program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x208, 0x138, 0xa, 0x148, 0x0, 0x10, 0x320, 0x2a8, 0x2a8, 0x320, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x50}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000100)=""/9, 0xfffffd87)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c)
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='md0', 0x3)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='+p', 0x2)
syz_usb_control_io(r2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002")
ioctl(r4, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006")
ioctl(r4, 0x400c0930, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000000)={0x40000, 0x6000, 0x8})
[ 102.001102][ T5278] Bluetooth: hci0: command tx timeout
[ 102.206922][ T5316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 102.446102][ T5312] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 102.597900][ T5312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 102.599348][ T5312] usb 5-1: config 0 has no interfaces?
[ 102.601704][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 102.601721][ T5312] usb 5-1: Product: syz
[ 102.601728][ T5312] usb 5-1: Manufacturer: syz
[ 102.601736][ T5312] usb 5-1: SerialNumber: syz
[ 102.637326][ T5312] usb 5-1: config 0 descriptor??
** 646 printk messages dropped **
[ 103.529755][ T5316] ------------[ cut here ]------------
[ 103.529767][ T5316] 1
[ 103.529772][ T5316] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5316
[ 103.539241][ T5316] Modules linked in:
[ 103.540970][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.544769][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.549103][ T5316] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.551816][ T5316] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 16 a6 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d ac 19 53 0f 67 48 0f b9 3a e9 68
[ 103.559945][ T5316] RSP: 0018:ffffc9000f15f560 EFLAGS: 00010246
[ 103.562407][ T5316] RAX: ffffc9000f15f500 RBX: 1ffff92001e2beb0 RCX: 0000000000000000
[ 103.565646][ T5316] RDX: 0000000000000000 RSI: 0000000000000019 RDI: ffffc9000f15f5c8
[ 103.569148][ T5316] RBP: ffffc9000f15f658 R08: ffffc9000f15f5c7 R09: 0000000000000000
[ 103.572561][ T5316] R10: ffffc9000f15f5a0 R11: fffff52001e2beb9 R12: 0000000000000000
[ 103.576047][ T5316] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 103.579347][ T5316] FS: 00007f6b9b9076c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 103.583069][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.586061][ T5316] CR2: 00007fe4a0fab6b0 CR3: 0000000044ca3000 CR4: 0000000000352ef0
[ 103.589450][ T5316] Call Trace:
[ 103.590964][ T5316]
[ 103.592177][ T5316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 103.594917][ T5316] ? __pfx_policy_nodemask+0x10/0x10
[ 103.597300][ T5316] alloc_pages_mpol+0x21e/0x390
[ 103.599335][ T5316] ? setup_conf+0x23a/0x1040
[ 103.604562][ T5316] ___kmalloc_large_node+0x4f/0x120
[ 103.607003][ T5316] __kmalloc_large_node_noprof+0x18/0x90
[ 103.609545][ T5316] __kmalloc_noprof+0x3fb/0x720
[ 103.611819][ T5316] ? __kmalloc_cache_noprof+0x14d/0x600
[ 103.614143][ T5316] ? setup_conf+0x1bc/0x1040
[ 103.616282][ T5316] ? setup_conf+0x23a/0x1040
[ 103.618350][ T5316] setup_conf+0x23a/0x1040
[ 103.620364][ T5316] raid1_run+0x14d/0xa50
[ 103.622343][ T5316] ? xa_find_after+0xae/0x430
[ 103.624421][ T5316] ? __pfx_raid1_run+0x10/0x10
[ 103.626589][ T5316] ? do_raw_spin_unlock+0x4d/0x200
[ 103.628758][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 103.630822][ T5316] ? get_pers+0x22b/0x2e0
[ 103.632753][ T5316] ? __pfx_get_pers+0x10/0x10
