program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x100)
ioctl(r2, 0x40140921, &(0x7f0000000420)="ce740000010000000180000000000001")
ioctl(r2, 0x400c0930, 0x0) (fail_nth: 7)
[ 92.455016][ T5276] Bluetooth: hci0: command tx timeout
[ 92.466951][ T10] cfg80211: failed to load regulatory.db
[ 92.578534][ T5312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 92.639671][ T5312] block device autoloading is deprecated and will be removed.
[ 92.684838][ T5312] FAULT_INJECTION: forcing a failure.
[ 92.684838][ T5312] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 92.684880][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 92.684893][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.684909][ T5312] Call Trace:
[ 92.684915][ T5312]
[ 92.684942][ T5312] dump_stack_lvl+0xe8/0x150
[ 92.685095][ T5312] should_fail_ex+0x410/0x560
[ 92.685188][ T5312] prepare_alloc_pages+0x223/0x600
[ 92.685239][ T5312] __alloc_frozen_pages_noprof+0x185/0x5a0
[ 92.685254][ T5312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 92.685279][ T5312] ? __pfx_policy_nodemask+0x10/0x10
[ 92.685299][ T5312] ? rcu_is_watching+0x16/0xb0
[ 92.685331][ T5312] alloc_pages_mpol+0x21e/0x390
[ 92.685348][ T5312] ___kmalloc_large_node+0x4f/0x120
[ 92.685362][ T5312] __kmalloc_large_noprof+0x1a/0x90
[ 92.685375][ T5312] setup_conf+0x420/0x2ad0
[ 92.685466][ T5312] ? xa_find_after+0xae/0x430
[ 92.685513][ T5312] ? __pfx_setup_conf+0x10/0x10
[ 92.685525][ T5312] raid5_run+0x8cc/0x2560
[ 92.685533][ T5312] ? _raw_spin_unlock+0x28/0x50
[ 92.685543][ T5312] ? get_pers+0x22b/0x2e0
[ 92.685553][ T5312] ? __pfx_get_pers+0x10/0x10
[ 92.685565][ T5312] md_run+0xc3d/0x1cd0
[ 92.685577][ T5312] ? __pfx_md_run+0x10/0x10
[ 92.685590][ T5312] do_md_run+0x35/0x720
[ 92.685602][ T5312] ? md_ioctl+0x1e23/0x2610
[ 92.685616][ T5312] md_ioctl+0x1e2b/0x2610
[ 92.685632][ T5312] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 92.685657][ T5312] ? tomoyo_path_number_perm+0x219/0x5f0
[ 92.685670][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 92.685684][ T5312] ? do_vfs_ioctl+0x116f/0x1530
[ 92.685699][ T5312] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 92.685718][ T5312] ? hook_file_ioctl+0x1f2/0x600
[ 92.685753][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 92.685769][ T5312] blkdev_ioctl+0x5e3/0x740
[ 92.685794][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 92.685808][ T5312] ? __fget_files+0x2a/0x420
[ 92.685826][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20
[ 92.685851][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 92.685864][ T5312] __se_sys_ioctl+0xfc/0x170
[ 92.685875][ T5312] do_syscall_64+0x166/0x520
[ 92.685886][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.685909][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 92.685923][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.685935][ T5312] RIP: 0033:0x7f56bab9e199
[ 92.685956][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.685965][ T5312] RSP: 002b:00007f56bba5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 92.685980][ T5312] RAX: ffffffffffffffda RBX: 00007f56bae25fa0 RCX: 00007f56bab9e199
[ 92.685989][ T5312] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005
[ 92.685996][ T5312] RBP: 00007f56bba60050 R08: 0000000000000000 R09: 0000000000000000
[ 92.686002][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 92.686009][ T5312] R13: 00007f56bae26038 R14: 00007f56bae25fa0 R15: 00007ffe15686d08
[ 92.686028][ T5312]
[ 92.686360][ T5312] ==================================================================
[ 92.686367][ T5312] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0
[ 92.686382][ T5312] Read of size 8 at addr 0000000000000028 by task syz.0.0/5312
[ 92.686391][ T5312]
[ 92.686398][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 92.686410][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.686416][ T5312] Call Trace:
[ 92.686421][ T5312]
[ 92.686425][ T5312] dump_stack_lvl+0xe8/0x150
[ 92.686440][ T5312] ? free_conf+0x81/0x5d0
[ 92.686451][ T5312] kasan_report+0x117/0x150
[ 92.686466][ T5312] ? free_conf+0x81/0x5d0
[ 92.686479][ T5312] kasan_check_range+0x264/0x2c0
[ 92.686493][ T5312] free_conf+0x81/0x5d0
[ 92.686505][ T5312] setup_conf+0x1720/0x2ad0
[ 92.686520][ T5312] ? xa_find_after+0xae/0x430
[ 92.686533][ T5312] ? __pfx_setup_conf+0x10/0x10
[ 92.686547][ T5312] raid5_run+0x8cc/0x2560
[ 92.686558][ T5312] ? _raw_spin_unlock+0x28/0x50
[ 92.686571][ T5312] ? get_pers+0x22b/0x2e0
[ 92.686583][ T5312] ? __pfx_get_pers+0x10/0x10
[ 92.686597][ T5312] md_run+0xc3d/0x1cd0
[ 92.686612][ T5312] ? __pfx_md_run+0x10/0x10
[ 92.686627][ T5312] do_md_run+0x35/0x720
[ 92.686639][ T5312] ? md_ioctl+0x1e23/0x2610
[ 92.686652][ T5312] md_ioctl+0x1e2b/0x2610
[ 92.686665][ T5312] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 92.686677][ T5312] ? tomoyo_path_number_perm+0x219/0x5f0
