Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts.
modprobe: can't change directory to 'syzkaller': No such file or directory
modprobe: can't change directory to 'syzkaller': No such file or directory
modprobe: can't change directory to 'syzkaller': No such file or directory
modprobe: can't change directory to 'syzkaller': No such file or directory
[+] setup_nullb successful.
[ 92.746988][ T31] audit: type=1400 audit(1790960988.415:190): avc: denied { search } for pid=5924 comm="syz-executor296" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.747089][ T31] audit: type=1400 audit(1790960988.415:191): avc: denied { search } for pid=5924 comm="syz-executor296" name="nullb" dev="configfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[+] setup_nvmet successful.
[ 92.747930][ T31] audit: type=1400 audit(1790960988.415:192): avc: denied { write search } for pid=5924 comm="syz-executor296" name="nullb" dev="configfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.748097][ T31] audit: type=1400 audit(1790960988.415:193): avc: denied { add_name } for pid=5924 comm="syz-executor296" name="nullb_50245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.748340][ T31] audit: type=1400 audit(1790960988.415:194): avc: denied { create } for pid=5924 comm="syz-executor296" name="nullb_50245" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[ 92.751525][ T31] audit: type=1400 audit(1790960988.415:195): avc: denied { search } for pid=5924 comm="syz-executor296" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.751631][ T31] audit: type=1400 audit(1790960988.415:196): avc: denied { search } for pid=5924 comm="syz-executor296" name="nullb" dev="configfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.751729][ T31] audit: type=1400 audit(1790960988.415:197): avc: denied { search } for pid=5924 comm="syz-executor296" name="nullb_50245" dev="configfs" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 92.752051][ T31] audit: type=1400 audit(1790960988.415:198): avc: denied { write } for pid=5924 comm="syz-executor296" name="size" dev="configfs" ino=8235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 92.752338][ T31] audit: type=1400 audit(1790960988.415:199): avc: denied { open } for pid=5924 comm="syz-executor296" path="/sys/kernel/config/nullb/nullb_50245/size" dev="configfs" ino=8235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 92.763972][ T5924] null_blk: nullb_50245: using native zone append
[ 92.786794][ T5924] null_blk: disk nullb_50245 created
[ 92.799725][ T5924] nvmet: adding nsid 1 to subsystem test-subsys-50245
[ 92.858737][ T43] nvmet: Created nvm controller 1 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 92.873306][ T5932] nvme nvme0: creating 2 I/O queues.
[ 92.878528][ T5932] nvme nvme0: new ctrl: "test-subsys-50245"
[ 92.895484][ T5936] nvme nvme0: Removing ctrl: NQN "test-subsys-50245"
[ 93.028195][ T12] nvmet: Created nvm controller 2 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.034223][ T5933] nvme nvme1: creating 2 I/O queues.
[ 93.050939][ T5933] nvme nvme1: new ctrl: "test-subsys-50245"
[ 93.065043][ T5935] nvme nvme1: Removing ctrl: NQN "test-subsys-50245"
[ 93.126497][ T777] nvmet: Created nvm controller 3 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.129073][ T5932] nvme nvme2: creating 2 I/O queues.
[ 93.134910][ T5932] nvme nvme2: new ctrl: "test-subsys-50245"
[ 93.202654][ T132] nvmet: Created nvm controller 4 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.223633][ T5933] nvme nvme3: creating 2 I/O queues.
[ 93.229839][ T5933] nvme nvme3: new ctrl: "test-subsys-50245"
[ 93.300731][ T59] nvmet: Created nvm controller 5 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.302695][ T5932] nvme nvme4: creating 2 I/O queues.
[ 93.322845][ T5932] nvme nvme4: new ctrl: "test-subsys-50245"
[ 93.367899][ T43] nvmet: Created nvm controller 1 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.369991][ T5933] nvme nvme5: creating 2 I/O queues.
[ 93.373142][ T5933] nvme nvme5: new ctrl: "test-subsys-50245"
[ 93.420335][ T50] nvmet: Created nvm controller 2 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.455130][ T5932] nvme nvme6: creating 2 I/O queues.
[ 93.460719][ T5932] nvme nvme6: new ctrl: "test-subsys-50245"
[ 93.509685][ T5957] nvmet: Created nvm controller 6 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.514682][ T5933] nvme nvme7: creating 2 I/O queues.
