program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x4)
mknod$loop(0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000024c0)='./file0\x00', 0x0, 0x0, 0x0)
rename(0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYBLOB="0100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000002480)={0x102e, 0x4, 0x4, 0x200})
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002700)='./sys\x00', &(0x7f0000002740)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000027c0)='./dev\x00', &(0x7f0000002800)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000002880)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='./dev/md0\x00', 0x2, 0x0)
ioctl(r4, 0x40480923, &(0x7f0000002900)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r4, 0x40140921, &(0x7f0000002980)="0000000001")
ioctl(r4, 0x400c0930, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002580)={'lo\x00'})
write(r1, &(0x7f0000000380)='27', 0x2)
r5 = socket(0xa, 0x3, 0x3a)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=always'])
r6 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x1, 0x8000, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000]}}, 0x5c)
[ 94.840462][ T4665] Bluetooth: hci0: command tx timeout
[ 95.037484][ T5348] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 95.141227][ T5348] FAULT_INJECTION: forcing a failure.
[ 95.141227][ T5348] name failslab, interval 1, probability 0, space 0, times 1
[ 95.141330][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.141346][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.141353][ T5348] Call Trace:
[ 95.141358][ T5348]
[ 95.141364][ T5348] dump_stack_lvl+0xe8/0x150
[ 95.141442][ T5348] should_fail_ex+0x410/0x560
[ 95.141496][ T5348] should_failslab+0xa8/0x100
[ 95.141513][ T5348] ? mempool_init_node+0x1f4/0x510
[ 95.141530][ T5348] kmem_cache_alloc_noprof+0x9c/0x600
[ 95.141551][ T5348] ? kmem_cache_alloc_noprof+0x151/0x600
[ 95.141569][ T5348] ? mempool_init_node+0x1f4/0x510
[ 95.141588][ T5348] ? __pfx_mempool_alloc_slab+0x10/0x10
[ 95.141607][ T5348] mempool_init_node+0x1f4/0x510
[ 95.141628][ T5348] ? __pfx_mempool_free_slab+0x10/0x10
[ 95.141644][ T5348] ? __pfx_mempool_alloc_slab+0x10/0x10
[ 95.141660][ T5348] mempool_init_noprof+0x3a/0x50
[ 95.141678][ T5348] bioset_init+0x2ee/0x7e0
[ 95.141711][ T5348] ? __pfx_bioset_init+0x10/0x10
[ 95.141730][ T5348] ? alloc_pages_mpol+0x256/0x390
[ 95.141753][ T5348] setup_conf+0xd4b/0x2ad0
[ 95.141815][ T5348] ? __pfx_setup_conf+0x10/0x10
[ 95.141838][ T5348] raid5_run+0x8cc/0x2560
[ 95.141853][ T5348] ? _raw_spin_unlock+0x28/0x50
[ 95.141910][ T5348] ? get_pers+0x22b/0x2e0
[ 95.141938][ T5348] ? __pfx_get_pers+0x10/0x10
[ 95.141961][ T5348] md_run+0xc3d/0x1cd0
[ 95.141984][ T5348] ? __pfx_md_run+0x10/0x10
[ 95.142031][ T5348] do_md_run+0x35/0x720
[ 95.142048][ T5348] ? md_ioctl+0x1e23/0x2610
[ 95.142066][ T5348] md_ioctl+0x1e2b/0x2610
[ 95.142086][ T5348] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 95.142125][ T5348] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.142143][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.142160][ T5348] ? do_vfs_ioctl+0x116f/0x1530
[ 95.142175][ T5348] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.142201][ T5348] ? do_futex+0x3e7/0x4e0
[ 95.142224][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.142241][ T5348] blkdev_ioctl+0x5e3/0x740
[ 95.142259][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.142275][ T5348] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.142289][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.142302][ T5348] __se_sys_ioctl+0xfc/0x170
[ 95.142317][ T5348] do_syscall_64+0x166/0x520
[ 95.142333][ T5348] ? trace_irq_disable+0x3b/0x140
[ 95.142350][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.142362][ T5348] ? clear_bhb_loop+0x70/0xc0
[ 95.142375][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.142388][ T5348] RIP: 0033:0x7f629199f559
[ 95.142409][ T5348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.142419][ T5348] RSP: 002b:00007f629284ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.142435][ T5348] RAX: ffffffffffffffda RBX: 00007f6291c25fa0 RCX: 00007f629199f559
[ 95.142444][ T5348] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 95.142451][ T5348] RBP: 00007f6291a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.142459][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.142466][ T5348] R13: 00007f6291c26038 R14: 00007f6291c25fa0 R15: 00007fff32ea1278
[ 95.142483][ T5348]
[ 95.142606][ T5348] ==================================================================
[ 95.142614][ T5348] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0
[ 95.142631][ T5348] Read of size 8 at addr 0000000000000028 by task syz.0.0/5348
[ 95.142641][ T5348]
[ 95.142646][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.142659][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.142666][ T5348] Call Trace:
[ 95.142670][ T5348]
[ 95.142675][ T5348] dump_stack_lvl+0xe8/0x150
[ 95.142693][ T5348] ? free_conf+0x81/0x5d0
[ 95.142707][ T5348] kasan_report+0x117/0x150
[ 95.142721][ T5348] ? free_conf+0x81/0x5d0
[ 95.142735][ T5348] kasan_check_range+0x264/0x2c0
[ 95.142749][ T5348] free_conf+0x81/0x5d0
[ 95.142764][ T5348] setup_conf+0x1720/0x2ad0
[ 95.142780][ T5348] ? __pfx_setup_conf+0x10/0x10
