program: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) [ 94.734742][ T4649] Bluetooth: hci0: command tx timeout [ 94.956432][ T5328] nvmet: adding nsid 1 to subsystem testsubsys [ 94.958272][ T5328] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 94.965871][ T5328] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 94.969497][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.973227][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.977224][ T5328] RIP: 0010:strlen+0x29/0x70 [ 94.979116][ T5328] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 94.987363][ T5328] RSP: 0018:ffffc9000dd67978 EFLAGS: 00010246 [ 94.990414][ T5328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000100000 [ 94.994302][ T5328] RDX: ffffc9000ea1a000 RSI: 000000000000004e RDI: 0000000000000000 [ 94.997886][ T5328] RBP: ffffc9000dd67ab8 R08: ffffffff907a377f R09: 1ffffffff20f46ef [ 95.001097][ T5328] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 1ffff92001bacf40 [ 95.004586][ T5328] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 95.008291][ T5328] FS: 00007f561c1b66c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 95.012374][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.015404][ T5328] CR2: 00005583e7b1d5d0 CR3: 0000000043c0a000 CR4: 0000000000352ef0 [ 95.019030][ T5328] Call Trace: [ 95.020485][ T5328] [ 95.021789][ T5328] do_getname_kernel+0x1d/0x230 [ 95.023935][ T5328] ? getname_kernel+0xd/0x20 [ 95.025929][ T5328] filp_open+0x87/0x1d0 [ 95.027584][ T5328] ? __pfx_filp_open+0x10/0x10 [ 95.029596][ T5328] ? __pfx___mutex_lock+0x10/0x10 [ 95.031801][ T5328] nvmet_file_ns_enable+0x74/0x350 [ 95.034052][ T5328] nvmet_ns_enable+0xaa/0x780 [ 95.035963][ T5328] ? lock_acquire+0x115/0x350 [ 95.037956][ T5328] nvmet_ns_enable_store+0xd7/0x170 [ 95.040234][ T5328] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 95.042807][ T5328] ? down_read+0x2be/0x330 [ 95.044868][ T5328] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 95.047428][ T5328] configfs_write_iter+0x337/0x430 [ 95.049669][ T5328] vfs_write+0x612/0xba0 [ 95.051531][ T5328] ? __pfx_vfs_write+0x10/0x10 [ 95.053617][ T5328] ? __fget_files+0x2a/0x420 [ 95.055601][ T5328] ksys_write+0x150/0x270 [ 95.057467][ T5328] ? __pfx_ksys_write+0x10/0x10 [ 95.059648][ T5328] do_syscall_64+0x166/0x520 [ 95.061683][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.064336][ T5328] ? clear_bhb_loop+0x70/0xc0 [ 95.066404][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.069043][ T5328] RIP: 0033:0x7f561b39e159 [ 95.071052][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.079125][ T5328] RSP: 002b:00007f561c1b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.082790][ T5328] RAX: ffffffffffffffda RBX: 00007f561b625fa0 RCX: 00007f561b39e159 [ 95.086304][ T5328] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000005 [ 95.089832][ T5328] RBP: 00007f561b435024 R08: 0000000000000000 R09: 0000000000000000 [ 95.093316][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.096808][ T5328] R13: 00007f561b626038 R14: 00007f561b625fa0 R15: 00007fff0d2ccea8 [ 95.100318][ T5328] [ 95.101725][ T5328] Modules linked in: [ 95.104075][ T5328] ---[ end trace 0000000000000000 ]--- [ 95.129976][ T5328] RIP: 0010:strlen+0x29/0x70 [ 95.132585][ T5328] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 95.141437][ T5328] RSP: 0018:ffffc9000dd67978 EFLAGS: 00010246 [ 95.146031][ T5328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000100000 [ 95.149550][ T5328] RDX: ffffc9000ea1a000 RSI: 000000000000004e RDI: 0000000000000000 [ 95.153605][ T5328] RBP: ffffc9000dd67ab8 R08: ffffffff907a377f R09: 1ffffffff20f46ef [ 95.157853][ T5328] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 1ffff92001bacf40 [ 95.161255][ T5328] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 95.164680][ T5328] FS: 00007f561c1b66c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 95.177246][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.183741][ T5328] CR2: 00005583e7b1e660 CR3: 0000000043c0a000 CR4: 0000000000352ef0 [ 95.209189][ T1055] nvmet: connect request for invalid subsystem testsubsys! [ 95.214710][ T5333] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 95.218101][ T5328] Kernel panic - not syncing: Fatal exception [ 95.221157][ T5328] Kernel Offset: disabled [ 95.223091][ T5328] Rebooting in 86400 seconds..