[ 93.546966][ T5933] nvme nvme7: new ctrl: "test-subsys-50245"
[ 93.584578][ T5936] nvme nvme7: Removing ctrl: NQN "test-subsys-50245"
[ 93.622116][ T5957] nvmet: Created nvm controller 7 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.623354][ T5932] nvme nvme1: creating 2 I/O queues.
[ 93.642475][ T5932] nvme nvme1: new ctrl: "test-subsys-50245"
[ 93.657729][ T5935] nvme nvme5: Removing ctrl: NQN "test-subsys-50245"
[ 93.690420][ T5960] nvmet: Created nvm controller 8 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.695511][ T5933] nvme nvme8: creating 2 I/O queues.
[ 93.713672][ T5933] nvme nvme8: new ctrl: "test-subsys-50245"
[ 93.758135][ T5960] nvmet: Created nvm controller 9 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.760170][ T5932] nvme nvme9: creating 2 I/O queues.
[ 93.765032][ T5932] nvme nvme9: new ctrl: "test-subsys-50245"
[ 93.818085][ T5960] nvmet: Created nvm controller 10 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.819205][ T5933] nvme nvme10: creating 2 I/O queues.
[ 93.821946][ T5933] nvme nvme10: new ctrl: "test-subsys-50245"
[ 93.877144][ T5983] nvmet: Created nvm controller 11 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.878490][ T5932] nvme nvme11: creating 2 I/O queues.
[ 93.881821][ T5932] nvme nvme11: new ctrl: "test-subsys-50245"
[ 93.917447][ T5985] nvmet: Created nvm controller 12 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 93.918566][ T5933] nvme nvme12: creating 2 I/O queues.
[ 93.924337][ T5933] nvme nvme12: new ctrl: "test-subsys-50245"
[ 93.989927][ T132] nvmet: Created nvm controller 13 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.020784][ T5932] nvme nvme13: creating 2 I/O queues.
[ 94.037466][ T5932] nvme nvme13: new ctrl: "test-subsys-50245"
[ 94.123345][ T5979] nvmet: Created nvm controller 14 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.124529][ T5933] nvme nvme14: creating 2 I/O queues.
[ 94.147544][ T5933] nvme nvme14: new ctrl: "test-subsys-50245"
[ 94.218997][ T5998] nvmet: Created nvm controller 1 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.237210][ T5932] nvme nvme15: creating 2 I/O queues.
[ 94.242211][ T5932] nvme nvme15: new ctrl: "test-subsys-50245"
[ 94.329077][ T5935] nvme nvme3: Removing ctrl: NQN "test-subsys-50245"
[ 94.331423][ T5995] nvmet: Created nvm controller 6 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.332595][ T5933] nvme nvme5: creating 2 I/O queues.
[ 94.333636][ T5933] nvme nvme5: new ctrl: "test-subsys-50245"
[ 94.368250][ T5936] nvme nvme5: Removing ctrl: NQN "test-subsys-50245"
[ 94.391248][ T3852] nvmet: Created nvm controller 15 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.395023][ T5932] nvme nvme7: creating 2 I/O queues.
[ 94.416774][ T5932] nvme nvme7: new ctrl: "test-subsys-50245"
[ 94.457061][ T3852] nvmet: Created nvm controller 16 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.458213][ T5933] nvme nvme16: creating 2 I/O queues.
[ 94.460606][ T5933] nvme nvme16: new ctrl: "test-subsys-50245"
[ 94.500729][ T132] nvmet: Created nvm controller 17 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.504279][ T5932] nvme nvme17: creating 2 I/O queues.
[ 94.521975][ T5932] nvme nvme17: new ctrl: "test-subsys-50245"
[ 94.565512][ T6027] nvmet: Created nvm controller 18 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.569550][ T5933] nvme nvme18: creating 2 I/O queues.
[ 94.582088][ T5933] nvme nvme18: new ctrl: "test-subsys-50245"
[ 94.619636][ T6027] nvmet: Created nvm controller 19 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.623693][ T5932] nvme nvme19: creating 2 I/O queues.
[ 94.649422][ T5932] nvme nvme19: new ctrl: "test-subsys-50245"
[ 94.718724][ T6003] nvmet: Created nvm controller 20 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.720594][ T5933] nvme nvme20: creating 2 I/O queues.
