program:
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x13)
r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], 0x0, 0x528612d72fe8deb1})
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0)
[ 74.205553][ T5304] Bluetooth: hci0: command tx timeout
[ 74.240307][ T5324] ------------[ cut here ]------------
[ 74.242833][ T5324] WARNING: CPU: 0 PID: 5324 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.261298][ T5324] Modules linked in:
[ 74.264122][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full)
[ 74.270267][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.274928][ T5324] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.278404][ T5324] Code: 74 10 4c 89 e7 89 54 24 0c e8 74 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 39 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 74.286861][ T5324] RSP: 0018:ffffc9000d3b79a0 EFLAGS: 00010246
[ 74.289527][ T5324] RAX: ffffc9000d3b7900 RBX: 0000000000000014 RCX: 0000000000000000
[ 74.293076][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3b7a08
[ 74.296565][ T5324] RBP: ffffc9000d3b7a88 R08: ffffc9000d3b7a07 R09: 0000000000000000
[ 74.300152][ T5324] R10: ffffc9000d3b79e0 R11: fffff52001a76f41 R12: 0000000000000000
[ 74.303529][ T5324] R13: 1ffff92001a76f38 R14: 0000000000040cc0 R15: dffffc0000000000
[ 74.306870][ T5324] FS: 00007f0684cbb6c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
[ 74.310411][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.313219][ T5324] CR2: 00007f0683fa3638 CR3: 0000000042af2000 CR4: 0000000000352ef0
[ 74.316922][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.320380][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.323708][ T5324] Call Trace:
[ 74.325311][ T5324]
[ 74.326515][ T5324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 74.329110][ T5324] __alloc_pages_noprof+0xa/0x30
[ 74.331239][ T5324] ___kmalloc_large_node+0x85/0x210
[ 74.333589][ T5324] __kmalloc_large_node_noprof+0x18/0x90
[ 74.336012][ T5324] __kmalloc_noprof+0x36f/0x4f0
[ 74.338109][ T5324] ? drm_syncobj_array_find+0x3a/0x450
[ 74.340558][ T5324] drm_syncobj_array_find+0x3a/0x450
[ 74.342915][ T5324] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0
[ 74.345603][ T5324] ? drm_dev_exit+0x3a/0x60
[ 74.347515][ T5324] drm_ioctl_kernel+0x2cc/0x390
[ 74.349565][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 74.352311][ T5324] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 74.354822][ T5324] drm_ioctl+0x67f/0xb10
[ 74.356884][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 74.359625][ T5324] ? __pfx_drm_ioctl+0x10/0x10
[ 74.361565][ T5324] ? __fget_files+0x2a/0x420
[ 74.363447][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.365603][ T5324] ? __pfx_drm_ioctl+0x10/0x10
[ 74.367591][ T5324] __se_sys_ioctl+0xfc/0x170
[ 74.369561][ T5324] do_syscall_64+0xfa/0x3b0
[ 74.371459][ T5324] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.373598][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.376112][ T5324] ? clear_bhb_loop+0x60/0xb0
[ 74.377911][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.380307][ T5324] RIP: 0033:0x7f0683d8e929
[ 74.382142][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.389958][ T5324] RSP: 002b:00007f0684cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.393293][ T5324] RAX: ffffffffffffffda RBX: 00007f0683fb5fa0 RCX: 00007f0683d8e929
[ 74.396577][ T5324] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003
[ 74.399762][ T5324] RBP: 00007f0683e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 74.402930][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.406234][ T5324] R13: 0000000000000000 R14: 00007f0683fb5fa0 R15: 00007ffc024d16f8
[ 74.409485][ T5324]
[ 74.410766][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.413688][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full)
