program:
r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000000)={&(0x7f0000000040)=[0x0], 0x0, 0x40000386})
r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0xc000)
shmctl$SHM_LOCK(0x0, 0xb)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000000)={&(0x7f0000000040)=[0x0], 0x0, 0x40000386}) (async)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) (async)
shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0xc000) (async)
shmctl$SHM_LOCK(0x0, 0xb) (async)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async)
[ 74.916051][ T5303] Bluetooth: hci0: command tx timeout
[ 74.932796][ T5325] ------------[ cut here ]------------
[ 74.935360][ T5325] WARNING: CPU: 0 PID: 5325 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.940229][ T5325] Modules linked in:
[ 74.942762][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full)
[ 74.954653][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.962207][ T5325] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.965065][ T5325] Code: 74 10 4c 89 e7 89 54 24 0c e8 74 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 2a 37 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 74.973049][ T5325] RSP: 0018:ffffc9000d60f9a0 EFLAGS: 00010246
[ 74.975603][ T5325] RAX: ffffc9000d60f900 RBX: 0000000000000015 RCX: 0000000000000000
[ 74.978833][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d60fa08
[ 74.981757][ T5325] RBP: ffffc9000d60fa88 R08: ffffc9000d60fa07 R09: 0000000000000000
[ 74.984697][ T5325] R10: ffffc9000d60f9e0 R11: fffff52001ac1f41 R12: 0000000000000000
[ 74.988243][ T5325] R13: 1ffff92001ac1f38 R14: 0000000000040cc0 R15: dffffc0000000000
[ 74.991333][ T5325] FS: 00007f0b6520f6c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
[ 74.995675][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.999322][ T5325] CR2: 00007f0b64585538 CR3: 000000001a1ff000 CR4: 0000000000352ef0
[ 75.002793][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 75.006218][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 75.009473][ T5325] Call Trace:
[ 75.011008][ T5325]
[ 75.012415][ T5325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 75.015155][ T5325] __alloc_pages_noprof+0xa/0x30
[ 75.017574][ T5325] ___kmalloc_large_node+0x85/0x210
[ 75.019897][ T5325] __kmalloc_large_node_noprof+0x18/0x90
[ 75.022660][ T5325] __kmalloc_noprof+0x36f/0x4f0
[ 75.024715][ T5325] ? drm_syncobj_array_find+0x3a/0x450
[ 75.027214][ T5325] drm_syncobj_array_find+0x3a/0x450
[ 75.029561][ T5325] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0
[ 75.032299][ T5325] ? drm_dev_exit+0x3a/0x60
[ 75.034342][ T5325] drm_ioctl_kernel+0x2cc/0x390
[ 75.036642][ T5325] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 75.039507][ T5325] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 75.041784][ T5325] drm_ioctl+0x67f/0xb10
[ 75.043638][ T5325] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 75.046692][ T5325] ? __pfx_drm_ioctl+0x10/0x10
[ 75.048797][ T5325] ? __fget_files+0x2a/0x420
[ 75.050906][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.053085][ T5325] ? __pfx_drm_ioctl+0x10/0x10
[ 75.055140][ T5325] __se_sys_ioctl+0xfc/0x170
[ 75.057249][ T5325] do_syscall_64+0xfa/0x3b0
[ 75.059336][ T5325] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.061480][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.064183][ T5325] ? clear_bhb_loop+0x60/0xb0
[ 75.066393][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.069281][ T5325] RIP: 0033:0x7f0b6438e929
[ 75.071326][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.079789][ T5325] RSP: 002b:00007f0b6520f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.083430][ T5325] RAX: ffffffffffffffda RBX: 00007f0b645b5fa0 RCX: 00007f0b6438e929
[ 75.087025][ T5325] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000003
[ 75.090906][ T5325] RBP: 00007f0b64410b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.094165][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.097825][ T5325] R13: 0000000000000000 R14: 00007f0b645b5fa0 R15: 00007ffc1be9d0a8
