[ 73.052847][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 73.052860][ T42] audit: type=1400 audit(1787824848.038:209): avc: denied { transition } for pid=5970 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 73.063199][ T42] audit: type=1400 audit(1787824848.038:210): avc: denied { noatsecure } for pid=5970 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 73.070360][ T42] audit: type=1400 audit(1787824848.038:211): avc: denied { rlimitinh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 73.078049][ T42] audit: type=1400 audit(1787824848.038:212): avc: denied { siginh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 76.929203][ T42] audit: type=1400 audit(1787824851.918:213): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 76.993863][ T42] audit: type=1400 audit(1787824851.978:214): avc: denied { write } for pid=5981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 77.091092][ T42] audit: type=1400 audit(1787824852.078:215): avc: denied { write } for pid=5984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 77.150634][ T42] audit: type=1400 audit(1787824852.138:216): avc: denied { write } for pid=5987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 77.233999][ T42] audit: type=1400 audit(1787824852.218:217): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 77.281248][ T42] audit: type=1400 audit(1787824852.268:218): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.082564][ T42] kauditd_printk_skb: 3 callbacks suppressed
[ 78.082582][ T42] audit: type=1400 audit(1787824853.068:222): avc: denied { write } for pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.381179][ T42] audit: type=1400 audit(1787824853.368:223): avc: denied { write } for pid=6012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.429367][ T42] audit: type=1400 audit(1787824853.418:224): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:41358' (ED25519) to the list of known hosts.
[+] configfs mounted or already busy.
[+] nvmet subsystem found.
[ 78.555599][ T42] audit: type=1400 audit(1787824853.548:225): avc: denied { mounton } for pid=6021 comm="syz-executor823" path="/sys/kernel/config" dev="configfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[+] Created subsys1 successfully.
[ 78.565043][ T42] audit: type=1400 audit(1787824853.548:226): avc: denied { mount } for pid=6021 comm="syz-executor823" name="/" dev="configfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 78.573338][ T6026] audit: audit_backlog=65 > audit_backlog_limit=64
[ 78.574367][ T6028] audit: audit_backlog=65 > audit_backlog_limit=64
[ 78.574378][ T6028] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 78.574387][ T6028] audit: backlog limit exceeded
[ 78.574397][ T6028] audit: audit_backlog=65 > audit_backlog_limit=64
[ 78.588103][ T6028] ==================================================================
[ 78.591832][ T6022] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] SMP KASAN NOPTI
[ 78.593649][ T6028] BUG: KASAN: slab-use-after-free in nvmet_port_subsys_allow_link+0x31e/0x390
[ 78.598546][ T6022] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117]
[ 78.602457][ T6028] Read of size 8 at addr ffff88802e0944c8 by task syz-executor823/6028
[ 78.606185][ T6022] CPU: 2 UID: 0 PID: 6022 Comm: syz-executor823 Not tainted syzkaller #0 PREEMPT(full)
[ 78.609556][ T6028]
[ 78.609570][ T6028] CPU: 3 UID: 0 PID: 6028 Comm: syz-executor823 Not tainted syzkaller #0 PREEMPT(full)
[ 78.609590][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.609603][ T6028] Call Trace:
[ 78.609609][ T6028]
[ 78.609616][ T6028] dump_stack_lvl+0x100/0x190
[ 78.609648][ T6028] print_report+0x13d/0x4b0
[ 78.609673][ T6028] ? __virt_addr_valid+0x239/0x430
[ 78.609699][ T6028] ? nvmet_port_subsys_allow_link+0x31e/0x390
[ 78.609724][ T6028] kasan_report+0xdf/0x1c0
[ 78.609748][ T6028] ? nvmet_port_subsys_allow_link+0x31e/0x390
[ 78.609773][ T6028] nvmet_port_subsys_allow_link+0x31e/0x390
[ 78.609797][ T6028] ? mntput_no_expire+0xe7/0x220
[ 78.609824][ T6028] configfs_symlink+0x540/0x11f0
[ 78.609853][ T6028] ? __pfx_configfs_symlink+0x10/0x10
[ 78.609879][ T6028] vfs_symlink+0x178/0x4d0
