[ 63.905692][ T42] audit: type=1400 audit(1781909969.498:210): avc: denied { transition } for pid=5975 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 63.913778][ T42] audit: type=1400 audit(1781909969.498:211): avc: denied { noatsecure } for pid=5975 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 63.920210][ T42] audit: type=1400 audit(1781909969.498:212): avc: denied { rlimitinh } for pid=5975 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 63.927503][ T42] audit: type=1400 audit(1781909969.498:213): avc: denied { siginh } for pid=5975 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:16129' (ED25519) to the list of known hosts.
[ 68.184543][ T42] audit: type=1400 audit(1781909973.778:214): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.214684][ T42] audit: type=1400 audit(1781909973.808:215): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/06/19 22:59:33 parsed 1 programs
[ 68.723656][ T42] audit: type=1400 audit(1781909974.318:216): avc: denied { write } for pid=6005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.771196][ T42] audit: type=1400 audit(1781909974.368:217): avc: denied { write } for pid=6008 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.875671][ T42] audit: type=1400 audit(1781909974.468:218): avc: denied { write } for pid=6011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.911935][ T42] audit: type=1400 audit(1781909974.508:219): avc: denied { write } for pid=6014 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.037416][ T42] audit: type=1400 audit(1781909974.628:220): avc: denied { write } for pid=6017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.072287][ T42] audit: type=1400 audit(1781909974.668:221): avc: denied { write } for pid=6020 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.412679][ T42] audit: type=1400 audit(1781909976.008:222): avc: denied { read write } for pid=6004 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 70.423013][ T42] audit: type=1400 audit(1781909976.008:223): avc: denied { open } for pid=6004 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 70.459799][ T42] audit: type=1400 audit(1781909976.058:224): avc: denied { unlink } for pid=6004 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 70.636155][ T42] audit: type=1400 audit(1781909976.228:225): avc: denied { relabelto } for pid=6024 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 71.074845][ T6004] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 73.074612][ T42] audit: type=1400 audit(1781909978.668:226): avc: denied { sys_module } for pid=6049 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 73.278752][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.281693][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.284526][ T6049] bridge_slave_0: entered allmulticast mode
[ 73.287431][ T6049] bridge_slave_0: entered promiscuous mode
[ 73.291249][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.294115][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.296949][ T6049] bridge_slave_1: entered allmulticast mode
[ 73.300317][ T6049] bridge_slave_1: entered promiscuous mode
[ 73.313637][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.318597][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.333982][ T6049] team0: Port device team_slave_0 added
[ 73.336553][ T6049] team0: Port device team_slave_1 added
[ 73.343607][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.345766][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 73.353728][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.357399][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.359719][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 73.367451][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.380250][ T6049] hsr_slave_0: entered promiscuous mode
[ 73.382285][ T6049] hsr_slave_1: entered promiscuous mode
[ 73.439147][ T42] audit: type=1400 audit(1781909979.038:227): avc: denied { write } for pid=6065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.474658][ T42] audit: type=1400 audit(1781909979.068:228): avc: denied { write } for pid=6069 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.835532][ T6049] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.838843][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 73.842357][ T6049] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.846956][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 73.849569][ T6049] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.852725][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 73.855261][ T6049] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.858741][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 73.869284][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.871506][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.873748][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.875898][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.892417][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.897234][ T645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.900095][ T645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.905729][ T6049] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.911650][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.913908][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.917754][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.919997][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.923321][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 73.923329][ T42] audit: type=1400 audit(1781909979.518:239): avc: denied { write } for pid=6103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.958609][ T42] audit: type=1400 audit(1781909979.548:240): avc: denied { write } for pid=6107 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.009605][ T42] audit: type=1400 audit(1781909979.598:241): avc: denied { write } for pid=6112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.042974][ T42] audit: type=1400 audit(1781909979.638:242): avc: denied { write } for pid=6117 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.076805][ T42] audit: type=1400 audit(1781909979.668:243): avc: denied { write } for pid=6121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.091867][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.111605][ T6049] veth0_vlan: entered promiscuous mode
