program:
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000000)={'md', @num=0x0}, 0x3)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)={'/dev/md', @num=0x0}, 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f00000000c0)={0x0, 0x5a, 0x0, 0x0, 0x6, 0x800, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000})
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x21, 0x16})
ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0)
[ 105.230309][ T4648] Bluetooth: hci0: command tx timeout
[ 105.366536][ T5337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 105.424143][ T5337] ------------[ cut here ]------------
[ 105.424156][ T5337] 1
[ 105.424162][ T5337] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5337
[ 105.432096][ T5337] Modules linked in:
[ 105.433875][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.437582][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.441848][ T5337] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.444806][ T5337] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 66 c8 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d ac 3e 53 0f 67 48 0f b9 3a e9 68
[ 105.453178][ T5337] RSP: 0018:ffffc9000dedf560 EFLAGS: 00010246
[ 105.456152][ T5337] RAX: ffffc9000dedf500 RBX: 1ffff92001bdbeb0 RCX: 0000000000000000
[ 105.459785][ T5337] RDX: 0000000000000000 RSI: 0000000000000014 RDI: ffffc9000dedf5c8
[ 105.463424][ T5337] RBP: ffffc9000dedf650 R08: ffffc9000dedf5c7 R09: 0000000000000000
[ 105.466889][ T5337] R10: ffffc9000dedf5a0 R11: fffff52001bdbeb9 R12: 0000000000000000
[ 105.470350][ T5337] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 105.473837][ T5337] FS: 00007f45125f56c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000
[ 105.477566][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 105.480283][ T5337] CR2: 00007fbfebba8e9c CR3: 0000000053c86000 CR4: 0000000000352ef0
[ 105.483633][ T5337] Call Trace:
[ 105.485104][ T5337]
[ 105.486601][ T5337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 105.489262][ T5337] ? __pfx_policy_nodemask+0x10/0x10
[ 105.491486][ T5337] ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[ 105.494052][ T5337] alloc_pages_mpol+0x21e/0x390
[ 105.496210][ T5337] ? setup_conf+0xc15/0x2ad0
[ 105.498213][ T5337] ___kmalloc_large_node+0x4f/0x120
[ 105.500154][ T5337] __kmalloc_large_node_noprof+0x18/0x90
[ 105.502583][ T5337] __kmalloc_noprof+0x3f6/0x710
[ 105.504696][ T5337] ? __raw_spin_lock_init+0x45/0x100
[ 105.506950][ T5337] ? setup_conf+0xc15/0x2ad0
[ 105.509053][ T5337] setup_conf+0xc15/0x2ad0
[ 105.511049][ T5337] ? __pfx_setup_conf+0x10/0x10
[ 105.513187][ T5337] raid5_run+0x8cc/0x2560
[ 105.515030][ T5337] ? _raw_spin_unlock+0x28/0x50
[ 105.517215][ T5337] ? get_pers+0x22b/0x2e0
[ 105.519044][ T5337] ? __pfx_get_pers+0x10/0x10
[ 105.521071][ T5337] md_run+0xc3d/0x1cd0
[ 105.522916][ T5337] ? __pfx_md_run+0x10/0x10
[ 105.524923][ T5337] do_md_run+0x35/0x720
[ 105.526731][ T5337] ? md_ioctl+0x1e23/0x2610
[ 105.528689][ T5337] md_ioctl+0x1e2b/0x2610
[ 105.530555][ T5337] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 105.533178][ T5337] ? tomoyo_path_number_perm+0x219/0x5f0
[ 105.535511][ T5337] ? __pfx_md_ioctl+0x10/0x10
[ 105.537612][ T5337] ? do_vfs_ioctl+0x116f/0x1530
[ 105.539563][ T5337] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 105.541509][ T5337] ? do_futex+0x458/0x4e0
[ 105.543121][ T5337] ? __pfx_md_ioctl+0x10/0x10
[ 105.544866][ T5337] blkdev_ioctl+0x5e3/0x740
[ 105.546511][ T5337] ? __pfx_blkdev_ioctl+0x10/0x10
[ 105.548402][ T5337] ? bpf_lsm_file_ioctl+0x9/0x20
[ 105.550425][ T5337] ? __pfx_blkdev_ioctl+0x10/0x10
[ 105.553111][ T5337] __se_sys_ioctl+0xfc/0x170
[ 105.555127][ T5337] do_syscall_64+0x166/0x520
[ 105.557181][ T5337] ? trace_irq_disable+0x3b/0x140
[ 105.559364][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.561968][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 105.564512][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.567088][ T5337] RIP: 0033:0x7f451619f559
[ 105.569033][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.577439][ T5337] RSP: 002b:00007f45125f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.580930][ T5337] RAX: ffffffffffffffda RBX: 00007f4516425fa0 RCX: 00007f451619f559
[ 105.584487][ T5337] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 105.587854][ T5337] RBP: 00007f4516236b20 R08: 0000000000000000 R09: 0000000000000000
[ 105.591146][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.594422][ T5337] R13: 00007f4516426038 R14: 00007f4516425fa0 R15: 00007ffdc7340f08
[ 105.597597][ T5337]
[ 105.598922][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 105.601827][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.605516][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.609615][ T5337] Call Trace:
