program: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x24008084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e8405747fa0dd1ddc579bcfb0a49ddb83b64c28cd40344f553daffd42b8fe0d3d12c8938a0afca9ee5f6507efc0b1b3fbdc8f8dd4a5de4e1c6de6fce5df32728fd16fb287b07a661a638a7e7e2dc2aaceee0516d873ee243e57881da1f1ff67affa944079b8ac9eb86863c15e18fa9714cf469979ca55df16c7579260d5ad0035a4ea3000000000000000049e8fea8b1d5c4589c12669f2ebb11e0f0c921ea16f3a642859e6c03b564e6c3176e8b6757bd9b2930757d125658f8854eba4c50a57b7810570504f32e4511c4b3d4366b005ac4b01d44501746b39deeee8172c3fb003f0000000000000000"], 0x1, 0x14d1, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./sys\x00', 0x20) mount(0x0, &(0x7f0000001980)='./sys\x00', &(0x7f00000019c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) read(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000001a80)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000001ac0)='./dev\x00', &(0x7f0000001b00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000001b80)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./dev/md0\x00', 0x2, 0x0) ioctl(r5, 0x40480923, &(0x7f0000001c00)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r5, 0x40140921, &(0x7f0000001c80)="0000000001") ioctl(r5, 0x400c0930, 0x0) (fail_nth: 4) write(r2, &(0x7f0000001cc0)='3', 0x4e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) [ 115.319183][ T47] Bluetooth: hci0: command tx timeout [ 115.411339][ T5324] loop0: detected capacity change from 0 to 256 [ 115.577527][ T5324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.582475][ T5325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.598292][ T5325] block device autoloading is deprecated and will be removed. [ 115.637914][ T5324] FAULT_INJECTION: forcing a failure. [ 115.637914][ T5324] name failslab, interval 1, probability 0, space 0, times 1 [ 115.637978][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.637992][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.638000][ T5324] Call Trace: [ 115.638005][ T5324] [ 115.638011][ T5324] dump_stack_lvl+0xe8/0x150 [ 115.640163][ T5324] should_fail_ex+0x410/0x560 [ 115.640257][ T5324] should_failslab+0xa8/0x100 [ 115.640287][ T5324] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 115.640317][ T5324] ? __kasan_kmalloc+0x93/0xb0 [ 115.640332][ T5324] ? __request_module+0x2ec/0x630 [ 115.640369][ T5324] ? __request_module+0x2ec/0x630 [ 115.640384][ T5324] ? __kmalloc_cache_noprof+0x14d/0x600 [ 115.640398][ T5324] kstrdup+0x42/0x100 [ 115.640431][ T5324] __request_module+0x2ec/0x630 [ 115.640451][ T5324] ? __pfx___request_module+0x10/0x10 [ 115.640465][ T5324] ? __mutex_trylock_common+0x15f/0x270 [ 115.640500][ T5324] ? __pfx___mutex_trylock_common+0x10/0x10 [ 115.640520][ T5324] ? trace_contention_end+0x3d/0x140 [ 115.640536][ T5324] ? __mutex_lock+0x30a/0x15a0 [ 115.640594][ T5324] md_run+0x25d/0x1cd0 [ 115.640614][ T5324] ? mddev_lock+0x1e/0xb0 [ 115.640628][ T5324] ? __pfx___mutex_lock+0x10/0x10 [ 115.640642][ T5324] ? __pfx_md_run+0x10/0x10 [ 115.640666][ T5324] do_md_run+0x35/0x720 [ 115.640680][ T5324] ? md_ioctl+0x1e23/0x2610 [ 115.640699][ T5324] md_ioctl+0x1e2b/0x2610 [ 115.640717][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 115.640733][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.640748][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.640765][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 115.640792][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.640812][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 115.640845][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.640862][ T5324] blkdev_ioctl+0x5e3/0x740 [ 115.640885][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.640904][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.640973][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.640994][ T5324] __se_sys_ioctl+0xfc/0x170 [ 115.641030][ T5324] do_syscall_64+0x166/0x520 [ 115.641045][ T5324] ? trace_irq_disable+0x3b/0x140 [ 115.641097][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.641108][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 115.641124][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.641134][ T5324] RIP: 0033:0x7fe38ab9f559 [ 115.641147][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.641157][ T5324] RSP: 002b:00007fe386ff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.641171][ T5324] RAX: ffffffffffffffda RBX: 00007fe38ae25fa0 RCX: 00007fe38ab9f559 [ 115.641180][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 115.641187][ T5324] RBP: 00007fe386ff5050 R08: 0000000000000000 R09: 0000000000000000 [ 