nvmet: adding nsid 1 to subsystem testsubsys 8<--- cut here --- Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read [00000000] *pgd=8793b003, *pmd=df493003 Internal error: Oops: 205 [#1] SMP ARM Modules linked in: CPU: 1 UID: 0 PID: 31782 Comm: syz.4.8595 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at strlen+0xc/0x38 lib/string.c:402 LR is at __fortify_strlen include/linux/fortify-string.h:218 [inline] LR is at do_getname_kernel+0x18/0xe4 fs/namei.c:260 pc : [<81b62034>] lr : [<805b189c>] psr: 20000013 sp : df9cdd88 ip : df9cdd98 fp : df9cdd94 r10: 81c2dadc r9 : 8600ed00 r8 : 85e15a00 r7 : 00000000 r6 : 00000000 r5 : fffffff1 r4 : 00020002 r3 : 847ee200 r2 : 00000000 r1 : 00000000 r0 : 00000000 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 85db3f00 DAC: 00000000 Register r0 information: NULL pointer Register r1 information: NULL pointer Register r2 information: NULL pointer Register r3 information: slab task_struct start 847ee200 pointer offset 0 size 3136 Register r4 information: non-paged memory Register r5 information: non-paged memory Register r6 information: NULL pointer Register r7 information: NULL pointer Register r8 information: slab kmalloc-512 start 85e15a00 pointer offset 0 size 512 Register r9 information: slab kmalloc-64 start 8600ed00 pointer offset 0 size 64 Register r10 information: non-slab/vmalloc memory Register r11 information: 2-page vmalloc region starting at 0xdf9cc000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: 2-page vmalloc region starting at 0xdf9cc000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Process syz.4.8595 (pid: 31782, stack limit = 0xdf9cc000) Stack: (0xdf9cdd88 to 0xdf9ce000) dd80: df9cddbc df9cdd98 805b189c 81b62034 00020002 fffffff1 dda0: 00000000 85e15a04 85e15a00 8600ed00 df9cddcc df9cddc0 805b197c 805b1890 ddc0: df9cde3c df9cddd0 8059d840 805b1974 81b72d34 8028f548 df9cde10 00000000 dde0: df9cde04 df9cddf0 80355068 8030bf10 00000000 847ee200 df9cde94 df9cde08 de00: 8035a174 df9cdef0 00000000 00000002 200004c0 00000000 df9cde34 bbb793e2 de20: 809fdf18 87c53200 fffffff1 df9cdf08 df9cde64 df9cde40 80cef444 8059d820 de40: df9cde74 df9cde50 87c53200 fffffff1 df9cdf08 85e15a04 df9cde8c df9cde68 de60: 80ce6aa8 80cef414 87c53200 00000002 df9cdf08 86014b98 8600ed04 8600ed00 de80: df9cdeac df9cde90 80ce9550 80ce6990 01b77ec4 bbb793e2 00000002 86014b80 dea0: df9cded4 df9cdeb0 80680750 80ce94b8 00000002 88e05180 200004c0 df9cdf68 dec0: 806806a0 847ee200 df9cdf64 df9cded8 805a1390 806806ac df9cdf04 df9cdee8 dee0: 8022bb80 8022cb78 00000000 00000000 00010000 00000002 200004c0 00000000 df00: 00000001 00000000 88e05180 00000000 00000000 00000000 00000000 00000000 df20: 00000000 00004004 00000000 00000000 df9cdf54 bbb793e2 df9cdf64 88e05183 df40: 88e05180 00000000 00000000 8020029c 847ee200 00000004 df9cdf94 df9cdf68 df60: 805a16b4 805a1120 00000000 00000000 00000000 bbb793e2 00000000 00000000 df80: 00356310 00000004 df9cdfa4 df9cdf98 805a173c 805a164c 00000000 df9cdfa8 dfa0: 80200060 805a1738 00000000 00000000 00000005 200004c0 00000002 00000000 dfc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76fd90dc dfe0: 76fd8e88 76fd8e78 00018fa0 00130a50 60000010 00000005 00000000 00000000 Call trace: [<81b62028>] (strlen) from [<805b189c>] (__fortify_strlen include/linux/fortify-string.h:218 [inline]) [<81b62028>] (strlen) from [<805b189c>] (do_getname_kernel+0x18/0xe4 fs/namei.c:260) [<805b1884>] (do_getname_kernel) from [<805b197c>] (getname_kernel+0x14/0x18 fs/namei.c:289) r9:8600ed00 r8:85e15a00 r7:85e15a04 r6:00000000 r5:fffffff1 r4:00020002 [<805b1968>] (getname_kernel) from [<8059d840>] (class_filename_kernel_constructor include/linux/fs.h:2571 [inline]) [<805b1968>] (getname_kernel) from [<8059d840>] (filp_open+0x2c/0x114 fs/open.c:1391) [<8059d814>] (filp_open) from [<80cef444>] (nvmet_file_ns_enable+0x3c/0x130 drivers/nvme/target/io-cmd-file.c:41) r6:df9cdf08 r5:fffffff1 r4:87c53200 [<80cef408>] (nvmet_file_ns_enable) from [<80ce6aa8>] (nvmet_ns_enable+0x124/0x1c8 drivers/nvme/target/core.c:596) r7:85e15a04 r6:df9cdf08 r5:fffffff1 r4:87c53200 [<80ce6984>] (nvmet_ns_enable) from [<80ce9550>] (nvmet_ns_enable_store+0xa4/0xcc drivers/nvme/target/configfs.c:735) r9:8600ed00 r8:8600ed04 r7:86014b98 r6:df9cdf08 r5:00000002 r4:87c53200 [<80ce94ac>] (nvmet_ns_enable_store) from [<80680750>] (flush_write_buffer fs/configfs/file.c:207 [inline]) [<80ce94ac>] (nvmet_ns_enable_store) from [<80680750>] (configfs_write_iter+0xb0/0x124 fs/configfs/file.c:229) r5:86014b80 r4:00000002 [<806806a0>] (configfs_write_iter) from [<805a1390>] (new_sync_write fs/read_write.c:595 [inline]) [<806806a0>] (configfs_write_iter) from [<805a1390>] (vfs_write fs/read_write.c:687 [inline]) [<806806a0>] (configfs_write_iter) from [<805a1390>] (vfs_write+0x27c/0x42c fs/read_write.c:667) r9:847ee200 r8:806806a0 r7:df9cdf68 r6:200004c0 r5:88e05180 r4:00000002 [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec fs/read_write.c:739) r10:00000004 r9:847ee200 r8:8020029c r7:00000000 r6:00000000 r5:88e05180 r4:88e05183 [<805a1640>] (ksys_write) from [<805a173c>] (__do_sys_write fs/read_write.c:750 [inline]) [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14 fs/read_write.c:747) r7:00000004 r6:00356310 r5:00000000 r4:00000000 [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xdf9cdfa8 to 0xdf9cdff0) dfa0: 00000000 00000000 00000005 200004c0 00000002 00000000 dfc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76fd90dc dfe0: 76fd8e88 76fd8e78 00018fa0 00130a50 Code: e89da800 e1a0c00d e92dd800 e24cb004 (e5d03000) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e89da800 ldm sp, {fp, sp, pc} 4: e1a0c00d mov ip, sp 8: e92dd800 push {fp, ip, lr, pc} c: e24cb004 sub fp, ip, #4 * 10: e5d03000 ldrb r3, [r0] <-- trapping instruction