[ 103.634869][ T5316] ? preempt_schedule_thunk+0x16/0x40
[ 103.637260][ T5316] md_run+0xc3d/0x1cd0
[ 103.639015][ T5316] ? __pfx_md_run+0x10/0x10
[ 103.641030][ T5316] do_md_run+0x35/0x720
[ 103.642978][ T5316] ? md_ioctl+0x1e23/0x2610
[ 103.644923][ T5316] md_ioctl+0x1e2b/0x2610
[ 103.647025][ T5316] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 103.649417][ T5316] ? tomoyo_path_number_perm+0x219/0x5f0
[ 103.651831][ T5316] ? __pfx_md_ioctl+0x10/0x10
[ 103.654434][ T5316] ? do_vfs_ioctl+0x116f/0x1530
[ 103.656675][ T5316] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 103.658904][ T5316] ? hook_file_ioctl+0x1f2/0x600
[ 103.661070][ T5316] ? __pfx_md_ioctl+0x10/0x10
[ 103.663150][ T5316] blkdev_ioctl+0x5e3/0x740
[ 103.664991][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.667295][ T5316] ? __fget_files+0x2a/0x420
[ 103.669262][ T5316] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.671440][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.673679][ T5316] __se_sys_ioctl+0xfc/0x170
[ 103.675638][ T5316] do_syscall_64+0x166/0x520
[ 103.677719][ T5316] ? trace_irq_disable+0x3b/0x140
[ 103.679859][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.682471][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 103.684499][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.687165][ T5316] RIP: 0033:0x7f6b9a99e199
[ 103.689021][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.696868][ T5316] RSP: 002b:00007f6b9b906fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.700485][ T5316] RAX: ffffffffffffffda RBX: 00007f6b9ac25fa0 RCX: 00007f6b9a99e199
[ 103.704230][ T5316] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000007
[ 103.713880][ T5316] RBP: 00007f6b9aa35888 R08: 0000000000000000 R09: 0000000000000000
[ 103.718141][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.721526][ T5316] R13: 00007f6b9ac26038 R14: 00007f6b9ac25fa0 R15: 00007fff44859518
[ 103.724869][ T5316]
[ 103.726365][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.729419][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.733190][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.737304][ T5316] Call Trace:
[ 103.738624][ T5316]
[ 103.739857][ T5316] vpanic+0x56d/0xa60
[ 103.741521][ T5316] ? __pfx__printk+0x10/0x10
[ 103.743440][ T5316] ? __pfx_vpanic+0x10/0x10
[ 103.745318][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 103.747514][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 103.749786][ T5316] panic+0xc5/0xd0
[ 103.751495][ T5316] ? __pfx_panic+0x10/0x10
[ 103.753379][ T5316] __warn+0x315/0x4c0
[ 103.755185][ T5316] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.757680][ T5316] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.760216][ T5316] __report_bug+0x276/0x570
[ 103.762256][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 103.764698][ T5316] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.767347][ T5316] ? __pfx___report_bug+0x10/0x10
[ 103.769563][ T5316] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.771744][ T5316] ? lock_acquire+0x115/0x350
[ 103.773835][ T5316] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.776157][ T5316] report_bug+0x16b/0x220
[ 103.777906][ T5316] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.780553][ T5316] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 103.783218][ T5316] handle_bug+0x9c/0x200
[ 103.785095][ T5316] exc_invalid_op+0x1a/0x50
[ 103.787112][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 103.789308][ T5316] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 103.792173][ T5316] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 16 a6 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d ac 19 53 0f 67 48 0f b9 3a e9 68
