program:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
socket$pppl2tp(0x18, 0x1, 0x1)
pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xffffffffffffff5c, 0x0, &(0x7f0000000100)="259a534f6577119472ae1206201a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0xfffffffd}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{0x4}, {}, {0x85, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000080)={0x0, 0x0, 0x700})
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xffffffffffffff5c, 0x0, &(0x7f0000000100)="259a534f6577119472ae1206201a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], 0x0}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0xfffffffd}}}, 0x108) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{0x4}, {}, {0x85, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) (async)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000080)={0x0, 0x0, 0x700}) (async)
[ 101.115706][ T5307] Bluetooth: hci0: command tx timeout
[ 101.240788][ T5330] ------------[ cut here ]------------
[ 101.243747][ T5330] 1
[ 101.243761][ T5330] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.0/5330
[ 101.251800][ T5330] Modules linked in:
[ 101.253444][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.257515][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.262011][ T5330] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.265300][ T5330] Code: 74 10 4c 89 e7 89 54 24 0c e8 8b 4b 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 32 95 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 101.274568][ T5330] RSP: 0018:ffffc9000efdf940 EFLAGS: 00010246
[ 101.277826][ T5330] RAX: ffffc9000efdf900 RBX: 0000000000000016 RCX: 0000000000000000
[ 101.281666][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000efdf9a8
[ 101.285809][ T5330] RBP: ffffc9000efdfa30 R08: ffffc9000efdf9a7 R09: 0000000000000000
[ 101.289783][ T5330] R10: ffffc9000efdf980 R11: fffff52001dfbf35 R12: 0000000000000000
[ 101.293618][ T5330] R13: 1ffff92001dfbf2c R14: 0000000000040cc0 R15: dffffc0000000000
[ 101.297633][ T5330] FS: 00007fbb455f56c0(0000) GS:ffff88808ca4c000(0000) knlGS:0000000000000000
[ 101.302165][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 101.305037][ T5330] CR2: 000020000000008c CR3: 0000000040979000 CR4: 0000000000352ef0
[ 101.309039][ T5330] Call Trace:
[ 101.310985][ T5330]
[ 101.312768][ T5330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 101.315884][ T5330] ? __pfx_policy_nodemask+0x10/0x10
[ 101.318303][ T5330] alloc_pages_mpol+0x232/0x4a0
[ 101.320638][ T5330] ___kmalloc_large_node+0x4e/0x150
[ 101.323491][ T5330] __kmalloc_large_node_noprof+0x18/0x90
[ 101.326776][ T5330] __kmalloc_noprof+0x3e8/0x760
[ 101.328981][ T5330] ? drm_syncobj_array_find+0x3a/0x440
[ 101.331317][ T5330] drm_syncobj_array_find+0x3a/0x440
[ 101.333675][ T5330] drm_syncobj_reset_ioctl+0x17b/0x450
[ 101.336104][ T5330] drm_ioctl_kernel+0x2df/0x3b0
[ 101.338582][ T5330] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 101.341442][ T5330] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 101.344087][ T5330] drm_ioctl+0x6ba/0xb80
[ 101.346603][ T5330] ? __fget_files+0x2a/0x420
[ 101.348925][ T5330] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 101.351849][ T5330] ? __pfx_drm_ioctl+0x10/0x10
[ 101.354154][ T5330] ? __fget_files+0x2a/0x420
[ 101.356460][ T5330] ? bpf_lsm_file_ioctl+0x9/0x20
[ 101.358908][ T5330] ? __pfx_drm_ioctl+0x10/0x10
[ 101.361569][ T5330] __se_sys_ioctl+0xfc/0x170
[ 101.363882][ T5330] do_syscall_64+0x14d/0xf80
[ 101.366155][ T5330] ? trace_irq_disable+0x3b/0x150
[ 101.368353][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.370965][ T5330] ? clear_bhb_loop+0x40/0x90
[ 101.373394][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.376835][ T5330] RIP: 0033:0x7fbb4919c819
[ 101.379033][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.386798][ T5330] RSP: 002b:00007fbb455f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 101.390404][ T5330] RAX: ffffffffffffffda RBX: 00007fbb49415fa0 RCX: 00007fbb4919c819
[ 101.394492][ T5330] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000003
[ 101.398894][ T5330] RBP: 00007fbb49232c91 R08: 0000000000000000 R09: 0000000000000000
[ 101.402350][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.406504][ T5330] R13: 00007fbb49416038 R14: 00007fbb49415fa0 R15: 00007ffd073f2b18
[ 101.409995][ T5330]