[ 74.114419][ T42] audit: type=1400 audit(1781909979.708:244): avc: denied { write } for pid=6126 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.115716][ T6049] veth1_vlan: entered promiscuous mode
[ 74.131853][ T6049] veth0_macvtap: entered promiscuous mode
[ 74.134811][ T6049] veth1_macvtap: entered promiscuous mode
[ 74.142004][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.147855][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.154186][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.157129][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.162086][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.163563][ T42] audit: type=1400 audit(1781909979.758:245): avc: denied { write } for pid=6128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.164969][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.195591][ T42] audit: type=1400 audit(1781909979.788:246): avc: denied { write } for pid=6131 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.222012][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.225166][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.228293][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.228688][ T5914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.234800][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.237850][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.266414][ T42] audit: type=1400 audit(1781909979.858:247): avc: denied { write } for pid=6138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.294574][ T5914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.298520][ T42] audit: type=1400 audit(1781909979.888:248): avc: denied { write } for pid=6145 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.353900][ T5914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.383452][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.388198][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.397142][ T5914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.402931][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.405942][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/19 22:59:40 executed programs: 0
[ 75.058350][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.061312][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.064360][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.067705][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.071052][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.290315][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.293301][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.296342][ T6198] bridge_slave_0: entered allmulticast mode
[ 75.299658][ T6198] bridge_slave_0: entered promiscuous mode
[ 75.304114][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.307073][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.310322][ T6198] bridge_slave_1: entered allmulticast mode
[ 75.313591][ T6198] bridge_slave_1: entered promiscuous mode
[ 75.329165][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.333886][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.347207][ T6198] team0: Port device team_slave_0 added
[ 75.350685][ T6198] team0: Port device team_slave_1 added
[ 75.358444][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.360810][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 75.368821][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.373107][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.375256][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 75.383346][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.404685][ T6198] hsr_slave_0: entered promiscuous mode
[ 75.407190][ T6198] hsr_slave_1: entered promiscuous mode
[ 75.409432][ T6198] debugfs: 'hsr0' already exists in 'hsr'
[ 75.411242][ T6198] Cannot create hsr debugfs directory
[ 76.739941][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.742733][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.139145][ T5771] Bluetooth: hci0: command tx timeout
[ 77.591490][ T5914] bridge_slave_1: left allmulticast mode
[ 77.593721][ T5914] bridge_slave_1: left promiscuous mode
[ 77.595569][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.598392][ T5914] bridge_slave_0: left allmulticast mode
[ 77.600352][ T5914] bridge_slave_0: left promiscuous mode
[ 77.602129][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.633482][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 77.637241][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 77.640695][ T5914] bond0 (unregistering): Released all slaves
[ 77.743953][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2
[ 77.785605][ T5914] hsr_slave_0: left promiscuous mode
[ 77.787588][ T5914] hsr_slave_1: left promiscuous mode
[ 77.790123][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 77.792465][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 77.794919][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 77.797518][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 77.805549][ T5914] veth1_macvtap: left promiscuous mode
[ 77.807682][ T5914] veth0_macvtap: left promiscuous mode
[ 77.809627][ T5914] veth1_vlan: left promiscuous mode
[ 77.811392][ T5914] veth0_vlan: left promiscuous mode
[ 77.867345][ T5914] team0 (unregistering): Port device team_slave_1 removed
[ 77.880960][ T5914] team0 (unregistering): Port device team_slave_0 removed
[ 77.911159][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3
[ 78.245504][ T6198] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.249073][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 78.252529][ T6198] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.257066][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 78.260558][ T6198] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.264798][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 78.267642][ T6198] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.271960][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 78.295240][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.301150][ T6198] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.304851][ T645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.307099][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.311636][ T645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.313847][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.534236][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.552649][ T6198] veth0_vlan: entered promiscuous mode
