program:
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r1}, 0x94)
mount(0x0, &(0x7f0000000b40)='./debug\x00', 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x402, 0x31)
write(r2, &(0x7f0000000c00)='+', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c)
write(r3, &(0x7f0000000d40)='270', 0x3)
setns(0xc9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xf, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000240)={0x5, 0x8001})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x90)
ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@raid={0x0, 0x80, 0x0, 0x68, 'raid\x00', {'raid5_ls', 0x20, '1 8', 0x20, 0x2, [{0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}]}}]})
[ 106.814224][ T49] Bluetooth: hci0: command tx timeout
[ 106.966727][ T5345] device-mapper: raid: Choosing default region size of 4MiB
[ 107.023952][ T5345] mdX: WARNING: ram1 appears to be on the same physical disk as ram1.
[ 107.023974][ T5345] True protection against single-disk failure might be compromised.
[ 107.024113][ T5345] FAULT_INJECTION: forcing a failure.
[ 107.024113][ T5345] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 107.024141][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 107.024156][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 107.024164][ T5345] Call Trace:
[ 107.024183][ T5345]
[ 107.024189][ T5345] dump_stack_lvl+0xe8/0x150
[ 107.024442][ T5345] should_fail_ex+0x3eb/0x540
[ 107.024561][ T5345] prepare_alloc_pages+0x21e/0x5f0
[ 107.024634][ T5345] __alloc_frozen_pages_noprof+0x17c/0x410
[ 107.024653][ T5345] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 107.024685][ T5345] ? policy_nodemask+0x31b/0x980
[ 107.024704][ T5345] ? rcu_is_watching+0x16/0xb0
[ 107.024760][ T5345] alloc_pages_mpol+0x21e/0x390
[ 107.024783][ T5345] ___kmalloc_large_node+0x7b/0x170
[ 107.024800][ T5345] __kmalloc_large_noprof+0x1a/0x90
[ 107.024815][ T5345] setup_conf+0x420/0x2ad0
[ 107.024941][ T5345] ? vprintk_emit+0x55c/0x5f0
[ 107.024972][ T5345] ? __pfx_setup_conf+0x10/0x10
[ 107.024997][ T5345] raid5_run+0x8cc/0x2560
[ 107.025019][ T5345] ? md_run+0x24a/0x1cd0
[ 107.025041][ T5345] md_run+0xc3d/0x1cd0
[ 107.025064][ T5345] ? __pfx_md_run+0x10/0x10
[ 107.025091][ T5345] raid_ctr+0x1895/0x2a80
[ 107.025133][ T5345] ? __pfx_raid_ctr+0x10/0x10
[ 107.025152][ T5345] ? skip_spaces+0x8a/0xa0
[ 107.025182][ T5345] ? dm_split_args+0x50b/0x5d0
[ 107.025201][ T5345] dm_table_add_target+0x58d/0xc70
[ 107.025224][ T5345] table_load+0x325/0x8a0
[ 107.025249][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.025271][ T5345] ? __might_fault+0xaf/0x130
[ 107.025302][ T5345] dm_ctl_ioctl+0x9ec/0xe10
[ 107.025333][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.025352][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.025390][ T5345] ? __fget_files+0x2a/0x420
[ 107.025422][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20
[ 107.025470][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.025488][ T5345] __se_sys_ioctl+0xfc/0x170
[ 107.025510][ T5345] do_syscall_64+0x166/0x520
[ 107.025594][ T5345] ? trace_irq_disable+0x3b/0x140
[ 107.025621][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.025650][ T5345] ? clear_bhb_loop+0x70/0xc0
[ 107.025690][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.025703][ T5345] RIP: 0033:0x7faa09b9f559
[ 107.025740][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.025751][ T5345] RSP: 002b:00007faa0ab11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 107.025766][ T5345] RAX: ffffffffffffffda RBX: 00007faa09e25fa0 RCX: 00007faa09b9f559
[ 107.025775][ T5345] RDX: 00002000000005c0 RSI: 00000000c138fd09 RDI: 0000000000000005
[ 107.025783][ T5345] RBP: 00007faa09c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 107.025789][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.025796][ T5345] R13: 00007faa09e26038 R14: 00007faa09e25fa0 R15: 00007ffd09539fc8
[ 107.025816][ T5345]
[ 107.025941][ T5345] ==================================================================
[ 107.025947][ T5345] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0
[ 107.025968][ T5345] Read of size 8 at addr 0000000000000028 by task syz.0.0/5345
[ 107.025977][ T5345]
[ 107.025983][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 107.025996][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 107.026002][ T5345] Call Trace:
[ 107.026008][ T5345]
[ 107.026013][ T5345] dump_stack_lvl+0xe8/0x150
[ 107.026031][ T5345] ? free_conf+0x81/0x5d0
[ 107.026047][ T5345] kasan_report+0x117/0x150
[ 107.026077][ T5345] ? free_conf+0x81/0x5d0
[ 107.026096][ T5345] kasan_check_range+0x264/0x2c0
[ 107.026113][ T5345] free_conf+0x81/0x5d0
[ 107.026131][ T5345] setup_conf+0x1720/0x2ad0
[ 107.026149][ T5345] ? vprintk_emit+0x55c/0x5f0
[ 107.026164][ T5345] ? __pfx_setup_conf+0x10/0x10
[ 107.026182][ T5345] raid5_run+0x8cc/0x2560
[ 107.026197][ T5345] ? md_run+0x24a/0x1cd0