115.641194][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.641201][ T5324] R13: 00007fe38ae26038 R14: 00007fe38ae25fa0 R15: 00007ffe2a60ca88 [ 115.641226][ T5324] [ 115.794965][ T5324] FAULT_INJECTION: forcing a failure. [ 115.794965][ T5324] name failslab, interval 1, probability 0, space 0, times 0 [ 115.794993][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.795008][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.795016][ T5324] Call Trace: [ 115.795021][ T5324] [ 115.795027][ T5324] dump_stack_lvl+0xe8/0x150 [ 115.795053][ T5324] should_fail_ex+0x410/0x560 [ 115.795073][ T5324] should_failslab+0xa8/0x100 [ 115.795091][ T5324] __kmalloc_noprof+0xfe/0x720 [ 115.795105][ T5324] ? __raw_spin_lock_init+0x45/0x100 [ 115.795122][ T5324] ? setup_conf+0xc15/0x2ad0 [ 115.795138][ T5324] ? setup_conf+0xc15/0x2ad0 [ 115.795158][ T5324] setup_conf+0xc15/0x2ad0 [ 115.795187][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 115.795208][ T5324] raid5_run+0x8cc/0x2560 [ 115.795224][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 115.795237][ T5324] ? get_pers+0x22b/0x2e0 [ 115.795255][ T5324] ? __pfx_get_pers+0x10/0x10 [ 115.795299][ T5324] md_run+0xc3d/0x1cd0 [ 115.795323][ T5324] ? __pfx_md_run+0x10/0x10 [ 115.795346][ T5324] do_md_run+0x35/0x720 [ 115.795362][ T5324] ? md_ioctl+0x1e23/0x2610 [ 115.795380][ T5324] md_ioctl+0x1e2b/0x2610 [ 115.795399][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 115.795416][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.795431][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.795449][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 115.795465][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.795487][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 115.795516][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.795533][ T5324] blkdev_ioctl+0x5e3/0x740 [ 115.795551][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.795570][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.795588][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.795605][ T5324] __se_sys_ioctl+0xfc/0x170 [ 115.795621][ T5324] do_syscall_64+0x166/0x520 [ 115.795635][ T5324] ? trace_irq_disable+0x3b/0x140 [ 115.795644][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.795656][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 115.795670][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.795681][ T5324] RIP: 0033:0x7fe38ab9f559 [ 115.795695][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.795705][ T5324] RSP: 002b:00007fe386ff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.795720][ T5324] RAX: ffffffffffffffda RBX: 00007fe38ae25fa0 RCX: 00007fe38ab9f559 [ 115.795728][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 115.795736][ T5324] RBP: 00007fe386ff5050 R08: 0000000000000000 R09: 0000000000000000 [ 115.795743][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.795749][ T5324] R13: 00007fe38ae26038 R14: 00007fe38ae25fa0 R15: 00007ffe2a60ca88 [ 115.795761][ T5324] [ 115.798447][ T5324] ================================================================== [ 115.798455][ T5324] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0 [ 115.798474][ T5324] Read of size 8 at addr 0000000000000028 by task syz.0.0/5324 [ 115.798484][ T5324] [ 115.798490][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.798503][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.798509][ T5324] Call Trace: [ 115.798514][ T5324] [ 115.798520][ T5324] dump_stack_lvl+0xe8/0x150 [ 115.798537][ T5324] ? free_conf+0x81/0x5d0 [ 115.798551][ T5324] kasan_report+0x117/0x150 [ 115.798567][ T5324] ? free_conf+0x81/0x5d0 [ 115.798582][ T5324] kasan_check_range+0x264/0x2c0 [ 115.798596][ T5324] free_conf+0x81/0x5d0 [ 115.798612][ T5324] setup_conf+0x1720/0x2ad0 [ 115.798631][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 115.798647][ T5324] raid5_run+0x8cc/0x2560 [ 115.798661][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 115.798672][ T5324] ? get_pers+0x22b/0x2e0 [ 115.798687][ T5324] ? __pfx_get_pers+0x10/0x10 [ 115.798704][ T5324] md_run+0xc3d/0x1cd0 [ 115.798721][ T5324] ? __pfx_md_run+0x10/0x10 [ 115.798737][ T5324] do_md_run+0x35/0x720 [ 115.798751][ T5324] ? md_ioctl+0x1e23/0x2610 [ 115.798768][ T5324] md_ioctl+0x1e2b/0x2610 [ 115.798783][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 115.798804][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.798819][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.798833][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 115.798846][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.798859][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 