program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000")
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000600)='3', 0x1)
[ 119.242084][ T4647] Bluetooth: hci0: command tx timeout
[ 119.406579][ T5330] ------------[ cut here ]------------
[ 119.406592][ T5330] kobject: '(null)' (ffff8880120640f0): is not initialized, yet kobject_get() is being called.
[ 119.406604][ T5330] WARNING: lib/kobject.c:642 at kobject_add_internal+0xea/0xcd0, CPU#0: syz.0.0/5330
[ 119.417824][ T5330] Modules linked in:
[ 119.420366][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 119.424137][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 119.428792][ T5330] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 119.431280][ T5330] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 57 11 5b f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 fe 6a e9 f5 b8 fe ff ff ff e9 fb
[ 119.441788][ T5330] RSP: 0018:ffffc9000f1f78a8 EFLAGS: 00010246
[ 119.444427][ T5330] RAX: 1ffff1100240c81e RBX: ffff888052836080 RCX: dffffc0000000000
[ 119.447911][ T5330] RDX: ffff8880120640f0 RSI: 0000000000000000 RDI: ffffffff908d7cc0
[ 119.451457][ T5330] RBP: 0000000000000000 R08: ffff888000b14b00 R09: 0000000000000008
[ 119.455133][ T5330] R10: 0000000000000007 R11: 0000000000000002 R12: ffff8880120640f0
[ 119.458273][ T5330] R13: dffffc0000000000 R14: ffffffff908d7cc0 R15: dffffc0000000000
[ 119.461395][ T5330] FS: 00007ffbef2886c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000
[ 119.465173][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.467925][ T5330] CR2: 00007f208abad1bc CR3: 000000000e910000 CR4: 0000000000352ef0
[ 119.471228][ T5330] Call Trace:
[ 119.472671][ T5330]
[ 119.473923][ T5330] kobject_add+0x163/0x240
[ 119.476028][ T5330] ? __pfx_kobject_add+0x10/0x10
[ 119.478081][ T5330] ? mddev_create_serial_pool+0x1ec/0x590
[ 119.480487][ T5330] ? strreplace+0xe4/0x130
[ 119.482300][ T5330] bind_rdev_to_array+0x80c/0xdd0
[ 119.484297][ T5330] ? bind_rdev_to_array+0x352/0xdd0
[ 119.486712][ T5330] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 119.489140][ T5330] ? md_import_device+0x48d/0x650
[ 119.491329][ T5330] md_add_new_disk+0xe3b/0x1850
[ 119.493716][ T5330] md_ioctl+0x200a/0x2610
[ 119.495652][ T5330] ? tomoyo_path_number_perm+0x219/0x5f0
[ 119.498134][ T5330] ? __pfx_md_ioctl+0x10/0x10
[ 119.500231][ T5330] ? do_vfs_ioctl+0x116f/0x1530
[ 119.502424][ T5330] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 119.504620][ T5330] ? hook_file_ioctl+0x1f2/0x600
[ 119.506908][ T5330] ? __asan_memcpy+0x40/0x70
[ 119.508927][ T5330] ? __pfx_md_ioctl+0x10/0x10
[ 119.510955][ T5330] blkdev_ioctl+0x5e3/0x740
[ 119.512968][ T5330] ? __pfx_blkdev_ioctl+0x10/0x10
[ 119.515313][ T5330] ? __fget_files+0x2a/0x420
[ 119.517729][ T5330] ? bpf_lsm_file_ioctl+0x9/0x20
[ 119.520299][ T5330] ? __pfx_blkdev_ioctl+0x10/0x10
[ 119.522321][ T5330] __se_sys_ioctl+0xfc/0x170
[ 119.524253][ T5330] do_syscall_64+0x166/0x520
[ 119.526284][ T5330] ? trace_irq_disable+0x3b/0x140
[ 119.528335][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.530684][ T5330] ? clear_bhb_loop+0x70/0xc0
[ 119.532458][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.534978][ T5330] RIP: 0033:0x7ffbee39e159
[ 119.536883][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 119.544573][ T5330] RSP: 002b:00007ffbef287fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 119.548161][ T5330] RAX: ffffffffffffffda RBX: 00007ffbee626090 RCX: 00007ffbee39e159
[ 119.551242][ T5330] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004
[ 119.554633][ T5330] RBP: 00007ffbee43506b R08: 0000000000000000 R09: 0000000000000000
[ 119.558195][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 119.561779][ T5330] R13: 00007ffbee626128 R14: 00007ffbee626090 R15: 00007ffe703ff368
[ 119.565371][ T5330]
[ 119.566692][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 119.569605][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 119.572963][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 119.576956][ T5330] Call Trace:
[ 119.578412][ T5330]
[ 119.579674][ T5330] vpanic+0x56d/0xa60
