program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='md0', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x2, 0x0)
ioctl(r2, 0x40480923, &(0x7f00000003c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r2, 0x40140921, &(0x7f0000000440)="0000000001")
ioctl(r2, 0x400c0930, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
write(r0, &(0x7f00000004c0)='2', 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
r3 = syz_open_procfs(0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
[ 102.337097][ T5308] Bluetooth: hci0: command tx timeout
[ 102.487621][ T5352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 102.490403][ T5353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 102.490586][ T5353] block device autoloading is deprecated and will be removed.
[ 102.662151][ T5352] FAULT_INJECTION: forcing a failure.
[ 102.662151][ T5352] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 102.662207][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.662223][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.662230][ T5352] Call Trace:
[ 102.662236][ T5352]
[ 102.662243][ T5352] dump_stack_lvl+0xe8/0x150
[ 102.662413][ T5352] should_fail_ex+0x410/0x560
[ 102.662498][ T5352] prepare_alloc_pages+0x21e/0x5f0
[ 102.662633][ T5352] __alloc_frozen_pages_noprof+0x17a/0x400
[ 102.662649][ T5352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 102.662671][ T5352] ? policy_nodemask+0x2cc/0x8e0
[ 102.662696][ T5352] ? rcu_is_watching+0x16/0xb0
[ 102.662727][ T5352] alloc_pages_mpol+0x21e/0x390
[ 102.662739][ T5352] ___kmalloc_large_node+0x7b/0x170
[ 102.662749][ T5352] __kmalloc_large_noprof+0x1a/0x90
[ 102.662757][ T5352] setup_conf+0x420/0x2ad0
[ 102.662849][ T5352] ? xa_find_after+0xae/0x430
[ 102.662950][ T5352] ? __pfx_setup_conf+0x10/0x10
[ 102.662970][ T5352] raid5_run+0x8cc/0x2560
[ 102.662985][ T5352] ? _raw_spin_unlock+0x28/0x50
[ 102.662996][ T5352] ? get_pers+0x22b/0x2e0
[ 102.663014][ T5352] ? __pfx_get_pers+0x10/0x10
[ 102.663035][ T5352] md_run+0xc3d/0x1cd0
[ 102.663056][ T5352] ? __pfx_md_run+0x10/0x10
[ 102.663080][ T5352] do_md_run+0x35/0x720
[ 102.663094][ T5352] ? md_ioctl+0x1e23/0x2610
[ 102.663113][ T5352] md_ioctl+0x1e2b/0x2610
[ 102.663128][ T5352] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.663164][ T5352] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.663175][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 102.663191][ T5352] ? do_vfs_ioctl+0x116f/0x1530
[ 102.663218][ T5352] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.663242][ T5352] ? do_futex+0x458/0x4e0
[ 102.663278][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 102.663297][ T5352] blkdev_ioctl+0x5e3/0x740
[ 102.663323][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.663339][ T5352] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.663365][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.663379][ T5352] __se_sys_ioctl+0xfc/0x170
[ 102.663395][ T5352] do_syscall_64+0x166/0x520
[ 102.663408][ T5352] ? trace_irq_disable+0x3b/0x140
[ 102.663435][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.663450][ T5352] ? clear_bhb_loop+0x70/0xc0
[ 102.663468][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.663479][ T5352] RIP: 0033:0x7f422d79f559
[ 102.663492][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.663501][ T5352] RSP: 002b:00007f422e61efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.663515][ T5352] RAX: ffffffffffffffda RBX: 00007f422da25fa0 RCX: 00007f422d79f559
[ 102.663525][ T5352] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 102.663533][ T5352] RBP: 00007f422d836b20 R08: 0000000000000000 R09: 0000000000000000
[ 102.663541][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.663548][ T5352] R13: 00007f422da26038 R14: 00007f422da25fa0 R15: 00007ffe384fa688
[ 102.663569][ T5352]
[ 102.663648][ T5352] ==================================================================
[ 102.663655][ T5352] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0
[ 102.663671][ T5352] Read of size 8 at addr 0000000000000028 by task syz.0.0/5352
[ 102.663681][ T5352]
[ 102.663687][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.663699][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.663706][ T5352] Call Trace:
[ 102.663712][ T5352]
[ 102.663716][ T5352] dump_stack_lvl+0xe8/0x150
[ 102.663734][ T5352] ? free_conf+0x81/0x5d0
[ 102.663746][ T5352] kasan_report+0x117/0x150
[ 102.663760][ T5352] ? free_conf+0x81/0x5d0
[ 102.663776][ T5352] kasan_check_range+0x264/0x2c0
[ 102.663790][ T5352] free_conf+0x81/0x5d0
[ 102.663806][ T5352] setup_conf+0x1720/0x2ad0
[ 102.663822][ T5352] ? xa_find_after+0xae/0x430
[ 102.663837][ T5352] ? __pfx_setup_conf+0x10/0x10
[ 102.663854][ T5352] raid5_run+0x8cc/0x2560
[ 102.663866][ T5352] ? _raw_spin_unlock+0x28/0x50
[ 102.663877][ T5352] ? get_pers+0x22b/0x2e0
[ 102.663891][ T5352] ? __pfx_get_pers+0x10/0x10
[ 102.663907][ T5352] md_run+0xc3d/0x1cd0
[ 102.663923][ T5352] ? __pfx_md_run+0x10/0x10
[ 102.663940][ T5352] do_md_run+0x35/0x720
