program:
mknodat$md(0xffffffffffffff9c, &(0x7f000000b100)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f000000b140)='./md0\x00', 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f000000b1c0)={0x0, 0x5a, 0x0, 0x3, 0x4, 0x7fc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x302, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10000})
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f000000b240)={0x0, {0x1, 0x0}, 0x0, 0x6})
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f000000b2c0)={0x6, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) (fail_nth: 7)
[ 93.028638][ T5278] Bluetooth: hci0: command tx timeout
[ 93.095432][ T9] cfg80211: failed to load regulatory.db
[ 93.218132][ T5320] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 93.218345][ T5320] block device autoloading is deprecated and will be removed.
[ 93.304414][ T5320] md/raid:md0: not clean -- starting background reconstruction
[ 93.304452][ T5320] FAULT_INJECTION: forcing a failure.
[ 93.304452][ T5320] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 93.304485][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.304498][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.304504][ T5320] Call Trace:
[ 93.304533][ T5320]
[ 93.304540][ T5320] dump_stack_lvl+0xe8/0x150
[ 93.304633][ T5320] should_fail_ex+0x410/0x560
[ 93.304692][ T5320] prepare_alloc_pages+0x223/0x600
[ 93.304720][ T5320] __alloc_frozen_pages_noprof+0x185/0x5a0
[ 93.304761][ T5320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 93.304778][ T5320] ? __pfx_policy_nodemask+0x10/0x10
[ 93.304797][ T5320] ? rcu_is_watching+0x16/0xb0
[ 93.304823][ T5320] alloc_pages_mpol+0x21e/0x390
[ 93.304840][ T5320] ___kmalloc_large_node+0x4f/0x120
[ 93.304880][ T5320] __kmalloc_large_noprof+0x1a/0x90
[ 93.304898][ T5320] setup_conf+0x420/0x2ad0
[ 93.304949][ T5320] ? _printk+0xdd/0x130
[ 93.304961][ T5320] ? __pfx__printk+0x10/0x10
[ 93.304967][ T5320] ? xa_find_after+0xae/0x430
[ 93.304978][ T5320] ? __pfx_setup_conf+0x10/0x10
[ 93.304991][ T5320] raid5_run+0x8cc/0x2560
[ 93.304999][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 93.305007][ T5320] ? get_pers+0x22b/0x2e0
[ 93.305017][ T5320] ? __pfx_get_pers+0x10/0x10
[ 93.305029][ T5320] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 93.305043][ T5320] md_run+0xc3d/0x1cd0
[ 93.305064][ T5320] ? __pfx_md_run+0x10/0x10
[ 93.305086][ T5320] do_md_run+0x35/0x720
[ 93.305099][ T5320] ? md_ioctl+0x1e23/0x2610
[ 93.305116][ T5320] md_ioctl+0x1e2b/0x2610
[ 93.305133][ T5320] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 93.305163][ T5320] ? tomoyo_path_number_perm+0x219/0x5f0
[ 93.305173][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.305183][ T5320] ? do_vfs_ioctl+0x116f/0x1530
[ 93.305202][ T5320] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 93.305214][ T5320] ? hook_file_ioctl+0x1f2/0x600
[ 93.305239][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.305249][ T5320] blkdev_ioctl+0x5e3/0x740
[ 93.305282][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.305298][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20
[ 93.305333][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.305348][ T5320] __se_sys_ioctl+0xfc/0x170
[ 93.305360][ T5320] do_syscall_64+0x166/0x520
[ 93.305370][ T5320] ? trace_irq_disable+0x3b/0x140
[ 93.305393][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.305403][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 93.305416][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.305426][ T5320] RIP: 0033:0x7f559ef9f559
