program:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0xfffd, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet(0x2, 0x3, 0x6) (async)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x0, {0x2, 0x4e23, @multicast1}}) (async)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x0, {0x2, 0x4e23, @multicast1}})
truncate(&(0x7f0000000000)='./file2\x00', 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f00000001c0)={0x0})
[ 79.047029][ T4648] Bluetooth: hci0: command tx timeout
[ 79.226072][ T5318] ------------[ cut here ]------------
[ 79.226080][ T5318] 1
[ 79.226091][ T5318] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5318
[ 79.233799][ T5318] Modules linked in:
[ 79.235445][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.239276][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.243581][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.246285][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 4c 98 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 4c 0a 54 0e 67 48 0f b9 3a e9 68
[ 79.254852][ T5318] RSP: 0018:ffffc9000de1f920 EFLAGS: 00010246
[ 79.257509][ T5318] RAX: ffffc9000de1f900 RBX: 1ffff92001bc3f28 RCX: 0000000000000000
[ 79.260826][ T5318] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffc9000de1f988
[ 79.263991][ T5318] RBP: ffffc9000de1fa20 R08: ffffc9000de1f987 R09: 0000000000000000
[ 79.267325][ T5318] R10: ffffc9000de1f960 R11: fffff52001bc3f31 R12: 0000000000000000
[ 79.270573][ T5318] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000
[ 79.274060][ T5318] FS: 00007f56989a36c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 79.277718][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.280566][ T5318] CR2: 00002000000001cc CR3: 0000000012903000 CR4: 0000000000352ef0
[ 79.283794][ T5318] Call Trace:
[ 79.285290][ T5318]
[ 79.286547][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 79.289394][ T5318] ? __pfx_policy_nodemask+0x10/0x10
[ 79.291724][ T5318] alloc_pages_mpol+0x21e/0x390
[ 79.293861][ T5318] ? drm_syncobj_array_find+0x3a/0x440
[ 79.296484][ T5318] ___kmalloc_large_node+0x4f/0x120
[ 79.298633][ T5318] __kmalloc_large_node_noprof+0x18/0x90
[ 79.301221][ T5318] __kmalloc_noprof+0x3fb/0x720
[ 79.303307][ T5318] ? drm_syncobj_array_find+0x3a/0x440
[ 79.305674][ T5318] drm_syncobj_array_find+0x3a/0x440
[ 79.308035][ T5318] drm_syncobj_reset_ioctl+0x17b/0x450
[ 79.310530][ T5318] drm_ioctl_kernel+0x2df/0x3b0
[ 79.312578][ T5318] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 79.315061][ T5318] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 79.317412][ T5318] drm_ioctl+0x70e/0xba0
[ 79.319379][ T5318] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 79.321950][ T5318] ? __pfx_drm_ioctl+0x10/0x10
[ 79.324012][ T5318] ? __fget_files+0x2a/0x420
[ 79.325884][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.327906][ T5318] ? __pfx_drm_ioctl+0x10/0x10
[ 79.329881][ T5318] __se_sys_ioctl+0xfc/0x170
[ 79.331847][ T5318] do_syscall_64+0x166/0x520
[ 79.333786][ T5318] ? trace_irq_disable+0x3b/0x140
[ 79.336049][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.338614][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 79.340636][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.343040][ T5318] RIP: 0033:0x7f5697b9e159
[ 79.344870][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.352635][ T5318] RSP: 002b:00007f56989a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.356141][ T5318] RAX: ffffffffffffffda RBX: 00007f5697e26090 RCX: 00007f5697b9e159
[ 79.359627][ T5318] RDX: 00002000000001c0 RSI: 00000000c01064c4 RDI: 0000000000000003
[ 79.363145][ T5318] RBP: 00007f5697c3506b R08: 0000000000000000 R09: 0000000000000000
[ 79.366331][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.369755][ T5318] R13: 00007f5697e26128 R14: 00007f5697e26090 R15: 00007ffddea60758
[ 79.373051][ T5318]
[ 79.374382][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.377621][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 79.381389][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.385744][ T5318] Call Trace:
[ 79.387151][ T5318]
[ 79.388427][ T5318] vpanic+0x56d/0xa60
