d9238eee00366110a7b38018b28f17b19331c0d110ed29b970d772f380eec37b363173998020a252bcb6f97ff72c33ef3e0e3a43f7e4d38d1dc11"}}, &(0x7f0000001880)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "af285021ea7dd619c9ae83cae5f1e1c77077a0edf9108905fd42e1ca83c49c09ddd12ef5975e72c4dd74a3b7f372abaf0d0adf57d880b7e5bdbab6ea3c14da097f117cfa400224eed2e75b5a8a6b10a4d496cd693b2e454c4d29f01b52d0cfbfcd97635d4d8f076c4c533ce30e7f8d3424f682eb71a031822fd38930ada28cec6e9da5a08f85f474731189e28345f70739186752044a05aa00823e47b6d9a70147ee4d15397a15df0351f9275ee4b1240cedaabd4882d2ba2a9b93bf0a109be12c7305f62e0d705386df687483c1958e3d3180ea4f4e47bcaa0726f9dfdcae7951e51163b7"}}}, &(0x7f0000001b80)={0x34, &(0x7f00000019c0)={0x40, 0x10, 0x73, "c4e80edadee843b561d39b5b1dd14f53fee82016c09118ff8cdf97f7c8dc11ac7e2e7b0b3baaaf8af706dddf9ea212f5044f553cb70cf03cea570595c22b7b0b745aeb58f94041dd0e8891af4e115380dcce191717d12cf82c7d3cc611ac3d69662e5297cb59f4f56d3b6ff8b4cfa3b36ccb93"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001ac0)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000001b00)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000001b40)={0xc0, 0xa2, 0x2f, "a0a6371d32883e6a9e6c4c4fe8f954328bdaca6e4ab6eef98418f34b9c4de7e23851c33d959780e10140453af0b955"}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000001700)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000001740)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f00000017c0)={&(0x7f0000001780)=[r8, 0x0, r11, r12], 0x3, 0x4, 0x5}) syz_usb_control_io$rtl8150(r4, &(0x7f0000001200)={0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="00077200000072301dc45239f441594f5a5712d6f18d00cd8ee7f6c477c1e4066416a63b72cbaf2959cb829fd8a0fe54779964679c5c13c29100ba34620def951fc5dcf3a636ac2a9b96ee7c574c3111e50e5fc00116b7c5cc11e921e52ce2f70426e300a00fccbf40d93519e1ade033d224c37cbfdf00000000"], &(0x7f00000011c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001240)=ANY=[@ANYBLOB="2001d5000000be07af56c88f8f16e7c6d8ed4a075781d91978317d751730f7fa28efdbdd69c7c9f7f9430dcdc2dda39a4813826143f35a137ea626b2172b4c6daa8a1fa55ee0b64d086ae78a8f732b877c14ca4a26069c7d83cebea8e5a1538ca5e1b4da7bfb79de4867256e50e5ff6e54bbc17bfd775031557317228f0fded64f1a755ba208475686826635cc2116e593a80096ad7f4ee9b70bc0db37752aee3f4cfc0f23c6f91a010dafc893fc25a5e5528fe1747f0b4899077ae8daa709c45a93c482c8da5906cdd11cae1ac0b3fc84967ca319105dd0"], &(0x7f0000001340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000013c0)={0xc0, 0x5, 0x1, "03"}, &(0x7f0000001c00)=ANY=[@ANYBLOB="70ea4b77be15ba0f4e01c69ed67a434039150d06a452ea"]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r13 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x101242, 0x21) writev(r13, &(0x7f0000001080)=[{&(0x7f00000010c0)='\v', 0x1}], 0x1) r14 = syz_open_dev$usbfs(&(0x7f0000000440), 0x6, 0x50502) ioctl$USBDEVFS_CLAIMINTERFACE(r14, 0x8004550f, &(0x7f0000000480)=0x4c) [ 93.578331][ T4646] Bluetooth: hci0: command tx timeout [ 93.593698][ T10] cfg80211: failed to load regulatory.db [ 93.937760][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.088969][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 94.090874][ T10] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 94.090892][ T10] usb 5-1: config 1 has no interface number 0 [ 94.093476][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.093490][ T10] usb 5-1: Product: syz [ 94.093497][ T10] usb 5-1: Manufacturer: syz [ 94.093504][ T10] usb 5-1: SerialNumber: syz [ 94.161032][ T10] usb 5-1: 3:1 : does not exist [ 94.161048][ T10] usb 5-1: 3:2 : does not exist [ 94.744850][ T5318] loop0: detected capacity change from 0 to 2048 [ 94.811205][ T5318] NILFS (loop0): invalid segment: Magic number mismatch [ 94.811226][ T5318] NILFS (loop0): trying rollback from an earlier position [ 94.863249][ T5318] NILFS (loop0): recovery complete [ 94.883148][ T5325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.020104][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.020433][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.087777][ T5328] ------------[ cut here ]------------ [ 95.087790][ T5328] 1 [ 95.087794][ T5328] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5328 [ 95.095208][ T5328] Modules linked in: [ 95.097544][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.101066][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.105334][ T5328] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.108146][ T5328] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 e6 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 1f 53 0f 67 48 0f b9 3a e9 68 [ 95.115130][ T5328] RSP: 0018:ffffc9000f7cf920 EFLAGS: 00010246 [ 95.117603][ T5328] RAX: ffffc9000f7cf900 RBX: 1ffff92001ef9f28 RCX: 0000000000000000 [ 95.120632][ T5328] RDX: 0000000000000000 RSI: 0000000000000014 RDI: ffffc9000f7cf988 [ 95.123664][ T5328] RBP: ffffc9000f7cfa10 R08: ffffc9000f7cf987 R09: 0000000000000000 [ 95.126671][ T5328] R10: ffffc9000f7cf960 R11: fffff52001ef9f31 R12: 0000000000000000 [ 95.129649][ T5328] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000 [ 95.132574][ T5328] FS: 00007f7345dc96c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 95.135756][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.138252][ T5328] CR2: 0000200000003240 CR3: 0000000013808000 CR4: 0000000000352ef0 [ 95.140944][ T5328] Call Trace: [ 95.142082][ T5328] [ 95.143097][ T5328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 95.145175][ T5328] ? __pfx_policy_nodemask+0x10/0x10 [ 95.146922][ T5328] alloc_pages_mpol+0x21e/0x390 [ 95.148820][ T5328] ? drm_syncobj_array_find+0x3a/0x440 [ 95.159482][ T5328] ___kmalloc_large_node+0x4f/0x120 [ 95.161450][ T5328] __kmalloc_large_node_noprof+0x18/0x90 [ 95.163521][ T5328] __kmalloc_noprof+0x3fb/0x720 [ 95.165665][ T5328] ? drm_syncobj_array_find+0x3a/0x440 [ 95.167768][ T5328] ? lock_acquire+0x115/0x350 [ 95.169435][ T5328] drm_syncobj_array_find+0x3a/0x440 [ 95.171583][ T5328] drm_syncobj_signal_ioctl+0x179/0x570 [ 95.173839][ T5328] ? drm_dev_exit+0x3a/0x60 [ 95.175728][ T5328] drm_ioctl_kernel+0x2df/0x3b0 [ 95.178309][ T5328] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 95.180578][ T5328] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 95.182576][ T5328] drm_ioctl+0x70e/0xba0 [ 95.184190][ T5328] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 95.186580][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 95.188603][ T5328] ? __fget_files+0x2a/0x420 [ 95.190633][ T5328] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.192550][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 95.194451][ T5328] __se_sys_ioctl+0xfc/0x170 [ 95.196307][ T5328] do_syscall_64+0x166/0x520 [ 95.199819][ T5328] ? trace_irq_disable+0x3b/0x140 [ 95.201944][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.208151][ T5328] ? clear_bhb_loop+0x70/0xc0 [ 95.210170][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.212481][ T5328] RIP: 0033:0x7f7344f9e1d9 [ 95.214234][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.223358][ T5328] RSP: 002b:00007f7345dc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.227170][ T5328] RAX: ffffffffffffffda RBX: 00007f7345226180 RCX: 00007f7344f9e1d9 [ 95.230871][ T5328] RDX: 0000200000001680 RSI: 00000000c01064c5 RDI: 0000000000000008 [ 95.234549][ T5328] RBP: 00007f7345035888 R08: 0000000000000000 R09: 0000000000000000 [ 95.238211][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.241687][ T5328] R13: 00007f7345226218 R14: 00007f7345226180 R15: 00007ffe3a32cbb8 [ 95.245314][ T5328] [ 95.246803][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.250922][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.254819][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.259199][ T5328] Call Trace: [ 95.260761][ T5328] [ 95.262116][ T5328] vpanic+0x56d/0xa60 [ 95.263973][ T5328] ? __pfx__printk+0x10/0x10 [ 95.266044][ T5328] ? __pfx_vpanic+0x10/0x10 [ 95.268105][ T5328] ? is_bpf_text_address+0x292/0x2b0 [ 95.270589][ T5328] ? is_bpf_text_address+0x26/0x2b0 [ 95.273003][ T5328] panic+0xc5/0xd0 [ 