program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000140)="0000000000000000000000000000000001000000000400000200000002b3e7934d9bf7609fc1eb9162acc7cdbe158696d3a56a75f6169887cfeefdd208b77d7be2a4c57259553ad809b8625e0573fcd6e70c01e28717bdc46874b525e95f14869ce0e6540aa60da11ef30abfeb96ceb6915dd4733a1459ceefc8e7ed774e")
ioctl(r1, 0x40140921, &(0x7f00000008c0)="0000000001")
ioctl(r1, 0x400c0930, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffdd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
r5 = socket$kcm(0xa, 0x2, 0x3a)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000002c0)={0x0, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000e8c000/0x2000)=nil, 0x2000, 0x2, 0x80010, 0xffffffffffffffff, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000340)=@file={0x1}, 0x6e)
listen(r6, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000440)=@file={0x1}, 0x6e)
connect$unix(r7, &(0x7f00000004c0)=@file={0x1}, 0x6e)
shutdown(r6, 0x0)
sendmsg$kcm(r5, 0x0, 0x4815)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
[ 102.082289][ T47] Bluetooth: hci0: command tx timeout
[ 102.209601][ T5329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 102.291091][ T5329] ------------[ cut here ]------------
[ 102.291105][ T5329] 1
[ 102.291111][ T5329] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5329
[ 102.300408][ T5329] Modules linked in:
[ 102.302143][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.306349][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.310834][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.314029][ T5329] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 0d 8a 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d cc fe 52 0f 67 48 0f b9 3a e9 68
[ 102.322564][ T5329] RSP: 0018:ffffc9000f17f560 EFLAGS: 00010246
[ 102.325423][ T5329] RAX: ffffc9000f17f500 RBX: 1ffff92001e2feb0 RCX: 0000000000000000
[ 102.328964][ T5329] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000f17f5c8
[ 102.332461][ T5329] RBP: ffffc9000f17f658 R08: ffffc9000f17f5c7 R09: 0000000000000000
[ 102.335962][ T5329] R10: ffffc9000f17f5a0 R11: fffff52001e2feb9 R12: 0000000000000000
[ 102.339707][ T5329] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 102.343374][ T5329] FS: 00007f31a302b6c0(0000) GS:ffff88808b0b1000(0000) knlGS:0000000000000000
[ 102.347239][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.350124][ T5329] CR2: 00007f6cc6f32e9c CR3: 000000001fa8a000 CR4: 0000000000352ef0
[ 102.353573][ T5329] Call Trace:
[ 102.354959][ T5329]
[ 102.356205][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 102.359263][ T5329] ? __pfx_policy_nodemask+0x10/0x10
[ 102.361463][ T5329] alloc_pages_mpol+0x21e/0x390
[ 102.363700][ T5329] ? setup_conf+0x23a/0x1040
[ 102.369209][ T5329] ___kmalloc_large_node+0x4f/0x120
[ 102.372407][ T5329] __kmalloc_large_node_noprof+0x18/0x90
[ 102.375310][ T5329] __kmalloc_noprof+0x3fb/0x720
[ 102.377340][ T5329] ? __kmalloc_cache_noprof+0x14d/0x600
[ 102.379663][ T5329] ? setup_conf+0x1bc/0x1040
[ 102.381709][ T5329] ? setup_conf+0x23a/0x1040
[ 102.383708][ T5329] setup_conf+0x23a/0x1040
[ 102.385534][ T5329] raid1_run+0x14d/0xa50
[ 102.387273][ T5329] ? xa_find_after+0xae/0x430
[ 102.389247][ T5329] ? __pfx_raid1_run+0x10/0x10
[ 102.391349][ T5329] ? do_raw_spin_unlock+0x4d/0x200
[ 102.393520][ T5329] ? _raw_spin_unlock+0x28/0x50
[ 102.395568][ T5329] ? get_pers+0x22b/0x2e0
[ 102.397427][ T5329] ? __pfx_get_pers+0x10/0x10
[ 102.399299][ T5329] ? preempt_schedule_thunk+0x16/0x40
