program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r0, 0x8b21, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x40)
write(r1, &(0x7f0000000200)='md0', 0x3)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open(0x0, 0x14927e, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x101)
write(r2, &(0x7f0000000500)='3', 0x4e)
open(&(0x7f0000000540)='./bus\x00', 0x60142, 0x10)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0)
ioctl(r3, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001")
ioctl(r3, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000740)='1:0', 0x3)
ioctl(r3, 0x400c0930, 0x0)
mknod$loop(&(0x7f0000000640)='./sys\x00', 0x4, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f00000005c0)={@id={0x2, 0x0, @c}})
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb7000)
[ 94.714242][ T5302] Bluetooth: hci0: command tx timeout
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa9000)
[ 94.793108][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 94.793125][ T1029] ata1: failed to read log page 10h (errno=-5)
[ 94.793134][ T1029] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[ 94.793145][ T1029] ata1.00: irq_stat 0x41000000
[ 94.793155][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 94.793161][ T1029] ata1.00: cmd 61/b8:70:36:01:08/05:00:00:00:00/40 tag 14 ncq dma 749568 out
[ 94.793161][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 94.793193][ T1029] ata1.00: status: { DRDY }
[ 94.793203][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 94.793209][ T1029] ata1.00: cmd 61/c0:78:ee:06:08/02:00:00:00:00/40 tag 15 ncq dma 360448 out
[ 94.793209][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 94.793236][ T1029] ata1.00: status: { DRDY }
[ 94.794130][ T1029] ata1.00: configured for UDMA/100
[ 94.794458][ T1029] ata1: EH complete
[ 94.813766][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 94.813780][ T1029] ata1: failed to read log page 10h (errno=-5)
[ 94.813788][ T1029] ata1.00: NCQ disabled due to excessive errors
[ 94.813795][ T1029] ata1.00: exception Emask 0x1 SAct 0x40020000 SErr 0x0 action 0x0
[ 94.813805][ T1029] ata1.00: irq_stat 0x41000000
[ 94.813816][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 94.813823][ T1029] ata1.00: cmd 61/f8:88:f6:0e:08/02:00:00:00:00/40 tag 17 ncq dma 389120 out
[ 94.813823][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 94.813855][ T1029] ata1.00: status: { DRDY }
[ 94.813863][ T1029] ata1.00: error: { ABRT }
[ 94.813873][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 94.813879][ T1029] ata1.00: cmd 61/48:f0:ae:09:08/05:00:00:00:00/40 tag 30 ncq dma 692224 out
[ 94.813879][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 94.813907][ T1029] ata1.00: status: { DRDY }
[ 94.813915][ T1029] ata1.00: error: { ABRT }
[ 94.814914][ T1029] ata1.00: configured for UDMA/100
[ 94.815275][ T1029] ata1: EH complete
[ 95.116786][ T5344] FAULT_INJECTION: forcing a failure.
[ 95.116786][ T5344] name failslab, interval 1, probability 0, space 0, times 1
[ 95.116813][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.116828][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.116835][ T5344] Call Trace:
[ 95.116841][ T5344]
[ 95.116847][ T5344] dump_stack_lvl+0xe8/0x150
[ 95.116980][ T5344] should_fail_ex+0x410/0x560
[ 95.117031][ T5344] should_failslab+0xa8/0x100
[ 95.117046][ T5344] ? do_getname+0x2e/0x250
[ 95.117063][ T5344] kmem_cache_alloc_noprof+0x9c/0x600
[ 95.117081][ T5344] ? do_futex+0x3e7/0x4e0
[ 95.117092][ T5344] ? do_getname+0x2e/0x250
[ 95.117111][ T5344] do_getname+0x2e/0x250
[ 95.117125][ T5344] ? getname_flags+0x11/0x20
[ 95.117142][ T5344] do_sys_openat2+0xce/0x200
[ 95.117158][ T5344] ? __se_sys_futex+0x3a8/0x450
[ 95.117169][ T5344] ? __pfx_do_sys_openat2+0x10/0x10
[ 95.117188][ T5344] ? rcu_is_watching+0x16/0xb0
[ 95.117208][ T5344] __x64_sys_open+0x11e/0x150
[ 95.117225][ T5344] do_syscall_64+0x166/0x520
[ 95.117269][ T5344] ? trace_irq_disable+0x3b/0x140
[ 95.117287][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.117300][ T5344] ? clear_bhb_loop+0x70/0xc0
[ 95.117316][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.117328][ T5344] RIP: 0033:0x7fdeff79f559
[ 95.117340][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.117359][ T5344] RSP: 002b:00007fdf005fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 95.117374][ T5344] RAX: ffffffffffffffda RBX: 00007fdeffa25fa0 RCX: 00007fdeff79f559
[ 95.117383][ T5344] RDX: 0000000000000010 RSI: 0000000000060142 RDI: 0000200000000540
[ 95.117392][ T5344] RBP: 00007fdeff836b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.117400][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.117407][ T5344] R13: 00007fdeffa26038 R14: 00007fdeffa25fa0 R15: 00007ffed1449e18
[ 95.117429][ T5344]
[ 95.241869][ T5344] ------------[ cut here ]------------
[ 95.241883][ T5344] kobject: '(null)' (ffff888035b380f0): is not initialized, yet kobject_get() is being called.
