program: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9009369a09991f"], 0xffffffffffffffc4}}, 0x24008084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfff}) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e8405747fa0dd1ddc579bcfb0a49ddb83b64c28cd40344f553daffd42b8fe0d3d12c8938a0afca9ee5f6507efc0b1b3fbdc8f8dd4a5de4e1c6de6fce5df32728fd16fb287b07a661a638a7e7e2dc2aaceee0516d873ee243e57881da1f1ff67affa944079b8ac9eb86863c15e18fa9714cf469979ca55df16c7579260d5ad0035a4ea3000000000000000049e8fea8b1d5c4589c12669f2ebb11e0f0c921ea16f3a642859e6c03b564e6c3176e8b6757bd9b2930757d125658f8854eba4c50a57b7810570504f32e4511c4b3d4366b005ac4b01d44501746b39deeee8172c3fb003f0000000000000000"], 0x1, 0x14d1, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./sys\x00', 0x20) mount(0x0, &(0x7f0000001980)='./sys\x00', &(0x7f00000019c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) read(r4, 0x0, 0x0) mount(0x0, &(0x7f0000001ac0)='./dev\x00', &(0x7f0000001b00)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000001b80)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./dev/md0\x00', 0x2, 0x0) ioctl(r6, 0x40480923, &(0x7f0000001c00)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r6, 0x40140921, &(0x7f0000001c80)="0000000001") ioctl(r6, 0x400c0930, 0x0) write(r3, &(0x7f0000001cc0)='3', 0x4e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2004, 0x3, 0x1, 0x5, {0xa, 0x9, 0x802, @remote, 0x9c}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) [ 101.849597][ T4646] Bluetooth: hci0: command tx timeout [ 102.036351][ T5324] loop0: detected capacity change from 0 to 256 [ 102.182866][ T5324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.290570][ T5324] FAULT_INJECTION: forcing a failure. [ 102.290570][ T5324] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.290605][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.290616][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.290621][ T5324] Call Trace: [ 102.290632][ T5324] [ 102.290636][ T5324] dump_stack_lvl+0xe8/0x150 [ 102.290700][ T5324] should_fail_ex+0x410/0x560 [ 102.290750][ T5324] prepare_alloc_pages+0x223/0x600 [ 102.290769][ T5324] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 102.290799][ T5324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.290815][ T5324] ? __pfx_policy_nodemask+0x10/0x10 [ 102.290837][ T5324] ? rcu_is_watching+0x16/0xb0 [ 102.290849][ T5324] alloc_pages_mpol+0x21e/0x390 [ 102.290860][ T5324] ___kmalloc_large_node+0x4f/0x120 [ 102.290869][ T5324] __kmalloc_large_noprof+0x1a/0x90 [ 102.290883][ T5324] setup_conf+0x420/0x2ad0 [ 102.290934][ T5324] ? xa_find_after+0xae/0x430 [ 102.290946][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 102.290960][ T5324] raid5_run+0x8cc/0x2560 [ 102.290970][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 102.290979][ T5324] ? get_pers+0x22b/0x2e0 [ 102.290991][ T5324] ? __pfx_get_pers+0x10/0x10 [ 102.291005][ T5324] md_run+0xc3d/0x1cd0 [ 102.291020][ T5324] ? __pfx_md_run+0x10/0x10 [ 102.291035][ T5324] do_md_run+0x35/0x720 [ 102.291046][ T5324] ? md_ioctl+0x1e23/0x2610 [ 102.291058][ T5324] md_ioctl+0x1e2b/0x2610 [ 102.291071][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 102.291081][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.291091][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.291104][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 102.291113][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.291126][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 102.291142][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.291153][ T5324] blkdev_ioctl+0x5e3/0x740 [ 102.291166][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.291178][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.291189][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.291199][ T5324] __se_sys_ioctl+0xfc/0x170 [ 102.291207][ T5324] do_syscall_64+0x166/0x520 [ 102.291216][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.291225][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.291234][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.291248][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.291259][ T5324] RIP: 0033:0x7fbc82b9f559 [ 102.291271][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.291280][ T5324] RSP: 002b:00007fbc83aa3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.291295][ T5324] RAX: ffffffffffffffda RBX: 00007fbc82e25fa0 RCX: 00007fbc82b9f559 [ 102.291304][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 102.291311][ T5324] RBP: 00007fbc82c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.291319][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.291326][ T5324] R13: 00007fbc82e26038 R14: 00007fbc82e25fa0 R15: 00007ffcb4575c68 [ 102.291338][ T5324] [ 102.291343][ T5324] ================================================================== [ 102.291347][ T5324] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0 [ 102.291357][ T5324] Read of size 8 at addr 0000000000000028 by task syz.0.0/5324 [ 102.291364][ T5324] [ 102.291368][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.291377][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.291382][ T5324] Call Trace: [ 102.291385][ T5324] [ 102.291388][ T5324] dump_stack_lvl+0xe8/0x150 [ 102.291399][ T5324] ? free_conf+0x81/0x5d0 [ 102.291408][ T5324] kasan_report+0x117/0x150 [ 102.291418][ T5324] ? free_conf+0x81/0x5d0 [ 102.291428][ T5324] kasan_check_range+0x264/0x2c0 [ 102.291437][ T5324] free_conf+0x81/0x5d0 [ 102.291447][ T5324] setup_conf+0x1720/0x2ad0 [ 102.291472][ T5324] ? xa_find_after+0xae/0x430 [ 102.291482][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 102.291493][ T5324] raid5_run+0x8cc/0x2560 [ 102.291506][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 102.291517][ T5324] ? get_pers+0x22b/0x2e0 [ 102.291530][ T5324] ? __pfx_get_pers+0x10/0x10 [ 102.291547][ T5324] md_run+0xc3d/0x1cd0 [ 102.291564][ T5324] ? __pfx_md_run+0x10/0x10 [ 102.291576][ T5324] do_md_run+0x35/0x720 [ 102.291585][ T5324] ? md_ioctl+0x1e23/0x2610 [ 102.291596][ T5324] md_ioctl+0x1e2b/0x2610 [ 102.291611][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 102.291620][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.291629][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.291639][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 102.291646][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.291655][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 102.291668][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.291679][ T5324] blkdev_ioctl+0x5e3/0x740 [ 102.291689][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.291700][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.291710][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.291722][ T5324] __se_sys_ioctl+0xfc/0x170 [ 102.291734][ T5324] do_syscall_64+0x166/0x520 [ 102.291746][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.291757][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.291770][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.291782][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.291793][ T5324] RIP: 0033:0x7fbc82b9f559 [ 102.291802][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.291810][ T5324] RSP: 002b:00007fbc83aa3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.291818][ T5324] RAX: ffffffffffffffda RBX: 00007fbc82e25fa0 RCX: 00007fbc82b9f559 [ 102.291824][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 102.291828][ T5324] RBP: 00007fbc82c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.291833][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.291837][ T5324] R13: 00007fbc82e26038 R14: 00007fbc82e25fa0 R15: 00007ffcb4575c68 [ 102.291845][ T5324] [ 102.291847][ T5324] ================================================================== [ 102.291852][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.554149][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.557892][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.562100][ T5324] Call Trace: [ 102.563566][ T5324] [ 102.564838][ T5324] vpanic+0x56d/0xa60 [ 102.566564][ T5324] ? __pfx_vpanic+0x10/0x10 [ 102.568504][ T5324] ? is_bpf_text_address+0x292/0x2b0 [ 102.570761][ T5324] panic+0xc5/0xd0 [ 102.572427][ T5324] ? __pfx_panic+0x10/0x10 [ 102.574454][ T5324] ? free_conf+0x81/0x5d0 [ 102.576343][ T5324] ? rcu_is_watching+0x16/0xb0 [ 102.578441][ T5324] ? free_conf+0x81/0x5d0 [ 102.580367][ T5324] check_panic_on_warn+0x89/0xb0 [ 102.582584][ T5324] ? free_conf+0x81/0x5d0 [ 102.584461][ T5324] end_report+0x73/0x170 [ 102.586231][ T5324] ? free_conf+0x81/0x5d0 [ 102.588030][ T5324] kasan_report+0x128/0x150 [ 102.589933][ T5324] ? free_conf+0x81/0x5d0 [ 102.591722][ T5324] kasan_check_range+0x264/0x2c0 [ 102.593825][ T5324] free_conf+0x81/0x5d0 [ 102.595732][ T5324] setup_conf+0x1720/0x2ad0 [ 102.597717][ T5324] ? xa_find_after+0xae/0x430 [ 102.599696][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 102.601880][ T5324] raid5_run+0x8cc/0x2560 [ 102.603738][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 102.605795][ T5324] ? get_pers+0x22b/0x2e0 [ 102.607606][ T5324] ? __pfx_get_pers+0x10/0x10 [ 102.609644][ T5324] md_run+0xc3d/0x1cd0 [ 102.611405][ T5324] ? __pfx_md_run+0x10/0x10 [ 102.613393][ T5324] do_md_run+0x35/0x720 [ 102.615202][ T5324] ? md_ioctl+0x1e23/0x2610 [ 102.617149][ T5324] md_ioctl+0x1e2b/0x2610 [ 102.618946][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 102.621235][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.623595][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.625698][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 102.627771][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.629945][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 102.632059][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 102.634105][ T5324] blkdev_ioctl+0x5e3/0x740 [ 102.636126][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.638325][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.640500][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.642671][ T5324] __se_sys_ioctl+0xfc/0x170 [ 102.644778][ T5324] do_syscall_64+0x166/0x520 [ 102.646827][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.649066][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.651771][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.653835][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.656357][ T5324] RIP: 0033:0x7fbc82b9f559 [ 102.658341][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.666695][ T5324] RSP: 002b:00007fbc83aa3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.670024][ T5324] RAX: ffffffffffffffda RBX: 00007fbc82e25fa0 RCX: 00007fbc82b9f559 [ 102.673881][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 102.677395][ T5324] RBP: 00007fbc82c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.680589][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.683862][ T5324] R13: 00007fbc82e26038 R14: 00007fbc82e25fa0 R15: 00007ffcb4575c68 [ 102.686668][ T5324] [ 102.688316][ T5324] Kernel Offset: disabled [ 102.690234][ T5324] Rebooting in 86400 seconds..