program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f00000003c0)="000000000000000000100065511a9800010000000004000200000002bc372192bf6a814245ee78b105cdac8e2ebc1f17bfc42838075485315138336dc14ddcb91d6484cb59051ae6f762235c8481a9dd2a8257e7f21450011086cd051cb744f48cb8f46cffe812c8c29e1f35cf67d7418ea993e126522a03aa19d4e6d724e7730b7007c7a99b46fd22b610f309a168ace5b513df1f0057aa32e9f1afced60577741b2561b73873bd42c397c88202e65ded04dbae3956db9d0a0271b091d4e9281275568bbf10f40ef65f94741263dde8a4003b475eaea3d8df3cc4") ioctl(r1, 0x40140921, &(0x7f0000000340)="0000000001") ioctl(r1, 0x40140921, &(0x7f0000000380)="0100000001000000010000000100000006") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl(r1, 0x400c0930, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x7c23, &(0x7f0000006680)) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xc4, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1, 0x4, 0x3, 0x5, 0x7fff, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './sys/module/md_mod/parameters/new_array\x00'}) renameat2(r2, &(0x7f0000000080)='./sys\x00', r3, &(0x7f00000005c0)='./dev/md0\x00', 0x1) close(0x3) creat(&(0x7f00000007c0)='./dev/md0\x00', 0x30) [ 94.228427][ T5281] Bluetooth: hci0: command tx timeout [ 96.120450][ T5322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.203854][ T5322] ------------[ cut here ]------------ [ 96.203867][ T5322] 1 [ 96.203883][ T5322] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5322 [ 96.213174][ T5322] Modules linked in: [ 96.215120][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.219783][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.223682][ T5322] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.226158][ T5322] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 26 ac 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 20 53 0f 67 48 0f b9 3a e9 68 [ 96.233625][ T5322] RSP: 0018:ffffc9000e807560 EFLAGS: 00010246 [ 96.236360][ T5322] RAX: ffffc9000e807500 RBX: 1ffff92001d00eb0 RCX: 0000000000000000 [ 96.239800][ T5322] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000e8075c8 [ 96.243116][ T5322] RBP: ffffc9000e807658 R08: ffffc9000e8075c7 R09: 0000000000000000 [ 96.246702][ T5322] R10: ffffc9000e8075a0 R11: fffff52001d00eb9 R12: 0000000000000000 [ 96.249977][ T5322] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 96.253535][ T5322] FS: 00007f1be99396c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 96.259697][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.262548][ T5322] CR2: 00007f5b5548fe9c CR3: 0000000045607000 CR4: 0000000000352ef0 [ 96.266175][ T5322] Call Trace: [ 96.267442][ T5322] [ 96.268699][ T5322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.271402][ T5322] ? __pfx_policy_nodemask+0x10/0x10 [ 96.273753][ T5322] alloc_pages_mpol+0x21e/0x390 [ 96.276013][ T5322] ? setup_conf+0x23a/0x1040 [ 96.278216][ T5322] ___kmalloc_large_node+0x4f/0x120 [ 96.280619][ T5322] __kmalloc_large_node_noprof+0x18/0x90 [ 96.283126][ T5322] __kmalloc_noprof+0x3fb/0x720 [ 96.285441][ T5322] ? __kmalloc_cache_noprof+0x14d/0x600 [ 96.287904][ T5322] ? setup_conf+0x1bc/0x1040 [ 96.289648][ T5322] ? setup_conf+0x23a/0x1040 [ 96.292048][ T5322] setup_conf+0x23a/0x1040 [ 96.294895][ T5322] raid1_run+0x14d/0xa50 [ 96.297124][ T5322] ? xa_find_after+0xae/0x430 [ 96.299335][ T5322] ? __pfx_raid1_run+0x10/0x10 [ 96.301469][ T5322] ? do_raw_spin_unlock+0x4d/0x200 [ 96.303977][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 96.306368][ T5322] ? get_pers+0x22b/0x2e0 [ 96.308393][ T5322] ? __pfx_get_pers+0x10/0x10 [ 96.310346][ T5322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.312781][ T5322] md_run+0xc3d/0x1cd0 [ 96.314547][ T5322] ? __pfx_md_run+0x10/0x10 [ 96.316693][ T5322] do_md_run+0x35/0x720 [ 96.318461][ T5322] ? md_ioctl+0x1e23/0x2610 [ 96.320442][ T5322] md_ioctl+0x1e2b/0x2610 [ 96.322231][ T5322] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 96.324852][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 96.327158][ T5322] ? __pfx_md_ioctl+0x10/0x10 [ 96.329535][ T5322] ? do_vfs_ioctl+0x116f/0x1530 [ 96.331633][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.334089][ T5322] ? hook_file_ioctl+0x1f2/0x600 [ 96.336301][ T5322] ? __pfx_md_ioctl+0x10/0x10 [ 96.338081][ T5322] blkdev_ioctl+0x5e3/0x740 [ 96.340005][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.342154][ T5322] ? __fget_files+0x2a/0x420 [ 96.344156][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.346393][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.348535][ T5322] __se_sys_ioctl+0xfc/0x170 [ 96.350536][ T5322] do_syscall_64+0x166/0x520 [ 96.352613][ T5322] ? trace_irq_disable+0x3b/0x140 [ 96.354985][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.357687][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 96.359802][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.362249][ T5322] RIP: 0033:0x7f1be899e559 [ 96.369601][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.377860][ T5322] RSP: 002b:00007f1be9938fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.381668][ T5322] RAX: ffffffffffffffda RBX: 00007f1be8c25fa0 RCX: 00007f1be899e559 [ 96.385236][ T5322] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 96.388634][ T5322] RBP: 