program: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r0, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='1\x00', 0x1) [ 94.548958][ T5285] Bluetooth: hci0: command tx timeout [ 94.855472][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001c: 0000 [#1] SMP KASAN NOPTI [ 94.860619][ T12] KASAN: null-ptr-deref in range [0x00000000000000e0-0x00000000000000e7] [ 94.864241][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full) [ 94.868173][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.872376][ T12] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 94.875151][ T12] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 94.877236][ T12] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 94.883889][ T12] RSP: 0000:ffffc9000025f978 EFLAGS: 00010002 [ 94.886018][ T12] RAX: dffffc0000000000 RBX: ffffffff8be8ac30 RCX: 8000000000000002 [ 94.888740][ T12] RDX: 0000000000000000 RSI: ffffffff8be8ac30 RDI: 000000000000001c [ 94.891424][ T12] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.894071][ T12] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 00000000000000e0 [ 94.896694][ T12] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 94.899515][ T12] FS: 0000000000000000(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 94.902567][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.904943][ T12] CR2: 00007f9a9fc7bb13 CR3: 0000000012a52000 CR4: 0000000000352ef0 [ 94.907691][ T12] Call Trace: [ 94.908980][ T12] [ 94.910070][ T12] __kasan_check_byte+0x12/0x40 [ 94.911823][ T12] lock_acquire+0x7d/0x350 [ 94.913431][ T12] ? enable_work+0x17f/0x230 [ 94.915111][ T12] ? rcu_is_watching+0x16/0xb0 [ 94.916803][ T12] _raw_spin_lock_irqsave+0x40/0x60 [ 94.918924][ T12] ? blk_mq_quiesce_queue+0x2f/0x190 [ 94.920820][ T12] blk_mq_quiesce_queue+0x2f/0x190 [ 94.922659][ T12] nvme_loop_reset_ctrl_work+0x1cf/0x810 [ 94.924673][ T12] ? process_scheduled_works+0x97a/0x1630 [ 94.926692][ T12] process_scheduled_works+0xc3d/0x1630 [ 94.928707][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.930789][ T12] ? assign_work+0x3cf/0x5d0 [ 94.932468][ T12] worker_thread+0xa47/0xfb0 [ 94.934134][ T12] kthread+0x38b/0x480 [ 94.935600][ T12] ? __pfx_worker_thread+0x10/0x10 [ 94.937404][ T12] ? __pfx_kthread+0x10/0x10 [ 94.939100][ T12] ret_from_fork+0x514/0xb70 [ 94.940673][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 94.942489][ T12] ? __switch_to+0xc89/0x1420 [ 94.944093][ T12] ? __pfx_kthread+0x10/0x10 [ 94.945754][ T12] ret_from_fork_asm+0x1a/0x30 [ 94.947463][ T12] [ 94.948647][ T12] Modules linked in: [ 94.950249][ T12] ---[ end trace 0000000000000000 ]--- [ 94.952279][ T12] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 94.952294][ T12] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 94.952300][ T12] RSP: 0000:ffffc9000025f978 EFLAGS: 00010002 [ 94.952308][ T12] RAX: dffffc0000000000 RBX: ffffffff8be8ac30 RCX: 8000000000000002 [ 94.952313][ T12] RDX: 0000000000000000 RSI: ffffffff8be8ac30 RDI: 000000000000001c [ 94.952318][ T12] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.952323][ T12] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 00000000000000e0 [ 94.952328][ T12] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 94.952336][ T12] FS: 0000000000000000(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 94.952342][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.952347][ T12] CR2: 00007f9a9fc7bb13 CR3: 0000000012a52000 CR4: 0000000000352ef0 [ 94.952375][ T12] Kernel panic - not syncing: Fatal exception [ 94.994621][ T12] Kernel Offset: disabled [ 94.996546][ T12] Rebooting in 86400 seconds..