program: syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505", @ANYRESDEC], 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x5}, 0x1, 0x20, 0x0, 0x0, 0x2, 0x1, 0x2, 0x7e07, 0x5, 0x0}) [ 85.340611][ T5324] ------------[ cut here ]------------ [ 85.342918][ T5324] 1 [ 85.342927][ T5324] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5324 [ 85.349192][ T5324] Modules linked in: [ 85.351658][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.356214][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.361501][ T5324] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.364589][ T5324] Code: 74 10 4c 89 e7 89 54 24 0c e8 8b 4b 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 32 95 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 85.378503][ T5324] RSP: 0018:ffffc9000e3df920 EFLAGS: 00010246 [ 85.384352][ T5324] RAX: ffffc9000e3df900 RBX: 0000000000000014 RCX: 0000000000000000 [ 85.390631][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e3df988 [ 85.394741][ T5324] RBP: ffffc9000e3dfa18 R08: ffffc9000e3df987 R09: 0000000000000000 [ 85.398578][ T5324] R10: ffffc9000e3df960 R11: fffff52001c7bf31 R12: 0000000000000000 [ 85.402416][ T5324] R13: 1ffff92001c7bf28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 85.406370][ T5324] FS: 00007fc70f8496c0(0000) GS:ffff88808ca4c000(0000) knlGS:0000000000000000 [ 85.410841][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.414024][ T5324] CR2: 00007fc70f827fe8 CR3: 0000000044885000 CR4: 0000000000352ef0 [ 85.418028][ T5324] Call Trace: [ 85.419677][ T5324] [ 85.421318][ T5324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.424261][ T5324] ? __pfx_policy_nodemask+0x10/0x10 [ 85.427034][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 85.429666][ T5324] ___kmalloc_large_node+0x4e/0x150 [ 85.432723][ T5324] __kmalloc_large_node_noprof+0x18/0x90 [ 85.435486][ T5324] __kmalloc_noprof+0x3e8/0x760 [ 85.438008][ T5324] ? drm_syncobj_array_find+0x3a/0x440 [ 85.440455][ T5324] drm_syncobj_array_find+0x3a/0x440 [ 85.442979][ T5324] drm_syncobj_timeline_signal_ioctl+0x165/0x8a0 [ 85.446543][ T5324] ? drm_dev_exit+0x3a/0x60 [ 85.448875][ T5324] drm_ioctl_kernel+0x2df/0x3b0 [ 85.450978][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 85.453998][ T5324] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 85.456374][ T5324] drm_ioctl+0x6ba/0xb80 [ 85.458898][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 85.462936][ T5324] ? __pfx_drm_ioctl+0x10/0x10 [ 85.465198][ T5324] ? __fget_files+0x2a/0x420 [ 85.467336][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.469598][ T5324] ? __pfx_drm_ioctl+0x10/0x10 [ 85.471919][ T5324] __se_sys_ioctl+0xfc/0x170 [ 85.473893][ T5324] do_syscall_64+0x14d/0xf80 [ 85.475959][ T5324] ? trace_irq_disable+0x3b/0x150 [ 85.478525][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.481299][ T5324] ? clear_bhb_loop+0x40/0x90 [ 85.483207][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.486069][ T5324] RIP: 0033:0x7fc70e99c819 [ 85.489002][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.497367][ T5324] RSP: 002b:00007fc70f848fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.500516][ T5324] RAX: ffffffffffffffda RBX: 00007fc70ec16090 RCX: 00007fc70e99c819 [ 85.503598][ T5324] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000004 [ 85.507011][ T5324] RBP: 00007fc70ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 85.510086][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.513292][ T5324] R13: 00007fc70ec16128 R14: 00007fc70ec16090 R15: 00007ffd099513a8 [ 85.516609][ T5324] [ 85.518040][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.520865][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.524472][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.529056][ T5324] Call Trace: [ 85.530780][ T5324] [ 85.532048][ T5324] vpanic+0x56c/0xa60 [ 85.533720][ T5324] ? __pfx__printk+0x10/0x10 [ 85.535973][ T5324] ? __pfx_vpanic+0x10/0x10 [ 85.537808][ T5324] ? is_bpf_text_address+0x292/0x2b0 [ 85.540110][ T5324] ? is_bpf_text_address+0x26/0x2b0 [ 85.542474][ T5324] panic+0xc5/0xd0 [ 85.544470][ T5324] ? __pfx_panic+0x10/0x10 [ 85.546611][ T5324] __warn+0x315/0x4f0 [ 85.548210][ T5324] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.550536][ T5324] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.552900][ T5324] __report_bug+0x29a/0x540 [ 85.554737][ T5324] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.557292][ T5324] ? __pfx___report_bug+0x10/0x10 [ 85.559709][ T5324] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.562182][ T5324] ? irqentry_exit+0x59e/0x620 [ 85.564036][ T5324] ? trace_irq_disable+0x3b/0x150 [ 85.566043][ T5324] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 85.568476][ T5324] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.571394][ T5324] report_bug+0x16a/0x220 [ 85.573487][ T5324] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.575913][ T5324] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 85.578246][ T5324] handle_bug+0x9c/0x200 [ 85.580091][ T5324] exc_invalid_op+0x1a/0x50 [ 85.581971][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 85.583969][ T5324] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 85.586999][ T5324] Code: 74 10 4c 89 e7 89 54 24 0c e8 8b 4b 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 32 95 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 85.594654][ T5324] RSP: 0018:ffffc9000e3df920 EFLAGS: 00010246 [ 85.597002][ T5324] RAX: ffffc9000e3df900 RBX: 0000000000000014 RCX: 0000000000000000 [ 85.599793][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e3df988 [ 85.603024][ T5324] RBP: ffffc9000e3dfa18 R08: ffffc9000e3df987 R09: 0000000000000000 [ 85.606509][ T5324] R10: ffffc9000e3df960 R11: fffff52001c7bf31 R12: 0000000000000000 [ 85.609794][ T5324] R13: 1ffff92001c7bf28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 85.612819][ T5324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.615820][ T5324] ? __pfx_policy_nodemask+0x10/0x10 [ 85.618215][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 85.620186][ T5324] ___kmalloc_large_node+0x4e/0x150 [ 85.622210][ T5324] __kmalloc_large_node_noprof+0x18/0x90 [ 85.624382][ T5324] __kmalloc_noprof+0x3e8/0x760 [ 85.626523][ T5324] ? drm_syncobj_array_find+0x3a/0x440 [ 85.629560][ T5324] drm_syncobj_array_find+0x3a/0x440 [ 85.631930][ T5324] drm_syncobj_timeline_signal_ioctl+0x165/0x8a0 [ 85.634309][ T5324] ? drm_dev_exit+0x3a/0x60 [ 85.636077][ T5324] drm_ioctl_kernel+0x2df/0x3b0 [ 85.637993][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 85.640760][ T5324] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 85.643498][ T5324] drm_ioctl+0x6ba/0xb80 [ 85.645502][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 85.648769][ T5324] ? __pfx_drm_ioctl+0x10/0x10 [ 85.650618][ T5324] ? __fget_files+0x2a/0x420 [ 85.652364][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.654491][ T5324] ? __pfx_drm_ioctl+0x10/0x10 [ 85.656645][ T5324] __se_sys_ioctl+0xfc/0x170 [ 85.658966][ T5324] do_syscall_64+0x14d/0xf80 [ 85.660969][ T5324] ? trace_irq_disable+0x3b/0x150 [ 85.663050][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.665387][ T5324] ? clear_bhb_loop+0x40/0x90 [ 85.667489][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.670080][ T5324] RIP: 0033:0x7fc70e99c819 [ 85.672296][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.680194][ T5324] RSP: 002b:00007fc70f848fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.683843][ T5324] RAX: ffffffffffffffda RBX: 00007fc70ec16090 RCX: 00007fc70e99c819 [ 85.686917][ T5324] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000004 [ 85.690267][ T5324] RBP: 00007fc70ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 85.694286][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.697804][ T5324] R13: 00007fc70ec16128 R14: 00007fc70ec16090 R15: 00007ffd099513a8 [ 85.700894][ T5324] [ 85.702498][ T5324] Kernel Offset: disabled [ 85.704283][ T5324] Rebooting in 86400 seconds..