[ 64.755128][ T43] kauditd_printk_skb: 10 callbacks suppressed
[ 64.755139][ T43] audit: type=1400 audit(1789865393.480:209): avc: denied { transition } for pid=5976 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.755772][ T43] audit: type=1400 audit(1789865393.480:210): avc: denied { noatsecure } for pid=5976 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.755799][ T43] audit: type=1400 audit(1789865393.490:211): avc: denied { rlimitinh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.757347][ T43] audit: type=1400 audit(1789865393.490:212): avc: denied { siginh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 68.785955][ T43] audit: type=1400 audit(1789865397.520:213): avc: denied { write } for pid=5983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.852132][ T43] audit: type=1400 audit(1789865397.580:214): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.988065][ T43] audit: type=1400 audit(1789865397.720:215): avc: denied { write } for pid=5993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.034864][ T43] audit: type=1400 audit(1789865397.760:216): avc: denied { write } for pid=5996 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.100970][ T43] audit: type=1400 audit(1789865397.830:217): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.142166][ T43] audit: type=1400 audit(1789865397.870:218): avc: denied { write } for pid=6003 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:56062' (ED25519) to the list of known hosts.
[ 69.323498][ T229] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x0000000000000001 rport wwpn 0x0000000000000002: NQN "test"
[ 69.324550][ T38] nvmet_fc: {0:0}: Association created
[ 69.327307][ T75] nvmet: Created nvm controller 1 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:41c2cfa0-1658-4591-925a-27791f143716.
[ 69.341316][ T229] nvme nvme0: NVME-FC{0}: controller connect complete
[ 69.344357][ T6009] nvme nvme0: NVME-FC{0}: new ctrl: NQN "test", hostnqn: nqn.2014-08.org.nvmexpress:uuid:41c2cfa0-1658-4591-925a-27791f143716
[ 69.397525][ T188] nvmet_fc: {0:0}: Association deleted
[ 69.397540][ T6009] nvme nvme0: NVME-FC{0}: controller connectivity lost. Awaiting Reconnect
[ 69.636918][ T188] nvmet_fc: {0:0}: Association freed
[ 69.642633][ T188] ==================================================================
[ 69.642642][ T188] BUG: KASAN: slab-use-after-free in fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.642680][ T188] Read of size 8 at addr ffff8880234fdc38 by task kworker/u33:6/188
[ 69.642689][ T188]
[ 69.642696][ T188] CPU: 3 UID: 0 PID: 188 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full)
[ 69.642708][ T188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 69.642716][ T188] Workqueue: nvmet-wq fcloop_tport_lsrqst_work
[ 69.642734][ T188] Call Trace:
[ 69.642738][ T188]
[ 69.642743][ T188] dump_stack_lvl+0x100/0x190
[ 69.642759][ T188] print_report+0x13d/0x4b0
[ 69.642775][ T188] ? __virt_addr_valid+0x239/0x430
[ 69.642787][ T188] ? fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.642803][ T188] kasan_report+0xdf/0x1c0
[ 69.642818][ T188] ? fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.642836][ T188] fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.642853][ T188] process_one_work+0xac7/0x1b10
[ 69.642886][ T188] ? __pfx_process_one_work+0x10/0x10
[ 69.642903][ T188] ? lock_acquire+0x1d1/0x380
[ 69.642915][ T188] ? __pfx_fcloop_tport_lsrqst_work+0x10/0x10
[ 69.642933][ T188] worker_thread+0x5ef/0xe50