[ 102.401507][ T5329] md_run+0xc3d/0x1cd0
[ 102.403777][ T5329] ? __pfx_md_run+0x10/0x10
[ 102.405832][ T5329] do_md_run+0x35/0x720
[ 102.407577][ T5329] ? md_ioctl+0x1e23/0x2610
[ 102.409416][ T5329] md_ioctl+0x1e2b/0x2610
[ 102.410852][ T5329] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.413521][ T5329] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.415893][ T5329] ? __pfx_md_ioctl+0x10/0x10
[ 102.418020][ T5329] ? do_vfs_ioctl+0x116f/0x1530
[ 102.419768][ T5329] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.421979][ T5329] ? hook_file_ioctl+0x1f2/0x600
[ 102.424088][ T5329] ? __pfx_md_ioctl+0x10/0x10
[ 102.425781][ T5329] blkdev_ioctl+0x5e3/0x740
[ 102.427615][ T5329] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.429490][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.431474][ T5329] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.433775][ T5329] __se_sys_ioctl+0xfc/0x170
[ 102.435803][ T5329] do_syscall_64+0x166/0x520
[ 102.437950][ T5329] ? trace_irq_disable+0x3b/0x140
[ 102.440492][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.443698][ T5329] ? clear_bhb_loop+0x70/0xc0
[ 102.446253][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.449231][ T5329] RIP: 0033:0x7f31a219f559
[ 102.451584][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.460745][ T5329] RSP: 002b:00007f31a302afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.464780][ T5329] RAX: ffffffffffffffda RBX: 00007f31a2425fa0 RCX: 00007f31a219f559
[ 102.467853][ T5329] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 102.471601][ T5329] RBP: 00007f31a2236b20 R08: 0000000000000000 R09: 0000000000000000
[ 102.474940][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.478177][ T5329] R13: 00007f31a2426038 R14: 00007f31a2425fa0 R15: 00007ffec9b17dd8
[ 102.481420][ T5329]
[ 102.482633][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.485482][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.489142][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.493281][ T5329] Call Trace:
[ 102.494733][ T5329]
[ 102.495974][ T5329] vpanic+0x56d/0xa60
[ 102.497740][ T5329] ? __pfx__printk+0x10/0x10
[ 102.499610][ T5329] ? __pfx_vpanic+0x10/0x10
[ 102.501488][ T5329] ? is_bpf_text_address+0x292/0x2b0
[ 102.503788][ T5329] ? is_bpf_text_address+0x26/0x2b0
[ 102.506166][ T5329] panic+0xc5/0xd0
[ 102.507856][ T5329] ? __pfx_panic+0x10/0x10
[ 102.509887][ T5329] __warn+0x315/0x4c0
[ 102.511353][ T5329] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.513630][ T5329] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.516132][ T5329] __report_bug+0x276/0x570
[ 102.526608][ T5329] ? is_bpf_text_address+0x292/0x2b0
[ 102.529352][ T5329] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.531891][ T5329] ? __pfx___report_bug+0x10/0x10
[ 102.534098][ T5329] ? do_raw_spin_lock+0x12b/0x2f0
[ 102.536172][ T5329] ? lock_acquire+0x115/0x350
[ 102.538307][ T5329] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.540812][ T5329] report_bug+0x16b/0x220
[ 102.542497][ T5329] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.544798][ T5329] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 102.547198][ T5329] handle_bug+0x9c/0x200
[ 102.549011][ T5329] exc_invalid_op+0x1a/0x50
[ 102.550909][ T5329] asm_exc_invalid_op+0x1a/0x20
[ 102.552993][ T5329] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 102.556064][ T5329] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 0d 8a 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d cc fe 52 0f 67 48 0f b9 3a e9 68