[ 94.723764][ T5933] nvme nvme20: new ctrl: "test-subsys-50245"
[ 94.915379][ T5971] nvmet: Created nvm controller 21 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 94.927808][ T5932] nvme nvme21: creating 2 I/O queues.
[ 94.939324][ T5932] nvme nvme21: new ctrl: "test-subsys-50245"
[ 95.011213][ T5963] nvmet: Created nvm controller 22 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 95.029414][ T5933] nvme nvme22: creating 2 I/O queues.
[ 95.037109][ T5933] nvme nvme22: new ctrl: "test-subsys-50245"
[ 95.178009][ T5936] nvme nvme6: Removing ctrl: NQN "test-subsys-50245"
[ 95.327563][ T5935] nvme nvme1: Removing ctrl: NQN "test-subsys-50245"
[ 95.507481][ T5936] nvme nvme4: Removing ctrl: NQN "test-subsys-50245"
[ 95.636913][ T5935] nvme nvme2: Removing ctrl: NQN "test-subsys-50245"
[ 95.974211][ T5924] nvme nvme7: Removing ctrl: NQN "test-subsys-50245"
[ 96.267788][ T5924] nvme nvme13: Removing ctrl: NQN "test-subsys-50245"
[ 96.516859][ T5924] nvme nvme21: Removing ctrl: NQN "test-subsys-50245"
[ 96.806670][ T5924] nvme nvme11: Removing ctrl: NQN "test-subsys-50245"
[ 97.117036][ T5924] nvme nvme18: Removing ctrl: NQN "test-subsys-50245"
[ 97.448094][ T5924] nvme nvme16: Removing ctrl: NQN "test-subsys-50245"
[ 97.778019][ T5924] nvme nvme8: Removing ctrl: NQN "test-subsys-50245"
[ 98.077799][ T5924] nvme nvme14: Removing ctrl: NQN "test-subsys-50245"
[ 98.377378][ T5924] nvme nvme22: Removing ctrl: NQN "test-subsys-50245"
[ 98.638285][ T5924] nvme nvme12: Removing ctrl: NQN "test-subsys-50245"
[ 98.908991][ T5924] nvme nvme20: Removing ctrl: NQN "test-subsys-50245"
[ 99.217033][ T5924] nvme nvme10: Removing ctrl: NQN "test-subsys-50245"
[ 99.527186][ T5924] nvme nvme19: Removing ctrl: NQN "test-subsys-50245"
[ 99.765726][ T1145] nvme nvme19: long keepalive RTT (4294769496 ms)
[ 99.765782][ T1145] nvme nvme19: failed nvme_keep_alive_end_io error=4
[ 99.877084][ T5924] nvme nvme17: Removing ctrl: NQN "test-subsys-50245"
[ 100.237758][ T5924] nvme nvme9: Removing ctrl: NQN "test-subsys-50245"
[ 100.547264][ T5924] nvme nvme15: Removing ctrl: NQN "test-subsys-50245"
[ 101.057652][ T31] kauditd_printk_skb: 67 callbacks suppressed
[ 101.057674][ T31] audit: type=1400 audit(1790960996.735:267): avc: denied { search } for pid=5924 comm="syz-executor296" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.057720][ T31] audit: type=1400 audit(1790960996.735:268): avc: denied { search } for pid=5924 comm="syz-executor296" name="nvmet" dev="configfs" ino=3545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.057817][ T31] audit: type=1400 audit(1790960996.735:269): avc: denied { search } for pid=5924 comm="syz-executor296" name="ports" dev="configfs" ino=3547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.057914][ T31] audit: type=1400 audit(1790960996.735:270): avc: denied { search } for pid=5924 comm="syz-executor296" name="50245" dev="configfs" ino=8309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[+] teardown_nvmet successful.
[+] setup_nvmet successful.
