program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000004400010029bd700004000000010000000400488071000180c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4008094)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006")
ioctl(r1, 0x400c0930, 0x0)
[ 124.879512][ T5358] ------------[ cut here ]------------
[ 124.879628][ T5358] kobject: '(null)' (ffff888034b9c0f0): is not initialized, yet kobject_get() is being called.
[ 124.879640][ T5358] WARNING: lib/kobject.c:642 at kobject_add_internal+0xea/0xcd0, CPU#0: syz.0.0/5358
[ 124.890949][ T5358] Modules linked in:
[ 124.892709][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 124.896649][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.901251][ T5358] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 124.903844][ T5358] Code: 05 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 97 92 47 f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 8e 60 cf f5 b8 fe ff ff ff e9 fb
[ 124.912496][ T5358] RSP: 0000:ffffc9000dfaf8a8 EFLAGS: 00010246
[ 124.915539][ T5358] RAX: 1ffff1100697381e RBX: ffff888014ac1080 RCX: dffffc0000000000
[ 124.919269][ T5358] RDX: ffff888034b9c0f0 RSI: 0000000000000000 RDI: ffffffff91b08200
[ 124.922844][ T5358] RBP: 0000000000000000 R08: ffff888034534b00 R09: 0000000000000008
[ 124.926551][ T5358] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888034b9c0f0
[ 124.930220][ T5358] R13: dffffc0000000000 R14: ffffffff91b08200 R15: dffffc0000000000
[ 124.933838][ T5358] FS: 00007f11060246c0(0000) GS:ffff88808ac1d000(0000) knlGS:0000000000000000
[ 124.937888][ T5358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 124.940701][ T5358] CR2: 00007fb5a93ad1bc CR3: 0000000014bba000 CR4: 0000000000352ef0
[ 124.944183][ T5358] Call Trace:
[ 124.945690][ T5358]
[ 124.947062][ T5358] kobject_add+0x163/0x240
[ 124.949155][ T5358] ? __pfx_kobject_add+0x10/0x10
[ 124.951393][ T5358] ? mddev_create_serial_pool+0x1ec/0x590
[ 124.953928][ T5358] ? strreplace+0xe4/0x130
[ 124.955932][ T5358] bind_rdev_to_array+0x80c/0xdd0
[ 124.958276][ T5358] ? bind_rdev_to_array+0x352/0xdd0
[ 124.960625][ T5358] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 124.963249][ T5358] ? md_import_device+0x48d/0x650
[ 124.965551][ T5358] md_add_new_disk+0xe3b/0x1850
[ 124.967886][ T5358] md_ioctl+0x2005/0x2610
[ 124.969800][ T5358] ? tomoyo_path_number_perm+0x219/0x5f0
[ 124.972227][ T5358] ? __pfx_md_ioctl+0x10/0x10
[ 124.974283][ T5358] ? do_vfs_ioctl+0x116f/0x1530
[ 124.976463][ T5358] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 124.978831][ T5358] ? do_futex+0x3e7/0x4e0
[ 124.980740][ T5358] ? __pfx_md_ioctl+0x10/0x10
[ 124.982793][ T5358] blkdev_ioctl+0x5e3/0x740
[ 124.984804][ T5358] ? __pfx_blkdev_ioctl+0x10/0x10
[ 124.986964][ T5358] ? bpf_lsm_file_ioctl+0x9/0x20
[ 124.989419][ T5358] ? __pfx_blkdev_ioctl+0x10/0x10
[ 124.991748][ T5358] __se_sys_ioctl+0xfc/0x170
[ 124.993828][ T5358] do_syscall_64+0x166/0x520
[ 124.995913][ T5358] ? trace_irq_disable+0x3b/0x140
[ 124.998334][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.000963][ T5358] ? clear_bhb_loop+0x70/0xc0
[ 125.003007][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.005692][ T5358] RIP: 0033:0x7f110519f559
[ 125.007832][ T5358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.016510][ T5358] RSP: 002b:00007f1106023fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 125.020537][ T5358] RAX: ffffffffffffffda RBX: 00007f1105426090 RCX: 00007f110519f559
[ 125.024029][ T5358] RDX: 0000200000000400 RSI: 0000000040140921 RDI: 0000000000000004
[ 125.027609][ T5358] RBP: 00007f1105236b20 R08: 0000000000000000 R09: 0000000000000000
[ 125.031001][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.034505][ T5358] R13: 00007f1105426128 R14: 00007f1105426090 R15: 00007ffe1d064408
[ 125.038144][ T5358]
[ 125.039540][ T5358] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 125.042772][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 125.046819][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.051091][ T5358] Call Trace:
[ 125.052645][ T5358]
[ 125.053991][ T5358] vpanic+0x56d/0xa60
[ 125.055891][ T5358] ? __pfx__printk+0x10/0x10
[ 125.057969][ T5358] ? __pfx_vpanic+0x10/0x10
[ 125.060082][ T5358] ? is_bpf_text_address+0x292/0x2b0
[ 125.062438][ T5358] ? is_bpf_text_address+0x26/0x2b0
[ 125.064809][ T5358] panic+0xc5/0xd0
[ 125.066462][ T5358] ? __pfx_panic+0x10/0x10
[ 125.068408][ T5358] __warn+0x315/0x4c0
[ 125.070220][ T5358] ? kobject_add_internal+0xea/0xcd0
[ 125.072545][ T5358] ? kobject_add_internal+0xea/0xcd0
[ 125.074904][ T5358] __report_bug+0x276/0x570
[ 125.076970][ T5358] ? kobject_add_internal+0xea/0xcd0
[ 125.079335][ T5358] ? __pfx___report_bug+0x10/0x10
[ 125.081486][ T5358] ? kobject_add_internal+0x118/0xcd0
[ 125.083957][ T5358] report_bug_entry+0x19b/0x290
[ 125.086101][ T5358] ? kobject_add_internal+0x113/0xcd0
[ 125.088181][ T5358] ? kobject_add_internal+0x118/0xcd0
[ 125.090372][ T5358] handle_bug+0xce/0x200
[ 125.092278][ T5358] exc_invalid_op+0x1a/0x50
[ 125.094284][ T5358] asm_exc_invalid_op+0x1a/0x20
[ 125.096404][ T5358] RIP: 0010:kobject_add_internal+0x113/0xcd0
[ 125.099000][ T5358] Code: 05 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 97 92 47 f6 49 8b 34 24 4c 89 f7 4c 89 e2 <67> 48 0f b9 3a e9 e4 00 00 00 e8 8e 60 cf f5 b8 fe ff ff ff e9 fb
[ 125.107417][ T5358] RSP: 0000:ffffc9000dfaf8a8 EFLAGS: 00010246
[ 125.110115][ T5358] RAX: 1ffff1100697381e RBX: ffff888014ac1080 RCX: dffffc0000000000
[ 125.113648][ T5358] RDX: ffff888034b9c0f0 RSI: 0000000000000000 RDI: ffffffff91b08200
[ 125.117155][ T5358] RBP: 0000000000000000 R08: ffff888034534b00 R09: 0000000000000008
[ 125.120759][ T5358] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888034b9c0f0
[ 125.124410][ T5358] R13: dffffc0000000000 R14: ffffffff91b08200 R15: dffffc0000000000
[ 125.127871][ T5358] ? kobject_add_internal+0xe3/0xcd0
[ 125.130269][ T5358] kobject_add+0x163/0x240
[ 125.132265][ T5358] ? __pfx_kobject_add+0x10/0x10
[ 125.134519][ T5358] ? mddev_create_serial_pool+0x1ec/0x590
[ 125.137013][ T5358] ? strreplace+0xe4/0x130
[ 125.138936][ T5358] bind_rdev_to_array+0x80c/0xdd0
[ 125.141090][ T5358] ? bind_rdev_to_array+0x352/0xdd0
[ 125.143360][ T5358] ? __pfx_bind_rdev_to_array+0x10/0x10
[ 125.145739][ T5358] ? md_import_device+0x48d/0x650
[ 125.147887][ T5358] md_add_new_disk+0xe3b/0x1850
[ 125.150006][ T5358] md_ioctl+0x2005/0x2610
[ 125.151979][ T5358] ? tomoyo_path_number_perm+0x219/0x5f0
[ 125.154429][ T5358] ? __pfx_md_ioctl+0x10/0x10
[ 125.156506][ T5358] ? do_vfs_ioctl+0x116f/0x1530
[ 125.158724][ T5358] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 125.161014][ T5358] ? do_futex+0x3e7/0x4e0
[ 125.162976][ T5358] ? __pfx_md_ioctl+0x10/0x10
[ 125.165041][ T5358] blkdev_ioctl+0x5e3/0x740
[ 125.167210][ T5358] ? __pfx_blkdev_ioctl+0x10/0x10
[ 125.169562][ T5358] ? bpf_lsm_file_ioctl+0x9/0x20
[ 125.171744][ T5358] ? __pfx_blkdev_ioctl+0x10/0x10
[ 125.173756][ T5358] __se_sys_ioctl+0xfc/0x170
[ 125.175855][ T5358] do_syscall_64+0x166/0x520
[ 125.177941][ T5358] ? trace_irq_disable+0x3b/0x140
[ 125.180228][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.182981][ T5358] ? clear_bhb_loop+0x70/0xc0
[ 125.185067][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.187762][ T5358] RIP: 0033:0x7f110519f559
[ 125.189816][ T5358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.198130][ T5358] RSP: 002b:00007f1106023fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 125.201845][ T5358] RAX: ffffffffffffffda RBX: 00007f1105426090 RCX: 00007f110519f559
[ 125.205209][ T5358] RDX: 0000200000000400 RSI: 0000000040140921 RDI: 0000000000000004
[ 125.208593][ T5358] RBP: 00007f1105236b20 R08: 0000000000000000 R09: 0000000000000000
[ 125.212088][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.215699][ T5358] R13: 00007f1105426128 R14: 00007f1105426090 R15: 00007ffe1d064408
[ 125.219040][ T5358]
[ 125.220810][ T5358] Kernel Offset: disabled
[ 125.222788][ T5358] Rebooting in 86400 seconds..