[ 69.642950][ T188] ? __pfx_worker_thread+0x10/0x10
[ 69.642966][ T188] ? kthread+0x13a/0x450
[ 69.642980][ T188] ? __pfx_worker_thread+0x10/0x10
[ 69.642996][ T188] kthread+0x373/0x450
[ 69.643009][ T188] ? __pfx_kthread+0x10/0x10
[ 69.643024][ T188] ret_from_fork+0x730/0xd60
[ 69.643036][ T188] ? __pfx_ret_from_fork+0x10/0x10
[ 69.643048][ T188] ? __switch_to+0x800/0x10f0
[ 69.643062][ T188] ? __pfx_kthread+0x10/0x10
[ 69.643077][ T188] ret_from_fork_asm+0x1a/0x30
[ 69.643091][ T188]
[ 69.643094][ T188]
[ 69.643097][ T188] Allocated by task 188:
[ 69.643102][ T188] kasan_save_stack+0x30/0x50
[ 69.643113][ T188] kasan_save_track+0x14/0x30
[ 69.643124][ T188] __kasan_kmalloc+0xaa/0xb0
[ 69.643134][ T188] __kmalloc_noprof+0x32f/0x840
[ 69.643144][ T188] nvmet_fc_target_assoc_free+0xbd5/0x2220
[ 69.643158][ T188] nvmet_fc_delete_assoc_work.cold+0x118/0x144
[ 69.643171][ T188] process_one_work+0xac7/0x1b10
[ 69.643185][ T188] worker_thread+0x5ef/0xe50
[ 69.643200][ T188] kthread+0x373/0x450
[ 69.643213][ T188] ret_from_fork+0x730/0xd60
[ 69.643223][ T188] ret_from_fork_asm+0x1a/0x30
[ 69.643232][ T188]
[ 69.643235][ T188] Freed by task 6009:
[ 69.643239][ T188] kasan_save_stack+0x30/0x50
[ 69.643250][ T188] kasan_save_track+0x14/0x30
[ 69.643260][ T188] kasan_save_free_info+0x3b/0x70
[ 69.643275][ T188] __kasan_slab_free+0x5f/0x80
[ 69.643290][ T188] kfree+0x22b/0x6d0
[ 69.643308][ T188] nvmet_fc_unregister_targetport+0x351/0x760
[ 69.643333][ T188] fcloop_delete_target_port+0x185/0x1f0
[ 69.643348][ T188] dev_attr_store+0x58/0x80
[ 69.643362][ T188] sysfs_kf_write+0xf2/0x150
[ 69.643374][ T188] kernfs_fop_write_iter+0x3e0/0x5f0
[ 69.643383][ T188] vfs_write+0x6af/0x1050
[ 69.643393][ T188] ksys_write+0x12a/0x250
[ 69.643402][ T188] do_syscall_64+0x123/0x790
[ 69.643416][ T188] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.643426][ T188]
[ 69.643428][ T188] The buggy address belongs to the object at ffff8880234fdc00
[ 69.643428][ T188] which belongs to the cache kmalloc-256 of size 256
[ 69.643436][ T188] The buggy address is located 56 bytes inside of
[ 69.643436][ T188] freed 256-byte region [ffff8880234fdc00, ffff8880234fdd00)
[ 69.643446][ T188]
[ 69.643448][ T188] The buggy address belongs to the physical page:
[ 69.643453][ T188] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x234fc
[ 69.643462][ T188] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 69.643470][ T188] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 69.643479][ T188] page_type: f5(slab)
[ 69.643489][ T188] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[ 69.643498][ T188] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 69.643507][ T188] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[ 69.643515][ T188] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 69.643524][ T188] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 69.643533][ T188] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 69.643538][ T188] page dumped because: kasan: bad access detected
[ 69.643543][ T188] page_owner tracks the page as allocated
[ 69.643546][ T188] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5742, tgid 5742 (udevd), ts 51615023593
[ 69.643562][ T188] post_alloc_hook+0xfd/0x120
[ 69.643576][ T188] get_page_from_freelist+0x110d/0x35d0
[ 69.643592][ T188] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 69.643601][ T188] new_slab+0xa9/0x6e0
[ 69.643616][ T188] refill_objects+0xe3/0x410
[ 69.643624][ T188] __pcs_replace_empty_main+0x35e/0x650