[ 101.058014][ T31] audit: type=1400 audit(1790960996.735:271): avc: denied { search } for pid=5924 comm="syz-executor296" name="subsystems" dev="configfs" ino=8310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.058242][ T31] audit: type=1400 audit(1790960996.735:272): avc: denied { write search } for pid=5924 comm="syz-executor296" name="subsystems" dev="configfs" ino=8310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.058758][ T31] audit: type=1400 audit(1790960996.735:273): avc: denied { remove_name } for pid=5924 comm="syz-executor296" name="test-subsys-50245" dev="configfs" ino=8315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.058920][ T31] audit: type=1400 audit(1790960996.735:274): avc: denied { unlink } for pid=5924 comm="syz-executor296" name="test-subsys-50245" dev="configfs" ino=8315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1
[ 101.059590][ T31] audit: type=1400 audit(1790960996.735:275): avc: denied { search } for pid=5924 comm="syz-executor296" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.059675][ T31] audit: type=1400 audit(1790960996.735:276): avc: denied { search } for pid=5924 comm="syz-executor296" name="nvmet" dev="configfs" ino=3545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 101.172360][ T5924] nvmet: adding nsid 1 to subsystem test-subsys-50245
[ 101.220998][ T50] nvmet: Created nvm controller 1 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.224512][ T6111] nvme nvme0: creating 2 I/O queues.
[ 101.236278][ T6111] nvme nvme0: new ctrl: "test-subsys-50245"
[ 101.248999][ T6114] nvme nvme0: Removing ctrl: NQN "test-subsys-50245"
[ 101.303075][ T1145] nvmet: Created nvm controller 2 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.306835][ T6112] nvme nvme1: creating 2 I/O queues.
[ 101.314109][ T6112] nvme nvme1: new ctrl: "test-subsys-50245"
[ 101.323933][ T6115] nvme nvme1: Removing ctrl: NQN "test-subsys-50245"
[ 101.384725][ T6032] nvmet: Created nvm controller 3 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.401705][ T6111] nvme nvme2: creating 2 I/O queues.
[ 101.413707][ T6111] nvme nvme2: new ctrl: "test-subsys-50245"
[ 101.469420][ T1145] nvmet: Created nvm controller 4 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.473519][ T6112] nvme nvme3: creating 2 I/O queues.
[ 101.491004][ T6112] nvme nvme3: new ctrl: "test-subsys-50245"
[ 101.545426][ T5958] nvmet: Created nvm controller 5 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.550094][ T6111] nvme nvme4: creating 2 I/O queues.
[ 101.562805][ T6111] nvme nvme4: new ctrl: "test-subsys-50245"
[ 101.603478][ T132] nvmet: Created nvm controller 1 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.606408][ T6112] nvme nvme5: creating 2 I/O queues.
[ 101.625085][ T6112] nvme nvme5: new ctrl: "test-subsys-50245"
[ 101.688819][ T12] nvmet: Created nvm controller 2 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.689993][ T6111] nvme nvme6: creating 2 I/O queues.
[ 101.692585][ T6111] nvme nvme6: new ctrl: "test-subsys-50245"
[ 101.695921][ T6006] ==================================================================
[ 101.695938][ T6006] BUG: KASAN: slab-use-after-free in nvme_query_zone_info+0x4fd/0x6f0
[ 101.695966][ T6006] Read of size 4 at addr ffff88802ab545f4 by task kworker/u8:33/6006
[ 101.695979][ T6006]
