program:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/md0\x00', 0x127082, 0xd)
ioctl(r1, 0x40480923, &(0x7f0000001fc0)="0000000000000000000000000000000001000000000400000200000002ca85b39c91008e287899aecd0b25911b1cec7310e2a8b66d37a1c873788e116d59872ad005897c9ccc0e24a95ffd1244283a826912043f2d8b6545f342b03a905915f42683af4d4190a89646fffca21ef0c3")
ioctl(r1, 0x40140921, &(0x7f0000000580)="0100000001")
ioctl(r1, 0x400c0930, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/sctp/parameters/no_checksums\x00', 0x801, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x8080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/63, 0x3f}, {&(0x7f0000001e40)=""/255, 0xff}], 0x3}, 0x20)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
[ 94.389442][ T4650] Bluetooth: hci0: command tx timeout
[ 94.615877][ T5321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 94.730601][ T5321] ------------[ cut here ]------------
[ 94.730616][ T5321] 1
[ 94.730633][ T5321] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.0/5321
[ 94.739544][ T5321] Modules linked in:
[ 94.741283][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.745366][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.750720][ T5321] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.753579][ T5321] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 1f 53 0f 67 48 0f b9 3a e9 68
[ 94.761942][ T5321] RSP: 0018:ffffc9000db97560 EFLAGS: 00010246
[ 94.764752][ T5321] RAX: ffffc9000db97500 RBX: 1ffff92001b72eb0 RCX: 0000000000000000
[ 94.768289][ T5321] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000db975c8
[ 94.771905][ T5321] RBP: ffffc9000db97658 R08: ffffc9000db975c7 R09: 0000000000000000
[ 94.775565][ T5321] R10: ffffc9000db975a0 R11: fffff52001b72eb9 R12: 0000000000000000
[ 94.778897][ T5321] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 94.782570][ T5321] FS: 00007f2ce00be6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 94.786460][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.789205][ T5321] CR2: 00007fee4ca4fe9c CR3: 000000004591a000 CR4: 0000000000352ef0
[ 94.793352][ T5321] Call Trace:
[ 94.795271][ T5321]
[ 94.796563][ T5321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 94.799482][ T5321] ? __pfx_policy_nodemask+0x10/0x10
[ 94.801674][ T5321] alloc_pages_mpol+0x21e/0x390
[ 94.803801][ T5321] ? setup_conf+0x23a/0x1040
[ 94.805829][ T5321] ___kmalloc_large_node+0x4f/0x120
[ 94.808009][ T5321] __kmalloc_large_node_noprof+0x18/0x90
[ 94.810477][ T5321] __kmalloc_noprof+0x3fb/0x720
[ 94.812690][ T5321] ? __kmalloc_cache_noprof+0x14d/0x600
[ 94.815132][ T5321] ? setup_conf+0x1bc/0x1040
[ 94.817212][ T5321] ? setup_conf+0x23a/0x1040
[ 94.819368][ T5321] setup_conf+0x23a/0x1040
[ 94.821394][ T5321] raid1_run+0x14d/0xa50
[ 94.823480][ T5321] ? xa_find_after+0xae/0x430
[ 94.825530][ T5321] ? __pfx_raid1_run+0x10/0x10
[ 94.827552][ T5321] ? do_raw_spin_unlock+0x4d/0x200
[ 94.829720][ T5321] ? _raw_spin_unlock+0x28/0x50
[ 94.831732][ T5321] ? get_pers+0x22b/0x2e0
[ 94.833479][ T5321] ? __pfx_get_pers+0x10/0x10
[ 94.835402][ T5321] ? preempt_schedule_thunk+0x16/0x40
[ 94.839418][ T5321] md_run+0xc3d/0x1cd0
[ 94.841262][ T5321] ? __pfx_md_run+0x10/0x10
[ 94.843589][ T5321] do_md_run+0x35/0x720
[ 94.845488][ T5321] ? md_ioctl+0x1e23/0x2610
[ 94.847504][ T5321] md_ioctl+0x1e2b/0x2610
