[ 71.458570][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 71.458585][ T42] audit: type=1400 audit(1786698264.700:209): avc: denied { transition } for pid=5970 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.469289][ T42] audit: type=1400 audit(1786698264.700:210): avc: denied { noatsecure } for pid=5970 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.475524][ T42] audit: type=1400 audit(1786698264.700:211): avc: denied { rlimitinh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.481808][ T42] audit: type=1400 audit(1786698264.700:212): avc: denied { siginh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.662622][ T1435] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.665638][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[ 74.829227][ T42] audit: type=1400 audit(1786698268.070:213): avc: denied { write } for pid=5976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.886360][ T42] audit: type=1400 audit(1786698268.130:214): avc: denied { write } for pid=5979 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.229122][ T42] audit: type=1400 audit(1786698268.470:215): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.276193][ T42] audit: type=1400 audit(1786698268.520:216): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.442372][ T42] audit: type=1400 audit(1786698268.690:217): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.497965][ T42] audit: type=1400 audit(1786698268.740:218): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:53205' (ED25519) to the list of known hosts.
[ 77.151792][ T42] kauditd_printk_skb: 8 callbacks suppressed
[ 77.151806][ T42] audit: type=1400 audit(1786698270.400:227): avc: denied { unlink } for pid=6025 comm="syz-executor111" name="#1" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 77.161692][ T6025] netfs: Cache "testcache" added (type cachefiles)
[ 77.162506][ T42] audit: type=1400 audit(1786698270.400:228): avc: denied { mount } for pid=6025 comm="syz-executor111" name="/" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 77.162531][ T42] audit: type=1400 audit(1786698270.400:229): avc: denied { read write } for pid=6025 comm="syz-executor111" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 77.162553][ T42] audit: type=1400 audit(1786698270.400:230): avc: denied { open } for pid=6025 comm="syz-executor111" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 77.162575][ T42] audit: type=1400 audit(1786698270.400:231): avc: denied { create_files_as } for pid=6025 comm="syz-executor111" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1
[ 77.205242][ T6025] CacheFiles: File cache on testcache registered
[ 77.245663][ T42] audit: type=1400 audit(1786698270.490:232): avc: denied { write } for pid=6025 comm="syz-executor111" name="/" dev="9p" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 77.254616][ T42] audit: type=1400 audit(1786698270.490:233): avc: denied { add_name } for pid=6025 comm="syz-executor111" name="test.txt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 77.263556][ T42] audit: type=1400 audit(1786698270.490:234): avc: denied { create } for pid=6025 comm="syz-executor111" name="test.txt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 77.272308][ T42] audit: type=1400 audit(1786698270.490:235): avc: denied { associate } for pid=6025 comm="syz-executor111" name="test.txt" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 77.282088][ T42] audit: type=1400 audit(1786698270.490:236): avc: denied { read write } for pid=6025 comm="syz-executor111" name="test.txt" dev="9p" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 77.350514][ T163] evm: overlay not supported