[ 78.609900][ T6028] filename_symlinkat+0x2a6/0x560
[ 78.609919][ T6028] ? __pfx_filename_symlinkat+0x10/0x10
[ 78.609935][ T6028] ? strncpy_from_user+0x19d/0x2d0
[ 78.609953][ T6028] ? do_getname+0x191/0x390
[ 78.609969][ T6028] __x64_sys_symlinkat+0x9c/0xe0
[ 78.609985][ T6028] do_syscall_64+0x123/0x790
[ 78.610003][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.610026][ T6028] RIP: 0033:0x7f53b85ae459
[ 78.610040][ T6028] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 78.610058][ T6028] RSP: 002b:00007f53b55731f8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 78.610078][ T6028] RAX: ffffffffffffffda RBX: 00007f53b861b028 RCX: 00007f53b85ae459
[ 78.610089][ T6028] RDX: 00007f53b861b028 RSI: 00000000ffffff9c RDI: 00007f53b861b060
[ 78.610100][ T6028] RBP: 00007f53b861b060 R08: 00007f53b55736c0 R09: 00007f53b55736c0
[ 78.610112][ T6028] R10: 00007f53b55736c0 R11: 0000000000000246 R12: ffffffffffffffd0
[ 78.610125][ T6028] R13: 0000000000000010 R14: 00007ffff5cb1e50 R15: 00007ffff5cb1f38
[ 78.610141][ T6028]
[ 78.610149][ T6028]
[ 78.614068][ T6022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.615283][ T6028] Allocated by task 6023:
[ 78.619539][ T6022] RIP: 0010:nvmet_port_subsys_allow_link+0x108/0x390
[ 78.623558][ T6028] kasan_save_stack+0x30/0x50
[ 78.625013][ T6022] Code: 00 00 4d 89 66 10 48 c7 c7 e0 d9 f3 8f 4d 8d af 10 01 00 00 e8 29 aa 1f 05 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 f0 01 00 00 49 8b 9f 10 01 00 00 4c 39 eb 0f 84
[ 78.626234][ T6028] kasan_save_track+0x14/0x30
[ 78.628298][ T6022] RSP: 0018:ffffc9000283fc88 EFLAGS: 00010206
[ 78.630484][ T6028] __kasan_kmalloc+0xaa/0xb0
[ 78.633114][ T6022]
[ 78.633123][ T6022] RAX: dffffc0000000000 RBX: ffff8880271f8498 RCX: 0000000000000000
[ 78.635868][ T6028] __kmalloc_cache_noprof+0x2e7/0x6b0
[ 78.637785][ T6022] RDX: 0000000000000022 RSI: 0000000000000008 RDI: 0000000000000001
[ 78.640227][ T6028] nvmet_ports_make+0x107/0xb90
[ 78.642877][ T6022] RBP: ffffffff8ff44260 R08: 0000000000000001 R09: fffffbfff1fe7b3d
[ 78.642893][ T6022] R10: ffffffff8ff3d9ef R11: 0000000000000000 R12: ffff88802c543000
[ 78.642903][ T6022] R13: 0000000000000110 R14: ffff88803dc39b80 R15: 0000000000000000
[ 78.642912][ T6022] FS: 00007f53b85796c0(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000
[ 78.642940][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.642951][ T6022] CR2: 00007f53b5572ff8 CR3: 0000000055990000 CR4: 0000000000352ef0
[ 78.642960][ T6022] Call Trace:
[ 78.642965][ T6022]
[ 78.642971][ T6022] ? mntput_no_expire+0xe7/0x220
[ 78.642996][ T6022] configfs_symlink+0x540/0x11f0
[ 78.645260][ T6028] configfs_mkdir+0x51e/0xb70
[ 78.647437][ T6022] ? __pfx_configfs_symlink+0x10/0x10
[ 78.650028][ T6028] vfs_mkdir+0x364/0x850
[ 78.651899][ T6022] vfs_symlink+0x178/0x4d0
[ 78.653959][ T6028] filename_mkdirat+0x48b/0x5e0
[ 78.656269][ T6022] filename_symlinkat+0x2a6/0x560
[ 78.658478][ T6028] __x64_sys_mkdir+0x6b/0x90
[ 78.660453][ T6022] ? __pfx_filename_symlinkat+0x10/0x10
[ 78.662471][ T6028] do_syscall_64+0x123/0x790
[ 78.664398][ T6022] ? strncpy_from_user+0x19d/0x2d0
[ 78.667069][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.669353][ T6022] ? do_getname+0x191/0x390
[ 78.677714][ T6028]
[ 78.677724][ T6028] Freed by task 6023:
[ 78.680520][ T6022] __x64_sys_symlinkat+0x9c/0xe0
[ 78.683884][ T6028] kasan_save_stack+0x30/0x50
[ 78.686579][ T6022] do_syscall_64+0x123/0x790
[ 78.691157][ T6028] kasan_save_track+0x14/0x30
[ 78.693802][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.697046][ T6028] kasan_save_free_info+0x3b/0x70
[ 78.698104][ T6022] RIP: 0033:0x7f53b85ae459
[ 78.699105][ T6028] __kasan_slab_free+0x5f/0x80
[ 78.702461][ T6022] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 78.704223][ T6028] kfree+0x22b/0x6c0
[ 78.706297][ T6022] RSP: 002b:00007f53b85791f8 EFLAGS: 00000246
[ 78.708255][ T6028] config_item_cleanup+0x146/0x240
[ 78.714633][ T6022] ORIG_RAX: 000000000000010a
[ 78.714642][ T6022] RAX: ffffffffffffffda RBX: 00007f53b861b028 RCX: 00007f53b85ae459
[ 78.716706][ T6028] config_item_put+0x93/0xb0