[ 95.142796][ T5348] raid5_run+0x8cc/0x2560
[ 95.142808][ T5348] ? _raw_spin_unlock+0x28/0x50
[ 95.142821][ T5348] ? get_pers+0x22b/0x2e0
[ 95.142835][ T5348] ? __pfx_get_pers+0x10/0x10
[ 95.142850][ T5348] md_run+0xc3d/0x1cd0
[ 95.142865][ T5348] ? __pfx_md_run+0x10/0x10
[ 95.142881][ T5348] do_md_run+0x35/0x720
[ 95.142894][ T5348] ? md_ioctl+0x1e23/0x2610
[ 95.142908][ T5348] md_ioctl+0x1e2b/0x2610
[ 95.142932][ T5348] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 95.142950][ T5348] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.142967][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.142981][ T5348] ? do_vfs_ioctl+0x116f/0x1530
[ 95.142993][ T5348] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.143009][ T5348] ? do_futex+0x3e7/0x4e0
[ 95.143024][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.143038][ T5348] blkdev_ioctl+0x5e3/0x740
[ 95.143051][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.143064][ T5348] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.143077][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.143089][ T5348] __se_sys_ioctl+0xfc/0x170
[ 95.143101][ T5348] do_syscall_64+0x166/0x520
[ 95.143115][ T5348] ? trace_irq_disable+0x3b/0x140
[ 95.143149][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.143161][ T5348] ? clear_bhb_loop+0x70/0xc0
[ 95.143176][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.143187][ T5348] RIP: 0033:0x7f629199f559
[ 95.143196][ T5348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.143206][ T5348] RSP: 002b:00007f629284ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.143220][ T5348] RAX: ffffffffffffffda RBX: 00007f6291c25fa0 RCX: 00007f629199f559
[ 95.143252][ T5348] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 95.143261][ T5348] RBP: 00007f6291a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.143269][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.143277][ T5348] R13: 00007f6291c26038 R14: 00007f6291c25fa0 R15: 00007fff32ea1278
[ 95.143290][ T5348]
[ 95.143294][ T5348] ==================================================================
[ 95.143352][ T5348] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.415251][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.419284][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.423211][ T5348] Call Trace:
[ 95.424510][ T5348]
[ 95.425793][ T5348] vpanic+0x56d/0xa60
[ 95.427799][ T5348] ? rcu_is_watching+0x16/0xb0
[ 95.430215][ T5348] ? __pfx_vpanic+0x10/0x10
[ 95.432521][ T5348] ? __pfx___schedule+0x10/0x10
[ 95.435045][ T5348] panic+0xc5/0xd0
[ 95.436651][ T5348] ? __pfx_panic+0x10/0x10
[ 95.438431][ T5348] ? preempt_schedule_thunk+0x16/0x40
[ 95.440831][ T5348] ? free_conf+0x81/0x5d0
[ 95.442810][ T5348] check_panic_on_warn+0x89/0xb0
[ 95.445237][ T5348] ? free_conf+0x81/0x5d0
[ 95.447233][ T5348] end_report+0x73/0x170
[ 95.449177][ T5348] ? free_conf+0x81/0x5d0
[ 95.451143][ T5348] kasan_report+0x128/0x150
[ 95.453257][ T5348] ? free_conf+0x81/0x5d0
[ 95.455185][ T5348] kasan_check_range+0x264/0x2c0
[ 95.457493][ T5348] free_conf+0x81/0x5d0
[ 95.459418][ T5348] setup_conf+0x1720/0x2ad0
[ 95.461634][ T5348] ? __pfx_setup_conf+0x10/0x10
[ 95.463904][ T5348] raid5_run+0x8cc/0x2560
[ 95.465919][ T5348] ? _raw_spin_unlock+0x28/0x50
[ 95.468167][ T5348] ? get_pers+0x22b/0x2e0
[ 95.470215][ T5348] ? __pfx_get_pers+0x10/0x10
[ 95.472225][ T5348] md_run+0xc3d/0x1cd0
[ 95.473900][ T5348] ? __pfx_md_run+0x10/0x10
[ 95.475817][ T5348] do_md_run+0x35/0x720
[ 95.477711][ T5348] ? md_ioctl+0x1e23/0x2610
[ 95.479777][ T5348] md_ioctl+0x1e2b/0x2610
[ 95.481775][ T5348] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 95.484300][ T5348] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.486688][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.488643][ T5348] ? do_vfs_ioctl+0x116f/0x1530
[ 95.490823][ T5348] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.493122][ T5348] ? do_futex+0x3e7/0x4e0
[ 95.495024][ T5348] ? __pfx_md_ioctl+0x10/0x10
[ 95.497101][ T5348] blkdev_ioctl+0x5e3/0x740
[ 95.499148][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.501444][ T5348] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.503699][ T5348] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.505982][ T5348] __se_sys_ioctl+0xfc/0x170
[ 95.508049][ T5348] do_syscall_64+0x166/0x520
[ 95.510129][ T5348] ? trace_irq_disable+0x3b/0x140
[ 95.512422][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.515128][ T5348] ? clear_bhb_loop+0x70/0xc0
[ 95.517318][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.519848][ T5348] RIP: 0033:0x7f629199f559
[ 95.521843][ T5348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.529954][ T5348] RSP: 002b:00007f629284ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.533576][ T5348] RAX: ffffffffffffffda RBX: 00007f6291c25fa0 RCX: 00007f629199f559
[ 95.537040][ T5348] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000006
[ 95.540571][ T5348] RBP: 00007f6291a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.543924][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.547302][ T5348] R13: 00007f6291c26038 R14: 00007f6291c25fa0 R15: 00007fff32ea1278
[ 95.550633][ T5348]
[ 95.552351][ T5348] Kernel Offset: disabled
[ 95.554155][ T5348] Rebooting in 86400 seconds..