[ 101.696010][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full)
[ 101.696029][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 101.696044][ T6006] Workqueue: async async_run_entry_fn
[ 101.696079][ T6006] Call Trace:
[ 101.696098][ T6006]
[ 101.696105][ T6006] dump_stack_lvl+0x100/0x190
[ 101.696131][ T6006] print_report+0x13d/0x4b0
[ 101.696155][ T6006] ? __virt_addr_valid+0x239/0x430
[ 101.696173][ T6006] ? nvme_query_zone_info+0x4fd/0x6f0
[ 101.696186][ T6006] kasan_report+0xdf/0x1c0
[ 101.696210][ T6006] ? nvme_query_zone_info+0x4fd/0x6f0
[ 101.696226][ T6006] nvme_que
** replaying previous printk message **
[ 101.696226][ T6006] nvme_query_zone_info+0x4fd/0x6f0
[ 101.696242][ T6006] ? __pfx_nvme_query_zone_info+0x10/0x10
[ 101.696257][ T6006] ? blk_mq_free_request+0x1df/0x250
[ 101.696277][ T6006] ? __nvme_submit_sync_cmd+0x288/0x410
[ 101.696299][ T6006] nvme_update_ns_info_block+0x1b2e/0x2af0
[ 101.696322][ T6006] ? unwind_next_frame+0x3be/0x2090
[ 101.696345][ T6006] ? unwind_next_frame+0x3be/0x2090
[ 101.696368][ T6006] ? unwind_next_frame+0x3c8/0x2090
[ 101.696393][ T6006] ? ret_from_fork_asm+0x1a/0x30
[ 101.696412][ T6006] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 101.696431][ T6006] ? arch_stack_walk+0x94/0xf0
[ 101.696452][ T6006] ? __pfx_nvme_update_ns_info_block+0x10/0x10
[ 101.696475][ T6006] ? ret_from_fork_asm+0x1a/0x30
[ 101.696497][ T6006] ? do_raw_spin_lock+0x128/0x260
[ 101.696522][ T6006] ? do_raw_spin_unlock+0x145/0x1e0
[ 101.696544][ T6006] nvme_update_ns_info+0xc6/0xd90
[ 101.696565][ T6006] ? __pfx_debug_object_assert_init+0x10/0x10
[ 101.696593][ T6006] ? vsnprintf+0x4c5/0x1300
[ 101.696619][ T6006] ? __pfx_nvme_update_ns_info+0x10/0x10
[ 101.696639][ T6006] ? __pfx_vsnprintf+0x10/0x10
[ 101.696653][ T6006] ? try_to_grab_pending+0x45f/0x840
[ 101.696673][ T6006] ? sprintf+0xcc/0x100
[ 101.696687][ T6006] ? __pfx_sprintf+0x10/0x10
[ 101.696702][ T6006] ? __pfx___cancel_work+0x10/0x10
[ 101.696716][ T6006] ? __alloc_disk_node+0x4d8/0x6b0
[ 101.696743][ T6006] nvme_alloc_ns+0x1a9f/0x3e50
[ 101.696768][ T6006] ? __pfx_nvme_alloc_ns+0x10/0x10
[ 101.696797][ T6006] ? lock_acquire+0x1d1/0x380
[ 101.696814][ T6006] ? nvme_find_get_ns+0xca/0x3f0
[ 101.696833][ T6006] ? find_held_lock+0x2b/0x80
[ 101.696855][ T6006] ? nvme_find_get_ns+0x2e3/0x3f0
[ 101.696874][ T6006] ? nvme_find_get_ns+0x2e3/0x3f0
[ 101.696893][ T6006] ? nvme_find_get_ns+0x2f3/0x3f0
[ 101.696913][ T6006] ? __pfx_nvme_find_get_ns+0x10/0x10
[ 101.696931][ T6006] ? __lock_acquire+0x5c0/0x1f40
[ 101.696950][ T6006] nvme_scan_ns+0x79d/0x910
[ 101.696970][ T6006] ? __pfx_nvme_scan_ns+0x10/0x10
[ 101.696997][ T6006] ? lock_acquire+0x1d1/0x380
[ 101.697015][ T6006] ? async_run_entry_fn+0x35/0x580
[ 101.697036][ T6006] ? ktime_get+0x22c/0x320
[ 101.697054][ T6006] ? lockdep_hardirqs_on+0x7d/0x110
[ 101.697082][ T6006] ? ktime_get+0x23e/0x320
[ 101.697100][ T6006] ? __pfx_nvme_scan_ns_async+0x10/0x10
[ 101.697121][ T6006] async_run_entry_fn+0x9f/0x580
[ 101.697142][ T6006] process_one_work+0xac7/0x1b10
[ 101.697170][ T6006] ? __pfx_process_one_work+0x10/0x10
[ 101.697193][ T6006] ? lock_acquire+0x1d1/0x380
[ 101.697213][ T6006] ? __pfx_async_run_entry_fn+0x10/0x10
[ 101.697234][ T6006] worker_thread+0x5ef/0xe50
[ 101.697250][ T6006] ? __pfx_worker_thread+0x10/0x10
[ 101.697274][ T6006] ? kthread+0x13a/0x450
