program:
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002")
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001")
ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x606d, 0x0, 0x1ff}}}}}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x80440)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee8000)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xac}, [], {0x95, 0x0, 0xf}}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x1a601, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x5, 0x4, 0x3, '\x00', 0x5})
[ 93.640652][ T4646] Bluetooth: hci0: command tx timeout
[ 93.670776][ T10] cfg80211: failed to load regulatory.db
[ 93.752511][ T5318] loop0: detected capacity change from 0 to 22
[ 93.768484][ T5318] MTD: Attempt to mount non-MTD device "/dev/loop0"
[ 93.814033][ T5318] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 93.846530][ T5318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 93.913285][ T5318] block device autoloading is deprecated and will be removed.
[ 94.510324][ T5318] ------------[ cut here ]------------
[ 94.510337][ T5318] 1
[ 94.510356][ T5318] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5318
[ 94.521214][ T5318] Modules linked in:
[ 94.523471][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.527253][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.531595][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.534216][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 16 6b 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 9c de 53 0e 67 48 0f b9 3a e9 68
[ 94.542509][ T5318] RSP: 0018:ffffc9000e0d7560 EFLAGS: 00010246
[ 94.545123][ T5318] RAX: ffffc9000e0d7500 RBX: 1ffff92001c1aeb0 RCX: 0000000000000000
[ 94.547948][ T5318] RDX: 0000000000000000 RSI: 0000000000000017 RDI: ffffc9000e0d75c8
[ 94.550824][ T5318] RBP: ffffc9000e0d7658 R08: ffffc9000e0d75c7 R09: 0000000000000000
[ 94.554072][ T5318] R10: ffffc9000e0d75a0 R11: fffff52001c1aeb9 R12: 0000000000000000
[ 94.557798][ T5318] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 94.561305][ T5318] FS: 00007fa4b249e6c0(0000) GS:ffff88808c2bb000(0000) knlGS:0000000000000000
[ 94.565186][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.567959][ T5318] CR2: 00007fa4b247d9a0 CR3: 000000001d1cc000 CR4: 0000000000352ef0
[ 94.571389][ T5318] Call Trace:
[ 94.572896][ T5318]
[ 94.574125][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 94.576567][ T5318] ? __pfx_policy_nodemask+0x10/0x10
[ 94.578881][ T5318] alloc_pages_mpol+0x21e/0x390
[ 94.580871][ T5318] ? setup_conf+0x23a/0x1040
[ 94.582822][ T5318] ___kmalloc_large_node+0x4f/0x120
[ 94.585096][ T5318] __kmalloc_large_node_noprof+0x18/0x90
[ 94.587173][ T5318] __kmalloc_noprof+0x3fb/0x720
[ 94.589623][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 94.592075][ T5318] ? setup_conf+0x1bc/0x1040
[ 94.594217][ T5318] ? setup_conf+0x23a/0x1040
[ 94.596166][ T5318] setup_conf+0x23a/0x1040
[ 94.598033][ T5318] raid1_run+0x14d/0xa50
[ 94.599908][ T5318] ? xa_find_after+0xae/0x430
[ 94.603225][ T5318] ? __pfx_raid1_run+0x10/0x10
[ 94.605220][ T5318] ? do_raw_spin_unlock+0x4d/0x200
[ 94.607526][ T5318] ? _raw_spin_unlock+0x28/0x50
[ 94.609478][ T5318] ? get_pers+0x22b/0x2e0
[ 94.611212][ T5318] ? __pfx_get_pers+0x10/0x10
[ 94.613204][ T5318] ? preempt_schedule_thunk+0x16/0x40
[ 94.615527][ T5318] md_run+0xc3d/0x1cd0
[ 94.617233][ T5318] ? __pfx_md_run+0x10/0x10
[ 94.619265][ T5318] do_md_run+0x35/0x720
[ 94.621103][ T5318] ? md_ioctl+0x1e23/0x2610
[ 94.623125][ T5318] md_ioctl+0x1e2b/0x2610
[ 94.625199][ T5318] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 94.627717][ T5318] ? tomoyo_path_number_perm+0x219/0x5f0
[ 94.630225][ T5318] ? __pfx_md_ioctl+0x10/0x10
[ 94.632272][ T5318] ? do_vfs_ioctl+0x116f/0x1530
[ 94.634426][ T5318] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 94.636820][ T5318] ? hook_file_ioctl+0x1f2/0x600
[ 94.638568][ T5318] ? __pfx_md_ioctl+0x10/0x10
[ 94.640432][ T5318] blkdev_ioctl+0x5e3/0x740
[ 94.642387][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.644543][ T5318] ? __fget_files+0x2a/0x420
[ 94.646637][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 94.648790][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.650760][ T5318] __se_sys_ioctl+0xfc/0x170
[ 94.652786][ T5318] do_syscall_64+0x166/0x520
[ 94.654790][ T5318] ? trace_irq_disable+0x3b/0x140
[ 94.657097][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.659855][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 94.661790][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.664312][ T5318] RIP: 0033:0x7fa4b159e199
[ 94.666310][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.674545][ T5318] RSP: 002b:00007fa4b249dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.678291][ T5318] RAX: ffffffffffffffda RBX: 00007fa4b1825fa0 RCX: 00007fa4b159e199
[ 94.681763][ T5318] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005
[ 94.685676][ T5318] RBP: 00007fa4b16358e0 R08: 0000000000000000 R09: 0000000000000000
[ 94.690097][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.694787][ T5318] R13: 00007fa4b1826038 R14: 00007fa4b1825fa0 R15: 00007ffcec11e4e8
