program:
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100800)
ioctl$int_out(r0, 0x0, &(0x7f0000000000))
setresgid(0xee01, 0x0, 0xffffffffffffffff) (async)
setresgid(0xee01, 0x0, 0xffffffffffffffff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], 0x0, 0x1})
r3 = syz_pidfd_open(r1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4a}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020c28bd7000fffbffffffffffff04000000810000000000000007000000000000003990935d0000000001001676c5344000"], 0x38}}, 0x800)
r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0xfe, 0x8, 0x5, '\x00', "037ec42b", "00000001", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) (async)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0xfe, 0x8, 0x5, '\x00', "037ec42b", "00000001", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x9, 0x41, 0x1, 0x0, 0x0, 0xe, "01e60000000000879fb3db0100"})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="27e16f787df83029ec3e962e67e0f98fb2bed3a10cd47832cde3bba7bcd7974e238ec988a30b720edd3f6f6f359b639a2368f1f67475ff1b39c4e103812ea51c8f2f0d33f92fe8c9bb522991ce0619fefa856d5addfa8edae4c5f3e5a0c4ffcdfa0173f5baf4a1a5f01974579bd3a71093e4bcb8a35dd4e606c8f693d172b2fcb0f8a9202d", 0x85)
process_madvise(r3, 0x0, 0xffffff5e, 0xc, 0x0) (async)
process_madvise(r3, 0x0, 0xffffff5e, 0xc, 0x0)
[ 58.803943][ T5320] ------------[ cut here ]------------
[ 58.806347][ T5320] WARNING: CPU: 0 PID: 5320 at mm/page_alloc.c:4727 __alloc_pages_noprof+0x3c5/0x710
[ 58.810170][ T5320] Modules linked in:
[ 58.811688][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[ 58.815556][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 58.819355][ T5320] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710
[ 58.821628][ T5320] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 57 b1 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e
[ 58.829121][ T5320] RSP: 0018:ffffc9000d4e7900 EFLAGS: 00010246
[ 58.831476][ T5320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 58.834529][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4e7988
[ 58.837305][ T5320] RBP: ffffc9000d4e7a18 R08: ffffc9000d4e7987 R09: 0000000000000000
[ 58.840166][ T5320] R10: ffffc9000d4e7960 R11: fffff52001a9cf31 R12: 0000000000000014
[ 58.843162][ T5320] R13: 0000000000040cc0 R14: 1ffff92001a9cf28 R15: 1ffff92001a9cf24
[ 58.846211][ T5320] FS: 00007f299dbfe6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 58.849481][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.851863][ T5320] CR2: 00007f299dbbbfe0 CR3: 000000003c432000 CR4: 0000000000352ef0
[ 58.854893][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.857912][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.860816][ T5320] Call Trace:
[ 58.862048][ T5320]
[ 58.863172][ T5320] ? __warn+0x165/0x4d0
[ 58.864684][ T5320] ? __alloc_pages_noprof+0x3c5/0x710
[ 58.866879][ T5320] ? report_bug+0x2b3/0x500
[ 58.868708][ T5320] ? __alloc_pages_noprof+0x3c5/0x710
[ 58.870662][ T5320] ? handle_bug+0x60/0x90
[ 58.872320][ T5320] ? exc_invalid_op+0x1a/0x50
[ 58.874128][ T5320] ? asm_exc_invalid_op+0x1a/0x20
[ 58.876128][ T5320] ? __alloc_pages_noprof+0x3c5/0x710
[ 58.878076][ T5320] ? kasan_save_track+0x51/0x80
[ 58.879903][ T5320] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 58.882417][ T5320] ? __lock_acquire+0x1397/0x2100
[ 58.884293][ T5320] ___kmalloc_large_node+0x8b/0x1d0
[ 58.886325][ T5320] __kmalloc_large_node_noprof+0x1a/0x80
[ 58.888294][ T5320] __kmalloc_noprof+0x339/0x4c0
[ 58.889979][ T5320] ? drm_syncobj_array_find+0x3a/0x460
[ 58.892014][ T5320] drm_syncobj_array_find+0x3a/0x460
[ 58.893937][ T5320] drm_syncobj_timeline_signal_ioctl+0x1f2/0x880
[ 58.896343][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 58.898754][ T5320] ? drm_dev_enter+0x48/0x160
[ 58.900531][ T5320] drm_ioctl_kernel+0x337/0x440
[ 58.902437][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 58.904946][ T5320] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 58.907179][ T5320] ? __might_fault+0xc6/0x120
[ 58.908932][ T5320] drm_ioctl+0x60e/0xad0
[ 58.910417][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 58.913123][ T5320] ? __pfx_drm_ioctl+0x10/0x10
[ 58.914983][ T5320] ? __fget_files+0x2a/0x410
[ 58.916961][ T5320] ? __pfx_drm_ioctl+0x10/0x10
[ 58.918811][ T5320] __se_sys_ioctl+0xf5/0x170
[ 58.920534][ T5320] do_syscall_64+0xf3/0x230
[ 58.922178][ T5320] ? clear_bhb_loop+0x35/0x90
[ 58.923842][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.926224][ T5320] RIP: 0033:0x7f299e185d19