[ 101.697295][ T6006] ? __pfx_worker_thread+0x10/0x10
[ 101.697326][ T6006] kthread+0x373/0x450
[ 101.697346][ T6006] ? __pfx_kthread+0x10/0x10
[ 101.697368][ T6006] ret_from_fork+0x730/0xd60
[ 101.697387][ T6006] ? __pfx_ret_from_fork+0x10/0x10
[ 101.697405][ T6006] ? __switch_to+0x800/0x10f0
[ 101.697427][ T6006] ? __pfx_kthread+0x10/0x10
[ 101.697449][ T6006] ret_from_fork_asm+0x1a/0x30
[ 101.697470][ T6006]
[ 101.697476][ T6006]
[ 101.697480][ T6006] Allocated by task 5960:
[ 101.697492][ T6006] kasan_save_stack+0x30/0x50
[ 101.697512][ T6006] kasan_save_track+0x14/0x30
[ 101.697529][ T6006] __kasan_kmalloc+0xaa/0xb0
[ 101.697549][ T6006] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 101.697564][ T6006] nvme_get_effects_log+0x13a/0x280
[ 101.697581][ T6006] nvme_alloc_ns+0x25f0/0x3e50
[ 101.697600][ T6006] nvme_scan_ns+0x79d/0x910
[ 101.697619][ T6006] async_run_entry_fn+0x9f/0x580
[ 101.697637][ T6006] process_one_work+0xac7/0x1b10
[ 101.697658][ T6006] worker_thread+0x5ef/0xe50
[ 101.697670][ T6006] kthread+0x373/0x450
[ 101.697689][ T6006] ret_from_fork+0x730/0xd60
[ 101.697704][ T6006] ret_from_fork_asm+0x1a/0x30
[ 101.697719][ T6006]
[ 101.697723][ T6006] Freed by task 6114:
[ 101.697730][ T6006] kasan_save_stack+0x30/0x50
[ 101.697747][ T6006] kasan_save_track+0x14/0x30
[ 101.697764][ T6006] kasan_save_free_info+0x3b/0x70
[ 101.697778][ T6006] __kasan_slab_free+0x5f/0x80
[ 101.697796][ T6006] kfree+0x22b/0x6d0
[ 101.697808][ T6006] nvme_free_ctrl+0x1e4/0x6b0
[ 101.697825][ T6006] device_release+0xd2/0x270
[ 101.697842][ T6006] kobject_put+0x1f7/0x640
[ 101.697860][ T6006] put_device+0x1f/0x30
[ 101.697873][ T6006] nvme_sysfs_delete+0xc9/0xf0
[ 101.697888][ T6006] dev_attr_store+0x58/0x80
[ 101.697908][ T6006] sysfs_kf_write+0xf2/0x150
[ 101.697929][ T6006] kernfs_fop_write_iter+0x3e0/0x5f0
[ 101.697946][ T6006] vfs_write+0x6af/0x1050
[ 101.697962][ T6006] ksys_write+0x12a/0x250
[ 101.697978][ T6006] do_syscall_64+0x123/0x790
[ 101.698000][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.698016][ T6006]
[ 101.698020][ T6006] The buggy address belongs to the object at ffff88802ab54000
[ 101.698020][ T6006] which belongs to the cache kmalloc-4k of size 4096
[ 101.698032][ T6006] The buggy address is located 1524 bytes inside of
[ 101.698032][ T6006] freed 4096-byte region [ffff88802ab54000, ffff88802ab55000)
[ 101.698048][ T6006]
[ 101.698057][ T6006] The buggy address belongs to the physical page:
[ 101.698069][ T6006] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab50
[ 101.698092][ T6006] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.698105][ T6006] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 101.698132][ T6006] page_type: f5(slab)
[ 101.698147][ T6006] raw: 00fff00000000040 ffff88801c032140 dead000000000122 0000000000000000
[ 101.698164][ T6006] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 101.698179][ T6006] head: 00fff00000000040 ffff88801c032140 dead000000000122 0000000000000000
[ 101.698192][ T6006] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 101.698206][ T6006] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 101.698219][ T6006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 101.698228][ T6006] page dumped because: kasan: bad access detected
[ 101.698240][ T6006] page_owner tracks the page as allocated