00007f1be8a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.392028][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.395340][ T5322] R13: 00007f1be8c26038 R14: 00007f1be8c25fa0 R15: 00007ffcc1eac7b8 [ 96.398675][ T5322] [ 96.400101][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.403289][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.407152][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.411445][ T5322] Call Trace: [ 96.412991][ T5322] [ 96.414303][ T5322] vpanic+0x56d/0xa60 [ 96.416161][ T5322] ? __pfx__printk+0x10/0x10 [ 96.418178][ T5322] ? __pfx_vpanic+0x10/0x10 [ 96.420147][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 96.422418][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 96.424651][ T5322] panic+0xc5/0xd0 [ 96.426300][ T5322] ? __pfx_panic+0x10/0x10 [ 96.428268][ T5322] __warn+0x315/0x4c0 [ 96.429902][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.432444][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.434998][ T5322] __report_bug+0x276/0x570 [ 96.436846][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 96.439215][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.441800][ T5322] ? __pfx___report_bug+0x10/0x10 [ 96.444037][ T5322] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.446220][ T5322] ? lock_acquire+0x115/0x350 [ 96.448243][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.450580][ T5322] report_bug+0x16b/0x220 [ 96.452325][ T5322] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.454742][ T5322] ? __alloc_frozen_pages_noprof+0x427/0x5a0 [ 96.457342][ T5322] handle_bug+0x9c/0x200 [ 96.459250][ T5322] exc_invalid_op+0x1a/0x50 [ 96.461213][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 96.463281][ T5322] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 96.465942][ T5322] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 26 ac 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 2c 20 53 0f 67 48 0f b9 3a e9 68 [ 96.473840][ T5322] RSP: 0018:ffffc9000e807560 EFLAGS: 00010246 [ 96.476408][ T5322] RAX: ffffc9000e807500 RBX: 1ffff92001d00eb0 RCX: 0000000000000000 [ 96.480142][ T5322] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000e8075c8 [ 96.483555][ T5322] RBP: ffffc9000e807658 R08: ffffc9000e8075c7 R09: 0000000000000000 [ 96.486933][ T5322] R10: ffffc9000e8075a0 R11: fffff52001d00eb9 R12: 0000000000000000 [ 96.490309][ T5322] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 96.493897][ T5322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.496429][ T5322] ? __pfx_policy_nodemask+0x10/0x10 [ 96.498576][ T5322] alloc_pages_mpol+0x21e/0x390 [ 96.500760][ T5322] ? setup_conf+0x23a/0x1040 [ 96.502670][ T5322] ___kmalloc_large_node+0x4f/0x120 [ 96.504875][ T5322] __kmalloc_large_node_noprof+0x18/0x90 [ 96.507181][ T5322] __kmalloc_noprof+0x3fb/0x720 [ 96.509304][ T5322] ? __kmalloc_cache_noprof+0x14d/0x600 [ 96.511444][ T5322] ? setup_conf+0x1bc/0x1040 [ 96.513475][ T5322] ? setup_conf+0x23a/0x1040 [ 96.515437][ T5322] setup_conf+0x23a/0x1040 [ 96.517376][ T5322] raid1_run+0x14d/0xa50 [ 96.519283][ T5322] ? xa_find_after+0xae/0x430 [ 96.521351][ T5322] ? __pfx_raid1_run+0x10/0x10 [ 96.523461][ T5322] ? do_raw_spin_unlock+0x4d/0x200 [ 96.525522][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 96.527619][ T5322] ? get_pers+0x22b/0x2e0 [ 96.529378][ T5322] ? __pfx_get_pers+0x10/0x10 [ 96.531482][ T5322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.534145][ T5322] md_run+0xc3d/0x1cd0 [ 96.535983][ T5322] ? __pfx_md_run+0x10/0x10 [ 96.538004][ T5322] do_md_run+0x35/0x720 [ 96.539869][ T5322] ? md_ioctl+0x1e23/0x2610 [ 96.542016][ T5322] md_ioctl+0x1e2b/0x2610 [ 96.544035][ T5322] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 96.546522][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 96.549017][ T5322] ? __pfx_md_ioctl+0x10/0x10 [ 96.551164][ T5322] ? do_vfs_ioctl+0x116f/0x1530 [ 96.553369][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.555687][ T5322] ? hook_file_ioctl+0x1f2/0x600 [ 96.557898][ T5322] ? __pfx_md_ioctl+0x10/0x10 [ 96.560060][ T5322] blkdev_ioctl+0x5e3/0x740 [ 96.562125][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.564408][ T5322] ? __fget_files+0x2a/0x420 [ 96.566465][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.568659][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.570905][ T5322] __se_sys_ioctl+0xfc/0x170 [ 96.572990][ T5322] do_syscall_64+0x166/0x520 [ 96.575011][ T5322] ? trace_irq_disable+0x3b/0x140 [ 96.577308][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.580102][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 96.582140][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.584875][ T5322] RIP: 0033:0x7f1be899e559 [ 96.586758][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.594707][ T5322] RSP: 002b:00007f1be9938fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.598043][ T5322] RAX: ffffffffffffffda RBX: 00007f1be8c25fa0 RCX: 00007f1be899e559 [ 96.601048][ T5322] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 96.604410][ T5322] RBP: 00007f1be8a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.607678][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.610908][ T5322] R13: 00007f1be8c26038 R14: 00007f1be8c25fa0 R15: 00007ffcc1eac7b8 [ 96.614245][ T5322] [ 96.615948][ T5322] Kernel Offset: disabled [ 96.617798][ T5322] Rebooting in 86400 seconds..