[ 101.411403][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 101.414791][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.419825][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.424453][ T5330] Call Trace:
[ 101.425912][ T5330]
[ 101.427304][ T5330] vpanic+0x56c/0xa60
[ 101.429134][ T5330] ? __pfx__printk+0x10/0x10
[ 101.431333][ T5330] ? __pfx_vpanic+0x10/0x10
[ 101.433934][ T5330] ? is_bpf_text_address+0x292/0x2b0
[ 101.437120][ T5330] ? is_bpf_text_address+0x26/0x2b0
[ 101.439430][ T5330] panic+0xc5/0xd0
[ 101.441079][ T5330] ? __pfx_panic+0x10/0x10
[ 101.443005][ T5330] __warn+0x315/0x4f0
[ 101.444754][ T5330] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.447390][ T5330] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.450160][ T5330] __report_bug+0x29a/0x540
[ 101.452606][ T5330] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.456241][ T5330] ? __pfx___report_bug+0x10/0x10
[ 101.458885][ T5330] ? is_bpf_text_address+0x292/0x2b0
[ 101.461305][ T5330] ? is_bpf_text_address+0x26/0x2b0
[ 101.463550][ T5330] ? kernel_text_address+0xa5/0xe0
[ 101.465882][ T5330] ? __kernel_text_address+0xd/0x30
[ 101.468216][ T5330] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 101.471182][ T5330] ? arch_stack_walk+0xfb/0x150
[ 101.473861][ T5330] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.477177][ T5330] report_bug+0x16a/0x220
[ 101.479288][ T5330] ? __alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.481881][ T5330] ? __alloc_frozen_pages_noprof+0x2d3/0x380
[ 101.484503][ T5330] handle_bug+0x9c/0x200
[ 101.486423][ T5330] exc_invalid_op+0x1a/0x50
[ 101.488517][ T5330] asm_exc_invalid_op+0x1a/0x20
[ 101.490884][ T5330] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380
[ 101.494049][ T5330] Code: 74 10 4c 89 e7 89 54 24 0c e8 8b 4b 0e 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 32 95 d8 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 101.502765][ T5330] RSP: 0018:ffffc9000efdf940 EFLAGS: 00010246
[ 101.505661][ T5330] RAX: ffffc9000efdf900 RBX: 0000000000000016 RCX: 0000000000000000
[ 101.509751][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000efdf9a8
[ 101.513550][ T5330] RBP: ffffc9000efdfa30 R08: ffffc9000efdf9a7 R09: 0000000000000000
[ 101.517013][ T5330] R10: ffffc9000efdf980 R11: fffff52001dfbf35 R12: 0000000000000000
[ 101.520461][ T5330] R13: 1ffff92001dfbf2c R14: 0000000000040cc0 R15: dffffc0000000000
[ 101.525095][ T5330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 101.528040][ T5330] ? __pfx_policy_nodemask+0x10/0x10
[ 101.530639][ T5330] alloc_pages_mpol+0x232/0x4a0
[ 101.532784][ T5330] ___kmalloc_large_node+0x4e/0x150
[ 101.535067][ T5330] __kmalloc_large_node_noprof+0x18/0x90
[ 101.537590][ T5330] __kmalloc_noprof+0x3e8/0x760
[ 101.540547][ T5330] ? drm_syncobj_array_find+0x3a/0x440
[ 101.543047][ T5330] drm_syncobj_array_find+0x3a/0x440
[ 101.545470][ T5330] drm_syncobj_reset_ioctl+0x17b/0x450
[ 101.548177][ T5330] drm_ioctl_kernel+0x2df/0x3b0
[ 101.551339][ T5330] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 101.554935][ T5330] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 101.557773][ T5330] drm_ioctl+0x6ba/0xb80
[ 101.559921][ T5330] ? __fget_files+0x2a/0x420
[ 101.562064][ T5330] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[ 101.564781][ T5330] ? __pfx_drm_ioctl+0x10/0x10
[ 101.566980][ T5330] ? __fget_files+0x2a/0x420
[ 101.569252][ T5330] ? bpf_lsm_file_ioctl+0x9/0x20
[ 101.571478][ T5330] ? __pfx_drm_ioctl+0x10/0x10
[ 101.573789][ T5330] __se_sys_ioctl+0xfc/0x170
[ 101.576022][ T5330] do_syscall_64+0x14d/0xf80
[ 101.578321][ T5330] ? trace_irq_disable+0x3b/0x150
[ 101.580790][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.583750][ T5330] ? clear_bhb_loop+0x40/0x90
[ 101.586121][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.588989][ T5330] RIP: 0033:0x7fbb4919c819
[ 101.591208][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.600456][ T5330] RSP: 002b:00007fbb455f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 101.604366][ T5330] RAX: ffffffffffffffda RBX: 00007fbb49415fa0 RCX: 00007fbb4919c819
[ 101.608703][ T5330] RDX: 0000200000000080 RSI: 00000000c01064c4 RDI: 0000000000000003
[ 101.612869][ T5330] RBP: 00007fbb49232c91 R08: 0000000000000000 R09: 0000000000000000
[ 101.616490][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.620621][ T5330] R13: 00007fbb49416038 R14: 00007fbb49415fa0 R15: 00007ffd073f2b18
[ 101.624717][ T5330]
[ 101.626448][ T5330] Kernel Offset: disabled
[ 101.628256][ T5330] Rebooting in 86400 seconds..