[ 101.698251][ T6006] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5960, tgid 5960 (kworker/u8:13), ts 101247514992
[ 101.698282][ T6006] post_alloc_hook+0xfd/0x120
[ 101.698297][ T6006] get_page_from_freelist+0x110d/0x35d0
[ 101.698313][ T6006] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 101.698329][ T6006] new_slab+0xa9/0x6e0
[ 101.698342][ T6006] refill_objects+0xe3/0x410
[ 101.698356][ T6006] __pcs_replace_empty_main+0x35e/0x650
[ 101.698371][ T6006] __kmalloc_noprof+0x67c/0x840
[ 101.698387][ T6006] nvme_alloc_ns+0xa55/0x3e50
[ 101.698407][ T6006] nvme_scan_ns+0x79d/0x910
[ 101.698426][ T6006] async_run_entry_fn+0x9f/0x580
[ 101.698445][ T6006] process_one_work+0xac7/0x1b10
[ 101.698472][ T6006] worker_thread+0x5ef/0xe50
[ 101.698484][ T6006] kthread+0x373/0x450
[ 101.698503][ T6006] ret_from_fork+0x730/0xd60
[ 101.698520][ T6006] ret_from_fork_asm+0x1a/0x30
[ 101.698535][ T6006] page last free pid 6081 tgid 6081 ts 95954222108 stack trace:
[ 101.698547][ T6006] __free_frozen_pages+0x79f/0x10f0
[ 101.698569][ T6006] qlist_free_all+0x47/0xf0
[ 101.698585][ T6006] kasan_quarantine_reduce+0x1a0/0x1f0
[ 101.698602][ T6006] __kasan_slab_alloc+0x69/0x90
[ 101.698621][ T6006] __kmalloc_noprof+0x2cc/0x840
[ 101.698637][ T6006] tomoyo_realpath_from_path+0xb6/0x690
[ 101.698659][ T6006] tomoyo_path_perm+0x276/0x460
[ 101.698675][ T6006] security_inode_getattr+0x116/0x280
[ 101.698694][ T6006] vfs_fstat+0x4b/0xe0
[ 101.698715][ T6006] __do_sys_newfstat+0x8b/0x110
[ 101.698736][ T6006] do_syscall_64+0x123/0x790
[ 101.698750][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.698767][ T6006]
[ 101.698771][ T6006] Memory state around the buggy address:
[ 101.698779][ T6006] ffff88802ab54480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.698790][ T6006] ffff88802ab54500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.698801][ T6006] >ffff88802ab54580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.698809][ T6006] ^
[ 101.698818][ T6006] ffff88802ab54600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.698829][ T6006] ffff88802ab54680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.698837][ T6006] ==================================================================
[ 101.795939][ T6015] nvmet: Created nvm controller 6 for subsystem test-subsys-50245 for NQN nqn.2014-08.org.nvmexpress:uuid:40894c34-103c-4044-804f-3003bf6df2e8.
[ 101.797056][ T6112] nvme nvme7: creating 2 I/O queues.
[ 101.809168][ T6112] nvme nvme7: new ctrl: "test-subsys-50245"
[ 101.821805][ T6006] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.661840][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full)
[ 102.671374][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 102.681431][ T6006] Workqueue: async async_run_entry_fn
[ 102.686819][ T6006] Call Trace:
[ 102.690092][ T6006]
[ 102.693021][ T6006] dump_stack_lvl+0x100/0x190
[ 102.697694][ T6006] vpanic+0x553/0x970
[ 102.701660][ T6006] ? __pfx_vpanic+0x10/0x10
[ 102.706147][ T6006] ? mark_held_locks+0x40/0x70
[ 102.710927][ T6006] ? nvme_query_zone_info+0x4fd/0x6f0
[ 102.716284][ T6006] panic+0xd1/0xe0
[ 102.719992][ T6006] ? __pfx_panic+0x10/0x10
[ 102.724400][ T6006] ? nvme_query_zone_info+0x4fd/0x6f0
[ 102.729756][ T6006] ? preempt_schedule_common+0x3c/0xb0
[ 102.735229][ T6006] check_panic_on_warn.cold+0x19/0x34
[ 102.740587][ T6006] end_report.part.0+0x3a/0x90
