program:
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x1fc, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0x27, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "2c06233c2b181367b1d3c76a40f0c9373101cdf60866c48bd3deea9c5856522642e8d07ee23e83981cab2e5a96ac17f2d5d2442ce192c551039639840793876d7df6332013887d0e16bf09cf71eb7de1c94a39e927c44ede2916a96471adbe5c40a2c312248eafd8fd54aface2aeedf552f701ceedbf5392a61c7f93"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "811faf9dd452f9d09112b82d95854ec28d1c9b9f8febeb2f5b0d090d6c843b3c1721398d6b69ed05c1004b5a710ae8220b0c6c7914efcd9361d2972eaa023f1d82dffd645e9c12dc9fd44b4f70d2716da716e49c4eb97a4fb420069d5b5efea1776972c422ad80085e0ff6ce8fda8a0f6d23014c2ee07e80d2ddc0d4a5a099080cec402a302512ebd3a751d47e3d23fe94923b216ffeef906f96ac2eb1734f6fd45be9030493a56f5879a5b4e047a3b9663733f831c641b4f7144e772464a4faabc7df80f2177bacd9aa47"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "d42ae9a8f1496a615c014f3d3f8730682903bead27186b6d80adbe32d6ebec7c0fb3c0b6abe9d146b066a392da9956c8355d89a9be4510e5c501fbd88460731d3b"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "e7dde7b8d1179cbdc9300ddd5cb27a5034e1bc74bdac4fa133de32e857d3d0b72de47397a66b6ae6b2abb0e33934225fc266a8089feb79b73f9b6b3cdb5dac6b235e04e87bb523ce85186ad1"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1fffffff}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000640)={'veth1_to_team\x00', 0x2}) (async)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @local}, &(0x7f00000002c0)=0xc)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)={[{@type={'type', 0x3d, "d0a8c62b"}}, {@part={'part', 0x3d, 0xfff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@type={'type', 0x3d, "6db5133f"}}, {@codepage={'codepage', 0x3d, 'cp437'}}, {@uid}, {@creator={'creator', 0x3d, "29cd8f01"}}]}, 0x1, 0x317, &(0x7f0000000380)="$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")
[ 70.371410][ T4665] Bluetooth: hci0: command tx timeout
[ 70.438449][ T5319] ------------[ cut here ]------------
[ 70.440597][ T5319] WARNING: CPU: 0 PID: 5319 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x3c5/0x710
[ 70.444423][ T5319] Modules linked in:
[ 70.445907][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[ 70.449778][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 70.454575][ T5319] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710
[ 70.457127][ T5319] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 29 d8 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e
[ 70.464394][ T5319] RSP: 0018:ffffc9000d8378c0 EFLAGS: 00010246
[ 70.466795][ T5319] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 70.469982][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d837948
[ 70.473227][ T5319] RBP: ffffc9000d8379d8 R08: ffffc9000d837947 R09: 0000000000000000
[ 70.476247][ T5319] R10: ffffc9000d837920 R11: fffff52001b06f29 R12: 0000000000000014
[ 70.479061][ T5319] R13: 0000000000040cc0 R14: 1ffff92001b06f20 R15: 1ffff92001b06f1c
[ 70.482231][ T5319] FS: 00007f2c1b2ed6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 70.485657][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 70.488091][ T5319] CR2: 00005555903ea7c8 CR3: 000000003449a000 CR4: 0000000000352ef0
[ 70.491202][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 70.494132][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 70.497449][ T5319] Call Trace:
[ 70.498760][ T5319]
[ 70.499920][ T5319] ? __warn+0x165/0x4d0
[ 70.501730][ T5319] ? __alloc_pages_noprof+0x3c5/0x710
[ 70.503641][ T5319] ? report_bug+0x2b3/0x500
[ 70.505383][ T5319] ? __alloc_pages_noprof+0x3c5/0x710
[ 70.507141][ T5319] ? handle_bug+0x60/0x90
[ 70.508626][ T5319] ? exc_invalid_op+0x1a/0x50
[ 70.510302][ T5319] ? asm_exc_invalid_op+0x1a/0x20
[ 70.512276][ T5319] ? __alloc_pages_noprof+0x3c5/0x710
[ 70.514185][ T5319] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 70.516241][ T5319] ? kasan_save_track+0x51/0x80
[ 70.518010][ T5319] ? mark_lock+0x9a/0x360
[ 70.519585][ T5319] ? __lock_acquire+0x1397/0x2100
[ 70.521517][ T5319] ___kmalloc_large_node+0x8b/0x1d0
[ 70.523398][ T5319] __kmalloc_large_node_noprof+0x1a/0x80
[ 70.525411][ T5319] __kmalloc_noprof+0x339/0x4c0
[ 70.527144][ T5319] ? drm_syncobj_array_find+0x3a/0x460
[ 70.529098][ T5319] drm_syncobj_array_find+0x3a/0x460
[ 70.531122][ T5319] drm_syncobj_query_ioctl+0x1f8/0xac0
[ 70.533021][ T5319] ? drm_dev_exit+0x3a/0x60
[ 70.534824][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.537123][ T5319] ? drm_dev_enter+0x48/0x160
[ 70.539129][ T5319] drm_ioctl_kernel+0x337/0x440
[ 70.541343][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.543813][ T5319] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 70.545851][ T5319] ? __might_fault+0xc6/0x120
[ 70.547510][ T5319] drm_ioctl+0x60e/0xad0
