Slab 0xffffea000168d800 objects=26 used=4 fp=0xffff88805a361360 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) Disabling lock debugging due to kernel taint ------------[ cut here ]------------ 1 WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20 mm/slub.c:1268, CPU#1: syz.0.551/7212 Modules linked in: CPU: 1 UID: 0 PID: 7212 Comm: syz.0.551 Tainted: G B syzkaller #0 PREEMPT(full) Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__slab_err+0x15/0x20 mm/slub.c:1268 Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 cc 00 a4 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90023727940 EFLAGS: 00010087 RAX: 000000000001d259 RBX: ffffc90023727990 RCX: ffffc90006ae2000 RDX: 0000000000080000 RSI: ffffffff81c8525d RDI: ffff888026458000 RBP: ffff888035481e58 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000007918 R13: ffff88805a367df0 R14: ffff888035481e40 R15: ffffea000168d800 FS: 00007f8ce17a56c0(0000) GS:ffff8880d5c59000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33123ffc CR3: 00000000361d5000 CR4: 0000000000352ef0 Call Trace: list_slab_objects mm/slub.c:8101 [inline] free_partial mm/slub.c:8122 [inline] __kmem_cache_shutdown.cold+0x16e/0x177 mm/slub.c:8165 kmem_cache_destroy mm/slab_common.c:576 [inline] kmem_cache_destroy+0x7d/0x1a0 mm/slab_common.c:534 shrink_stripes drivers/md/raid5.c:2719 [inline] free_conf+0x1cb/0x710 drivers/md/raid5.c:7553 raid5_run.cold+0x593/0xd51 drivers/md/raid5.c:8266 level_store+0x103f/0x1f60 drivers/md/md.c:4232 md_attr_store+0x1c5/0x330 drivers/md/md.c:6158 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8ce099e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8ce17a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f8ce0c25fa0 RCX: 00007f8ce099e159 RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 RBP: 00007f8ce0a3506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8ce0c26038 R14: 00007f8ce0c25fa0 R15: 00007ffd85817898