[ 58.927922][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 58.935207][ T5320] RSP: 002b:00007f299dbfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 58.938276][ T5320] RAX: ffffffffffffffda RBX: 00007f299e375fa0 RCX: 00007f299e185d19
[ 58.941252][ T5320] RDX: 0000000020000180 RSI: 00000000c01864cd RDI: 0000000000000003
[ 58.944054][ T5320] RBP: 00007f299e201a20 R08: 0000000000000000 R09: 0000000000000000
[ 58.947232][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 58.950452][ T5320] R13: 0000000000000000 R14: 00007f299e375fa0 R15: 00007fffaf821f18
[ 58.953463][ T5320]
[ 58.954655][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 58.957417][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[ 58.961386][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 58.965340][ T5320] Call Trace:
[ 58.966551][ T5320]
[ 58.967682][ T5320] dump_stack_lvl+0x241/0x360
[ 58.969380][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10
[ 58.971188][ T5320] ? __pfx__printk+0x10/0x10
[ 58.972812][ T5320] ? _printk+0xd5/0x120
[ 58.974390][ T5320] ? __init_begin+0x41000/0x41000
[ 58.976534][ T5320] ? vscnprintf+0x5d/0x90
[ 58.978220][ T5320] panic+0x349/0x880
[ 58.979768][ T5320] ? __warn+0x174/0x4d0
[ 58.981393][ T5320] ? __pfx_panic+0x10/0x10
[ 58.983100][ T5320] __warn+0x344/0x4d0
[ 58.984614][ T5320] ? __alloc_pages_noprof+0x3c5/0x710
[ 58.986575][ T5320] report_bug+0x2b3/0x500
[ 58.988246][ T5320] ? __alloc_pages_noprof+0x3c5/0x710
[ 58.990300][ T5320] handle_bug+0x60/0x90
[ 58.991945][ T5320] exc_invalid_op+0x1a/0x50
[ 58.993694][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 58.995516][ T5320] RIP: 0010:__alloc_pages_noprof+0x3c5/0x710
[ 58.997891][ T5320] Code: ff df 0f 85 09 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 f9 00 00 00 c6 05 57 b1 0b 0e 01 90 <0f> 0b 90 41 83 fc 0a 0f 86 13 fd ff ff 45 31 e4 48 c7 44 24 20 0e
[ 59.005147][ T5320] RSP: 0018:ffffc9000d4e7900 EFLAGS: 00010246
[ 59.007465][ T5320] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 59.010173][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d4e7988
[ 59.013280][ T5320] RBP: ffffc9000d4e7a18 R08: ffffc9000d4e7987 R09: 0000000000000000
[ 59.016125][ T5320] R10: ffffc9000d4e7960 R11: fffff52001a9cf31 R12: 0000000000000014
[ 59.018960][ T5320] R13: 0000000000040cc0 R14: 1ffff92001a9cf28 R15: 1ffff92001a9cf24
[ 59.021875][ T5320] ? kasan_save_track+0x51/0x80
[ 59.023795][ T5320] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 59.025881][ T5320] ? __lock_acquire+0x1397/0x2100
[ 59.027856][ T5320] ___kmalloc_large_node+0x8b/0x1d0
[ 59.029827][ T5320] __kmalloc_large_node_noprof+0x1a/0x80
[ 59.031968][ T5320] __kmalloc_noprof+0x339/0x4c0
[ 59.033603][ T5320] ? drm_syncobj_array_find+0x3a/0x460
[ 59.035666][ T5320] drm_syncobj_array_find+0x3a/0x460
[ 59.038064][ T5320] drm_syncobj_timeline_signal_ioctl+0x1f2/0x880
[ 59.040347][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 59.042883][ T5320] ? drm_dev_enter+0x48/0x160
[ 59.044637][ T5320] drm_ioctl_kernel+0x337/0x440
[ 59.046515][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 59.049041][ T5320] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 59.051119][ T5320] ? __might_fault+0xc6/0x120
[ 59.052898][ T5320] drm_ioctl+0x60e/0xad0
[ 59.054427][ T5320] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 59.056978][ T5320] ? __pfx_drm_ioctl+0x10/0x10
[ 59.058684][ T5320] ? __fget_files+0x2a/0x410
[ 59.060499][ T5320] ? __pfx_drm_ioctl+0x10/0x10
[ 59.062262][ T5320] __se_sys_ioctl+0xf5/0x170
[ 59.064163][ T5320] do_syscall_64+0xf3/0x230
[ 59.065962][ T5320] ? clear_bhb_loop+0x35/0x90
[ 59.067720][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 59.069837][ T5320] RIP: 0033:0x7f299e185d19
[ 59.071784][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 59.079534][ T5320] RSP: 002b:00007f299dbfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 59.082603][ T5320] RAX: ffffffffffffffda RBX: 00007f299e375fa0 RCX: 00007f299e185d19
[ 59.085478][ T5320] RDX: 0000000020000180 RSI: 00000000c01864cd RDI: 0000000000000003
[ 59.088195][ T5320] RBP: 00007f299e201a20 R08: 0000000000000000 R09: 0000000000000000
[ 59.091401][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 59.094267][ T5320] R13: 0000000000000000 R14: 00007f299e375fa0 R15: 00007fffaf821f18
[ 59.097798][ T5320]
[ 59.099279][ T5320] Kernel Offset: disabled
[ 59.101086][ T5320] Rebooting in 86400 seconds..