[ 93.305440][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.305448][ T5320] RSP: 002b:00007f559fec3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 93.305461][ T5320] RAX: ffffffffffffffda RBX: 00007f559f225fa0 RCX: 00007f559ef9f559
[ 93.305471][ T5320] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003
[ 93.305478][ T5320] RBP: 00007f559fec4050 R08: 0000000000000000 R09: 0000000000000000
[ 93.305484][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 93.305492][ T5320] R13: 00007f559f226038 R14: 00007f559f225fa0 R15: 00007ffda0fb6d28
[ 93.305512][ T5320]
[ 93.305657][ T5320] ==================================================================
[ 93.305665][ T5320] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0
[ 93.305680][ T5320] Read of size 8 at addr 0000000000000028 by task syz.0.0/5320
[ 93.305688][ T5320]
[ 93.305695][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.305706][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.305712][ T5320] Call Trace:
[ 93.305717][ T5320]
[ 93.305722][ T5320] dump_stack_lvl+0xe8/0x150
[ 93.305739][ T5320] ? free_conf+0x81/0x5d0
[ 93.305751][ T5320] kasan_report+0x117/0x150
[ 93.305767][ T5320] ? free_conf+0x81/0x5d0
[ 93.305781][ T5320] kasan_check_range+0x264/0x2c0
[ 93.305796][ T5320] free_conf+0x81/0x5d0
[ 93.305811][ T5320] setup_conf+0x1720/0x2ad0
[ 93.305824][ T5320] ? _printk+0xdd/0x130
[ 93.305835][ T5320] ? __pfx__printk+0x10/0x10
[ 93.305846][ T5320] ? xa_find_after+0xae/0x430
[ 93.305886][ T5320] ? __pfx_setup_conf+0x10/0x10
[ 93.305905][ T5320] raid5_run+0x8cc/0x2560
[ 93.305917][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 93.305927][ T5320] ? get_pers+0x22b/0x2e0
[ 93.305943][ T5320] ? __pfx_get_pers+0x10/0x10
[ 93.305956][ T5320] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 93.305967][ T5320] md_run+0xc3d/0x1cd0
[ 93.305981][ T5320] ? __pfx_md_run+0x10/0x10
[ 93.305996][ T5320] do_md_run+0x35/0x720
[ 93.306009][ T5320] ? md_ioctl+0x1e23/0x2610
[ 93.306023][ T5320] md_ioctl+0x1e2b/0x2610
[ 93.306039][ T5320] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 93.306052][ T5320] ? tomoyo_path_number_perm+0x219/0x5f0
[ 93.306064][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.306079][ T5320] ? do_vfs_ioctl+0x116f/0x1530
[ 93.306091][ T5320] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 93.306104][ T5320] ? hook_file_ioctl+0x1f2/0x600
[ 93.306123][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.306137][ T5320] blkdev_ioctl+0x5e3/0x740
[ 93.306153][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.306167][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20
[ 93.306181][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.306195][ T5320] __se_sys_ioctl+0xfc/0x170
[ 93.306205][ T5320] do_syscall_64+0x166/0x520
[ 93.306217][ T5320] ? trace_irq_disable+0x3b/0x140
[ 93.306228][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.306239][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 93.306250][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.306260][ T5320] RIP: 0033:0x7f559ef9f559
[ 93.306289][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.306299][ T5320] RSP: 002b:00007f559fec3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 93.306310][ T5320] RAX: ffffffffffffffda RBX: 00007f559f225fa0 RCX: 00007f559ef9f559
[ 93.306318][ T5320] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003
[ 93.306329][ T5320] RBP: 00007f559fec4050 R08: 0000000000000000 R09: 0000000000000000
[ 93.306333][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 93.306337][ T5320] R13: 00007f559f226038 R14: 00007f559f225fa0 R15: 00007ffda0fb6d28
