program: socket(0x400000000010, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) symlink(&(0x7f0000000180)='streaming/uncompressed/u\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7e) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000006c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000700)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001a00)='./sys\x00', &(0x7f0000001b00)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./dev\x00', &(0x7f0000001bc0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000001c40)='md0', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="20000000107437"], 0x20}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000001e00)="000000005a000000030000000000000000000000000000000100000001f6ec4f74dbd0a124324e20a53ec207aa379df8dc5bfd2b5f97853bc36ccf6f1d4079020910718a99d40cb44bc50d10ede4da1b7c0bbbe8ecc66f8dce00b47c81f04a9bbf0189f346b405e11caa34341f18a8afa16184ec1d0ec77cc9d8e297101cfa620e582113fa927dcf5523ba5c36ecb4d883e1c2bf98996edc088745a3ecdb5afb93f74e6f6f352fbd0ec2ae6c45712cd617c418ff7c3888759109cb36dabe27555b97da4db2e1f15d0968203f6f1d2fa8c2ec361049d3ad6594b0fb5012b8a849f6ced90852896e340807a3f79b9232e191f7f638542b72b8fe579f381c377b6d20f36c028a1243413a") ioctl(r6, 0x40140921, &(0x7f0000001dc0)="0000000001") ioctl(r6, 0x400c0930, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001900)={0x28, 0x7, r3, 0x0, &(0x7f000059a000/0x10000)=nil, 0x10000, 0x401}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x20004809) sendmsg$nl_generic(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX=r4, @ANYRES8=r3, @ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x40000000) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x197e0000}, {{0x0, 0x0, 0x0}, 0x803}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)=""/4095, 0xfff}, {&(0x7f0000001800)=""/218, 0xda}], 0x2}, 0x9}], 0x4, 0x0, 0x0) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8}, 'streaming/uncompressed/u\x00'}) sendto$inet(r9, &(0x7f0000001f40)="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", 0x111, 0x20004000, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./security\x00', 0x1ff) [ 124.874736][ T4653] Bluetooth: hci0: command tx timeout [ 125.019665][ T5331] iommufd_mock iommufd_mock0: Adding to iommu group 11 [ 125.063064][ T5331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.132249][ T5331] md0: Warning: Device ram0 is misaligned [ 125.132395][ T5331] ------------[ cut here ]------------ [ 125.132400][ T5331] !(flags & __GFP_NOWARN) [ 125.132411][ T5331] WARNING: mm/slub.c:7023 at __kvmalloc_node_noprof+0x798/0x820, CPU#0: syz.0.0/5331 [ 125.144167][ T5331] Modules linked in: [ 125.145998][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.149174][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.153363][ T5331] RIP: 0010:__kvmalloc_node_noprof+0x798/0x820 [ 125.156156][ T5331] Code: ff 48 c7 c7 f0 92 e9 8f 48 89 de e8 c2 9b f0 02 e9 1b fc ff ff 48 c7 c7 30 93 e9 8f 48 89 de e8 ae 9b f0 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 125.164743][ T5331] RSP: 0018:ffffc9000dfe7558 EFLAGS: 00010246 [ 125.167504][ T5331] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 8000000000000001 [ 125.170939][ T5331] RDX: 000000027f67b008 RSI: ffffffff8c6deb60 RDI: ffffffff8c6deb20 [ 125.174490][ T5331] RBP: 00000000ffffffff R08: 00000000000029c0 R09: 00000000ffffffff [ 125.177942][ T5331] R10: 0000000000000006 R11: 0000000000000002 R12: 000000027f67b008 [ 125.181605][ T5331] R13: 00000000000029c0 R14: dffffc0000000000 R15: ffffffff8885075f [ 125.185172][ T5331] FS: 00007f3eb32836c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 125.189042][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.192028][ T5331] CR2: 00007fb43a2d1e9c CR3: 0000000040043000 CR4: 0000000000352ef0 [ 125.195677][ T5331] Call Trace: [ 125.197243][ T5331] [ 125.198603][ T5331] ? __kvmalloc_node_noprof+0x345/0x820 [ 125.201047][ T5331] ? create_strip_zones+0xabb/0x2170 [ 125.203347][ T5331] ? create_strip_zones+0xb6f/0x2170 [ 125.206192][ T5331] create_strip_zones+0xb6f/0x2170 [ 125.208882][ T5331] ? queue_limits_commit_update+0x113/0x390 [ 125.211362][ T5331] raid0_run+0x3de/0xed0 [ 125.213197][ T5331] ? lockdep_unlock+0x5c/0xd0 [ 125.215369][ T5331] ? __lock_acquire+0x1511/0x2de0 [ 125.217472][ T5331] ? __pfx_raid0_run+0x10/0x10 [ 125.219839][ T5331] ? xas_load+0x586/0x5a0 [ 125.221814][ T5331] ? xa_find+0x8c/0x2b0 [ 125.223649][ T5331] ? __pfx_get_pers+0x10/0x10 [ 125.225751][ T5331] ? preempt_schedule_thunk+0x16/0x40 [ 125.228125][ T5331] md_run+0xc3d/0x1cd0 [ 125.229997][ T5331] ? __pfx_md_run+0x10/0x10 [ 125.232128][ T5331] do_md_run+0x35/0x720 [ 125.234132][ T5331] ? md_ioctl+0x1e23/0x2610 [ 125.236085][ T5331] md_ioctl+0x1e2b/0x2610 [ 125.238055][ T5331] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 125.240555][ T5331] ? tomoyo_path_number_perm+0x219/0x5f0 [ 125.243227][ T5331] ? __pfx_md_ioctl+0x10/0x10 [ 125.245501][ T5331] ? do_vfs_ioctl+0x116f/0x1530 [ 125.249216][ T5331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.251446][ T5331] ? hook_file_ioctl+0x1f2/0x600 [ 125.253809][ T5331] ? __pfx_md_ioctl+0x10/0x10 [ 125.256107][ T5331] blkdev_ioctl+0x5e3/0x740 [ 125.258278][ T5331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 125.260500][ T5331] ? __fget_files+0x2a/0x420 [ 125.262484][ T5331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.264917][ T5331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 125.267200][ T5331] __se_sys_ioctl+0xfc/0x170 [ 125.269353][ T5331] do_syscall_64+0x166/0x520 [ 125.271405][ T5331] ? trace_irq_disable+0x3b/0x140 [ 125.273743][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.276544][ T5331] ? clear_bhb_loop+0x70/0xc0 [ 125.278620][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.281190][ T5331] RIP: 0033:0x7f3eb239e2d9 [ 125.283033][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.292234][ T5331] RSP: 002b:00007f3eb3282fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.296236][ T5331] RAX: ffffffffffffffda RBX: 00007f3eb2625fa0 RCX: 00007f3eb239e2d9 [ 125.299762][ T5331] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000008 [ 125.303225][ T5331] RBP: 00007f3eb2435888 R08: 0000000000000000 R09: 0000000000000000 [ 125.307052][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.312927][ T5331] R13: 00007f3eb2626038 R14: 00007f3eb2625fa0 R15: 00007ffcc3bfb8f8 [ 125.316735][ T5331] [ 125.318117][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.321161][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.324966][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.329166][ T5331] Call Trace: [ 125.330651][ T5331] [ 125.331968][ T5331] vpanic+0x56d/0xa60 [ 125.333666][ T5331] ? __pfx__printk+0x10/0x10 [ 125.335543][ T5331] ? __pfx_vpanic+0x10/0x10 [ 125.337577][ T5331] ? is_bpf_text_address+0x292/0x2b0 [ 125.340013][ T5331] ? is_bpf_text_address+0x26/0x2b0 [ 125.342255][ T5331] panic+0xc5/0xd0 [ 125.343851][ T5331] ? __pfx_panic+0x10/0x10 [ 125.345815][ T5331] __warn+0x315/0x4c0 [ 125.347506][ T5331] ? __kvmalloc_node_noprof+0x798/0x820 [ 125.349865][ T5331] ? __kvmalloc_node_noprof+0x798/0x820 [ 125.352117][ T5331] __report_bug+0x276/0x570 [ 125.354050][ T5331] ? kasan_save_track+0x4f/0x80 [ 125.356172][ T5331] ? kasan_save_track+0x3e/0x80 [ 125.358372][ T5331] ? __kvmalloc_node_noprof+0x798/0x820 [ 125.360848][ T5331] ? __pfx___report_bug+0x10/0x10 [ 125.362953][ T5331] ? __asan_memset+0x22/0x50 [ 125.364946][ T5331] ? __alloc_frozen_pages_noprof+0xa7/0x5a0 [ 125.367527][ T5331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.370218][ T5331] ? __kvmalloc_node_noprof+0x798/0x820 [ 125.372647][ T5331] report_bug+0x16b/0x220 [ 125.374477][ T5331] ? __kvmalloc_node_noprof+0x798/0x820 [ 125.376932][ T5331] ? __kvmalloc_node_noprof+0x79a/0x820 [ 125.379492][ T5331] handle_bug+0x9c/0x200 [ 125.381378][ T5331] exc_invalid_op+0x1a/0x50 [ 125.383345][ T5331] asm_exc_invalid_op+0x1a/0x20 [ 125.385490][ T5331] RIP: 0010:__kvmalloc_node_noprof+0x798/0x820 [ 125.388202][ T5331] Code: ff 48 c7 c7 f0 92 e9 8f 48 89 de e8 c2 9b f0 02 e9 1b fc ff ff 48 c7 c7 30 93 e9 8f 48 89 de e8 ae 9b f0 02 e9 4c fc ff ff 90 <0f> 0b 90 31 db e9 06 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 7f [ 125.396174][ T5331] RSP: 0018:ffffc9000dfe7558 EFLAGS: 00010246 [ 125.398566][ T5331] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 8000000000000001 [ 125.401692][ T5331] RDX: 000000027f67b008 RSI: ffffffff8c6deb60 RDI: ffffffff8c6deb20 [ 125.404939][ T5331] RBP: 00000000ffffffff R08: 00000000000029c0 R09: 00000000ffffffff [ 125.408386][ T5331] R10: 0000000000000006 R11: 0000000000000002 R12: 000000027f67b008 [ 125.411900][ T5331] R13: 00000000000029c0 R14: dffffc0000000000 R15: ffffffff8885075f [ 125.415488][ T5331] ? create_strip_zones+0xb6f/0x2170 [ 125.417801][ T5331] ? __kvmalloc_node_noprof+0x52f/0x820 [ 125.420178][ T5331] ? __kvmalloc_node_noprof+0x345/0x820 [ 125.422592][ T5331] ? create_strip_zones+0xabb/0x2170 [ 125.424867][ T5331] ? create_strip_zones+0xb6f/0x2170 [ 125.427155][ T5331] create_strip_zones+0xb6f/0x2170 [ 125.429441][ T5331] ? queue_limits_commit_update+0x113/0x390 [ 125.432059][ T5331] raid0_run+0x3de/0xed0 [ 125.433924][ T5331] ? lockdep_unlock+0x5c/0xd0 [ 125.435984][ T5331] ? __lock_acquire+0x1511/0x2de0 [ 125.438133][ T5331] ? __pfx_raid0_run+0x10/0x10 [ 125.440156][ T5331] ? xas_load+0x586/0x5a0 [ 125.442016][ T5331] ? xa_find+0x8c/0x2b0 [ 125.443962][ T5331] ? __pfx_get_pers+0x10/0x10 [ 125.445994][ T5331] ? preempt_schedule_thunk+0x16/0x40 [ 125.449026][ T5331] md_run+0xc3d/0x1cd0 [ 125.451375][ T5331] ? __pfx_md_run+0x10/0x10 [ 125.453658][ T5331] do_md_run+0x35/0x720 [ 125.455568][ T5331] ? md_ioctl+0x1e23/0x2610 [ 125.457631][ T5331] md_ioctl+0x1e2b/0x2610 [ 125.459550][ T5331] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 125.461958][ T5331] ? tomoyo_path_number_perm+0x219/0x5f0 [ 125.464414][ T5331] ? __pfx_md_ioctl+0x10/0x10 [ 125.466520][ T5331] ? do_vfs_ioctl+0x116f/0x1530 [ 125.468798][ T5331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.470988][ T5331] ? hook_file_ioctl+0x1f2/0x600 [ 125.473175][ T5331] ? __pfx_md_ioctl+0x10/0x10 [ 125.475108][ T5331] blkdev_ioctl+0x5e3/0x740 [ 125.477217][ T5331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 125.479264][ T5331] ? __fget_files+0x2a/0x420 [ 125.481188][ T5331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.483256][ T5331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 125.485477][ T5331] __se_sys_ioctl+0xfc/0x170 [ 125.487473][ T5331] do_syscall_64+0x166/0x520 [ 125.489566][ T5331] ? trace_irq_disable+0x3b/0x140 [ 125.491779][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.494348][ T5331] ? clear_bhb_loop+0x70/0xc0 [ 125.496431][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.499077][ T5331] RIP: 0033:0x7f3eb239e2d9 [ 125.501071][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.509162][ T5331] RSP: 002b:00007f3eb3282fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.512801][ T5331] RAX: ffffffffffffffda RBX: 00007f3eb2625fa0 RCX: 00007f3eb239e2d9 [ 125.516336][ T5331] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000008 [ 125.519905][ T5331] RBP: 00007f3eb2435888 R08: 0000000000000000 R09: 0000000000000000 [ 125.523289][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.526673][ T5331] R13: 00007f3eb2626038 R14: 00007f3eb2625fa0 R15: 00007ffcc3bfb8f8 [ 125.529970][ T5331] [ 125.531722][ T5331] Kernel Offset: disabled [ 125.533515][ T5331] Rebooting in 86400 seconds..