[ 102.663953][ T5352] ? md_ioctl+0x1e23/0x2610
[ 102.663968][ T5352] md_ioctl+0x1e2b/0x2610
[ 102.663985][ T5352] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.664001][ T5352] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.664027][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 102.664044][ T5352] ? do_vfs_ioctl+0x116f/0x1530
[ 102.664056][ T5352] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.664071][ T5352] ? do_futex+0x458/0x4e0
[ 102.664085][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 102.664101][ T5352] blkdev_ioctl+0x5e3/0x740
[ 102.664115][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.664127][ T5352] ? bpf_lsm_file_ioctl+0x9/0x20
[ 102.664140][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 102.664151][ T5352] __se_sys_ioctl+0xfc/0x170
[ 102.664164][ T5352] do_syscall_64+0x166/0x520
[ 102.664176][ T5352] ? trace_irq_disable+0x3b/0x140
[ 102.664191][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.664203][ T5352] ? clear_bhb_loop+0x70/0xc0
[ 102.664215][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.664227][ T5352] RIP: 0033:0x7f422d79f559
[ 102.664236][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.664246][ T5352] RSP: 002b:00007f422e61efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 102.664257][ T5352] RAX: ffffffffffffffda RBX: 00007f422da25fa0 RCX: 00007f422d79f559
[ 102.664265][ T5352] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 102.664272][ T5352] RBP: 00007f422d836b20 R08: 0000000000000000 R09: 0000000000000000
[ 102.664280][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.664298][ T5352] R13: 00007f422da26038 R14: 00007f422da25fa0 R15: 00007ffe384fa688
[ 102.664311][ T5352]
[ 102.664316][ T5352] ==================================================================
[ 102.664347][ T5352] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.923278][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.926816][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.930844][ T5352] Call Trace:
[ 102.932256][ T5352]
[ 102.933528][ T5352] vpanic+0x56d/0xa60
[ 102.935195][ T5352] ? __pfx_vpanic+0x10/0x10
[ 102.936948][ T5352] ? is_bpf_text_address+0x292/0x2b0
[ 102.939054][ T5352] panic+0xc5/0xd0
[ 102.940665][ T5352] ? __pfx_panic+0x10/0x10
[ 102.942518][ T5352] ? free_conf+0x81/0x5d0
[ 102.944407][ T5352] ? rcu_is_watching+0x16/0xb0
[ 102.946506][ T5352] ? free_conf+0x81/0x5d0
[ 102.948377][ T5352] check_panic_on_warn+0x89/0xb0
[ 102.952558][ T5352] ? free_conf+0x81/0x5d0
[ 102.954259][ T5352] end_report+0x73/0x170
[ 102.956101][ T5352] ? free_conf+0x81/0x5d0
[ 102.957899][ T5352] kasan_report+0x128/0x150
[ 102.959872][ T5352] ? free_conf+0x81/0x5d0
[ 102.961675][ T5352] kasan_check_range+0x264/0x2c0
[ 102.963838][ T5352] free_conf+0x81/0x5d0
[ 102.965638][ T5352] setup_conf+0x1720/0x2ad0
[ 102.967496][ T5352] ? xa_find_after+0xae/0x430
[ 102.969405][ T5352] ? __pfx_setup_conf+0x10/0x10
[ 102.971339][ T5352] raid5_run+0x8cc/0x2560
[ 102.973034][ T5352] ? _raw_spin_unlock+0x28/0x50
[ 102.974947][ T5352] ? get_pers+0x22b/0x2e0
[ 102.976710][ T5352] ? __pfx_get_pers+0x10/0x10
[ 102.978636][ T5352] md_run+0xc3d/0x1cd0
[ 102.981367][ T5352] ? __pfx_md_run+0x10/0x10
[ 102.983267][ T5352] do_md_run+0x35/0x720
[ 102.985093][ T5352] ? md_ioctl+0x1e23/0x2610
[ 102.987058][ T5352] md_ioctl+0x1e2b/0x2610
[ 102.988925][ T5352] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 102.991301][ T5352] ? tomoyo_path_number_perm+0x219/0x5f0
[ 102.993642][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 102.995584][ T5352] ? do_vfs_ioctl+0x116f/0x1530
[ 102.997666][ T5352] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 102.999926][ T5352] ? do_futex+0x458/0x4e0
[ 103.001748][ T5352] ? __pfx_md_ioctl+0x10/0x10
[ 103.003706][ T5352] blkdev_ioctl+0x5e3/0x740
[ 103.005597][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.007722][ T5352] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.009841][ T5352] ? __pfx_blkdev_ioctl+0x10/0x10
[ 103.012016][ T5352] __se_sys_ioctl+0xfc/0x170
[ 103.014012][ T5352] do_syscall_64+0x166/0x520
[ 103.015989][ T5352] ? trace_irq_disable+0x3b/0x140
[ 103.018118][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.020693][ T5352] ? clear_bhb_loop+0x70/0xc0
[ 103.022662][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.025250][ T5352] RIP: 0033:0x7f422d79f559
[ 103.027173][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.035059][ T5352] RSP: 002b:00007f422e61efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.038497][ T5352] RAX: ffffffffffffffda RBX: 00007f422da25fa0 RCX: 00007f422d79f559
[ 103.042035][ T5352] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 103.045410][ T5352] RBP: 00007f422d836b20 R08: 0000000000000000 R09: 0000000000000000
[ 103.048956][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.052993][ T5352] R13: 00007f422da26038 R14: 00007f422da25fa0 R15: 00007ffe384fa688
[ 103.057128][ T5352]
[ 103.058976][ T5352] Kernel Offset: disabled
[ 103.060816][ T5352] Rebooting in 86400 seconds..