[ 74.419078][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.423347][ T5324] Call Trace:
[ 74.424801][ T5324]
[ 74.426017][ T5324] dump_stack_lvl+0x99/0x250
[ 74.427920][ T5324] ? __asan_memcpy+0x40/0x70
[ 74.429513][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.431542][ T5324] ? __pfx__printk+0x10/0x10
[ 74.433609][ T5324] panic+0x2db/0x790
[ 74.435664][ T5324] ? __pfx_panic+0x10/0x10
[ 74.438051][ T5324] ? show_trace_log_lvl+0x4fb/0x550
[ 74.440850][ T5324] __warn+0x31b/0x4b0
[ 74.442846][ T5324] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.445483][ T5324] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.448036][ T5324] report_bug+0x2be/0x4f0
[ 74.449869][ T5324] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.452666][ T5324] ? __alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.455083][ T5324] ? __alloc_frozen_pages_noprof+0x2ca/0x370
[ 74.457902][ T5324] handle_bug+0x84/0x160
[ 74.459775][ T5324] exc_invalid_op+0x1a/0x50
[ 74.461746][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 74.463599][ T5324] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[ 74.466389][ T5324] Code: 74 10 4c 89 e7 89 54 24 0c e8 74 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 39 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[ 74.474748][ T5324] RSP: 0018:ffffc9000d3b79a0 EFLAGS: 00010246
[ 74.477107][ T5324] RAX: ffffc9000d3b7900 RBX: 0000000000000014 RCX: 0000000000000000
[ 74.480226][ T5324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3b7a08
[ 74.483526][ T5324] RBP: ffffc9000d3b7a88 R08: ffffc9000d3b7a07 R09: 0000000000000000
[ 74.486848][ T5324] R10: ffffc9000d3b79e0 R11: fffff52001a76f41 R12: 0000000000000000
[ 74.490075][ T5324] R13: 1ffff92001a76f38 R14: 0000000000040cc0 R15: dffffc0000000000
[ 74.493571][ T5324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 74.496340][ T5324] __alloc_pages_noprof+0xa/0x30
[ 74.498526][ T5324] ___kmalloc_large_node+0x85/0x210
[ 74.500740][ T5324] __kmalloc_large_node_noprof+0x18/0x90
[ 74.503058][ T5324] __kmalloc_noprof+0x36f/0x4f0
[ 74.505221][ T5324] ? drm_syncobj_array_find+0x3a/0x450
[ 74.507445][ T5324] drm_syncobj_array_find+0x3a/0x450
[ 74.509719][ T5324] drm_syncobj_timeline_signal_ioctl+0x14e/0x7d0
[ 74.512504][ T5324] ? drm_dev_exit+0x3a/0x60
[ 74.514383][ T5324] drm_ioctl_kernel+0x2cc/0x390
[ 74.516530][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 74.519531][ T5324] ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 74.522030][ T5324] drm_ioctl+0x67f/0xb10
[ 74.523915][ T5324] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[ 74.526773][ T5324] ? __pfx_drm_ioctl+0x10/0x10
[ 74.528876][ T5324] ? __fget_files+0x2a/0x420
[ 74.530896][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.533091][ T5324] ? __pfx_drm_ioctl+0x10/0x10
[ 74.535205][ T5324] __se_sys_ioctl+0xfc/0x170
[ 74.537403][ T5324] do_syscall_64+0xfa/0x3b0
[ 74.539373][ T5324] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.541490][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.544202][ T5324] ? clear_bhb_loop+0x60/0xb0
[ 74.546262][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.548905][ T5324] RIP: 0033:0x7f0683d8e929
[ 74.551207][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.559629][ T5324] RSP: 002b:00007f0684cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.563347][ T5324] RAX: ffffffffffffffda RBX: 00007f0683fb5fa0 RCX: 00007f0683d8e929
[ 74.566879][ T5324] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003
[ 74.570517][ T5324] RBP: 00007f0683e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 74.573902][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.577371][ T5324] R13: 0000000000000000 R14: 00007f0683fb5fa0 R15: 00007ffc024d16f8
[ 74.580820][ T5324]
[ 74.582497][ T5324] Kernel Offset: disabled
[ 74.584304][ T5324] Rebooting in 86400 seconds..