program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001")
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r2, &(0x7f00000007c0)='active', 0x6)
[ 124.832429][ T5322] ------------[ cut here ]------------
[ 124.832515][ T5322] kobject: '(null)' (ffff888012c620f0): is not initialized, yet kobject_get() is being called.
[ 124.832568][ T5322] WARNING: lib/kobject.c:642 at kobject_add_internal+0xea/0xcd0, CPU#0: syz.0.0/5322
[ 124.843812][ T5322] Modules linked in:
[ 124.845488][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 124.849538][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.853873][ T5322] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 124.856477][ T5322] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 77 9b 5c f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 9e 33 eb f5 b8 fe ff ff ff e9 fb
[ 124.864834][ T5322] RSP: 0018:ffffc9000da2f8a8 EFLAGS: 00010246
[ 124.867560][ T5322] RAX: 1ffff1100258c41e RBX: ffff888052e84080 RCX: dffffc0000000000
[ 124.870930][ T5322] RDX: ffff888012c620f0 RSI: 0000000000000000 RDI: ffffffff908d3de0
[ 124.874078][ T5322] RBP: 0000000000000000 R08: ffff888000b28000 R09: 0000000000000008
[ 124.877110][ T5322] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888012c620f0
[ 124.880283][ T5322] R13: dffffc0000000000 R14: ffffffff908d3de0 R15: dffffc0000000000
[ 124.883304][ T5322] FS: 00007fab699d46c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000
[ 124.886775][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 124.889443][ T5322] CR2: 0000555e6104f660 CR3: 000000004267b000 CR4: 0000000000352ef0
[ 124.892851][ T5322] Call Trace:
[ 124.894181][ T5322]
[ 124.895344][ T5322] kobject_add+0x163/0x240
[ 124.898245][ T5322] ? __pfx_kobject_add+0x10/0x10
[ 124.900433][ T5322] ? mddev_create_serial_pool+0x1ec/0x590
[ 124.902807][ T5322] ? strreplace+0xe4/0x130
[ 124.904736][ T5322] bind_rdev_to_array+0x80c/0xdd0
[ 124.906856][ T5322] ? bind_rdev_to_array+0x352/0xdd0
[ 124.909763][ T5322] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 124.912094][ T5322] ? md_import_device+0x48d/0x650
[ 124.914238][ T5322] md_add_new_disk+0xe3b/0x1850
[ 124.916390][ T5322] md_ioctl+0x200a/0x2610
[ 124.918360][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 124.920749][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 124.922729][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 124.924955][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 124.927096][ T5322] ? hook_file_ioctl+0x1f2/0x600
[ 124.929390][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 124.931418][ T5322] blkdev_ioctl+0x5e3/0x740
[ 124.933391][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 124.935481][ T5322] ? __fget_files+0x2a/0x420
[ 124.937581][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 124.939692][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 124.941915][ T5322] __se_sys_ioctl+0xfc/0x170
[ 124.943874][ T5322] do_syscall_64+0x166/0x520
[ 124.945804][ T5322] ? trace_irq_disable+0x3b/0x140
[ 124.947988][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.950659][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 124.952649][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.955137][ T5322] RIP: 0033:0x7fab6d59e159
[ 124.957094][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 124.965071][ T5322] RSP: 002b:00007fab699d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 124.968651][ T5322] RAX: ffffffffffffffda RBX: 00007fab6d826090 RCX: 00007fab6d59e159
[ 124.971918][ T5322] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004
[ 124.975268][ T5322] RBP: 00007fab6d635024 R08: 0000000000000000 R09: 0000000000000000
[ 124.978761][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 124.982020][ T5322] R13: 00007fab6d826128 R14: 00007fab6d826090 R15: 00007ffcfffe3da8
[ 124.985376][ T5322]
[ 124.986757][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 124.989958][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 124.993798][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.998041][ T5322] Call Trace:
[ 124.999526][ T5322]