[ 77.356242][ T163] ==================================================================
[ 77.359022][ T163] BUG: KASAN: slab-out-of-bounds in cachefiles_set_object_xattr+0x713/0x7a0
[ 77.362304][ T163] Read of size 8 at addr ffff88801c329b52 by task kworker/u33:5/163
[ 77.366990][ T163]
[ 77.367996][ T163] CPU: 3 UID: 0 PID: 163 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full)
[ 77.368019][ T163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.368048][ T163] Workqueue: fscache fscache_cookie_worker
[ 77.368094][ T163] Call Trace:
[ 77.368112][ T163]
[ 77.368120][ T163] dump_stack_lvl+0x100/0x190
[ 77.368146][ T163] print_report+0x13d/0x4b0
[ 77.368173][ T163] ? __virt_addr_valid+0x239/0x430
[ 77.368199][ T163] ? cachefiles_set_object_xattr+0x713/0x7a0
[ 77.368222][ T163] kasan_report+0xdf/0x1c0
[ 77.368247][ T163] ? cachefiles_set_object_xattr+0x713/0x7a0
[ 77.368272][ T163] cachefiles_set_object_xattr+0x713/0x7a0
[ 77.368296][ T163] cachefiles_withdraw_cookie+0x8f4/0xc50
[ 77.368316][ T163] fscache_cookie_worker+0x54f/0x1270
[ 77.368344][ T163] process_one_work+0xa23/0x1940
[ 77.368371][ T163] ? __pfx_process_one_work+0x10/0x10
[ 77.368392][ T163] ? __pfx_fscache_cookie_worker+0x10/0x10
[ 77.368417][ T163] worker_thread+0x5ef/0xe50
[ 77.368438][ T163] ? kthread+0x13a/0x450
[ 77.368453][ T163] ? __pfx_worker_thread+0x10/0x10
[ 77.368470][ T163] kthread+0x370/0x450
[ 77.368485][ T163] ? __pfx_kthread+0x10/0x10
[ 77.368501][ T163] ret_from_fork+0x72b/0xd50
[ 77.368526][ T163] ? __pfx_ret_from_fork+0x10/0x10
[ 77.368548][ T163] ? __switch_to+0x800/0x10f0
[ 77.368565][ T163] ? __pfx_kthread+0x10/0x10
[ 77.368582][ T163] ret_from_fork_asm+0x1a/0x30
[ 77.368608][ T163]
[ 77.368614][ T163]
[ 77.424074][ T163] Allocated by task 163:
[ 77.425475][ T163] kasan_save_stack+0x30/0x50
[ 77.426950][ T163] kasan_save_track+0x14/0x30
[ 77.428425][ T163] __kasan_kmalloc+0xaa/0xb0
[ 77.429897][ T163] __kmalloc_noprof+0x322/0x820
[ 77.431539][ T163] cachefiles_set_object_xattr+0xef/0x7a0
[ 77.433724][ T163] cachefiles_withdraw_cookie+0x8f4/0xc50
[ 77.436115][ T163] fscache_cookie_worker+0x54f/0x1270
[ 77.438339][ T163] process_one_work+0xa23/0x1940
[ 77.440364][ T163] worker_thread+0x5ef/0xe50
[ 77.442257][ T163] kthread+0x370/0x450
[ 77.443933][ T163] ret_from_fork+0x72b/0xd50
[ 77.445907][ T163] ret_from_fork_asm+0x1a/0x30
[ 77.447902][ T163]
[ 77.448940][ T163] The buggy address belongs to the object at ffff88801c329b40
[ 77.448940][ T163] which belongs to the cache kmalloc-32 of size 32
[ 77.454547][ T163] The buggy address is located 18 bytes inside of
[ 77.454547][ T163] allocated 22-byte region [ffff88801c329b40, ffff88801c329b56)
[ 77.460111][ T163]
[ 77.461143][ T163] The buggy address belongs to the physical page:
[ 77.463543][ T163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c329
[ 77.466744][ T163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 77.469080][ T163] page_type: f5(slab)
[ 77.470198][ T163] raw: 00fff00000000000 ffff88801bc42780 dead000000000100 dead000000000122
[ 77.472841][ T163] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[ 77.475909][ T163] page dumped because: kasan: bad access detected
[ 77.478350][ T163] page_owner tracks the page as allocated
[ 77.480674][ T163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5919, tgid 5919 (dhcpcd-run-hook), ts 64295555076, free_ts 64295085659
[ 77.488689][ T163] post_alloc_hook+0xfd/0x120
[ 77.490628][ T163] get_page_from_freelist+0xf48/0x3530
[ 77.492872][ T163] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 77.495326][ T163] new_slab+0xa2/0x640
[ 77.497016][ T163] refill_objects+0xe3/0x410
