program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000280)="00000000000000000000000000000000010000000004000002000000029923e6dac3bdcd67e5bbfc9547e4035a7c9b70faeb9a20faacec7194b4e5c0254f573bbe30d05f947804c452980672c330")
ioctl(r1, 0x40140921, &(0x7f0000000900)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb8}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240))
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r3, 0x932, &(0x7f0000000580))
[ 101.562960][ T5282] Bluetooth: hci0: command tx timeout
[ 101.810655][ T5322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 101.905932][ T5322] ------------[ cut here ]------------
[ 101.905951][ T5322] 1
[ 101.905967][ T5322] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5322
[ 101.915120][ T5322] Modules linked in:
[ 101.917555][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.921592][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.926182][ T5322] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 101.929069][ T5322] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ac 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 20 53 0f 67 48 0f b9 3a e9 68
[ 101.937372][ T5322] RSP: 0018:ffffc9000ec57560 EFLAGS: 00010246
[ 101.940028][ T5322] RAX: ffffc9000ec57500 RBX: 1ffff92001d8aeb0 RCX: 0000000000000000
[ 101.943498][ T5322] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000ec575c8
[ 101.946825][ T5322] RBP: ffffc9000ec57658 R08: ffffc9000ec575c7 R09: 0000000000000000
[ 101.950147][ T5322] R10: ffffc9000ec575a0 R11: fffff52001d8aeb9 R12: 0000000000000000
[ 101.953676][ T5322] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 101.957019][ T5322] FS: 00007f4a36e7e6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 101.961266][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 101.964607][ T5322] CR2: 00007f4270baae9c CR3: 00000000137c9000 CR4: 0000000000352ef0
[ 101.968176][ T5322] Call Trace:
[ 101.969730][ T5322]
[ 101.971137][ T5322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 101.974198][ T5322] ? __pfx_policy_nodemask+0x10/0x10
[ 101.977121][ T5322] alloc_pages_mpol+0x21e/0x390
[ 101.979902][ T5322] ? setup_conf+0x23a/0x1040
[ 101.982407][ T5322] ___kmalloc_large_node+0x4f/0x120
[ 101.984684][ T5322] __kmalloc_large_node_noprof+0x18/0x90
[ 101.987195][ T5322] __kmalloc_noprof+0x3fb/0x720
[ 101.989050][ T5322] ? __kmalloc_cache_noprof+0x14d/0x600
[ 101.991460][ T5322] ? setup_conf+0x1bc/0x1040
[ 101.993658][ T5322] ? setup_conf+0x23a/0x1040
[ 101.995721][ T5322] setup_conf+0x23a/0x1040
[ 101.997759][ T5322] raid1_run+0x14d/0xa50
[ 101.999618][ T5322] ? xa_find_after+0xae/0x430
[ 102.002943][ T5322] ? __pfx_raid1_run+0x10/0x10
[ 102.005372][ T5322] ? do_raw_spin_unlock+0x4d/0x200
[ 102.007822][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 102.010015][ T5322] ? get_pers+0x22b/0x2e0
[ 102.012315][ T5322] ? __pfx_get_pers+0x10/0x10
[ 102.014469][ T5322] ? preempt_schedule_thunk+0x16/0x40
[ 102.017491][ T5322] md_run+0xc3d/0x1cd0
[ 102.019467][ T5322] ? __pfx_md_run+0x10/0x10
[ 102.021566][ T5322] do_md_run+0x35/0x720
[ 102.023534][ T5322] ? md_ioctl+0x1e23/0x2610
[ 102.025572][ T5322] md_ioctl+0x1e2b/0x2610
[ 102.027538][ T5322] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.030281][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.032983][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 102.035319][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 102.037671][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.039898][ T5322] ? hook_file_ioctl+0x1f2/0x600
[ 102.042273][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 102.044253][ T5322] blkdev_ioctl+0x5e3/0x740
[ 102.046361][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.048571][ T5322] ? __fget_files+0x2a/0x420
[ 102.050587][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.052891][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.055158][ T5322] __se_sys_ioctl+0xfc/0x170
[ 102.057131][ T5322] do_syscall_64+0x166/0x520
[ 102.059245][ T5322] ? trace_irq_disable+0x3b/0x140
[ 102.061845][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.064487][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 102.066620][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.069203][ T5322] RIP: 0033:0x7f4a35f9e1d9
[ 102.071118][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.079942][ T5322] RSP: 002b:00007f4a36e7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.083665][ T5322] RAX: ffffffffffffffda RBX: 00007f4a36225fa0 RCX: 00007f4a35f9e1d9
[ 102.087184][ T5322] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 102.090386][ T5322] RBP: 00007f4a36035888 R08: 0000000000000000 R09: 0000000000000000
[ 102.093619][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.096763][ T5322] R13: 00007f4a36226038 R14: 00007f4a36225fa0 R15: 00007ffee3463a38
[ 102.100007][ T5322]
[ 102.101296][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.104319][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.107898][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.111737][ T5322] Call Trace:
[ 102.113084][ T5322]
[ 102.114312][ T5322] vpanic+0x56d/0xa60
[ 102.116060][ T5322] ? __pfx__printk+0x10/0x10
[ 102.118024][ T5322] ? __pfx_vpanic+0x10/0x10
[ 102.119911][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 102.122228][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 102.124590][ T5322] panic+0xc5/0xd0
[ 102.126369][ T5322] ? __pfx_panic+0x10/0x10
[ 102.128392][ T5322] __warn+0x315/0x4c0
[ 102.130193][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.132822][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.135386][ T5322] __report_bug+0x276/0x570
[ 102.137345][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 102.139696][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.142295][ T5322] ? __pfx___report_bug+0x10/0x10
[ 102.144386][ T5322] ? do_raw_spin_lock+0x12b/0x2f0
[ 102.146527][ T5322] ? lock_acquire+0x115/0x350
[ 102.148602][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.151692][ T5322] report_bug+0x16b/0x220
[ 102.154009][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.157161][ T5322] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 102.160376][ T5322] handle_bug+0x9c/0x200
[ 102.162677][ T5322] exc_invalid_op+0x1a/0x50
[ 102.165190][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 102.167290][ T5322] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.170223][ T5322] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ac 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 20 53 0f 67 48 0f b9 3a e9 68
[ 102.179034][ T5322] RSP: 0018:ffffc9000ec57560 EFLAGS: 00010246
[ 102.182127][ T5322] RAX: ffffc9000ec57500 RBX: 1ffff92001d8aeb0 RCX: 0000000000000000
[ 102.185694][ T5322] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000ec575c8
[ 102.189142][ T5322] RBP: ffffc9000ec57658 R08: ffffc9000ec575c7 R09: 0000000000000000
[ 102.192468][ T5322] R10: ffffc9000ec575a0 R11: fffff52001d8aeb9 R12: 0000000000000000
[ 102.195853][ T5322] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 102.199063][ T5322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 102.201813][ T5322] ? __pfx_policy_nodemask+0x10/0x10
[ 102.204082][ T5322] alloc_pages_mpol+0x21e/0x390
[ 102.206176][ T5322] ? setup_conf+0x23a/0x1040
[ 102.208175][ T5322] ___kmalloc_large_node+0x4f/0x120
[ 102.210492][ T5322] __kmalloc_large_node_noprof+0x18/0x90
[ 102.212950][ T5322] __kmalloc_noprof+0x3fb/0x720
[ 102.215132][ T5322] ? __kmalloc_cache_noprof+0x14d/0x600
[ 102.217440][ T5322] ? setup_conf+0x1bc/0x1040
[ 102.219462][ T5322] ? setup_conf+0x23a/0x1040
[ 102.221432][ T5322] setup_conf+0x23a/0x1040
[ 102.223360][ T5322] raid1_run+0x14d/0xa50
[ 102.225248][ T5322] ? xa_find_after+0xae/0x430
[ 102.227163][ T5322] ? __pfx_raid1_run+0x10/0x10
[ 102.229146][ T5322] ? do_raw_spin_unlock+0x4d/0x200
[ 102.231231][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 102.233282][ T5322] ? get_pers+0x22b/0x2e0
[ 102.235311][ T5322] ? __pfx_get_pers+0x10/0x10
[ 102.237240][ T5322] ? preempt_schedule_thunk+0x16/0x40
[ 102.239549][ T5322] md_run+0xc3d/0x1cd0
[ 102.241357][ T5322] ? __pfx_md_run+0x10/0x10
[ 102.243350][ T5322] do_md_run+0x35/0x720
[ 102.244956][ T5322] ? md_ioctl+0x1e23/0x2610
[ 102.247025][ T5322] md_ioctl+0x1e2b/0x2610
[ 102.248984][ T5322] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.251523][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.253952][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 102.256035][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 102.258167][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.260481][ T5322] ? hook_file_ioctl+0x1f2/0x600
[ 102.262596][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 102.264503][ T5322] blkdev_ioctl+0x5e3/0x740
[ 102.266266][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.268113][ T5322] ? __fget_files+0x2a/0x420
[ 102.269914][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.272148][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.274422][ T5322] __se_sys_ioctl+0xfc/0x170
[ 102.276548][ T5322] do_syscall_64+0x166/0x520
[ 102.278670][ T5322] ? trace_irq_disable+0x3b/0x140
[ 102.280755][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.283097][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 102.284922][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.287207][ T5322] RIP: 0033:0x7f4a35f9e1d9
[ 102.289086][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.297611][ T5322] RSP: 002b:00007f4a36e7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.301258][ T5322] RAX: ffffffffffffffda RBX: 00007f4a36225fa0 RCX: 00007f4a35f9e1d9
[ 102.304901][ T5322] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 102.308401][ T5322] RBP: 00007f4a36035888 R08: 0000000000000000 R09: 0000000000000000
[ 102.311826][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.315224][ T5322] R13: 00007f4a36226038 R14: 00007f4a36225fa0 R15: 00007ffee3463a38
[ 102.318577][ T5322]
[ 102.320077][ T5322] Kernel Offset: disabled
[ 102.321696][ T5322] Rebooting in 86400 seconds..