[ 79.390156][ T5318] ? __pfx__printk+0x10/0x10
[ 79.392023][ T5318] ? __pfx_vpanic+0x10/0x10
[ 79.393942][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 79.396191][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 79.398295][ T5318] panic+0xc5/0xd0
[ 79.399821][ T5318] ? __pfx_panic+0x10/0x10
[ 79.401647][ T5318] __warn+0x315/0x4c0
[ 79.403205][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.405650][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.408192][ T5318] __report_bug+0x276/0x570
[ 79.410136][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.412620][ T5318] ? __pfx___report_bug+0x10/0x10
[ 79.414665][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 79.416874][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 79.419069][ T5318] ? kernel_text_address+0xa5/0xe0
[ 79.421186][ T5318] ? __kernel_text_address+0xd/0x30
[ 79.423320][ T5318] ? unwind_get_return_address+0x4d/0x90
[ 79.425565][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.428201][ T5318] report_bug+0x16b/0x220
[ 79.430342][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.432916][ T5318] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 79.435598][ T5318] handle_bug+0x9c/0x200
[ 79.437435][ T5318] exc_invalid_op+0x1a/0x50
[ 79.439393][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 79.441734][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 79.444781][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 4c 98 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 4c 0a 54 0e 67 48 0f b9 3a e9 68
[ 79.453834][ T5318] RSP: 0018:ffffc9000de1f920 EFLAGS: 00010246
[ 79.456321][ T5318] RAX: ffffc9000de1f900 RBX: 1ffff92001bc3f28 RCX: 0000000000000000
[ 79.459515][ T5318] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffc9000de1f988
[ 79.462770][ T5318] RBP: ffffc9000de1fa20 R08: ffffc9000de1f987 R09: 0000000000000000
[ 79.466018][ T5318] R10: ffffc9000de1f960 R11: fffff52001bc3f31 R12: 0000000000000000
[ 79.469221][ T5318] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000000
[ 79.472384][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 79.474976][ T5318] ? __pfx_policy_nodemask+0x10/0x10
[ 79.477125][ T5318] alloc_pages_mpol+0x21e/0x390
[ 79.478814][ T5318] ? drm_syncobj_array_find+0x3a/0x440
[ 79.480986][ T5318] ___kmalloc_large_node+0x4f/0x120
[ 79.483030][ T5318] __kmalloc_large_node_noprof+0x18/0x90
[ 79.485370][ T5318] __kmalloc_noprof+0x3fb/0x720
[ 79.487290][ T5318] ? drm_syncobj_array_find+0x3a/0x440
[ 79.489430][ T5318] drm_syncobj_array_find+0x3a/0x440
[ 79.491372][ T5318] drm_syncobj_reset_ioctl+0x17b/0x450
[ 79.493465][ T5318] drm_ioctl_kernel+0x2df/0x3b0
[ 79.495404][ T5318] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 79.497885][ T5318] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 79.500457][ T5318] drm_ioctl+0x70e/0xba0
[ 79.502532][ T5318] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 79.505160][ T5318] ? __pfx_drm_ioctl+0x10/0x10
[ 79.507155][ T5318] ? __fget_files+0x2a/0x420
[ 79.509097][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 79.511172][ T5318] ? __pfx_drm_ioctl+0x10/0x10
[ 79.513171][ T5318] __se_sys_ioctl+0xfc/0x170
[ 79.515007][ T5318] do_syscall_64+0x166/0x520
[ 79.516844][ T5318] ? trace_irq_disable+0x3b/0x140
[ 79.518824][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.521238][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 79.523113][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.525438][ T5318] RIP: 0033:0x7f5697b9e159
[ 79.526962][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.533857][ T5318] RSP: 002b:00007f56989a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 79.537135][ T5318] RAX: ffffffffffffffda RBX: 00007f5697e26090 RCX: 00007f5697b9e159
[ 79.540475][ T5318] RDX: 00002000000001c0 RSI: 00000000c01064c4 RDI: 0000000000000003
[ 79.543824][ T5318] RBP: 00007f5697c3506b R08: 0000000000000000 R09: 0000000000000000
[ 79.547111][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.550134][ T5318] R13: 00007f5697e26128 R14: 00007f5697e26090 R15: 00007ffddea60758
[ 79.553298][ T5318]
[ 79.555644][ T5318] Kernel Offset: disabled
[ 79.557246][ T5318] Rebooting in 86400 seconds..