[ 102.565128][ T5329] RSP: 0018:ffffc9000f17f560 EFLAGS: 00010246
[ 102.567823][ T5329] RAX: ffffc9000f17f500 RBX: 1ffff92001e2feb0 RCX: 0000000000000000
[ 102.571317][ T5329] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000f17f5c8
[ 102.574731][ T5329] RBP: ffffc9000f17f658 R08: ffffc9000f17f5c7 R09: 0000000000000000
[ 102.578222][ T5329] R10: ffffc9000f17f5a0 R11: fffff52001e2feb9 R12: 0000000000000000
[ 102.581490][ T5329] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 102.584945][ T5329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 102.587632][ T5329] ? __pfx_policy_nodemask+0x10/0x10
[ 102.589947][ T5329] alloc_pages_mpol+0x21e/0x390
[ 102.591961][ T5329] ? setup_conf+0x23a/0x1040
[ 102.593776][ T5329] ___kmalloc_large_node+0x4f/0x120
[ 102.595764][ T5329] __kmalloc_large_node_noprof+0x18/0x90
[ 102.598017][ T5329] __kmalloc_noprof+0x3fb/0x720
[ 102.600097][ T5329] ? __kmalloc_cache_noprof+0x14d/0x600
[ 102.602534][ T5329] ? setup_conf+0x1bc/0x1040
[ 102.605067][ T5329] ? setup_conf+0x23a/0x1040
[ 102.607265][ T5329] setup_conf+0x23a/0x1040
[ 102.609270][ T5329] raid1_run+0x14d/0xa50
[ 102.611158][ T5329] ? xa_find_after+0xae/0x430
[ 102.613571][ T5329] ? __pfx_raid1_run+0x10/0x10
[ 102.616117][ T5329] ? do_raw_spin_unlock+0x4d/0x200
[ 102.618864][ T5329] ? _raw_spin_unlock+0x28/0x50
[ 102.621048][ T5329] ? get_pers+0x22b/0x2e0
[ 102.622922][ T5329] ? __pfx_get_pers+0x10/0x10
[ 102.625013][ T5329] ? preempt_schedule_thunk+0x16/0x40
[ 102.628783][ T5329] md_run+0xc3d/0x1cd0
[ 102.630575][ T5329] ? __pfx_md_run+0x10/0x10
[ 102.632612][ T5329] do_md_run+0x35/0x720
[ 102.634471][ T5329] ? md_ioctl+0x1e23/0x2610
[ 102.636518][ T5329] md_ioctl+0x1e2b/0x2610
[ 102.638398][ T5329] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.640772][ T5329] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.642860][ T5329] ? __pfx_md_ioctl+0x10/0x10
[ 102.644608][ T5329] ? do_vfs_ioctl+0x116f/0x1530
[ 102.646640][ T5329] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.648639][ T5329] ? hook_file_ioctl+0x1f2/0x600
[ 102.650598][ T5329] ? __pfx_md_ioctl+0x10/0x10
[ 102.652615][ T5329] blkdev_ioctl+0x5e3/0x740
[ 102.656332][ T5329] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.658537][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.660873][ T5329] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.663134][ T5329] __se_sys_ioctl+0xfc/0x170
[ 102.668738][ T5329] do_syscall_64+0x166/0x520
[ 102.674155][ T5329] ? trace_irq_disable+0x3b/0x140
[ 102.676183][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.678757][ T5329] ? clear_bhb_loop+0x70/0xc0
[ 102.680844][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.683532][ T5329] RIP: 0033:0x7f31a219f559
[ 102.685667][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.693095][ T5329] RSP: 002b:00007f31a302afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.696437][ T5329] RAX: ffffffffffffffda RBX: 00007f31a2425fa0 RCX: 00007f31a219f559
[ 102.699585][ T5329] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 102.702843][ T5329] RBP: 00007f31a2236b20 R08: 0000000000000000 R09: 0000000000000000
[ 102.706280][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.709520][ T5329] R13: 00007f31a2426038 R14: 00007f31a2425fa0 R15: 00007ffec9b17dd8
[ 102.712804][ T5329]
[ 102.714561][ T5329] Kernel Offset: disabled
[ 102.716358][ T5329] Rebooting in 86400 seconds..