[ 95.241893][ T5344] WARNING: lib/kobject.c:642 at kobject_add_internal+0xea/0xcd0, CPU#0: syz.0.0/5344
[ 95.252589][ T5344] Modules linked in:
[ 95.254426][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.258396][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.262913][ T5344] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 95.265667][ T5344] Code: 05 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 e7 3e 4d f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 0e 1a d5 f5 b8 fe ff ff ff e9 fb
[ 95.274150][ T5344] RSP: 0018:ffffc9000e6078a8 EFLAGS: 00010246
[ 95.276903][ T5344] RAX: 1ffff11006b6701e RBX: ffff888052633880 RCX: dffffc0000000000
[ 95.280430][ T5344] RDX: ffff888035b380f0 RSI: 0000000000000000 RDI: ffffffff91afcae0
[ 95.284002][ T5344] RBP: 0000000000000000 R08: ffff888013b0cb00 R09: 0000000000000008
[ 95.287473][ T5344] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888035b380f0
[ 95.291183][ T5344] R13: dffffc0000000000 R14: ffffffff91afcae0 R15: dffffc0000000000
[ 95.294927][ T5344] FS: 00007fdf005fc6c0(0000) GS:ffff88808ac41000(0000) knlGS:0000000000000000
[ 95.298571][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.302630][ T5344] CR2: 00007fa72b160bc0 CR3: 000000000c0c9000 CR4: 0000000000352ef0
[ 95.306378][ T5344] Call Trace:
[ 95.307892][ T5344]
[ 95.309215][ T5344] kobject_add+0x163/0x240
[ 95.311340][ T5344] ? __pfx_kobject_add+0x10/0x10
[ 95.313611][ T5344] ? mddev_create_serial_pool+0x1ec/0x590
[ 95.316233][ T5344] ? strreplace+0xe4/0x130
[ 95.317978][ T5344] bind_rdev_to_array+0x80c/0xdd0
[ 95.319653][ T5344] ? bind_rdev_to_array+0x352/0xdd0
[ 95.321746][ T5344] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 95.324051][ T5344] ? md_import_device+0x48d/0x650
[ 95.326226][ T5344] md_add_new_disk+0xe3b/0x1850
[ 95.328429][ T5344] md_ioctl+0x2005/0x2610
[ 95.330460][ T5344] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.333049][ T5344] ? __pfx_md_ioctl+0x10/0x10
[ 95.335143][ T5344] ? do_vfs_ioctl+0x116f/0x1530
[ 95.337296][ T5344] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.339530][ T5344] ? do_futex+0x3e7/0x4e0
[ 95.341572][ T5344] ? __pfx_md_ioctl+0x10/0x10
[ 95.343758][ T5344] blkdev_ioctl+0x5e3/0x740
[ 95.345751][ T5344] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.347975][ T5344] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.350179][ T5344] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.352437][ T5344] __se_sys_ioctl+0xfc/0x170
[ 95.354336][ T5344] do_syscall_64+0x166/0x520
[ 95.355912][ T5344] ? trace_irq_disable+0x3b/0x140
[ 95.357610][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.360009][ T5344] ? clear_bhb_loop+0x70/0xc0
[ 95.361886][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.364443][ T5344] RIP: 0033:0x7fdeff79f559
[ 95.366470][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.376262][ T5344] RSP: 002b:00007fdf005fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.380015][ T5344] RAX: ffffffffffffffda RBX: 00007fdeffa25fa0 RCX: 00007fdeff79f559
[ 95.383588][ T5344] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000008
[ 95.386753][ T5344] RBP: 00007fdeff836b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.389891][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.393177][ T5344] R13: 00007fdeffa26038 R14: 00007fdeffa25fa0 R15: 00007ffed1449e18
[ 95.396427][ T5344]
[ 95.397712][ T5344] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.400454][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.404215][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.408577][ T5344] Call Trace:
[ 95.410101][ T5344]
[ 95.411496][ T5344] vpanic+0x56d/0xa60
[ 95.413326][ T5344] ? __pfx__printk+0x10/0x10
[ 95.415468][ T5344] ? __pfx_vpanic+0x10/0x10
[ 95.417473][ T5344] ? is_bpf_text_address+0x292/0x2b0
