program:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dir0\x00', 0x42, 0x1fb)
pwrite64(r0, &(0x7f0000001004)="00000002", 0x4, 0x400)
pwrite64(r0, &(0x7f0000001008)="fffffff9", 0x4, 0x414)
pwrite64(r0, &(0x7f000000100c)="00000001", 0x4, 0x538)
pwrite64(r0, &(0x7f0000001010)="00000003", 0x4, 0x53c)
pwrite64(r0, &(0x7f0000001014)="00000001", 0x4, 0x5fc)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='md0', 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10010000}, 0x1c)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001")
ioctl(r5, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r5, 0x400c0930, 0x0)
[ 93.757476][ T5279] Bluetooth: hci0: command tx timeout
[ 93.872723][ T5317] loop0: detected capacity change from 0 to 3
[ 94.088030][ T5322] ------------[ cut here ]------------
[ 94.090558][ T5322] kobject: '(null)' (ffff88801211e0f0): is not initialized, yet kobject_get() is being called.
[ 94.095113][ T5322] WARNING: lib/kobject.c:642 at kobject_add_internal+0xea/0xcd0, CPU#0: syz.0.0/5322
[ 94.100028][ T5322] Modules linked in:
[ 94.101774][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.105443][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.109506][ T5322] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 94.112047][ T5322] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 a7 f4 63 f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 2e ac f2 f5 b8 fe ff ff ff e9 fb
[ 94.120376][ T5322] RSP: 0018:ffffc9000dd778a8 EFLAGS: 00010246
[ 94.123049][ T5322] RAX: 1ffff11002423c1e RBX: ffff88804eb8a880 RCX: dffffc0000000000
[ 94.126440][ T5322] RDX: ffff88801211e0f0 RSI: 0000000000000000 RDI: ffffffff908bede0
[ 94.129656][ T5322] RBP: 0000000000000000 R08: ffff888000332580 R09: 0000000000000008
[ 94.132739][ T5322] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88801211e0f0
[ 94.136028][ T5322] R13: dffffc0000000000 R14: ffffffff908bede0 R15: dffffc0000000000
[ 94.139042][ T5322] FS: 00007f808bdd46c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 94.142372][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.144692][ T5322] CR2: 0000562ec0c5c660 CR3: 0000000011f05000 CR4: 0000000000352ef0
[ 94.147682][ T5322] Call Trace:
[ 94.149145][ T5322]
[ 94.150280][ T5322] kobject_add+0x163/0x240
[ 94.151936][ T5322] ? __pfx_kobject_add+0x10/0x10
[ 94.153747][ T5322] ? mddev_create_serial_pool+0x1ec/0x590
[ 94.156267][ T5322] ? strreplace+0xe4/0x130
[ 94.158147][ T5322] bind_rdev_to_array+0x80c/0xdd0
[ 94.160156][ T5322] ? bind_rdev_to_array+0x352/0xdd0
[ 94.162241][ T5322] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 94.164425][ T5322] ? md_import_device+0x48d/0x650
[ 94.166442][ T5322] md_add_new_disk+0xe3b/0x1850
[ 94.168177][ T5322] md_ioctl+0x200a/0x2610
[ 94.169879][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 94.172002][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 94.173909][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 94.175939][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 94.177980][ T5322] ? hook_file_ioctl+0x1f0/0x5f0
[ 94.180080][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 94.182129][ T5322] blkdev_ioctl+0x5e3/0x740
[ 94.184064][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.186412][ T5322] ? __fget_files+0x2a/0x420
[ 94.188358][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 94.190385][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.192457][ T5322] __se_sys_ioctl+0xfc/0x170
[ 94.194404][ T5322] do_syscall_64+0x166/0x520
[ 94.196576][ T5322] ? trace_irq_disable+0x3b/0x140
[ 94.198734][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.201337][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 94.203288][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.205878][ T5322] RIP: 0033:0x7f808f99e159
[ 94.207773][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.215829][ T5322] RSP: 002b:00007f808bdd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.219232][ T5322] RAX: ffffffffffffffda RBX: 00007f808fc26180 RCX: 00007f808f99e159
[ 94.222579][ T5322] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000007
[ 94.225946][ T5322] RBP: 00007f808fa35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.229460][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.232735][ T5322] R13: 00007f808fc26218 R14: 00007f808fc26180 R15: 00007ffc655ce0d8
[ 94.236151][ T5322]