[ 78.718776][ T6022] RDX: 00007f53b861b028 RSI: 00000000ffffff9c RDI: 00007f53b861b060
[ 78.720633][ T6028] configfs_rmdir+0x5e3/0x950
[ 78.721594][ T6022] RBP: 00007f53b861b060 R08: 00007f53b85796c0 R09: 00007f53b85796c0
[ 78.724749][ T6028] vfs_rmdir+0x328/0x8a0
[ 78.726491][ T6022] R10: 00007f53b85796c0 R11: 0000000000000246 R12: ffffffffffffffd0
[ 78.726502][ T6022] R13: 0000000000000010 R14: 00007ffff5cb1e50 R15: 00007ffff5cb1f38
[ 78.730099][ T6028] filename_rmdir+0x31a/0x5c0
[ 78.731877][ T6022]
[ 78.735401][ T6028] __x64_sys_rmdir+0x46/0x70
[ 78.738014][ T6022] Modules linked in:
[ 78.741139][ T6028] do_syscall_64+0x123/0x790
[ 78.744145][ T6022] ---[ end trace 0000000000000000 ]---
[ 78.746937][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.746963][ T6028]
[ 78.746968][ T6028] The buggy address belongs to the object at ffff88802e094000
[ 78.746968][ T6028] which belongs to the cache kmalloc-4k of size 4096
[ 78.746984][ T6028] The buggy address is located 1224 bytes inside of
[ 78.746984][ T6028] freed 4096-byte region [ffff88802e094000, ffff88802e095000)
[ 78.746999][ T6028]
[ 78.747003][ T6028] The buggy address belongs to the physical page:
[ 78.747010][ T6028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e090
[ 78.747024][ T6028] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 78.747037][ T6028] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.747053][ T6028] page_type: f5(slab)
[ 78.747068][ T6028] raw: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[ 78.747083][ T6028] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 78.747098][ T6028] head: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[ 78.747112][ T6028] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 78.756718][ T6022] RIP: 0010:nvmet_port_subsys_allow_link+0x108/0x390
[ 78.757464][ T6028] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 78.757482][ T6028] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 78.759130][ T6022] Code: 00 00 4d 89 66 10 48 c7 c7 e0 d9 f3 8f 4d 8d af 10 01 00 00 e8 29 aa 1f 05 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 f0 01 00 00 49 8b 9f 10 01 00 00 4c 39 eb 0f 84
[ 78.761378][ T6028] page dumped because: kasan: bad access detected
[ 78.762878][ T6022] RSP: 0018:ffffc9000283fc88 EFLAGS: 00010206
[ 78.764821][ T6028] page_owner tracks the page as allocated
[ 78.764832][ T6028] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5143, tgid 5143 (udevd), ts 27063146514
[ 78.764865][ T6028] post_alloc_hook+0xfd/0x120
[ 78.766795][ T6022]
[ 78.769176][ T6028] get_page_from_freelist+0x110d/0x35b0
[ 78.770971][ T6022] RAX: dffffc0000000000 RBX: ffff8880271f8498 RCX: 0000000000000000
[ 78.773141][ T6028] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 78.773172][ T6028] new_slab+0xa5/0x640
[ 78.774970][ T6022] RDX: 0000000000000022 RSI: 0000000000000008 RDI: 0000000000000001
[ 78.776804][ T6028] refill_objects+0xe3/0x410
[ 78.776826][ T6028] __pcs_replace_empty_main+0x372/0x680
[ 78.779075][ T6022] RBP: ffffffff8ff44260 R08: 0000000000000001 R09: fffffbfff1fe7b3d
[ 78.780958][ T6028] __kmalloc_cache_noprof+0x47b/0x6b0
[ 78.781830][ T6022] R10: ffffffff8ff3d9ef R11: 0000000000000000 R12: ffff88802c543000
[ 78.784100][ T6028] uevent_show+0x166/0x3a0
[ 78.784136][ T6028] dev_attr_show+0x52/0xa0
[ 78.784161][ T6028] sysfs_kf_seq_show+0x217/0x3f0
[ 78.784194][ T6028] seq_read_iter+0x32f/0x1270
[ 78.784223][ T6028] kernfs_fop_read_iter+0x46c/0x610
[ 78.786682][ T6022] R13: 0000000000000110 R14: ffff88803dc39b80 R15: 0000000000000000
[ 78.788258][ T6028] vfs_read+0x82e/0xb40
[ 78.789896][ T6022] FS: 00007f53b85796c0(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000
[ 78.791737][ T6028] ksys_read+0x12a/0x250
[ 78.794411][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.795970][ T6028] do_syscall_64+0x123/0x790
[ 78.797915][ T6022] CR2: 00007f53b5572ff8 CR3: 0000000055990000 CR4: 0000000000352ef0
[ 78.799711][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.806228][ T6022] Kernel panic - not syncing: Fatal exception
[ 78.965188][ T6022] Kernel Offset: disabled
[ 78.966873][ T6022] Rebooting in 86400 seconds..