program: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="00000000080000000000f600000000000000003223c6f267f3f1376b28b6086d2fef7f1d46b2d8d3cc8b553ab35c058b90f17af2326438deba364de0bc9dbf2a03dbfb9820fe26b4a2060a1cd1336f9626045e2845941cd66693c90a9dc708b98f7254bb70ae806cf77cc0d3a343a98a4717323216653589894bfed28b64bd22a27eebcb0ca6514ef5ebd27587c688eec3dcb000ed8f0ce3747766e5f858b6717af3dee49a7e296e04e7d0f818b97dac4b5af04a6beb5364ab3a577a225b71d36e05244f5c1ece580041814cf5f767656c3cce", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x50) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xba}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) [ 93.314122][ T5278] Bluetooth: hci0: command tx timeout [ 93.326872][ T9] cfg80211: failed to load regulatory.db [ 93.480015][ T5315] ------------[ cut here ]------------ [ 93.483143][ T5315] 1 [ 93.483154][ T5315] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2ce/0x380, CPU#0: syz.0.0/5315 [ 93.489866][ T5315] Modules linked in: [ 93.492108][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.496324][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.500638][ T5315] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.503825][ T5315] Code: 74 10 4c 89 e7 89 54 24 0c e8 0e 2c 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 3c 14 19 0e 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.512404][ T5315] RSP: 0018:ffffc9000ebc7920 EFLAGS: 00010246 [ 93.515173][ T5315] RAX: ffffc9000ebc7900 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.518397][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ebc7988 [ 93.523231][ T5315] RBP: ffffc9000ebc7a18 R08: ffffc9000ebc7987 R09: 0000000000000000 [ 93.526693][ T5315] R10: ffffc9000ebc7960 R11: fffff52001d78f31 R12: 0000000000000000 [ 93.530663][ T5315] R13: 1ffff92001d78f28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.534330][ T5315] FS: 00007fdb5af416c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 93.538472][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.541418][ T5315] CR2: 00007fdb59f87700 CR3: 0000000043b97000 CR4: 0000000000352ef0 [ 93.545107][ T5315] Call Trace: [ 93.546846][ T5315] [ 93.548549][ T5315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.551548][ T5315] ? __pfx_policy_nodemask+0x10/0x10 [ 93.554390][ T5315] alloc_pages_mpol+0x212/0x380 [ 93.556420][ T5315] ___kmalloc_large_node+0x4c/0x120 [ 93.558584][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.561045][ T5315] __kmalloc_large_node_noprof+0x18/0x90 [ 93.563566][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.565720][ T5315] __kmalloc_noprof+0x405/0x720 [ 93.567787][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.569988][ T5315] drm_syncobj_array_find+0x3a/0x440 [ 93.572238][ T5315] drm_syncobj_reset_ioctl+0x17b/0x450 [ 93.574479][ T5315] drm_ioctl_kernel+0x2df/0x3b0 [ 93.576574][ T5315] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 93.579133][ T5315] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.581496][ T5315] drm_ioctl+0x70e/0xba0 [ 93.583477][ T5315] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 93.586110][ T5315] ? __pfx_drm_ioctl+0x10/0x10 [ 93.588286][ T5315] ? __fget_files+0x2a/0x420 [ 93.590352][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.592606][ T5315] ? __pfx_drm_ioctl+0x10/0x10 [ 93.594760][ T5315] __se_sys_ioctl+0xfc/0x170 [ 93.596772][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.599402][ T5315] do_syscall_64+0x174/0x580 [ 93.601551][ T5315] ? trace_irq_disable+0x3b/0x140 [ 93.603670][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 93.605422][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.607684][ T5315] RIP: 0033:0x7fdb59f9e0d9 [ 93.610244][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.618364][ T5315] RSP: 002b:00007fdb5af40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.622310][ T5315] RAX: ffffffffffffffda RBX: 00007fdb5a225fa0 RCX: 00007fdb59f9e0d9 [ 93.625724][ T5315] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 93.629305][ T5315] RBP: 00007fdb5a035024 R08: 0000000000000000 R09: 0000000000000000 [ 93.633130][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.636498][ T5315] R13: 00007fdb5a226038 R14: 00007fdb5a225fa0 R15: 00007ffff169d9f8 [ 93.639785][ T5315] [ 93.641209][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.643657][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.647042][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.651027][ T5315] Call Trace: [ 93.652425][ T5315] [ 93.653664][ T5315] vpanic+0x56c/0xa60 [ 93.655259][ T5315] ? __pfx__printk+0x10/0x10 [ 93.657212][ T5315] ? __pfx_vpanic+0x10/0x10 [ 93.659001][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 93.661274][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 93.663578][ T5315] panic+0xc5/0xd0 [ 93.665218][ T5315] ? __pfx_panic+0x10/0x10 [ 93.667175][ T5315] __warn+0x315/0x4c0 [ 93.668946][ T5315] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.671449][ T5315] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.673909][ T5315] __report_bug+0x276/0x570 [ 93.675754][ T5315] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.678341][ T5315] ? __pfx___report_bug+0x10/0x10 [ 93.680645][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 93.682952][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 93.685101][ T5315] ? kernel_text_address+0xa5/0xe0 [ 93.687339][ T5315] ? __kernel_text_address+0xd/0x30 [ 93.689622][ T5315] ? unwind_get_return_address+0x4d/0x90 [ 93.691951][ T5315] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.694454][ T5315] report_bug+0x16a/0x220 [ 93.696327][ T5315] ? __alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.698848][ T5315] ? __alloc_frozen_pages_noprof+0x2d0/0x380 [ 93.701415][ T5315] handle_bug+0x9c/0x200 [ 93.703310][ T5315] exc_invalid_op+0x1a/0x50 [ 93.705107][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 93.706888][ T5315] RIP: 0010:__alloc_frozen_pages_noprof+0x2ce/0x380 [ 93.709329][ T5315] Code: 74 10 4c 89 e7 89 54 24 0c e8 0e 2c 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 ab fe ff ff e9 ac fe ff ff c6 05 3c 14 19 0e 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 93.716627][ T5315] RSP: 0018:ffffc9000ebc7920 EFLAGS: 00010246 [ 93.719086][ T5315] RAX: ffffc9000ebc7900 RBX: 0000000000000016 RCX: 0000000000000000 [ 93.722302][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ebc7988 [ 93.725560][ T5315] RBP: ffffc9000ebc7a18 R08: ffffc9000ebc7987 R09: 0000000000000000 [ 93.728850][ T5315] R10: ffffc9000ebc7960 R11: fffff52001d78f31 R12: 0000000000000000 [ 93.732141][ T5315] R13: 1ffff92001d78f28 R14: 0000000000040cc0 R15: dffffc0000000000 [ 93.735482][ T5315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.738178][ T5315] ? __pfx_policy_nodemask+0x10/0x10 [ 93.740487][ T5315] alloc_pages_mpol+0x212/0x380 [ 93.742616][ T5315] ___kmalloc_large_node+0x4c/0x120 [ 93.744769][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.747100][ T5315] __kmalloc_large_node_noprof+0x18/0x90 [ 93.749445][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.751658][ T5315] __kmalloc_noprof+0x405/0x720 [ 93.753559][ T5315] ? drm_syncobj_array_find+0x3a/0x440 [ 93.755718][ T5315] drm_syncobj_array_find+0x3a/0x440 [ 93.757744][ T5315] drm_syncobj_reset_ioctl+0x17b/0x450 [ 93.759684][ T5315] drm_ioctl_kernel+0x2df/0x3b0 [ 93.761734][ T5315] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 93.764323][ T5315] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 93.766627][ T5315] drm_ioctl+0x70e/0xba0 [ 93.768577][ T5315] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 93.771013][ T5315] ? __pfx_drm_ioctl+0x10/0x10 [ 93.773064][ T5315] ? __fget_files+0x2a/0x420 [ 93.774977][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.777078][ T5315] ? __pfx_drm_ioctl+0x10/0x10 [ 93.779149][ T5315] __se_sys_ioctl+0xfc/0x170 [ 93.781188][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.783757][ T5315] do_syscall_64+0x174/0x580 [ 93.785748][ T5315] ? trace_irq_disable+0x3b/0x140 [ 93.787910][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 93.790008][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.792510][ T5315] RIP: 0033:0x7fdb59f9e0d9 [ 93.794178][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.801808][ T5315] RSP: 002b:00007fdb5af40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.805360][ T5315] RAX: ffffffffffffffda RBX: 00007fdb5a225fa0 RCX: 00007fdb59f9e0d9 [ 93.808316][ T5315] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 93.810904][ T5315] RBP: 00007fdb5a035024 R08: 0000000000000000 R09: 0000000000000000 [ 93.813800][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.816838][ T5315] R13: 00007fdb5a226038 R14: 00007fdb5a225fa0 R15: 00007ffff169d9f8 [ 93.819761][ T5315] [ 93.821331][ T5315] Kernel Offset: disabled [ 93.823102][ T5315] Rebooting in 86400 seconds..