[ 95.419782][ T5344] ? is_bpf_text_address+0x26/0x2b0
[ 95.422038][ T5344] panic+0xc5/0xd0
[ 95.423697][ T5344] ? __pfx_panic+0x10/0x10
[ 95.425724][ T5344] __warn+0x315/0x4c0
[ 95.429800][ T5344] ? kobject_add_internal+0xea/0xcd0
[ 95.432416][ T5344] ? kobject_add_internal+0xea/0xcd0
[ 95.434729][ T5344] __report_bug+0x276/0x570
[ 95.436824][ T5344] ? kobject_add_internal+0xea/0xcd0
[ 95.439138][ T5344] ? __pfx___report_bug+0x10/0x10
[ 95.441387][ T5344] ? string+0x28a/0x2d0
[ 95.443294][ T5344] ? widen_string+0x3b/0x2a0
[ 95.445375][ T5344] ? string+0x28a/0x2d0
[ 95.447268][ T5344] ? vsnprintf+0xe42/0xef0
[ 95.449194][ T5344] report_bug_entry+0x19b/0x290
[ 95.451312][ T5344] ? kobject_add_internal+0x113/0xcd0
[ 95.453706][ T5344] ? kobject_add_internal+0x118/0xcd0
[ 95.456123][ T5344] handle_bug+0xce/0x200
[ 95.458047][ T5344] exc_invalid_op+0x1a/0x50
[ 95.460045][ T5344] asm_exc_invalid_op+0x1a/0x20
[ 95.462196][ T5344] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 95.464919][ T5344] Code: 05 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 e7 3e 4d f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 0e 1a d5 f5 b8 fe ff ff ff e9 fb
[ 95.473084][ T5344] RSP: 0018:ffffc9000e6078a8 EFLAGS: 00010246
[ 95.475721][ T5344] RAX: 1ffff11006b6701e RBX: ffff888052633880 RCX: dffffc0000000000
[ 95.479035][ T5344] RDX: ffff888035b380f0 RSI: 0000000000000000 RDI: ffffffff91afcae0
[ 95.482423][ T5344] RBP: 0000000000000000 R08: ffff888013b0cb00 R09: 0000000000000008
[ 95.485905][ T5344] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888035b380f0
[ 95.489159][ T5344] R13: dffffc0000000000 R14: ffffffff91afcae0 R15: dffffc0000000000
[ 95.492486][ T5344] ? kobject_add_internal+0xe3/0xcd0
[ 95.494741][ T5344] kobject_add+0x163/0x240
[ 95.496596][ T5344] ? __pfx_kobject_add+0x10/0x10
[ 95.498873][ T5344] ? mddev_create_serial_pool+0x1ec/0x590
[ 95.501715][ T5344] ? strreplace+0xe4/0x130
[ 95.503831][ T5344] bind_rdev_to_array+0x80c/0xdd0
[ 95.506096][ T5344] ? bind_rdev_to_array+0x352/0xdd0
[ 95.508284][ T5344] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 95.510512][ T5344] ? md_import_device+0x48d/0x650
[ 95.512631][ T5344] md_add_new_disk+0xe3b/0x1850
[ 95.514653][ T5344] md_ioctl+0x2005/0x2610
[ 95.516483][ T5344] ? tomoyo_path_number_perm+0x219/0x5f0
[ 95.518806][ T5344] ? __pfx_md_ioctl+0x10/0x10
[ 95.520928][ T5344] ? do_vfs_ioctl+0x116f/0x1530
[ 95.523151][ T5344] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 95.525475][ T5344] ? do_futex+0x3e7/0x4e0
[ 95.527563][ T5344] ? __pfx_md_ioctl+0x10/0x10
[ 95.529728][ T5344] blkdev_ioctl+0x5e3/0x740
[ 95.531772][ T5344] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.534066][ T5344] ? bpf_lsm_file_ioctl+0x9/0x20
[ 95.536326][ T5344] ? __pfx_blkdev_ioctl+0x10/0x10
[ 95.538508][ T5344] __se_sys_ioctl+0xfc/0x170
[ 95.540482][ T5344] do_syscall_64+0x166/0x520
[ 95.542628][ T5344] ? trace_irq_disable+0x3b/0x140
[ 95.544921][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.547677][ T5344] ? clear_bhb_loop+0x70/0xc0
[ 95.549795][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.552375][ T5344] RIP: 0033:0x7fdeff79f559
[ 95.554297][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.562798][ T5344] RSP: 002b:00007fdf005fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 95.566388][ T5344] RAX: ffffffffffffffda RBX: 00007fdeffa25fa0 RCX: 00007fdeff79f559
[ 95.570008][ T5344] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000008
[ 95.573548][ T5344] RBP: 00007fdeff836b20 R08: 0000000000000000 R09: 0000000000000000
[ 95.577073][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.580647][ T5344] R13: 00007fdeffa26038 R14: 00007fdeffa25fa0 R15: 00007ffed1449e18
[ 95.584255][ T5344]
[ 95.586037][ T5344] Kernel Offset: disabled
[ 95.588010][ T5344] Rebooting in 86400 seconds..