[ 69.643638][ T188] __kmalloc_noprof+0x67c/0x840
[ 69.643648][ T188] security_inode_init_security+0x113/0x370
[ 69.643663][ T188] shmem_mknod+0x2ce/0x480
[ 69.643674][ T188] lookup_open+0x1255/0x1990
[ 69.643683][ T188] path_openat+0xa2c/0x2440
[ 69.643694][ T188] do_file_open+0x20e/0x430
[ 69.643706][ T188] do_sys_openat2+0x10f/0x1e0
[ 69.643719][ T188] __x64_sys_openat+0x12d/0x210
[ 69.643732][ T188] do_syscall_64+0x123/0x790
[ 69.643746][ T188] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.643756][ T188] page last free pid 29 tgid 29 ts 51596759354 stack trace:
[ 69.643762][ T188] __free_frozen_pages+0x79f/0x10f0
[ 69.643775][ T188] rcu_core+0x5f0/0x1260
[ 69.643787][ T188] handle_softirqs+0x1e6/0x9d0
[ 69.643797][ T188] run_ksoftirqd+0x38/0x60
[ 69.643806][ T188] smpboot_thread_fn+0x3d3/0xab0
[ 69.643819][ T188] kthread+0x373/0x450
[ 69.643832][ T188] ret_from_fork+0x730/0xd60
[ 69.643842][ T188] ret_from_fork_asm+0x1a/0x30
[ 69.643852][ T188]
[ 69.643854][ T188] Memory state around the buggy address:
[ 69.643859][ T188] ffff8880234fdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.643866][ T188] ffff8880234fdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.643873][ T188] >ffff8880234fdc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.643878][ T188] ^
[ 69.643884][ T188] ffff8880234fdc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.643890][ T188] ffff8880234fdd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.643896][ T188] ==================================================================
[ 69.643948][ T188] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.856144][ T188] CPU: 3 UID: 0 PID: 188 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full)
[ 69.859048][ T188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 69.862165][ T188] Workqueue: nvmet-wq fcloop_tport_lsrqst_work
[ 69.864094][ T188] Call Trace:
[ 69.865152][ T188]
[ 69.866125][ T188] dump_stack_lvl+0x100/0x190
[ 69.867618][ T188] vpanic+0x553/0x970
[ 69.868876][ T188] ? __pfx_vpanic+0x10/0x10
[ 69.870292][ T188] ? mark_held_locks+0x40/0x70
[ 69.871796][ T188] ? irqentry_exit+0x24d/0xa10
[ 69.873298][ T188] ? fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.875093][ T188] panic+0xd1/0xe0
[ 69.876302][ T188] ? __pfx_panic+0x10/0x10
[ 69.877710][ T188] ? fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.879512][ T188] ? preempt_schedule_common+0x3c/0xb0
[ 69.881337][ T188] check_panic_on_warn.cold+0x19/0x34
[ 69.883019][ T188] end_report.part.0+0x3a/0x90
[ 69.884517][ T188] kasan_report.cold+0xe/0x18
[ 69.886011][ T188] ? fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.887811][ T188] fcloop_rport_lsrqst_work+0x242/0x2e0
[ 69.889541][ T188] process_one_work+0xac7/0x1b10
[ 69.891093][ T188] ? __pfx_process_one_work+0x10/0x10
[ 69.892787][ T188] ? lock_acquire+0x1d1/0x380
[ 69.894291][ T188] ? __pfx_fcloop_tport_lsrqst_work+0x10/0x10
[ 69.896209][ T188] worker_thread+0x5ef/0xe50
[ 69.897682][ T188] ? __pfx_worker_thread+0x10/0x10
[ 69.899295][ T188] ? kthread+0x13a/0x450
[ 69.900646][ T188] ? __pfx_worker_thread+0x10/0x10
[ 69.902269][ T188] kthread+0x373/0x450
[ 69.903560][ T188] ? __pfx_kthread+0x10/0x10
[ 69.905018][ T188] ret_from_fork+0x730/0xd60
[ 69.906489][ T188] ? __pfx_ret_from_fork+0x10/0x10
[ 69.908089][ T188] ? __switch_to+0x800/0x10f0
[ 69.909771][ T188] ? __pfx_kthread+0x10/0x10
[ 69.911370][ T188] ret_from_fork_asm+0x1a/0x30
[ 69.912905][ T188]
[ 69.914567][ T188] Kernel Offset: disabled
[ 69.915930][ T188] Rebooting in 86400 seconds..