[ 119.581410][ T5330] ? __pfx__printk+0x10/0x10
[ 119.583248][ T5330] ? __pfx_vpanic+0x10/0x10
[ 119.585153][ T5330] ? is_bpf_text_address+0x292/0x2b0
[ 119.587395][ T5330] ? is_bpf_text_address+0x26/0x2b0
[ 119.589622][ T5330] panic+0xc5/0xd0
[ 119.591245][ T5330] ? __pfx_panic+0x10/0x10
[ 119.593481][ T5330] __warn+0x315/0x4c0
[ 119.595531][ T5330] ? kobject_add_internal+0xea/0xcd0
[ 119.598248][ T5330] ? kobject_add_internal+0xea/0xcd0
[ 119.600793][ T5330] __report_bug+0x276/0x570
[ 119.602742][ T5330] ? kobject_add_internal+0xea/0xcd0
[ 119.605020][ T5330] ? __pfx___report_bug+0x10/0x10
[ 119.607206][ T5330] ? string+0x28a/0x2d0
[ 119.609010][ T5330] ? widen_string+0x3b/0x2a0
[ 119.610974][ T5330] ? string+0x28a/0x2d0
[ 119.612775][ T5330] ? vsnprintf+0xe42/0xef0
[ 119.614960][ T5330] report_bug_entry+0x19b/0x290
[ 119.617301][ T5330] ? kobject_add_internal+0x113/0xcd0
[ 119.619594][ T5330] ? kobject_add_internal+0x118/0xcd0
[ 119.621774][ T5330] handle_bug+0xce/0x200
[ 119.623559][ T5330] exc_invalid_op+0x1a/0x50
[ 119.625533][ T5330] asm_exc_invalid_op+0x1a/0x20
[ 119.627953][ T5330] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 119.630957][ T5330] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 57 11 5b f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 fe 6a e9 f5 b8 fe ff ff ff e9 fb
[ 119.639303][ T5330] RSP: 0018:ffffc9000f1f78a8 EFLAGS: 00010246
[ 119.641883][ T5330] RAX: 1ffff1100240c81e RBX: ffff888052836080 RCX: dffffc0000000000
[ 119.645084][ T5330] RDX: ffff8880120640f0 RSI: 0000000000000000 RDI: ffffffff908d7cc0
[ 119.648805][ T5330] RBP: 0000000000000000 R08: ffff888000b14b00 R09: 0000000000000008
[ 119.652349][ T5330] R10: 0000000000000007 R11: 0000000000000002 R12: ffff8880120640f0
[ 119.655671][ T5330] R13: dffffc0000000000 R14: ffffffff908d7cc0 R15: dffffc0000000000
[ 119.659040][ T5330] ? kobject_add_internal+0xe3/0xcd0
[ 119.661318][ T5330] kobject_add+0x163/0x240
[ 119.663071][ T5330] ? __pfx_kobject_add+0x10/0x10
[ 119.665206][ T5330] ? mddev_create_serial_pool+0x1ec/0x590
[ 119.667701][ T5330] ? strreplace+0xe4/0x130
[ 119.669721][ T5330] bind_rdev_to_array+0x80c/0xdd0
[ 119.671874][ T5330] ? bind_rdev_to_array+0x352/0xdd0
[ 119.674119][ T5330] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 119.676511][ T5330] ? md_import_device+0x48d/0x650
[ 119.678678][ T5330] md_add_new_disk+0xe3b/0x1850
[ 119.680724][ T5330] md_ioctl+0x200a/0x2610
[ 119.682469][ T5330] ? tomoyo_path_number_perm+0x219/0x5f0
[ 119.684880][ T5330] ? __pfx_md_ioctl+0x10/0x10
[ 119.686921][ T5330] ? do_vfs_ioctl+0x116f/0x1530
[ 119.689052][ T5330] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 119.691240][ T5330] ? hook_file_ioctl+0x1f2/0x600
[ 119.693384][ T5330] ? __asan_memcpy+0x40/0x70
[ 119.695269][ T5330] ? __pfx_md_ioctl+0x10/0x10
[ 119.697248][ T5330] blkdev_ioctl+0x5e3/0x740
[ 119.699164][ T5330] ? __pfx_blkdev_ioctl+0x10/0x10
[ 119.701325][ T5330] ? __fget_files+0x2a/0x420
[ 119.703253][ T5330] ? bpf_lsm_file_ioctl+0x9/0x20
[ 119.705329][ T5330] ? __pfx_blkdev_ioctl+0x10/0x10
[ 119.707441][ T5330] __se_sys_ioctl+0xfc/0x170
[ 119.709390][ T5330] do_syscall_64+0x166/0x520
[ 119.711339][ T5330] ? trace_irq_disable+0x3b/0x140
[ 119.713425][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.715903][ T5330] ? clear_bhb_loop+0x70/0xc0
[ 119.717892][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.720468][ T5330] RIP: 0033:0x7ffbee39e159
[ 119.722380][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 119.730433][ T5330] RSP: 002b:00007ffbef287fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 119.733835][ T5330] RAX: ffffffffffffffda RBX: 00007ffbee626090 RCX: 00007ffbee39e159
[ 119.737157][ T5330] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004
[ 119.740438][ T5330] RBP: 00007ffbee43506b R08: 0000000000000000 R09: 0000000000000000
[ 119.743578][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 119.746830][ T5330] R13: 00007ffbee626128 R14: 00007ffbee626090 R15: 00007ffe703ff368
[ 119.750142][ T5330]
[ 119.751924][ T5330] Kernel Offset: disabled
[ 119.753774][ T5330] Rebooting in 86400 seconds..