program: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000080)={&(0x7f00000000c0)=[r1, r1], 0x355bc629201c415b}) [ 71.232483][ T48] Bluetooth: hci0: command tx timeout [ 71.336148][ T5316] ------------[ cut here ]------------ [ 71.338135][ T5316] WARNING: CPU: 0 PID: 5316 at mm/page_alloc.c:4727 __alloc_pages_noprof+0x3c5/0x710 [ 71.341820][ T5316] Modules linked in: [ 71.343211][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller #0 [ 71.345983][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.349850][ T5316] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710 [ 71.352676][ T5316] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 57 b1 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e [ 71.359678][ T5316] RSP: 0018:ffffc9000d247920 EFLAGS: 00010246 [ 71.362183][ T5316] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 71.364845][ T5316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d2479a8 [ 71.367704][ T5316] RBP: ffffc9000d247a38 R08: ffffc9000d2479a7 R09: 0000000000000000 [ 71.370659][ T5316] R10: ffffc9000d247980 R11: fffff52001a48f35 R12: 0000000000000014 [ 71.373750][ T5316] R13: 0000000000040cc0 R14: 1ffff92001a48f2c R15: 1ffff92001a48f28 [ 71.376714][ T5316] FS: 00007fb6c336c6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.379947][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.382563][ T5316] CR2: 00007fb6c2762fa0 CR3: 000000004208e000 CR4: 0000000000352ef0 [ 71.385872][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.389010][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.392077][ T5316] Call Trace: [ 71.393376][ T5316] [ 71.394510][ T5316] ? __warn+0x165/0x4d0 [ 71.396188][ T5316] ? __alloc_pages_noprof+0x3c5/0x710 [ 71.398301][ T5316] ? report_bug+0x2b3/0x500 [ 71.400078][ T5316] ? __alloc_pages_noprof+0x3c5/0x710 [ 71.402270][ T5316] ? handle_bug+0x60/0x90 [ 71.403972][ T5316] ? exc_invalid_op+0x1a/0x50 [ 71.405881][ T5316] ? asm_exc_invalid_op+0x1a/0x20 [ 71.408004][ T5316] ? __alloc_pages_noprof+0x3c5/0x710 [ 71.410083][ T5316] ? kasan_save_track+0x3f/0x80 [ 71.412077][ T5316] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.414144][ T5316] ? __lock_acquire+0x1397/0x2100 [ 71.416066][ T5316] ___kmalloc_large_node+0x8b/0x1d0 [ 71.418125][ T5316] __kmalloc_large_node_noprof+0x1a/0x80 [ 71.420185][ T5316] __kmalloc_noprof+0x339/0x4c0 [ 71.422257][ T5316] ? drm_syncobj_array_find+0x3a/0x460 [ 71.424382][ T5316] drm_syncobj_array_find+0x3a/0x460 [ 71.426342][ T5316] ? drm_dev_exit+0x3a/0x60 [ 71.427998][ T5316] drm_syncobj_reset_ioctl+0x1e9/0x3b0 [ 71.430007][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.432440][ T5316] ? drm_dev_enter+0x48/0x160 [ 71.434370][ T5316] drm_ioctl_kernel+0x337/0x440 [ 71.436249][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.438418][ T5316] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 71.440494][ T5316] ? __might_fault+0xc6/0x120 [ 71.443373][ T5316] drm_ioctl+0x60e/0xad0 [ 71.444903][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.447566][ T5316] ? __pfx_drm_ioctl+0x10/0x10 [ 71.449464][ T5316] ? __fget_files+0x2a/0x410 [ 71.451579][ T5316] ? __pfx_drm_ioctl+0x10/0x10 [ 71.453471][ T5316] __se_sys_ioctl+0xf5/0x170 [ 71.455346][ T5316] do_syscall_64+0xf3/0x230 [ 71.457180][ T5316] ? clear_bhb_loop+0x35/0x90 [ 71.458871][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.461062][ T5316] RIP: 0033:0x7fb6c2585d19 [ 71.462889][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.470307][ T5316] RSP: 002b:00007fb6c336c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.473625][ T5316] RAX: ffffffffffffffda RBX: 00007fb6c2775fa0 RCX: 00007fb6c2585d19 [ 71.476656][ T5316] RDX: 0000000020000080 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 71.479599][ T5316] RBP: 00007fb6c2601a20 R08: 0000000000000000 R09: 0000000000000000 [ 71.482656][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.485676][ T5316] R13: 0000000000000000 R14: 00007fb6c2775fa0 R15: 00007fffd2b9b238 [ 71.488673][ T5316] [ 71.489874][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.492914][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller #0 [ 71.496138][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.500089][ T5316] Call Trace: [ 71.501365][ T5316] [ 71.502471][ T5316] dump_stack_lvl+0x241/0x360 [ 71.504311][ T5316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.506415][ T5316] ? __pfx__printk+0x10/0x10 [ 71.508381][ T5316] ? _printk+0xd5/0x120 [ 71.510080][ T5316] ? __init_begin+0x41000/0x41000 [ 71.511937][ T5316] ? vscnprintf+0x5d/0x90 [ 71.513543][ T5316] panic+0x349/0x880 [ 71.515065][ T5316] ? __warn+0x174/0x4d0 [ 71.516570][ T5316] ? __pfx_panic+0x10/0x10 [ 71.518281][ T5316] __warn+0x344/0x4d0 [ 71.519755][ T5316] ? __alloc_pages_noprof+0x3c5/0x710 [ 71.521846][ T5316] report_bug+0x2b3/0x500 [ 71.523659][ T5316] ? __alloc_pages_noprof+0x3c5/0x710 [ 71.525710][ T5316] handle_bug+0x60/0x90 [ 71.527378][ T5316] exc_invalid_op+0x1a/0x50 [ 71.529170][ T5316] asm_exc_invalid_op+0x1a/0x20 [ 71.531056][ T5316] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710 [ 71.533444][ T5316] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 57 b1 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e [ 71.540861][ T5316] RSP: 0018:ffffc9000d247920 EFLAGS: 00010246 [ 71.543050][ T5316] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 71.545810][ T5316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d2479a8 [ 71.548869][ T5316] RBP: ffffc9000d247a38 R08: ffffc9000d2479a7 R09: 0000000000000000 [ 71.551966][ T5316] R10: ffffc9000d247980 R11: fffff52001a48f35 R12: 0000000000000014 [ 71.554906][ T5316] R13: 0000000000040cc0 R14: 1ffff92001a48f2c R15: 1ffff92001a48f28 [ 71.557926][ T5316] ? kasan_save_track+0x3f/0x80 [ 71.559647][ T5316] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.561852][ T5316] ? __lock_acquire+0x1397/0x2100 [ 71.563768][ T5316] ___kmalloc_large_node+0x8b/0x1d0 [ 71.565738][ T5316] __kmalloc_large_node_noprof+0x1a/0x80 [ 71.567884][ T5316] __kmalloc_noprof+0x339/0x4c0 [ 71.569667][ T5316] ? drm_syncobj_array_find+0x3a/0x460 [ 71.571837][ T5316] drm_syncobj_array_find+0x3a/0x460 [ 71.573964][ T5316] ? drm_dev_exit+0x3a/0x60 [ 71.575822][ T5316] drm_syncobj_reset_ioctl+0x1e9/0x3b0 [ 71.577808][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.580065][ T5316] ? drm_dev_enter+0x48/0x160 [ 71.581877][ T5316] drm_ioctl_kernel+0x337/0x440 [ 71.583802][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.586110][ T5316] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 71.588208][ T5316] ? __might_fault+0xc6/0x120 [ 71.589957][ T5316] drm_ioctl+0x60e/0xad0 [ 71.591609][ T5316] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 71.593881][ T5316] ? __pfx_drm_ioctl+0x10/0x10 [ 71.595699][ T5316] ? __fget_files+0x2a/0x410 [ 71.597681][ T5316] ? __pfx_drm_ioctl+0x10/0x10 [ 71.599761][ T5316] __se_sys_ioctl+0xf5/0x170 [ 71.601684][ T5316] do_syscall_64+0xf3/0x230 [ 71.603524][ T5316] ? clear_bhb_loop+0x35/0x90 [ 71.605487][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.607785][ T5316] RIP: 0033:0x7fb6c2585d19 [ 71.609365][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.616661][ T5316] RSP: 002b:00007fb6c336c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.619400][ T5316] RAX: ffffffffffffffda RBX: 00007fb6c2775fa0 RCX: 00007fb6c2585d19 [ 71.622550][ T5316] RDX: 0000000020000080 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 71.625468][ T5316] RBP: 00007fb6c2601a20 R08: 0000000000000000 R09: 0000000000000000 [ 71.628572][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.631541][ T5316] R13: 0000000000000000 R14: 00007fb6c2775fa0 R15: 00007fffd2b9b238 [ 71.634416][ T5316] [ 71.635917][ T5316] Kernel Offset: disabled [ 71.637527][ T5316] Rebooting in 86400 seconds..