program: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x8, &(0x7f0000000080)=[{0x1000, 0x8, 0x4, 0x26d}, {0x6, 0x2, 0x3, 0x5bc}, {0xffff, 0x3, 0x0, 0xe02}, {0xc6, 0x3, 0x7, 0xa8}, {0x6, 0xbb, 0xc, 0x3f}, {0x8, 0x8, 0x8, 0x8}, {0x0, 0x4, 0x2, 0x2}, {0x40, 0x8, 0x0, 0x5}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b40000000200000066000000000000007301350000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xca, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711f8d0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b8b59ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0192babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34d69971782d3247061e13be323c12"], 0x0, 0x8000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000c00)=ANY=[@ANYRES8=r2, @ANYBLOB='>'], 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='md0', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r7, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002") ioctl(r7, 0x40140921, &(0x7f0000000400)="0000000001") ioctl(r7, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006") ioctl(r7, 0x400c0930, 0x0) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0) [ 96.669342][ T39] vhci_hcd vhci_hcd.0: stop threads [ 93.618007][ T4646] Bluetooth: hci0: command tx timeout [ 93.633793][ T10] cfg80211: failed to load regulatory.db [ 93.804598][ T4646] Bluetooth: hci0: unexpected subevent 0x12 length: 14 > 5 [ 93.832476][ T5318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.932280][ T5318] ------------[ cut here ]------------ [ 93.932294][ T5318] 1 [ 93.932300][ T5318] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5318 [ 93.940666][ T5318] Modules linked in: [ 93.942181][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.945757][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.950477][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 93.953123][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 76 6b 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 3c df 53 0e 67 48 0f b9 3a e9 68 [ 93.960590][ T5318] RSP: 0018:ffffc9000df3f560 EFLAGS: 00010246 [ 93.963087][ T5318] RAX: ffffc9000df3f500 RBX: 1ffff92001be7eb0 RCX: 0000000000000000 [ 93.966319][ T5318] RDX: 0000000000000000 RSI: 0000000000000018 RDI: ffffc9000df3f5c8 [ 93.969763][ T5318] RBP: ffffc9000df3f658 R08: ffffc9000df3f5c7 R09: 0000000000000000 [ 93.973542][ T5318] R10: ffffc9000df3f5a0 R11: fffff52001be7eb9 R12: 0000000000000000 [ 93.977798][ T5318] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 93.981276][ T5318] FS: 00007fb3687bf6c0(0000) GS:ffff88808c2bb000(0000) knlGS:0000000000000000 [ 93.984967][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.987536][ T5318] CR2: 00007fceae771e9c CR3: 0000000013751000 CR4: 0000000000352ef0 [ 93.991090][ T5318] Call Trace: [ 93.992732][ T5318] [ 93.994005][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.996699][ T5318] ? __pfx_policy_nodemask+0x10/0x10 [ 93.999034][ T5318] alloc_pages_mpol+0x21e/0x390 [ 94.001216][ T5318] ? setup_conf+0x23a/0x1040 [ 94.003596][ T5318] ___kmalloc_large_node+0x4f/0x120 [ 94.005914][ T5318] __kmalloc_large_node_noprof+0x18/0x90 [ 94.008430][ T5318] __kmalloc_noprof+0x3fb/0x720 [ 94.010594][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600 [ 94.015141][ T5318] ? setup_conf+0x1bc/0x1040 [ 94.016922][ T5318] ? setup_conf+0x23a/0x1040 [ 94.018644][ T5318] setup_conf+0x23a/0x1040 [ 94.020354][ T5318] raid1_run+0x14d/0xa50 [ 94.021918][ T5318] ? xa_find_after+0xae/0x430 [ 94.023808][ T5318] ? __pfx_raid1_run+0x10/0x10 [ 94.025530][ T5318] ? do_raw_spin_unlock+0x4d/0x200 [ 94.027511][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 94.029461][ T5318] ? get_pers+0x22b/0x2e0 [ 94.032063][ T5318] ? __pfx_get_pers+0x10/0x10 [ 94.034204][ T5318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.036687][ T5318] md_run+0xc3d/0x1cd0 [ 94.038374][ T5318] ? __pfx_md_run+0x10/0x10 [ 94.040329][ T5318] do_md_run+0x35/0x720 [ 94.042179][ T5318] ? md_ioctl+0x1e23/0x2610 [ 94.044138][ T5318] md_ioctl+0x1e2b/0x2610 [ 94.045939][ T5318] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 94.048238][ T5318] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.050504][ T5318] ? __pfx_md_ioctl+0x10/0x10 [ 94.052763][ T5318] ? do_vfs_ioctl+0x116f/0x1530 [ 94.054929][ T5318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.057124][ T5318] ? hook_file_ioctl+0x1f2/0x600 [ 94.059230][ T5318] ? __pfx_md_ioctl+0x10/0x10 [ 94.061315][ T5318] blkdev_ioctl+0x5e3/0x740 [ 94.063407][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.065531][ T5318] ? __fget_files+0x2a/0x420 [ 94.067567][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.069777][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.072016][ T5318] __se_sys_ioctl+0xfc/0x170 [ 94.074559][ T5318] do_syscall_64+0x166/0x520 [ 94.076572][ T5318] ? trace_irq_disable+0x3b/0x140 [ 94.078824][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.081820][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 94.084036][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.086290][ T5318] RIP: 0033:0x7fb36799e199 [ 94.088079][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.095976][ T5318] RSP: 002b:00007fb3687befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.099624][ T5318] RAX: ffffffffffffffda RBX: 00007fb367c25fa0 RCX: 00007fb36799e199 [ 94.102943][ T5318] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000008 [ 94.106200][ T5318] RBP: 00007fb367a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 94.109591][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.113146][ T5318] R13: 00007fb367c26038 R14: 00007fb367c25fa0 R15: 00007ffc4e1f4f68 [ 94.116313][ T5318] [ 94.117553][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.120574][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.124342][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.128755][ T5318] Call Trace: [ 94.130339][ T5318] [ 94.131699][ T5318] vpanic+0x56d/0xa60 [ 94.133412][ T5318] ? __pfx__printk+0x10/0x10 [ 94.135169][ T5318] ? __pfx_vpanic+0x10/0x10 [ 94.136965][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 94.139080][ T5318] ? is_bpf_text_address+0x26/0x2b0 [ 94.141087][ T5318] panic+0xc5/0xd0 [ 94.142544][ T5318] ? __pfx_panic+0x10/0x10 [ 94.144262][ T5318] __warn+0x315/0x4c0 [ 94.145818][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.148147][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.150635][ T5318] __report_bug+0x276/0x570 [ 94.152626][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 94.154919][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.157376][ T5318] ? __pfx___report_bug+0x10/0x10 [ 94.159494][ T5318] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.161605][ T5318] ? lock_acquire+0x115/0x350 [ 94.163526][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.165784][ T5318] report_bug+0x16b/0x220 [ 94.167432][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.169737][ T5318] ? __alloc_frozen_pages_noprof+0x427/0x5a0 [ 94.172125][ T5318] handle_bug+0x9c/0x200 [ 94.173921][ T5318] exc_invalid_op+0x1a/0x50 [ 94.175733][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 94.177705][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 94.180394][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 76 6b 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 3c df 53 0e 67 48 0f b9 3a e9 68 [ 94.189175][ T5318] RSP: 0018:ffffc9000df3f560 EFLAGS: 00010246 [ 94.192131][ T5318] RAX: ffffc9000df3f500 RBX: 1ffff92001be7eb0 RCX: 0000000000000000 [ 94.195697][ T5318] RDX: 0000000000000000 RSI: 0000000000000018 RDI: ffffc9000df3f5c8 [ 94.199552][ T5318] RBP: ffffc9000df3f658 R08: ffffc9000df3f5c7 R09: 0000000000000000 [ 94.202944][ T5318] R10: ffffc9000df3f5a0 R11: fffff52001be7eb9 R12: 0000000000000000 [ 94.207517][ T5318] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 94.210902][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.213471][ T5318] ? __pfx_policy_nodemask+0x10/0x10 [ 94.215710][ T5318] alloc_pages_mpol+0x21e/0x390 [ 94.217960][ T5318] ? setup_conf+0x23a/0x1040 [ 94.219995][ T5318] ___kmalloc_large_node+0x4f/0x120 [ 94.222416][ T5318] __kmalloc_large_node_noprof+0x18/0x90 [ 94.225298][ T5318] __kmalloc_noprof+0x3fb/0x720 [ 94.227495][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600 [ 94.229673][ T5318] ? setup_conf+0x1bc/0x1040 [ 94.231869][ T5318] ? setup_conf+0x23a/0x1040 [ 94.234269][ T5318] setup_conf+0x23a/0x1040 [ 94.236630][ T5318] raid1_run+0x14d/0xa50 [ 94.238613][ T5318] ? xa_find_after+0xae/0x430 [ 94.240621][ T5318] ? __pfx_raid1_run+0x10/0x10 [ 94.242505][ T5318] ? do_raw_spin_unlock+0x4d/0x200 [ 94.244456][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 94.246213][ T5318] ? get_pers+0x22b/0x2e0 [ 94.247983][ T5318] ? __pfx_get_pers+0x10/0x10 [ 94.249821][ T5318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.252080][ T5318] md_run+0xc3d/0x1cd0 [ 94.253705][ T5318] ? __pfx_md_run+0x10/0x10 [ 94.255560][ T5318] do_md_run+0x35/0x720 [ 94.257202][ T5318] ? md_ioctl+0x1e23/0x2610 [ 94.258988][ T5318] md_ioctl+0x1e2b/0x2610 [ 94.260779][ T5318] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 94.263127][ T5318] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.265491][ T5318] ? __pfx_md_ioctl+0x10/0x10 [ 94.267646][ T5318] ? do_vfs_ioctl+0x116f/0x1530 [ 94.269815][ T5318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.271954][ T5318] ? hook_file_ioctl+0x1f2/0x600 [ 94.273773][ T5318] ? __pfx_md_ioctl+0x10/0x10 [ 94.275521][ T5318] blkdev_ioctl+0x5e3/0x740 [ 94.277297][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.279356][ T5318] ? __fget_files+0x2a/0x420 [ 94.281373][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.283195][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.285216][ T5318] __se_sys_ioctl+0xfc/0x170 [ 94.287176][ T5318] do_syscall_64+0x166/0x520 [ 94.289130][ T5318] ? trace_irq_disable+0x3b/0x140 [ 94.291292][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.293778][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 94.295659][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.298052][ T5318] RIP: 0033:0x7fb36799e199 [ 94.299876][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.307896][ T5318] RSP: 002b:00007fb3687befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.311568][ T5318] RAX: ffffffffffffffda RBX: 00007fb367c25fa0 RCX: 00007fb36799e199 [ 94.315019][ T5318] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000008 [ 94.318358][ T5318] RBP: 00007fb367a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 94.321674][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.325147][ T5318] R13: 00007fb367c26038 R14: 00007fb367c25fa0 R15: 00007ffc4e1f4f68 [ 94.328464][ T5318] [ 94.330241][ T5318] Kernel Offset: disabled [ 94.332086][ T5318] Rebooting in 86400 seconds..