[ 94.849593][ T5321] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 94.852360][ T5321] ? tomoyo_path_number_perm+0x219/0x5f0
[ 94.854903][ T5321] ? __pfx_md_ioctl+0x10/0x10
[ 94.857048][ T5321] ? do_vfs_ioctl+0x116f/0x1530
[ 94.859208][ T5321] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 94.861408][ T5321] ? hook_file_ioctl+0x1f2/0x600
[ 94.865481][ T5321] ? __pfx_md_ioctl+0x10/0x10
[ 94.867401][ T5321] blkdev_ioctl+0x5e3/0x740
[ 94.869256][ T5321] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.871598][ T5321] ? __fget_files+0x2a/0x420
[ 94.873839][ T5321] ? bpf_lsm_file_ioctl+0x9/0x20
[ 94.876110][ T5321] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.878533][ T5321] __se_sys_ioctl+0xfc/0x170
[ 94.880657][ T5321] do_syscall_64+0x166/0x520
[ 94.882864][ T5321] ? trace_irq_disable+0x3b/0x140
[ 94.885155][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.887928][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 94.890100][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.893245][ T5321] RIP: 0033:0x7f2cdf19e1d9
[ 94.895614][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.903969][ T5321] RSP: 002b:00007f2ce00bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.907796][ T5321] RAX: ffffffffffffffda RBX: 00007f2cdf425fa0 RCX: 00007f2cdf19e1d9
[ 94.911274][ T5321] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 94.914657][ T5321] RBP: 00007f2cdf235888 R08: 0000000000000000 R09: 0000000000000000
[ 94.917927][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.921363][ T5321] R13: 00007f2cdf426038 R14: 00007f2cdf425fa0 R15: 00007ffc5d26f5c8
[ 94.925016][ T5321]
[ 94.926451][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.929616][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.933713][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.938252][ T5321] Call Trace:
[ 94.939721][ T5321]
[ 94.941037][ T5321] vpanic+0x56d/0xa60
[ 94.942910][ T5321] ? __pfx__printk+0x10/0x10
[ 94.945007][ T5321] ? __pfx_vpanic+0x10/0x10
[ 94.947083][ T5321] ? is_bpf_text_address+0x292/0x2b0
[ 94.949585][ T5321] ? is_bpf_text_address+0x26/0x2b0
[ 94.951902][ T5321] panic+0xc5/0xd0
[ 94.953633][ T5321] ? __pfx_panic+0x10/0x10
[ 94.955684][ T5321] __warn+0x315/0x4c0
[ 94.957423][ T5321] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.960124][ T5321] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.962828][ T5321] __report_bug+0x276/0x570
[ 94.964847][ T5321] ? is_bpf_text_address+0x292/0x2b0
[ 94.967256][ T5321] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.970057][ T5321] ? __pfx___report_bug+0x10/0x10
[ 94.972344][ T5321] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.974662][ T5321] ? lock_acquire+0x115/0x350
[ 94.976794][ T5321] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.979521][ T5321] report_bug+0x16b/0x220
[ 94.981302][ T5321] ? __alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.983982][ T5321] ? __alloc_frozen_pages_noprof+0x427/0x5a0
[ 94.986614][ T5321] handle_bug+0x9c/0x200
[ 94.988523][ T5321] exc_invalid_op+0x1a/0x50
[ 94.990512][ T5321] asm_exc_invalid_op+0x1a/0x20
[ 94.992623][ T5321] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0
[ 94.995663][ T5321] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 1f 53 0f 67 48 0f b9 3a e9 68
[ 95.004317][ T5321] RSP: 0018:ffffc9000db97560 EFLAGS: 00010246