95.274745][ T5328] ? __pfx_panic+0x10/0x10 [ 95.276812][ T5328] __warn+0x315/0x4c0 [ 95.278658][ T5328] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.281311][ T5328] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.283930][ T5328] __report_bug+0x276/0x570 [ 95.285884][ T5328] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.288454][ T5328] ? __pfx___report_bug+0x10/0x10 [ 95.290636][ T5328] ? is_bpf_text_address+0x292/0x2b0 [ 95.293016][ T5328] ? is_bpf_text_address+0x26/0x2b0 [ 95.295297][ T5328] ? kernel_text_address+0xa5/0xe0 [ 95.297202][ T5328] ? __kernel_text_address+0xd/0x30 [ 95.299216][ T5328] ? unwind_get_return_address+0x4d/0x90 [ 95.301355][ T5328] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.303633][ T5328] report_bug+0x16b/0x220 [ 95.305320][ T5328] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.307762][ T5328] ? __alloc_frozen_pages_noprof+0x427/0x5a0 [ 95.310169][ T5328] handle_bug+0x9c/0x200 [ 95.312257][ T5328] exc_invalid_op+0x1a/0x50 [ 95.314646][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 95.316749][ T5328] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 95.318913][ T5328] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 e6 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 1f 53 0f 67 48 0f b9 3a e9 68 [ 95.326125][ T5328] RSP: 0018:ffffc9000f7cf920 EFLAGS: 00010246 [ 95.328748][ T5328] RAX: ffffc9000f7cf900 RBX: 1ffff92001ef9f28 RCX: 0000000000000000 [ 95.332354][ T5328] RDX: 0000000000000000 RSI: 0000000000000014 RDI: ffffc9000f7cf988 [ 95.336475][ T5328] RBP: ffffc9000f7cfa10 R08: ffffc9000f7cf987 R09: 0000000000000000 [ 95.340157][ T5328] R10: ffffc9000f7cf960 R11: fffff52001ef9f31 R12: 0000000000000000 [ 95.344059][ T5328] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000 [ 95.347514][ T5328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 95.350198][ T5328] ? __pfx_policy_nodemask+0x10/0x10 [ 95.352476][ T5328] alloc_pages_mpol+0x21e/0x390 [ 95.354443][ T5328] ? drm_syncobj_array_find+0x3a/0x440 [ 95.356660][ T5328] ___kmalloc_large_node+0x4f/0x120 [ 95.358688][ T5328] __kmalloc_large_node_noprof+0x18/0x90 [ 95.360873][ T5328] __kmalloc_noprof+0x3fb/0x720 [ 95.362818][ T5328] ? drm_syncobj_array_find+0x3a/0x440 [ 95.365075][ T5328] ? lock_acquire+0x115/0x350 [ 95.367049][ T5328] drm_syncobj_array_find+0x3a/0x440 [ 95.369289][ T5328] drm_syncobj_signal_ioctl+0x179/0x570 [ 95.371394][ T5328] ? drm_dev_exit+0x3a/0x60 [ 95.373280][ T5328] drm_ioctl_kernel+0x2df/0x3b0 [ 95.375289][ T5328] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 95.377874][ T5328] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 95.380161][ T5328] drm_ioctl+0x70e/0xba0 [ 95.382019][ T5328] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 95.384660][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 95.386720][ T5328] ? __fget_files+0x2a/0x420 [ 95.388302][ T5328] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.389998][ T5328] ? __pfx_drm_ioctl+0x10/0x10 [ 95.391731][ T5328] __se_sys_ioctl+0xfc/0x170 [ 95.393412][ T5328] do_syscall_64+0x166/0x520 [ 95.395044][ T5328] ? trace_irq_disable+0x3b/0x140 [ 95.396930][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.399591][ T5328] ? clear_bhb_loop+0x70/0xc0 [ 95.401587][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.404206][ T5328] RIP: 0033:0x7f7344f9e1d9 [ 95.406206][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.414538][ T5328] RSP: 002b:00007f7345dc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.418182][ T5328] RAX: ffffffffffffffda RBX: 00007f7345226180 RCX: 00007f7344f9e1d9 [ 95.421613][ T5328] RDX: 0000200000001680 RSI: 00000000c01064c5 RDI: 0000000000000008 [ 95.425060][ T5328] RBP: 00007f7345035888 R08: 0000000000000000 R09: 0000000000000000 [ 95.428547][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.432107][ T5328] R13: 00007f7345226218 R14: 00007f7345226180 R15: 00007ffe3a32cbb8 [ 95.435590][ T5328] [ 95.437409][ T5328] Kernel Offset: disabled [ 95.439369][ T5328] Rebooting in 86400 seconds..