[ 125.000818][ T5322] vpanic+0x56d/0xa60
[ 125.002567][ T5322] ? __pfx__printk+0x10/0x10
[ 125.004618][ T5322] ? __pfx_vpanic+0x10/0x10
[ 125.006627][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 125.008872][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 125.011267][ T5322] panic+0xc5/0xd0
[ 125.012938][ T5322] ? __pfx_panic+0x10/0x10
[ 125.014787][ T5322] __warn+0x315/0x4c0
[ 125.016471][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 125.019153][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 125.021456][ T5322] __report_bug+0x276/0x570
[ 125.023344][ T5322] ? kobject_add_internal+0xea/0xcd0
[ 125.025716][ T5322] ? __pfx___report_bug+0x10/0x10
[ 125.027867][ T5322] ? kobject_add_internal+0x118/0xcd0
[ 125.030143][ T5322] report_bug_entry+0x19b/0x290
[ 125.032336][ T5322] ? kobject_add_internal+0x113/0xcd0
[ 125.034649][ T5322] ? kobject_add_internal+0x118/0xcd0
[ 125.036911][ T5322] handle_bug+0xce/0x200
[ 125.038737][ T5322] exc_invalid_op+0x1a/0x50
[ 125.040725][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 125.042829][ T5322] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 125.045485][ T5322] Code: 04 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 77 9b 5c f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 9e 33 eb f5 b8 fe ff ff ff e9 fb
[ 125.053111][ T5322] RSP: 0018:ffffc9000da2f8a8 EFLAGS: 00010246
[ 125.055656][ T5322] RAX: 1ffff1100258c41e RBX: ffff888052e84080 RCX: dffffc0000000000
[ 125.058855][ T5322] RDX: ffff888012c620f0 RSI: 0000000000000000 RDI: ffffffff908d3de0
[ 125.062122][ T5322] RBP: 0000000000000000 R08: ffff888000b28000 R09: 0000000000000008
[ 125.065414][ T5322] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888012c620f0
[ 125.068661][ T5322] R13: dffffc0000000000 R14: ffffffff908d3de0 R15: dffffc0000000000
[ 125.071976][ T5322] ? kobject_add_internal+0xe3/0xcd0
[ 125.074308][ T5322] kobject_add+0x163/0x240
[ 125.076219][ T5322] ? __pfx_kobject_add+0x10/0x10
[ 125.078324][ T5322] ? mddev_create_serial_pool+0x1ec/0x590
[ 125.080814][ T5322] ? strreplace+0xe4/0x130
[ 125.082692][ T5322] bind_rdev_to_array+0x80c/0xdd0
[ 125.084839][ T5322] ? bind_rdev_to_array+0x352/0xdd0
[ 125.087030][ T5322] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 125.089331][ T5322] ? md_import_device+0x48d/0x650
[ 125.091577][ T5322] md_add_new_disk+0xe3b/0x1850
[ 125.093611][ T5322] md_ioctl+0x200a/0x2610
[ 125.095371][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0
[ 125.097742][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 125.099775][ T5322] ? do_vfs_ioctl+0x116f/0x1530
[ 125.101854][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 125.103927][ T5322] ? hook_file_ioctl+0x1f2/0x600
[ 125.106048][ T5322] ? __pfx_md_ioctl+0x10/0x10
[ 125.108072][ T5322] blkdev_ioctl+0x5e3/0x740
[ 125.110029][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 125.112110][ T5322] ? __fget_files+0x2a/0x420
[ 125.114003][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20
[ 125.115979][ T5322] ? __pfx_blkdev_ioctl+0x10/0x10
[ 125.118018][ T5322] __se_sys_ioctl+0xfc/0x170
[ 125.119971][ T5322] do_syscall_64+0x166/0x520
[ 125.122005][ T5322] ? trace_irq_disable+0x3b/0x140
[ 125.124150][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.126699][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 125.128744][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.131016][ T5322] RIP: 0033:0x7fab6d59e159
[ 125.132903][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.140587][ T5322] RSP: 002b:00007fab699d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 125.144103][ T5322] RAX: ffffffffffffffda RBX: 00007fab6d826090 RCX: 00007fab6d59e159
[ 125.147346][ T5322] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004
[ 125.150745][ T5322] RBP: 00007fab6d635024 R08: 0000000000000000 R09: 0000000000000000
[ 125.153951][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.157257][ T5322] R13: 00007fab6d826128 R14: 00007fab6d826090 R15: 00007ffcfffe3da8
[ 125.160565][ T5322]
[ 125.162282][ T5322] Kernel Offset: disabled
[ 125.164072][ T5322] Rebooting in 86400 seconds..