[ 105.611138][ T5337]
[ 105.612454][ T5337] vpanic+0x56d/0xa60
[ 105.614215][ T5337] ? __pfx__printk+0x10/0x10
[ 105.616203][ T5337] ? __pfx_vpanic+0x10/0x10
[ 105.618171][ T5337] ? is_bpf_text_address+0x292/0x2b0
[ 105.620505][ T5337] ? is_bpf_text_address+0x26/0x2b0
[ 105.622818][ T5337] panic+0xc5/0xd0
[ 105.624565][ T5337] ? __pfx_panic+0x10/0x10
[ 105.626597][ T5337] __warn+0x315/0x4c0
[ 105.628400][ T5337] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.630911][ T5337] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.633494][ T5337] __report_bug+0x276/0x570
[ 105.635453][ T5337] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.638155][ T5337] ? __pfx___report_bug+0x10/0x10
[ 105.640312][ T5337] ? __page_table_check_zero+0x3c3/0x430
[ 105.642538][ T5337] ? __page_table_check_zero+0x6c/0x430
[ 105.644753][ T5337] ? prep_compound_page+0x351/0x560
[ 105.646976][ T5337] ? get_page_from_freelist+0x2221/0x2280
[ 105.649600][ T5337] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.652274][ T5337] report_bug+0x16b/0x220
[ 105.654092][ T5337] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.656615][ T5337] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 105.659063][ T5337] handle_bug+0x9c/0x200
[ 105.660725][ T5337] exc_invalid_op+0x1a/0x50
[ 105.662716][ T5337] asm_exc_invalid_op+0x1a/0x20
[ 105.664888][ T5337] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 105.667675][ T5337] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 66 c8 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d ac 3e 53 0f 67 48 0f b9 3a e9 68
[ 105.675714][ T5337] RSP: 0018:ffffc9000dedf560 EFLAGS: 00010246
[ 105.678387][ T5337] RAX: ffffc9000dedf500 RBX: 1ffff92001bdbeb0 RCX: 0000000000000000
[ 105.681869][ T5337] RDX: 0000000000000000 RSI: 0000000000000014 RDI: ffffc9000dedf5c8
[ 105.685415][ T5337] RBP: ffffc9000dedf650 R08: ffffc9000dedf5c7 R09: 0000000000000000
[ 105.689444][ T5337] R10: ffffc9000dedf5a0 R11: fffff52001bdbeb9 R12: 0000000000000000
[ 105.693229][ T5337] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 105.696880][ T5337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 105.699738][ T5337] ? __pfx_policy_nodemask+0x10/0x10
[ 105.702073][ T5337] ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[ 105.704577][ T5337] alloc_pages_mpol+0x21e/0x390
[ 105.706590][ T5337] ? setup_conf+0xc15/0x2ad0
[ 105.708357][ T5337] ___kmalloc_large_node+0x4f/0x120
[ 105.710597][ T5337] __kmalloc_large_node_noprof+0x18/0x90
[ 105.713057][ T5337] __kmalloc_noprof+0x3f6/0x710
[ 105.715177][ T5337] ? __raw_spin_lock_init+0x45/0x100
[ 105.717379][ T5337] ? setup_conf+0xc15/0x2ad0
[ 105.719413][ T5337] setup_conf+0xc15/0x2ad0
[ 105.721303][ T5337] ? __pfx_setup_conf+0x10/0x10
[ 105.723353][ T5337] raid5_run+0x8cc/0x2560
[ 105.725265][ T5337] ? _raw_spin_unlock+0x28/0x50
[ 105.727435][ T5337] ? get_pers+0x22b/0x2e0
[ 105.729400][ T5337] ? __pfx_get_pers+0x10/0x10
[ 105.731388][ T5337] md_run+0xc3d/0x1cd0
[ 105.733093][ T5337] ? __pfx_md_run+0x10/0x10
[ 105.735049][ T5337] do_md_run+0x35/0x720
[ 105.736708][ T5337] ? md_ioctl+0x1e23/0x2610
[ 105.738620][ T5337] md_ioctl+0x1e2b/0x2610
[ 105.740490][ T5337] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 105.742862][ T5337] ? tomoyo_path_number_perm+0x219/0x5f0
[ 105.745432][ T5337] ? __pfx_md_ioctl+0x10/0x10
[ 105.747562][ T5337] ? do_vfs_ioctl+0x116f/0x1530
[ 105.749797][ T5337] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 105.752097][ T5337] ? do_futex+0x458/0x4e0
[ 105.754074][ T5337] ? __pfx_md_ioctl+0x10/0x10
[ 105.756193][ T5337] blkdev_ioctl+0x5e3/0x740
[ 105.758179][ T5337] ? __pfx_blkdev_ioctl+0x10/0x10
[ 105.760407][ T5337] ? bpf_lsm_file_ioctl+0x9/0x20
[ 105.762648][ T5337] ? __pfx_blkdev_ioctl+0x10/0x10
[ 105.764925][ T5337] __se_sys_ioctl+0xfc/0x170
[ 105.767041][ T5337] do_syscall_64+0x166/0x520
[ 105.769022][ T5337] ? trace_irq_disable+0x3b/0x140
[ 105.771350][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.774134][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 105.776230][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.778847][ T5337] RIP: 0033:0x7f451619f559
[ 105.780825][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.789337][ T5337] RSP: 002b:00007f45125f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.793058][ T5337] RAX: ffffffffffffffda RBX: 00007f4516425fa0 RCX: 00007f451619f559
[ 105.796567][ T5337] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 105.800079][ T5337] RBP: 00007f4516236b20 R08: 0000000000000000 R09: 0000000000000000
[ 105.803587][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.809950][ T5337] R13: 00007f4516426038 R14: 00007f4516425fa0 R15: 00007ffdc7340f08
[ 105.813264][ T5337]
[ 105.817336][ T5337] Kernel Offset: disabled
[ 105.819185][ T5337] Rebooting in 86400 seconds..