program: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r0, &(0x7f0000000340)='transport=loop,nqn=test', 0x17) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='1\x00', 0x1) [ 127.077869][ T5296] Bluetooth: hci0: command tx timeout [ 127.198466][ T1056] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001c: 0000 [#1] SMP KASAN NOPTI [ 127.203342][ T1056] KASAN: null-ptr-deref in range [0x00000000000000e0-0x00000000000000e7] [ 127.206833][ T1056] CPU: 0 UID: 0 PID: 1056 Comm: kworker/u4:10 Not tainted syzkaller #0 PREEMPT(full) [ 127.211434][ T1056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.215832][ T1056] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 127.218673][ T1056] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 127.221180][ T1056] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 127.230008][ T1056] RSP: 0018:ffffc900052bf978 EFLAGS: 00010002 [ 127.233197][ T1056] RAX: dffffc0000000000 RBX: ffffffff8be8ac30 RCX: 8000000000000002 [ 127.237407][ T1056] RDX: 0000000000000000 RSI: ffffffff8be8ac30 RDI: 000000000000001c [ 127.241652][ T1056] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.244926][ T1056] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 00000000000000e0 [ 127.248283][ T1056] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 127.251611][ T1056] FS: 0000000000000000(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 127.255172][ T1056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.257851][ T1056] CR2: 00007fceaaf75730 CR3: 000000000eb48000 CR4: 0000000000352ef0 [ 127.261148][ T1056] Call Trace: [ 127.262606][ T1056] [ 127.263851][ T1056] __kasan_check_byte+0x12/0x40 [ 127.265870][ T1056] lock_acquire+0x7d/0x350 [ 127.267740][ T1056] ? enable_work+0x17f/0x230 [ 127.269673][ T1056] ? rcu_is_watching+0x16/0xb0 [ 127.271697][ T1056] _raw_spin_lock_irqsave+0x40/0x60 [ 127.273944][ T1056] ? blk_mq_quiesce_queue+0x2f/0x190 [ 127.276282][ T1056] blk_mq_quiesce_queue+0x2f/0x190 [ 127.278307][ T1056] nvme_loop_reset_ctrl_work+0x1cf/0x810 [ 127.280560][ T1056] ? process_scheduled_works+0x97a/0x1630 [ 127.282805][ T1056] process_scheduled_works+0xc3d/0x1630 [ 127.285115][ T1056] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.287561][ T1056] ? assign_work+0x3cf/0x5d0 [ 127.289419][ T1056] worker_thread+0xa47/0xfb0 [ 127.291373][ T1056] kthread+0x38b/0x480 [ 127.293069][ T1056] ? __pfx_worker_thread+0x10/0x10 [ 127.295140][ T1056] ? __pfx_kthread+0x10/0x10 [ 127.296977][ T1056] ret_from_fork+0x514/0xb70 [ 127.298962][ T1056] ? __pfx_ret_from_fork+0x10/0x10 [ 127.301193][ T1056] ? __switch_to+0xc89/0x1420 [ 127.303248][ T1056] ? __pfx_kthread+0x10/0x10 [ 127.305248][ T1056] ret_from_fork_asm+0x1a/0x30 [ 127.307281][ T1056] [ 127.308584][ T1056] Modules linked in: [ 127.310306][ T1056] ---[ end trace 0000000000000000 ]--- [ 127.312650][ T1056] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 127.312671][ T1056] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 127.312681][ T1056] RSP: 0018:ffffc900052bf978 EFLAGS: 00010002 [ 127.312693][ T1056] RAX: dffffc0000000000 RBX: ffffffff8be8ac30 RCX: 8000000000000002 [ 127.312701][ T1056] RDX: 0000000000000000 RSI: ffffffff8be8ac30 RDI: 000000000000001c [ 127.312708][ T1056] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.312716][ T1056] R10: dffffc0000000000 R11: fffffbfff20f46f0 R12: 00000000000000e0 [ 127.312723][ T1056] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 127.312730][ T1056] FS: 0000000000000000(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 127.312739][ T1056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.312746][ T1056] CR2: 00007fceaaf75730 CR3: 000000000eb48000 CR4: 0000000000352ef0 [ 127.312783][ T1056] Kernel panic - not syncing: Fatal exception [ 127.356703][ T1056] Kernel Offset: disabled [ 127.358564][ T1056] Rebooting in 86400 seconds..