[ 103.800715][ T5316] RSP: 0018:ffffc9000f15f560 EFLAGS: 00010246
[ 103.803181][ T5316] RAX: ffffc9000f15f500 RBX: 1ffff92001e2beb0 RCX: 0000000000000000
[ 103.806561][ T5316] RDX: 0000000000000000 RSI: 0000000000000019 RDI: ffffc9000f15f5c8
[ 103.810061][ T5316] RBP: ffffc9000f15f658 R08: ffffc9000f15f5c7 R09: 0000000000000000
[ 103.813385][ T5316] R10: ffffc9000f15f5a0 R11: fffff52001e2beb9 R12: 0000000000000000
[ 103.816806][ T5316] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 103.820336][ T5316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 103.823040][ T5316] ? __pfx_policy_nodemask+0x10/0x10
[ 103.825419][ T5316] alloc_pages_mpol+0x21e/0x390
[ 103.827522][ T5316] ? setup_conf+0x23a/0x1040
[ 103.829579][ T5316] ___kmalloc_large_node+0x4f/0x120
[ 103.831818][ T5316] __kmalloc_large_node_noprof+0x18/0x90
[ 103.834139][ T5316] __kmalloc_noprof+0x3fb/0x720
[ 103.836242][ T5316] ? __kmalloc_cache_noprof+0x14d/0x600
[ 103.838659][ T5316] ? setup_conf+0x1bc/0x1040
[ 103.840624][ T5316] ? setup_conf+0x23a/0x1040
[ 103.842746][ T5316] setup_conf+0x23a/0x1040
[ 103.844799][ T5316] raid1_run+0x14d/0xa50
[ 103.846707][ T5316] ? xa_find_after+0xae/0x430
[ 103.848817][ T5316] ? __pfx_raid1_run+0x10/0x10
[ 103.850934][ T5316] ? do_raw_spin_unlock+0x4d/0x200
[ 103.853192][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 103.855322][ T5316] ? get_pers+0x22b/0x2e0
[ 103.857212][ T5316] ? __pfx_get_pers+0x10/0x10
[ 103.859145][ T5316] ? preempt_schedule_thunk+0x16/0x40
[ 103.861326][ T5316] md_run+0xc3d/0x1cd0
[ 103.862927][ T5316] ? __pfx_md_run+0x10/0x10
[ 103.864839][ T5316] do_md_run+0x35/0x720
[ 103.866611][ T5316] ? md_ioctl+0x1e23/0x2610
[ 103.868597][ T5316] md_ioctl+0x1e2b/0x2610
[ 103.870496][ T5316] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 103.872965][ T5316] ? tomoyo_path_number_perm+0x219/0x5f0
[ 103.875435][ T5316] ? __pfx_md_ioctl+0x10/0x10
[ 103.877541][ T5316] ? do_vfs_ioctl+0x116f/0x1530
[ 103.879668][ T5316] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 103.881943][ T5316] ? hook_file_ioctl+0x1f2/0x600
[ 103.884070][ T5316] ? __pfx_md_ioctl+0x10/0x10
[ 103.886264][ T5316] blkdev_ioctl+0x5e3/0x740
[ 103.888183][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.890442][ T5316] ? __fget_files+0x2a/0x420
[ 103.892494][ T5316] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.894646][ T5316] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.896815][ T5316] __se_sys_ioctl+0xfc/0x170
[ 103.898829][ T5316] do_syscall_64+0x166/0x520
[ 103.900869][ T5316] ? trace_irq_disable+0x3b/0x140
[ 103.903115][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.905777][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 103.907821][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.910475][ T5316] RIP: 0033:0x7f6b9a99e199
[ 103.912488][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.920448][ T5316] RSP: 002b:00007f6b9b906fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.923645][ T5316] RAX: ffffffffffffffda RBX: 00007f6b9ac25fa0 RCX: 00007f6b9a99e199
[ 103.926623][ T5316] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000007
[ 103.929647][ T5316] RBP: 00007f6b9aa35888 R08: 0000000000000000 R09: 0000000000000000
[ 103.932812][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.936086][ T5316] R13: 00007f6b9ac26038 R14: 00007f6b9ac25fa0 R15: 00007fff44859518
[ 103.939491][ T5316]
[ 103.945663][ T5316] Kernel Offset: disabled
[ 103.947609][ T5316] Rebooting in 86400 seconds..