[ 77.498954][ T163] __pcs_replace_empty_main+0x376/0x680
[ 77.501272][ T163] __kmalloc_cache_noprof+0x479/0x6c0
[ 77.503448][ T163] kmem_cache_free+0x412/0x6b0
[ 77.505250][ T163] tear_down_vmas+0x2a5/0x600
[ 77.506762][ T163] exit_mmap+0x469/0xa00
[ 77.508147][ T163] __mmput+0x12a/0x410
[ 77.509487][ T163] mmput+0x67/0x80
[ 77.510736][ T163] do_exit+0x8b1/0x2ae0
[ 77.512105][ T163] do_group_exit+0xd5/0x2a0
[ 77.513580][ T163] __x64_sys_exit_group+0x3e/0x50
[ 77.515504][ T163] x64_sys_call+0x102c/0x1530
[ 77.517429][ T163] page last free pid 5919 tgid 5919 stack trace:
[ 77.519827][ T163] __free_frozen_pages+0x79f/0x1090
[ 77.521991][ T163] tlb_finish_mmu+0x27d/0x810
[ 77.523876][ T163] exit_mmap+0x454/0xa00
[ 77.525606][ T163] __mmput+0x12a/0x410
[ 77.527058][ T163] mmput+0x67/0x80
[ 77.528315][ T163] do_exit+0x8b1/0x2ae0
[ 77.530013][ T163] do_group_exit+0xd5/0x2a0
[ 77.531875][ T163] __x64_sys_exit_group+0x3e/0x50
[ 77.533609][ T163] x64_sys_call+0x102c/0x1530
[ 77.535524][ T163] do_syscall_64+0x115/0x870
[ 77.537509][ T163] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.539942][ T163]
[ 77.540968][ T163] Memory state around the buggy address:
[ 77.543277][ T163] ffff88801c329a00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 77.546604][ T163] ffff88801c329a80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 77.549932][ T163] >ffff88801c329b00: fa fb fb fb fc fc fc fc 00 00 06 fc fc fc fc fc
[ 77.553239][ T163] ^
[ 77.555852][ T163] ffff88801c329b80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 77.558550][ T163] ffff88801c329c00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 77.561677][ T163] ==================================================================
[ 77.566068][ T163] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.568325][ T163] CPU: 3 UID: 0 PID: 163 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full)
[ 77.571125][ T163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.574585][ T163] Workqueue: fscache fscache_cookie_worker
[ 77.576968][ T163] Call Trace:
[ 77.578349][ T163]
[ 77.579573][ T163] dump_stack_lvl+0x100/0x190
[ 77.581502][ T163] vpanic+0x552/0x970
[ 77.583092][ T163] ? __pfx_vpanic+0x10/0x10
[ 77.584919][ T163] ? mark_held_locks+0x40/0x70
[ 77.586547][ T163] ? cachefiles_set_object_xattr+0x713/0x7a0
[ 77.588742][ T163] panic+0xd1/0xe0
[ 77.590137][ T163] ? __pfx_panic+0x10/0x10
[ 77.591623][ T163] ? cachefiles_set_object_xattr+0x713/0x7a0
[ 77.593355][ T163] ? preempt_schedule_common+0x42/0xc0
[ 77.595351][ T163] ? check_panic_on_warn+0x1f/0x90
[ 77.597220][ T163] check_panic_on_warn.cold+0x19/0x34
[ 77.599176][ T163] end_report.part.0+0x3a/0x90
[ 77.600923][ T163] kasan_report.cold+0xe/0x18
[ 77.602660][ T163] ? cachefiles_set_object_xattr+0x713/0x7a0
[ 77.604809][ T163] cachefiles_set_object_xattr+0x713/0x7a0
[ 77.606521][ T163] cachefiles_withdraw_cookie+0x8f4/0xc50
[ 77.608387][ T163] fscache_cookie_worker+0x54f/0x1270
[ 77.610354][ T163] process_one_work+0xa23/0x1940
[ 77.612136][ T163] ? __pfx_process_one_work+0x10/0x10
[ 77.613694][ T163] ? __pfx_fscache_cookie_worker+0x10/0x10
[ 77.615537][ T163] worker_thread+0x5ef/0xe50
[ 77.617249][ T163] ? kthread+0x13a/0x450
[ 77.618608][ T163] ? __pfx_worker_thread+0x10/0x10
[ 77.620087][ T163] kthread+0x370/0x450
[ 77.621116][ T163] ? __pfx_kthread+0x10/0x10
[ 77.622479][ T163] ret_from_fork+0x72b/0xd50
[ 77.624185][ T163] ? __pfx_ret_from_fork+0x10/0x10
[ 77.626080][ T163] ? __switch_to+0x800/0x10f0
[ 77.627456][ T163] ? __pfx_kthread+0x10/0x10
[ 77.628796][ T163] ret_from_fork_asm+0x1a/0x30
[ 77.630538][ T163]
[ 77.632285][ T163] Kernel Offset: disabled
[ 77.633633][ T163] Rebooting in 86400 seconds..