[ 94.699076][ T5318]
[ 94.700702][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.704199][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.707988][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.712173][ T5318] Call Trace:
[ 94.713681][ T5318]
[ 94.714995][ T5318] vpanic+0x56d/0xa60
[ 94.716779][ T5318] ? __pfx__printk+0x10/0x10
[ 94.718828][ T5318] ? __pfx_vpanic+0x10/0x10
[ 94.720827][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 94.723121][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 94.725405][ T5318] panic+0xc5/0xd0
[ 94.727079][ T5318] ? __pfx_panic+0x10/0x10
[ 94.729079][ T5318] __warn+0x315/0x4c0
[ 94.730884][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.733337][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.736007][ T5318] __report_bug+0x276/0x570
[ 94.737859][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 94.740184][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.742855][ T5318] ? __pfx___report_bug+0x10/0x10
[ 94.744907][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.746952][ T5318] ? lock_acquire+0x115/0x350
[ 94.749050][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.751667][ T5318] report_bug+0x16b/0x220
[ 94.753523][ T5318] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.755980][ T5318] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 94.758451][ T5318] handle_bug+0x9c/0x200
[ 94.760247][ T5318] exc_invalid_op+0x1a/0x50
[ 94.761781][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 94.763550][ T5318] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.765829][ T5318] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 16 6b 38 0e 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 9c de 53 0e 67 48 0f b9 3a e9 68
[ 94.774022][ T5318] RSP: 0018:ffffc9000e0d7560 EFLAGS: 00010246
[ 94.776623][ T5318] RAX: ffffc9000e0d7500 RBX: 1ffff92001c1aeb0 RCX: 0000000000000000
[ 94.780062][ T5318] RDX: 0000000000000000 RSI: 0000000000000017 RDI: ffffc9000e0d75c8
[ 94.783356][ T5318] RBP: ffffc9000e0d7658 R08: ffffc9000e0d75c7 R09: 0000000000000000
[ 94.786742][ T5318] R10: ffffc9000e0d75a0 R11: fffff52001c1aeb9 R12: 0000000000000000
[ 94.789939][ T5318] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 94.793189][ T5318] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 94.795954][ T5318] ? __pfx_policy_nodemask+0x10/0x10
[ 94.798263][ T5318] alloc_pages_mpol+0x21e/0x390
[ 94.800460][ T5318] ? setup_conf+0x23a/0x1040
[ 94.802499][ T5318] ___kmalloc_large_node+0x4f/0x120
[ 94.804767][ T5318] __kmalloc_large_node_noprof+0x18/0x90
[ 94.807123][ T5318] __kmalloc_noprof+0x3fb/0x720
[ 94.809159][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 94.811568][ T5318] ? setup_conf+0x1bc/0x1040
[ 94.813631][ T5318] ? setup_conf+0x23a/0x1040
[ 94.815667][ T5318] setup_conf+0x23a/0x1040
[ 94.817568][ T5318] raid1_run+0x14d/0xa50
[ 94.819327][ T5318] ? xa_find_after+0xae/0x430
[ 94.821433][ T5318] ? __pfx_raid1_run+0x10/0x10
[ 94.823423][ T5318] ? do_raw_spin_unlock+0x4d/0x200
[ 94.825527][ T5318] ? _raw_spin_unlock+0x28/0x50
[ 94.827599][ T5318] ? get_pers+0x22b/0x2e0
[ 94.829433][ T5318] ? __pfx_get_pers+0x10/0x10
[ 94.831492][ T5318] ? preempt_schedule_thunk+0x16/0x40
[ 94.833878][ T5318] md_run+0xc3d/0x1cd0
[ 94.835667][ T5318] ? __pfx_md_run+0x10/0x10
[ 94.837581][ T5318] do_md_run+0x35/0x720
[ 94.839292][ T5318] ? md_ioctl+0x1e23/0x2610
[ 94.841113][ T5318] md_ioctl+0x1e2b/0x2610
[ 94.842908][ T5318] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 94.845170][ T5318] ? tomoyo_path_number_perm+0x219/0x5f0
[ 94.847845][ T5318] ? __pfx_md_ioctl+0x10/0x10
[ 94.849952][ T5318] ? do_vfs_ioctl+0x116f/0x1530
[ 94.851666][ T5318] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 94.853655][ T5318] ? hook_file_ioctl+0x1f2/0x600
[ 94.855588][ T5318] ? __pfx_md_ioctl+0x10/0x10
[ 94.857612][ T5318] blkdev_ioctl+0x5e3/0x740
[ 94.859909][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.862061][ T5318] ? __fget_files+0x2a/0x420
[ 94.864251][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 94.866426][ T5318] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.868663][ T5318] __se_sys_ioctl+0xfc/0x170
[ 94.870724][ T5318] do_syscall_64+0x166/0x520
[ 94.872742][ T5318] ? trace_irq_disable+0x3b/0x140
[ 94.874819][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.877349][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 94.879527][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.881932][ T5318] RIP: 0033:0x7fa4b159e199
[ 94.883938][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.892190][ T5318] RSP: 002b:00007fa4b249dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.895539][ T5318] RAX: ffffffffffffffda RBX: 00007fa4b1825fa0 RCX: 00007fa4b159e199
[ 94.898881][ T5318] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005
[ 94.902056][ T5318] RBP: 00007fa4b16358e0 R08: 0000000000000000 R09: 0000000000000000
[ 94.905347][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.908792][ T5318] R13: 00007fa4b1826038 R14: 00007fa4b1825fa0 R15: 00007ffcec11e4e8
[ 94.912489][ T5318]
[ 94.914311][ T5318] Kernel Offset: disabled
[ 94.916134][ T5318] Rebooting in 86400 seconds..