[ 95.006920][ T5321] RAX: ffffc9000db97500 RBX: 1ffff92001b72eb0 RCX: 0000000000000000
[ 95.010249][ T5321] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc9000db975c8
[ 95.013623][ T5321] RBP: ffffc9000db97658 R08: ffffc9000db975c7 R09: 0000000000000000
[ 95.016854][ T5321] R10: ffffc9000db975a0 R11: fffff52001b72eb9 R12: 0000000000000000
[ 95.020134][ T5321] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000
[ 95.023518][ T5321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 95.026376][ T5321] ? __pfx_policy_nodemask+0x10/0x10
[ 95.028682][ T5321] alloc_pages_mpol+0x21e/0x390
[ 95.030937][ T5321] ? setup_conf+0x23a/0x1040
[ 95.032946][ T5321] ___kmalloc_large_node+0x4f/0x120
[ 95.035209][ T5321] __kmalloc_large_node_noprof+0x18/0x90
[ 95.037577][ T5321] __kmalloc_noprof+0x3fb/0x720
[ 95.039540][ T5321] ? __kmalloc_cache_noprof+0x14d/0x600
[ 95.041882][ T5321] ? setup_conf+0x1bc/0x1040
[ 95.043865][ T5321] ? setup_conf+0x23a/0x1040
[ 95.045924][ T5321] setup_conf+0x23a/0x1040
[ 95.047942][ T5321] raid1_run+0x14d/0xa50
[ 95.049929][ T5321] ? xa_find_after+0xae/0x430
[ 95.052021][ T5321] ? __pfx_raid1_run+0x10/0x10
[ 95.054188][ T5321] ? do_raw_spin_unlock+0x4d/0x200
[ 95.056480][ T5321] ? _raw_spin_unlock+0x28/0x50
[ 95.058661][ T5321] ? get_pers+0x22b/0x2e0
[ 95.060600][ T5321] ? __pfx_get_pers+0x10/0x10
[ 95.062742][ T5321] ? preempt_schedule_thunk+0x16/0x40
[ 95.065069][ T5321] md_run+0xc3d/0x1cd0
[ 95.066900][ T5321] ? __pfx_md_run+0x10/0x10
[ 95.068628][ T5321] do_md_run+0x35/0x720
[ 95.070292][ T5321] ? md_ioctl+0x1e23/0x2610
[ 95.071987][ T5321] md_ioctl+0x1e2b/0x2610
[ 95.073619][ T5321] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 95.075772][ T5321] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.077997][ T5321] ? __pfx_md_ioctl+0x10/0x10
[ 95.080123][ T5321] ? do_vfs_ioctl+0x116f/0x1530
[ 95.082322][ T5321] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.084505][ T5321] ? hook_file_ioctl+0x1f2/0x600
[ 95.086468][ T5321] ? __pfx_md_ioctl+0x10/0x10
[ 95.088554][ T5321] blkdev_ioctl+0x5e3/0x740
[ 95.090686][ T5321] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.092907][ T5321] ? __fget_files+0x2a/0x420
[ 95.094973][ T5321] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.097198][ T5321] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.099464][ T5321] __se_sys_ioctl+0xfc/0x170
[ 95.101506][ T5321] do_syscall_64+0x166/0x520
[ 95.103563][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.105828][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.108541][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 95.110694][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.113261][ T5321] RIP: 0033:0x7f2cdf19e1d9
[ 95.115245][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.123300][ T5321] RSP: 002b:00007f2ce00bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.126886][ T5321] RAX: ffffffffffffffda RBX: 00007f2cdf425fa0 RCX: 00007f2cdf19e1d9
[ 95.130475][ T5321] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[ 95.134024][ T5321] RBP: 00007f2cdf235888 R08: 0000000000000000 R09: 0000000000000000
[ 95.137448][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.141007][ T5321] R13: 00007f2cdf426038 R14: 00007f2cdf425fa0 R15: 00007ffc5d26f5c8
[ 95.144598][ T5321]
[ 95.146458][ T5321] Kernel Offset: disabled
[ 95.148364][ T5321] Rebooting in 86400 seconds..