[ 92.686687][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 92.686700][ T5312] ? do_vfs_ioctl+0x116f/0x1530
[ 92.686718][ T5312] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 92.686730][ T5312] ? hook_file_ioctl+0x1f2/0x600
[ 92.686748][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 92.686761][ T5312] blkdev_ioctl+0x5e3/0x740
[ 92.686775][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 92.686786][ T5312] ? __fget_files+0x2a/0x420
[ 92.686801][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20
[ 92.686816][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 92.686829][ T5312] __se_sys_ioctl+0xfc/0x170
[ 92.686840][ T5312] do_syscall_64+0x166/0x520
[ 92.686848][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.686856][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 92.686863][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.686869][ T5312] RIP: 0033:0x7f56bab9e199
[ 92.686876][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.686882][ T5312] RSP: 002b:00007f56bba5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 92.686890][ T5312] RAX: ffffffffffffffda RBX: 00007f56bae25fa0 RCX: 00007f56bab9e199
[ 92.686895][ T5312] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005
[ 92.686899][ T5312] RBP: 00007f56bba60050 R08: 0000000000000000 R09: 0000000000000000
[ 92.686904][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 92.686908][ T5312] R13: 00007f56bae26038 R14: 00007f56bae25fa0 R15: 00007ffe15686d08
[ 92.686915][ T5312]
[ 92.686918][ T5312] ==================================================================
[ 92.686924][ T5312] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 92.938114][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 92.941961][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.946384][ T5312] Call Trace:
[ 92.947886][ T5312]
[ 92.949237][ T5312] vpanic+0x56d/0xa60
[ 92.951008][ T5312] ? __pfx_vpanic+0x10/0x10
[ 92.953104][ T5312] ? is_bpf_text_address+0x292/0x2b0
[ 92.955310][ T5312] panic+0xc5/0xd0
[ 92.956859][ T5312] ? __pfx_panic+0x10/0x10
[ 92.958849][ T5312] ? free_conf+0x81/0x5d0
[ 92.960938][ T5312] ? rcu_is_watching+0x16/0xb0
[ 92.962972][ T5312] ? free_conf+0x81/0x5d0
[ 92.964965][ T5312] check_panic_on_warn+0x89/0xb0
[ 92.967430][ T5312] ? free_conf+0x81/0x5d0
[ 92.969468][ T5312] end_report+0x73/0x170
[ 92.971288][ T5312] ? free_conf+0x81/0x5d0
[ 92.973127][ T5312] kasan_report+0x128/0x150
[ 92.974992][ T5312] ? free_conf+0x81/0x5d0
[ 92.976748][ T5312] kasan_check_range+0x264/0x2c0
[ 92.978849][ T5312] free_conf+0x81/0x5d0
[ 92.980610][ T5312] setup_conf+0x1720/0x2ad0
[ 92.982543][ T5312] ? xa_find_after+0xae/0x430
[ 92.984623][ T5312] ? __pfx_setup_conf+0x10/0x10
[ 92.986706][ T5312] raid5_run+0x8cc/0x2560
[ 92.988530][ T5312] ? _raw_spin_unlock+0x28/0x50
[ 92.990982][ T5312] ? get_pers+0x22b/0x2e0
[ 92.993129][ T5312] ? __pfx_get_pers+0x10/0x10
[ 92.995278][ T5312] md_run+0xc3d/0x1cd0
[ 92.997159][ T5312] ? __pfx_md_run+0x10/0x10
[ 92.999198][ T5312] do_md_run+0x35/0x720
[ 93.001067][ T5312] ? md_ioctl+0x1e23/0x2610
[ 93.003849][ T5312] md_ioctl+0x1e2b/0x2610
[ 93.005661][ T5312] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 93.008177][ T5312] ? tomoyo_path_number_perm+0x219/0x5f0
[ 93.010752][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 93.012904][ T5312] ? do_vfs_ioctl+0x116f/0x1530
[ 93.015079][ T5312] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 93.017299][ T5312] ? hook_file_ioctl+0x1f2/0x600
[ 93.019527][ T5312] ? __pfx_md_ioctl+0x10/0x10
[ 93.021628][ T5312] blkdev_ioctl+0x5e3/0x740
[ 93.023589][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.025738][ T5312] ? __fget_files+0x2a/0x420
[ 93.027765][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20
[ 93.030011][ T5312] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.032269][ T5312] __se_sys_ioctl+0xfc/0x170
[ 93.034255][ T5312] do_syscall_64+0x166/0x520
[ 93.036240][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.038818][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 93.040738][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.043024][ T5312] RIP: 0033:0x7f56bab9e199
[ 93.044711][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.052328][ T5312] RSP: 002b:00007f56bba5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 93.055887][ T5312] RAX: ffffffffffffffda RBX: 00007f56bae25fa0 RCX: 00007f56bab9e199
[ 93.059348][ T5312] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005
[ 93.062772][ T5312] RBP: 00007f56bba60050 R08: 0000000000000000 R09: 0000000000000000
[ 93.066242][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 93.069490][ T5312] R13: 00007f56bae26038 R14: 00007f56bae25fa0 R15: 00007ffe15686d08
[ 93.072880][ T5312]
[ 93.074557][ T5312] Kernel Offset: disabled
[ 93.076286][ T5312] Rebooting in 86400 seconds..