[ 94.237768][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.240936][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.244505][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.248773][ T5322] Call Trace:
[ 94.250193][ T5322]
[ 94.251484][ T5322] vpanic+0x56d/0xa60
[ 94.253241][ T5322] ? __pfx__printk+0x10/0x10
[ 94.255256][ T5322] ? __pfx_vpanic+0x10/0x10
[ 94.257274][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 94.259617][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 94.261899][ T5322] panic+0xc5/0xd0
[ 94.263540][ T5322] ? __pfx_panic+0x10/0x10
[ 94.265459][ T5322] __warn+0x315/0x4c0
[ 94.267223][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 94.269483][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 94.271798][ T5322] __report_bug+0x276/0x570
[ 94.273773][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 94.276033][ T5322] ? __pfx___report_bug+0x10/0x10
[ 94.278263][ T5322] ? string+0x28a/0x2d0
[ 94.280130][ T5322] ? widen_string+0x3b/0x2a0
[ 94.282231][ T5322] ? string+0x28a/0x2d0
[ 94.284466][ T5322] ? vsnprintf+0xe42/0xef0
[ 94.286652][ T5322] report_bug_entry+0x19b/0x290
[ 94.288640][ T5322] ? kobject_add_internal+0x113/0xcd0
[ 94.290969][ T5322] ? kobject_add_internal+0x118/0xcd0
[ 94.293319][ T5322] handle_bug+0xce/0x200
[ 94.295159][ T5322] exc_invalid_op+0x1a/0x50
[ 94.297166][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 94.299279][ T5322] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 94.301842][ T5322] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 a7 f4 63 f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 2e ac f2 f5 b8 fe ff ff ff e9 fb
[ 94.309904][ T5322] RSP: 0018:ffffc9000dd778a8 EFLAGS: 00010246
[ 94.312497][ T5322] RAX: 1ffff11002423c1e RBX: ffff88804eb8a880 RCX: dffffc0000000000
[ 94.315683][ T5322] RDX: ffff88801211e0f0 RSI: 0000000000000000 RDI: ffffffff908bede0
[ 94.319119][ T5322] RBP: 0000000000000000 R08: ffff888000332580 R09: 0000000000000008
[ 94.322464][ T5322] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88801211e0f0
[ 94.325620][ T5322] R13: dffffc0000000000 R14: ffffffff908bede0 R15: dffffc0000000000
[ 94.328912][ T5322] ? kobject_add_internal+0xe3/0xcd0
[ 94.331146][ T5322] kobject_add+0x163/0x240
[ 94.332977][ T5322] ? __pfx_kobject_add+0x10/0x10
[ 94.335105][ T5322] ? mddev_create_serial_pool+0x1ec/0x590
[ 94.337435][ T5322] ? strreplace+0xe4/0x130
[ 94.339381][ T5322] bind_rdev_to_array+0x80c/0xdd0
[ 94.341560][ T5322] ? bind_rdev_to_array+0x352/0xdd0
[ 94.343589][ T5322] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 94.345892][ T5322] ? md_import_device+0x48d/0x650
[ 94.347970][ T5322] md_add_new_disk+0xe3b/0x1850
[ 94.349977][ T5322] md_ioctl+0x200a/0x2610
[ 94.351771][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 94.354260][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 94.356300][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 94.358447][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 94.360605][ T5322] ? hook_file_ioctl+0x1f0/0x5f0
[ 94.362790][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 94.364831][ T5322] blkdev_ioctl+0x5e3/0x740
[ 94.366791][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.368986][ T5322] ? __fget_files+0x2a/0x420
[ 94.370959][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 94.373138][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 94.375274][ T5322] __se_sys_ioctl+0xfc/0x170
[ 94.377112][ T5322] do_syscall_64+0x166/0x520
[ 94.379170][ T5322] ? trace_irq_disable+0x3b/0x140
[ 94.381308][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.383927][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 94.385858][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.388241][ T5322] RIP: 0033:0x7f808f99e159
[ 94.390089][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.397260][ T5322] RSP: 002b:00007f808bdd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.400428][ T5322] RAX: ffffffffffffffda RBX: 00007f808fc26180 RCX: 00007f808f99e159
[ 94.403366][ T5322] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000007
[ 94.406493][ T5322] RBP: 00007f808fa35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.409683][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.412831][ T5322] R13: 00007f808fc26218 R14: 00007f808fc26180 R15: 00007ffc655ce0d8
[ 94.416040][ T5322]
[ 94.417705][ T5322] Kernel Offset: disabled
[ 94.419428][ T5322] Rebooting in 86400 seconds..