[ 70.549046][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.550946][ T5319] ? __pfx_drm_ioctl+0x10/0x10
[ 70.553089][ T5319] ? __fget_files+0x2a/0x410
[ 70.555171][ T5319] ? __pfx_drm_ioctl+0x10/0x10
[ 70.557295][ T5319] __se_sys_ioctl+0xf5/0x170
[ 70.559324][ T5319] do_syscall_64+0xf3/0x230
[ 70.561143][ T5319] ? clear_bhb_loop+0x35/0x90
[ 70.562923][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.565257][ T5319] RIP: 0033:0x7f2c1a585d29
[ 70.566909][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.573935][ T5319] RSP: 002b:00007f2c1b2ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.577051][ T5319] RAX: ffffffffffffffda RBX: 00007f2c1a775fa0 RCX: 00007f2c1a585d29
[ 70.579957][ T5319] RDX: 0000000020000180 RSI: 00000000c01864cb RDI: 0000000000000004
[ 70.582974][ T5319] RBP: 00007f2c1a601b08 R08: 0000000000000000 R09: 0000000000000000
[ 70.585978][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 70.588908][ T5319] R13: 0000000000000000 R14: 00007f2c1a775fa0 R15: 00007ffe0d95db48
[ 70.592009][ T5319]
[ 70.593301][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 70.596052][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[ 70.599927][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 70.603889][ T5319] Call Trace:
[ 70.605200][ T5319]
[ 70.606247][ T5319] dump_stack_lvl+0x241/0x360
[ 70.607705][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.609603][ T5319] ? __pfx__printk+0x10/0x10
[ 70.611240][ T5319] ? _printk+0xd5/0x120
[ 70.612759][ T5319] ? __init_begin+0x41000/0x41000
[ 70.614674][ T5319] ? vscnprintf+0x5d/0x90
[ 70.616214][ T5319] panic+0x349/0x880
[ 70.617546][ T5319] ? __warn+0x174/0x4d0
[ 70.619011][ T5319] ? __pfx_panic+0x10/0x10
[ 70.620658][ T5319] __warn+0x344/0x4d0
[ 70.622115][ T5319] ? __alloc_pages_noprof+0x3c5/0x710
[ 70.623907][ T5319] report_bug+0x2b3/0x500
[ 70.625564][ T5319] ? __alloc_pages_noprof+0x3c5/0x710
[ 70.627482][ T5319] handle_bug+0x60/0x90
[ 70.629004][ T5319] exc_invalid_op+0x1a/0x50
[ 70.630659][ T5319] asm_exc_invalid_op+0x1a/0x20
[ 70.632401][ T5319] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710
[ 70.634586][ T5319] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 29 d8 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e
[ 70.641167][ T5319] RSP: 0018:ffffc9000d8378c0 EFLAGS: 00010246
[ 70.643324][ T5319] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 70.646254][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d837948
[ 70.649144][ T5319] RBP: ffffc9000d8379d8 R08: ffffc9000d837947 R09: 0000000000000000
[ 70.652032][ T5319] R10: ffffc9000d837920 R11: fffff52001b06f29 R12: 0000000000000014
[ 70.654824][ T5319] R13: 0000000000040cc0 R14: 1ffff92001b06f20 R15: 1ffff92001b06f1c
[ 70.657617][ T5319] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 70.659448][ T5319] ? kasan_save_track+0x51/0x80
[ 70.661161][ T5319] ? mark_lock+0x9a/0x360
[ 70.662725][ T5319] ? __lock_acquire+0x1397/0x2100
[ 70.664542][ T5319] ___kmalloc_large_node+0x8b/0x1d0
[ 70.666435][ T5319] __kmalloc_large_node_noprof+0x1a/0x80
[ 70.668470][ T5319] __kmalloc_noprof+0x339/0x4c0
[ 70.670143][ T5319] ? drm_syncobj_array_find+0x3a/0x460
[ 70.672121][ T5319] drm_syncobj_array_find+0x3a/0x460
[ 70.674091][ T5319] drm_syncobj_query_ioctl+0x1f8/0xac0
[ 70.676068][ T5319] ? drm_dev_exit+0x3a/0x60
[ 70.677658][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.679691][ T5319] ? drm_dev_enter+0x48/0x160
[ 70.681457][ T5319] drm_ioctl_kernel+0x337/0x440
[ 70.683204][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.685461][ T5319] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 70.687394][ T5319] ? __might_fault+0xc6/0x120
[ 70.689149][ T5319] drm_ioctl+0x60e/0xad0
[ 70.690679][ T5319] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10
[ 70.692761][ T5319] ? __pfx_drm_ioctl+0x10/0x10
[ 70.694568][ T5319] ? __fget_files+0x2a/0x410
[ 70.696347][ T5319] ? __pfx_drm_ioctl+0x10/0x10
[ 70.698150][ T5319] __se_sys_ioctl+0xf5/0x170
[ 70.699843][ T5319] do_syscall_64+0xf3/0x230
[ 70.701497][ T5319] ? clear_bhb_loop+0x35/0x90
[ 70.703215][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.705469][ T5319] RIP: 0033:0x7f2c1a585d29
[ 70.707104][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.714205][ T5319] RSP: 002b:00007f2c1b2ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.717458][ T5319] RAX: ffffffffffffffda RBX: 00007f2c1a775fa0 RCX: 00007f2c1a585d29
[ 70.720282][ T5319] RDX: 0000000020000180 RSI: 00000000c01864cb RDI: 0000000000000004
[ 70.723163][ T5319] RBP: 00007f2c1a601b08 R08: 0000000000000000 R09: 0000000000000000
[ 70.726151][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 70.728885][ T5319] R13: 0000000000000000 R14: 00007f2c1a775fa0 R15: 00007ffe0d95db48
[ 70.731686][ T5319]
[ 70.733067][ T5319] Kernel Offset: disabled
[ 70.734756][ T5319] Rebooting in 86400 seconds..