115.798878][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 115.798894][ T5324] blkdev_ioctl+0x5e3/0x740 [ 115.798911][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.798927][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.798942][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.798957][ T5324] __se_sys_ioctl+0xfc/0x170 [ 115.798969][ T5324] do_syscall_64+0x166/0x520 [ 115.798982][ T5324] ? trace_irq_disable+0x3b/0x140 [ 115.798994][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.799006][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 115.799019][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.799030][ T5324] RIP: 0033:0x7fe38ab9f559 [ 115.799040][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.799050][ T5324] RSP: 002b:00007fe386ff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.799062][ T5324] RAX: ffffffffffffffda RBX: 00007fe38ae25fa0 RCX: 00007fe38ab9f559 [ 115.799070][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 115.799077][ T5324] RBP: 00007fe386ff5050 R08: 0000000000000000 R09: 0000000000000000 [ 115.799084][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.799090][ T5324] R13: 00007fe38ae26038 R14: 00007fe38ae25fa0 R15: 00007ffe2a60ca88 [ 115.799103][ T5324] [ 115.799107][ T5324] ================================================================== [ 115.799137][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.053957][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 116.057786][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.061992][ T5324] Call Trace: [ 116.063245][ T5324] [ 116.064542][ T5324] vpanic+0x56d/0xa60 [ 116.066385][ T5324] ? __pfx_vpanic+0x10/0x10 [ 116.068459][ T5324] ? is_bpf_text_address+0x292/0x2b0 [ 116.070815][ T5324] panic+0xc5/0xd0 [ 116.072509][ T5324] ? __pfx_panic+0x10/0x10 [ 116.074467][ T5324] ? free_conf+0x81/0x5d0 [ 116.076441][ T5324] ? rcu_is_watching+0x16/0xb0 [ 116.078628][ T5324] ? free_conf+0x81/0x5d0 [ 116.080660][ T5324] check_panic_on_warn+0x89/0xb0 [ 116.084744][ T5324] ? free_conf+0x81/0x5d0 [ 116.086734][ T5324] end_report+0x73/0x170 [ 116.088615][ T5324] ? free_conf+0x81/0x5d0 [ 116.090506][ T5324] kasan_report+0x128/0x150 [ 116.092502][ T5324] ? free_conf+0x81/0x5d0 [ 116.094325][ T5324] kasan_check_range+0x264/0x2c0 [ 116.096435][ T5324] free_conf+0x81/0x5d0 [ 116.098189][ T5324] setup_conf+0x1720/0x2ad0 [ 116.100174][ T5324] ? __pfx_setup_conf+0x10/0x10 [ 116.102229][ T5324] raid5_run+0x8cc/0x2560 [ 116.104029][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 116.106061][ T5324] ? get_pers+0x22b/0x2e0 [ 116.108026][ T5324] ? __pfx_get_pers+0x10/0x10 [ 116.110034][ T5324] md_run+0xc3d/0x1cd0 [ 116.111880][ T5324] ? __pfx_md_run+0x10/0x10 [ 116.113912][ T5324] do_md_run+0x35/0x720 [ 116.116044][ T5324] ? md_ioctl+0x1e23/0x2610 [ 116.118564][ T5324] md_ioctl+0x1e2b/0x2610 [ 116.120528][ T5324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 116.122878][ T5324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 116.125215][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 116.127279][ T5324] ? do_vfs_ioctl+0x116f/0x1530 [ 116.129358][ T5324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.131651][ T5324] ? hook_file_ioctl+0x1f2/0x600 [ 116.133841][ T5324] ? __pfx_md_ioctl+0x10/0x10 [ 116.135984][ T5324] blkdev_ioctl+0x5e3/0x740 [ 116.138095][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 116.140147][ T5324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.142262][ T5324] ? __pfx_blkdev_ioctl+0x10/0x10 [ 116.144452][ T5324] __se_sys_ioctl+0xfc/0x170 [ 116.146551][ T5324] do_syscall_64+0x166/0x520 [ 116.148519][ T5324] ? trace_irq_disable+0x3b/0x140 [ 116.150927][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.153609][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 116.155708][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.158372][ T5324] RIP: 0033:0x7fe38ab9f559 [ 116.160330][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.168648][ T5324] RSP: 002b:00007fe386ff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.171839][ T5324] RAX: ffffffffffffffda RBX: 00007fe38ae25fa0 RCX: 00007fe38ab9f559 [ 116.175239][ T5324] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000a [ 116.178683][ T5324] RBP: 00007fe386ff5050 R08: 0000000000000000 R09: 0000000000000000 [ 116.182137][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.185654][ T5324] R13: 00007fe38ae26038 R14: 00007fe38ae25fa0 R15: 00007ffe2a60ca88 [ 116.189284][ T5324] [ 116.191192][ T5324] Kernel Offset: disabled [ 116.193067][ T5324] Rebooting in 86400 seconds..