[ 75.101225][ T5325]
[ 75.102496][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.105123][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full)
[ 75.109662][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.114060][ T5325] Call Trace:
[ 75.115484][ T5325]
[ 75.116708][ T5325] dump_stack_lvl+0x99/0x250
[ 75.118741][ T5325] ? __asan_memcpy+0x40/0x70
[ 75.120749][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.123028][ T5325] ? __pfx__printk+0x10/0x10
[ 75.125055][ T5325] panic+0x2db/0x790
[ 75.126801][ T5325] ? __pfx_panic+0x10/0x10
[ 75.128776][ T5325] ? show_trace_log_lvl+0x4fb/0x550
[ 75.131093][ T5325] __warn+0x31b/0x4b0
[ 75.132889][ T5325] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 75.135518][ T5325] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 75.138168][ T5325] report_bug+0x2be/0x4f0
[ 75.140078][ T5325] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 75.142920][ T5325] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 75.145529][ T5325] ? __alloc_frozen_pages_noprof+0x2ca/0x370
[ 75.148110][ T5325] handle_bug+0x84/0x160
[ 75.149873][ T5325] exc_invalid_op+0x1a/0x50
[ 75.151924][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 75.153977][ T5325] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[ 75.157069][ T5325] Code: 74 10 4c 89 e7 89 54 24 0c e8 74 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 2a 37 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 75.165129][ T5325] RSP: 0018:ffffc9000d60f9a0 EFLAGS: 00010246
[ 75.167861][ T5325] RAX: ffffc9000d60f900 RBX: 0000000000000015 RCX: 0000000000000000
[ 75.171380][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d60fa08
[ 75.174958][ T5325] RBP: ffffc9000d60fa88 R08: ffffc9000d60fa07 R09: 0000000000000000
[ 75.178415][ T5325] R10: ffffc9000d60f9e0 R11: fffff52001ac1f41 R12: 0000000000000000
[ 75.182080][ T5325] R13: 1ffff92001ac1f38 R14: 0000000000040cc0 R15: dffffc0000000000
[ 75.185600][ T5325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 75.188426][ T5325] __alloc_pages_noprof+0xa/0x30
[ 75.190594][ T5325] ___kmalloc_large_node+0x85/0x210
[ 75.192968][ T5325] __kmalloc_large_node_noprof+0x18/0x90
[ 75.195417][ T5325] __kmalloc_noprof+0x36f/0x4f0
[ 75.197660][ T5325] ? drm_syncobj_array_find+0x3a/0x450
[ 75.199949][ T5325] drm_syncobj_array_find+0x3a/0x450
[ 75.202282][ T5325] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0
[ 75.205047][ T5325] ? drm_dev_exit+0x3a/0x60
[ 75.207110][ T5325] drm_ioctl_kernel+0x2cc/0x390
[ 75.209271][ T5325] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 75.212252][ T5325] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 75.214787][ T5325] drm_ioctl+0x67f/0xb10
[ 75.216937][ T5325] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 75.220050][ T5325] ? __pfx_drm_ioctl+0x10/0x10
[ 75.222197][ T5325] ? __fget_files+0x2a/0x420
[ 75.224349][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 75.226560][ T5325] ? __pfx_drm_ioctl+0x10/0x10
[ 75.228683][ T5325] __se_sys_ioctl+0xfc/0x170
[ 75.230790][ T5325] do_syscall_64+0xfa/0x3b0
[ 75.232851][ T5325] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.235204][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.238027][ T5325] ? clear_bhb_loop+0x60/0xb0
[ 75.240204][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.242826][ T5325] RIP: 0033:0x7f0b6438e929
[ 75.244669][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.252761][ T5325] RSP: 002b:00007f0b6520f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 75.256398][ T5325] RAX: ffffffffffffffda RBX: 00007f0b645b5fa0 RCX: 00007f0b6438e929
[ 75.259920][ T5325] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000003
[ 75.263472][ T5325] RBP: 00007f0b64410b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.267118][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.270985][ T5325] R13: 0000000000000000 R14: 00007f0b645b5fa0 R15: 00007ffc1be9d0a8
[ 75.274796][ T5325]
[ 75.276431][ T5325] Kernel Offset: disabled
[ 75.278385][ T5325] Rebooting in 86400 seconds..