[ 107.026212][ T5345] md_run+0xc3d/0x1cd0
[ 107.026229][ T5345] ? __pfx_md_run+0x10/0x10
[ 107.026248][ T5345] raid_ctr+0x1895/0x2a80
[ 107.026265][ T5345] ? __pfx_raid_ctr+0x10/0x10
[ 107.026279][ T5345] ? skip_spaces+0x8a/0xa0
[ 107.026295][ T5345] ? dm_split_args+0x50b/0x5d0
[ 107.026308][ T5345] dm_table_add_target+0x58d/0xc70
[ 107.026332][ T5345] table_load+0x325/0x8a0
[ 107.026351][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.026371][ T5345] ? __might_fault+0xaf/0x130
[ 107.026391][ T5345] dm_ctl_ioctl+0x9ec/0xe10
[ 107.026408][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.026425][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.026448][ T5345] ? __fget_files+0x2a/0x420
[ 107.026461][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20
[ 107.026477][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.026494][ T5345] __se_sys_ioctl+0xfc/0x170
[ 107.026508][ T5345] do_syscall_64+0x166/0x520
[ 107.026523][ T5345] ? trace_irq_disable+0x3b/0x140
[ 107.026539][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.026551][ T5345] ? clear_bhb_loop+0x70/0xc0
[ 107.026564][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.026575][ T5345] RIP: 0033:0x7faa09b9f559
[ 107.026585][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.026620][ T5345] RSP: 002b:00007faa0ab11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 107.026633][ T5345] RAX: ffffffffffffffda RBX: 00007faa09e25fa0 RCX: 00007faa09b9f559
[ 107.026642][ T5345] RDX: 00002000000005c0 RSI: 00000000c138fd09 RDI: 0000000000000005
[ 107.026650][ T5345] RBP: 00007faa09c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 107.026657][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.026664][ T5345] R13: 00007faa09e26038 R14: 00007faa09e25fa0 R15: 00007ffd09539fc8
[ 107.026676][ T5345]
[ 107.026680][ T5345] ==================================================================
[ 107.026738][ T5345] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.288955][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 107.292864][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 107.297238][ T5345] Call Trace:
[ 107.298797][ T5345]
[ 107.300179][ T5345] vpanic+0x26f/0x710
[ 107.302001][ T5345] panic+0xc5/0xd0
[ 107.303661][ T5345] ? __pfx_panic+0x10/0x10
[ 107.305640][ T5345] ? preempt_schedule_thunk+0x16/0x40
[ 107.307967][ T5345] ? free_conf+0x81/0x5d0
[ 107.309804][ T5345] check_panic_on_warn+0x89/0xb0
[ 107.311898][ T5345] ? free_conf+0x81/0x5d0
[ 107.313797][ T5345] end_report+0x73/0x170
[ 107.315672][ T5345] ? free_conf+0x81/0x5d0
[ 107.317618][ T5345] kasan_report+0x128/0x150
[ 107.319662][ T5345] ? free_conf+0x81/0x5d0
[ 107.321630][ T5345] kasan_check_range+0x264/0x2c0
[ 107.324210][ T5345] free_conf+0x81/0x5d0
[ 107.326017][ T5345] setup_conf+0x1720/0x2ad0
[ 107.327918][ T5345] ? vprintk_emit+0x55c/0x5f0
[ 107.330096][ T5345] ? __pfx_setup_conf+0x10/0x10
[ 107.332232][ T5345] raid5_run+0x8cc/0x2560
[ 107.334077][ T5345] ? md_run+0x24a/0x1cd0
[ 107.335955][ T5345] md_run+0xc3d/0x1cd0
[ 107.337807][ T5345] ? __pfx_md_run+0x10/0x10
[ 107.339795][ T5345] raid_ctr+0x1895/0x2a80
[ 107.341653][ T5345] ? __pfx_raid_ctr+0x10/0x10
[ 107.343780][ T5345] ? skip_spaces+0x8a/0xa0
[ 107.345721][ T5345] ? dm_split_args+0x50b/0x5d0
[ 107.347891][ T5345] dm_table_add_target+0x58d/0xc70
[ 107.350198][ T5345] table_load+0x325/0x8a0
[ 107.352043][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.354108][ T5345] ? __might_fault+0xaf/0x130
[ 107.356231][ T5345] dm_ctl_ioctl+0x9ec/0xe10
[ 107.358290][ T5345] ? __pfx_table_load+0x10/0x10
[ 107.360548][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.362838][ T5345] ? __fget_files+0x2a/0x420
[ 107.364959][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20
[ 107.367226][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10
[ 107.369360][ T5345] __se_sys_ioctl+0xfc/0x170
[ 107.371340][ T5345] do_syscall_64+0x166/0x520
[ 107.373321][ T5345] ? trace_irq_disable+0x3b/0x140
[ 107.375559][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.378207][ T5345] ? clear_bhb_loop+0x70/0xc0
[ 107.380311][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.382870][ T5345] RIP: 0033:0x7faa09b9f559
[ 107.384900][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.392845][ T5345] RSP: 002b:00007faa0ab11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 107.396466][ T5345] RAX: ffffffffffffffda RBX: 00007faa09e25fa0 RCX: 00007faa09b9f559
[ 107.400452][ T5345] RDX: 00002000000005c0 RSI: 00000000c138fd09 RDI: 0000000000000005
[ 107.404456][ T5345] RBP: 00007faa09c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 107.407996][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.411493][ T5345] R13: 00007faa09e26038 R14: 00007faa09e25fa0 R15: 00007ffd09539fc8
[ 107.415005][ T5345]
[ 107.416905][ T5345] Kernel Offset: disabled
[ 107.418906][ T5345] Rebooting in 86400 seconds..