[ 93.306345][ T5320]
[ 93.306348][ T5320] ==================================================================
[ 93.306401][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.586402][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.591170][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.595990][ T5320] Call Trace:
[ 93.597529][ T5320]
[ 93.598902][ T5320] vpanic+0x56d/0xa60
[ 93.601014][ T5320] ? rcu_is_watching+0x16/0xb0
[ 93.603583][ T5320] ? __pfx_vpanic+0x10/0x10
[ 93.605611][ T5320] ? __pfx___schedule+0x10/0x10
[ 93.607794][ T5320] panic+0xc5/0xd0
[ 93.609508][ T5320] ? __pfx_panic+0x10/0x10
[ 93.611554][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 93.613974][ T5320] ? free_conf+0x81/0x5d0
[ 93.615946][ T5320] check_panic_on_warn+0x89/0xb0
[ 93.618203][ T5320] ? free_conf+0x81/0x5d0
[ 93.620150][ T5320] end_report+0x73/0x170
[ 93.622082][ T5320] ? free_conf+0x81/0x5d0
[ 93.624212][ T5320] kasan_report+0x128/0x150
[ 93.626508][ T5320] ? free_conf+0x81/0x5d0
[ 93.628731][ T5320] kasan_check_range+0x264/0x2c0
[ 93.631214][ T5320] free_conf+0x81/0x5d0
[ 93.633300][ T5320] setup_conf+0x1720/0x2ad0
[ 93.635553][ T5320] ? _printk+0xdd/0x130
[ 93.637548][ T5320] ? __pfx__printk+0x10/0x10
[ 93.639630][ T5320] ? xa_find_after+0xae/0x430
[ 93.641575][ T5320] ? __pfx_setup_conf+0x10/0x10
[ 93.643611][ T5320] raid5_run+0x8cc/0x2560
[ 93.645455][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 93.647492][ T5320] ? get_pers+0x22b/0x2e0
[ 93.649298][ T5320] ? __pfx_get_pers+0x10/0x10
[ 93.651383][ T5320] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 93.653941][ T5320] md_run+0xc3d/0x1cd0
[ 93.655796][ T5320] ? __pfx_md_run+0x10/0x10
[ 93.657614][ T5320] do_md_run+0x35/0x720
[ 93.659514][ T5320] ? md_ioctl+0x1e23/0x2610
[ 93.661558][ T5320] md_ioctl+0x1e2b/0x2610
[ 93.663511][ T5320] ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 93.667112][ T5320] ? tomoyo_path_number_perm+0x219/0x5f0
[ 93.669572][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.671372][ T5320] ? do_vfs_ioctl+0x116f/0x1530
[ 93.673104][ T5320] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 93.675122][ T5320] ? hook_file_ioctl+0x1f2/0x600
[ 93.677130][ T5320] ? __pfx_md_ioctl+0x10/0x10
[ 93.679078][ T5320] blkdev_ioctl+0x5e3/0x740
[ 93.680933][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.683156][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20
[ 93.685382][ T5320] ? __pfx_blkdev_ioctl+0x10/0x10
[ 93.687584][ T5320] __se_sys_ioctl+0xfc/0x170
[ 93.689675][ T5320] do_syscall_64+0x166/0x520
[ 93.691785][ T5320] ? trace_irq_disable+0x3b/0x140
[ 93.693887][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.696346][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 93.698276][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.700631][ T5320] RIP: 0033:0x7f559ef9f559
[ 93.702601][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.711066][ T5320] RSP: 002b:00007f559fec3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 93.714833][ T5320] RAX: ffffffffffffffda RBX: 00007f559f225fa0 RCX: 00007f559ef9f559
[ 93.718280][ T5320] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003
[ 93.721597][ T5320] RBP: 00007f559fec4050 R08: 0000000000000000 R09: 0000000000000000
[ 93.724964][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 93.728335][ T5320] R13: 00007f559f226038 R14: 00007f559f225fa0 R15: 00007ffda0fb6d28
[ 93.731750][ T5320]
[ 93.733519][ T5320] Kernel Offset: disabled
[ 93.735376][ T5320] Rebooting in 86400 seconds..