[ 102.745342][ T6006] kasan_report.cold+0xe/0x18
[ 102.750021][ T6006] ? nvme_query_zone_info+0x4fd/0x6f0
[ 102.755387][ T6006] nvme_query_zone_info+0x4fd/0x6f0
[ 102.760573][ T6006] ? __pfx_nvme_query_zone_info+0x10/0x10
[ 102.766284][ T6006] ? blk_mq_free_request+0x1df/0x250
[ 102.771557][ T6006] ? __nvme_submit_sync_cmd+0x288/0x410
[ 102.777103][ T6006] nvme_update_ns_info_block+0x1b2e/0x2af0
[ 102.782902][ T6006] ? unwind_next_frame+0x3be/0x2090
[ 102.788098][ T6006] ? unwind_next_frame+0x3be/0x2090
[ 102.793299][ T6006] ? unwind_next_frame+0x3c8/0x2090
[ 102.798487][ T6006] ? ret_from_fork_asm+0x1a/0x30
[ 102.803415][ T6006] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 102.809570][ T6006] ? arch_stack_walk+0x94/0xf0
[ 102.814328][ T6006] ? __pfx_nvme_update_ns_info_block+0x10/0x10
[ 102.820470][ T6006] ? ret_from_fork_asm+0x1a/0x30
[ 102.825400][ T6006] ? do_raw_spin_lock+0x128/0x260
[ 102.830417][ T6006] ? do_raw_spin_unlock+0x145/0x1e0
[ 102.835615][ T6006] nvme_update_ns_info+0xc6/0xd90
[ 102.840629][ T6006] ? __pfx_debug_object_assert_init+0x10/0x10
[ 102.846684][ T6006] ? vsnprintf+0x4c5/0x1300
[ 102.851171][ T6006] ? __pfx_nvme_update_ns_info+0x10/0x10
[ 102.856798][ T6006] ? __pfx_vsnprintf+0x10/0x10
[ 102.861553][ T6006] ? try_to_grab_pending+0x45f/0x840
[ 102.866823][ T6006] ? sprintf+0xcc/0x100
[ 102.870959][ T6006] ? __pfx_sprintf+0x10/0x10
[ 102.875530][ T6006] ? __pfx___cancel_work+0x10/0x10
[ 102.880626][ T6006] ? __alloc_disk_node+0x4d8/0x6b0
[ 102.885732][ T6006] nvme_alloc_ns+0x1a9f/0x3e50
[ 102.890493][ T6006] ? __pfx_nvme_alloc_ns+0x10/0x10
[ 102.895614][ T6006] ? lock_acquire+0x1d1/0x380
[ 102.900288][ T6006] ? nvme_find_get_ns+0xca/0x3f0
[ 102.905267][ T6006] ? find_held_lock+0x2b/0x80
[ 102.909948][ T6006] ? nvme_find_get_ns+0x2e3/0x3f0
[ 102.914973][ T6006] ? nvme_find_get_ns+0x2e3/0x3f0
[ 102.919984][ T6006] ? nvme_find_get_ns+0x2f3/0x3f0
[ 102.925014][ T6006] ? __pfx_nvme_find_get_ns+0x10/0x10
[ 102.930373][ T6006] ? __lock_acquire+0x5c0/0x1f40
[ 102.935303][ T6006] nvme_scan_ns+0x79d/0x910
[ 102.939808][ T6006] ? __pfx_nvme_scan_ns+0x10/0x10
[ 102.944823][ T6006] ? lock_acquire+0x1d1/0x380
[ 102.949485][ T6006] ? async_run_entry_fn+0x35/0x580
[ 102.954616][ T6006] ? ktime_get+0x22c/0x320
[ 102.959035][ T6006] ? lockdep_hardirqs_on+0x7d/0x110
[ 102.964232][ T6006] ? ktime_get+0x23e/0x320
[ 102.968635][ T6006] ? __pfx_nvme_scan_ns_async+0x10/0x10
[ 102.974172][ T6006] async_run_entry_fn+0x9f/0x580
[ 102.979109][ T6006] process_one_work+0xac7/0x1b10
[ 102.984056][ T6006] ? __pfx_process_one_work+0x10/0x10
[ 102.989427][ T6006] ? lock_acquire+0x1d1/0x380
[ 102.994102][ T6006] ? __pfx_async_run_entry_fn+0x10/0x10
[ 102.999636][ T6006] worker_thread+0x5ef/0xe50
[ 103.004211][ T6006] ? __pfx_worker_thread+0x10/0x10
[ 103.009318][ T6006] ? kthread+0x13a/0x450
[ 103.013563][ T6006] ? __pfx_worker_thread+0x10/0x10
[ 103.018676][ T6006] kthread+0x373/0x450
[ 103.022736][ T6006] ? __pfx_kthread+0x10/0x10
[ 103.027325][ T6006] ret_from_fork+0x730/0xd60
[ 103.031908][ T6006] ? __pfx_ret_from_fork+0x10/0x10
[ 103.037009][ T6006] ? __switch_to+0x800/0x10f0
[ 103.041675][ T6006] ? __pfx_kthread+0x10/0x10
[ 103.046256][ T6006] ret_from_fork_asm+0x1a/0x30
[ 103.051022][ T6006]
[ 103.054261][ T6006] Kernel Offset: disabled
[ 103.058566][ T6006] Rebooting in 86400 seconds..