[ 78.557450][ T6198] veth1_vlan: entered promiscuous mode
[ 78.577044][ T6198] veth0_macvtap: entered promiscuous mode
[ 78.581349][ T6198] veth1_macvtap: entered promiscuous mode
[ 78.590097][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.595331][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.601710][ T5583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.604662][ T5583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.608003][ T5583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.610852][ T5583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.639668][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.642933][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.663697][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.666892][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.750711][ T6262] ==================================================================
[ 78.753900][ T6262] BUG: KASAN: slab-use-after-free in netfs_unbuffered_write+0x1bde/0x21b0
[ 78.757358][ T6262] Read of size 2 at addr ffff88803d6aabe4 by task syz.0.17/6262
[ 78.761506][ T6262]
[ 78.762482][ T6262] CPU: 3 UID: 0 PID: 6262 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 78.762495][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.762502][ T6262] Call Trace:
[ 78.762507][ T6262]
[ 78.762511][ T6262] dump_stack_lvl+0x100/0x190
[ 78.762525][ T6262] print_report+0x13d/0x4b0
[ 78.762541][ T6262] ? __virt_addr_valid+0x239/0x430
[ 78.762553][ T6262] ? netfs_unbuffered_write+0x1bde/0x21b0
[ 78.762565][ T6262] kasan_report+0xdf/0x1c0
[ 78.762577][ T6262] ? netfs_unbuffered_write+0x1bde/0x21b0
[ 78.762591][ T6262] netfs_unbuffered_write+0x1bde/0x21b0
[ 78.762605][ T6262] ? __pfx_netfs_unbuffered_write+0x10/0x10
[ 78.762618][ T6262] ? rolling_buffer_init+0x8a/0xb0
[ 78.762633][ T6262] ? netfs_create_write_req+0x527/0x860
[ 78.762650][ T6262] netfs_unbuffered_write_iter_locked+0x7cd/0xa80
[ 78.762664][ T6262] netfs_unbuffered_write_iter+0x442/0x720
[ 78.762678][ T6262] v9fs_file_write_iter+0xbf/0x100
[ 78.762692][ T6262] vfs_write+0x6ac/0x1050
[ 78.762706][ T6262] ? __pfx_v9fs_file_write_iter+0x10/0x10
[ 78.762726][ T6262] ? __pfx_vfs_write+0x10/0x10
[ 78.762742][ T6262] ksys_write+0x12a/0x250
[ 78.762754][ T6262] ? __pfx_ksys_write+0x10/0x10
[ 78.762768][ T6262] ? rcu_is_watching+0x12/0xc0
[ 78.762782][ T6262] do_syscall_64+0x115/0x870
[ 78.762793][ T6262] ? clear_bhb_loop+0x40/0x90
[ 78.762805][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.762815][ T6262] RIP: 0033:0x7fe42459ce59
[ 78.762824][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 78.762834][ T6262] RSP: 002b:00007fe4253f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 78.762845][ T6262] RAX: ffffffffffffffda RBX: 00007fe424815fa0 RCX: 00007fe42459ce59
[ 78.762851][ T6262] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003
[ 78.762857][ T6262] RBP: 00007fe424632d6f R08: 0000000000000000 R09: 0000000000000000
[ 78.762863][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.762869][ T6262] R13: 00007fe424816038 R14: 00007fe424815fa0 R15: 00007ffd6db8e298
[ 78.762878][ T6262]
[ 78.762882][ T6262]
[ 78.843777][ T6262] Allocated by task 6262:
[ 78.845516][ T6262] kasan_save_stack+0x30/0x50
[ 78.847486][ T6262] kasan_save_track+0x14/0x30
[ 78.849342][ T6262] __kasan_slab_alloc+0x89/0x90
[ 78.851243][ T6262] kmem_cache_alloc_noprof+0x241/0x6d0
[ 78.853400][ T6262] mempool_alloc_noprof+0x1b7/0x310
[ 78.855441][ T6262] netfs_alloc_subrequest+0xc1/0x3c0
[ 78.857499][ T6262] netfs_prepare_write+0x76/0x780
[ 78.859559][ T6262] netfs_unbuffered_write+0x7ba/0x21b0
[ 78.861825][ T6262] netfs_unbuffered_write_iter_locked+0x7cd/0xa80
[ 78.864469][ T6262] netfs_unbuffered_write_iter+0x442/0x720
[ 78.866858][ T6262] v9fs_file_write_iter+0xbf/0x100
[ 78.868963][ T6262] vfs_write+0x6ac/0x1050
[ 78.870755][ T6262] ksys_write+0x12a/0x250
[ 78.872527][ T6262] do_syscall_64+0x115/0x870
[ 78.874410][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.876800][ T6262]
[ 78.877828][ T6262] Freed by task 6262:
[ 78.879464][ T6262] kasan_save_stack+0x30/0x50
[ 78.881405][ T6262] kasan_save_track+0x14/0x30
[ 78.883351][ T6262] kasan_save_free_info+0x3b/0x70
[ 78.885416][ T6262] __kasan_slab_free+0x5f/0x80
[ 78.887377][ T6262] kmem_cache_free+0x127/0x6b0
[ 78.889362][ T6262] mempool_free+0xde/0x130
[ 78.891197][ T6262] netfs_put_subrequest+0x282/0x4b0
[ 78.893315][ T6262] netfs_unbuffered_write+0x13c0/0x21b0
[ 78.895443][ T6262] netfs_unbuffered_write_iter_locked+0x7cd/0xa80
[ 78.897953][ T6262] netfs_unbuffered_write_iter+0x442/0x720
[ 78.900148][ T6262] v9fs_file_write_iter+0xbf/0x100
[ 78.901740][ T6262] vfs_write+0x6ac/0x1050
[ 78.903218][ T6262] ksys_write+0x12a/0x250
[ 78.904957][ T6262] do_syscall_64+0x115/0x870
[ 78.906825][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.909223][ T6262]
[ 78.910213][ T6262] The buggy address belongs to the object at ffff88803d6aab40
[ 78.910213][ T6262] which belongs to the cache netfs_subrequest of size 200
[ 78.916023][ T6262] The buggy address is located 164 bytes inside of
[ 78.916023][ T6262] freed 200-byte region [ffff88803d6aab40, ffff88803d6aac08)
[ 78.921462][ T6262]
[ 78.922449][ T6262] The buggy address belongs to the physical page:
[ 78.925035][ T6262] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d6aa
[ 78.928463][ T6262] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 78.931832][ T6262] memcg:ffff88803d6aa0d9
[ 78.933542][ T6262] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.936484][ T6262] page_type: f5(slab)
[ 78.938094][ T6262] raw: 00fff00000000040 ffff888100aa4140 dead000000000100 dead000000000122
[ 78.941500][ T6262] raw: 0000000000000000 0000014000190019 00000000f5000000 ffff88803d6aa0d9
[ 78.944850][ T6262] head: 00fff00000000040 ffff888100aa4140 dead000000000100 dead000000000122
[ 78.948265][ T6262] head: 0000000000000000 0000014000190019 00000000f5000000 ffff88803d6aa0d9
[ 78.951660][ T6262] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 78.954711][ T6262] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 78.958214][ T6262] page dumped because: kasan: bad access detected
[ 78.960830][ T6262] page_owner tracks the page as allocated
[ 78.963144][ T6262] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2880(GFP_NOWAIT|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6262, tgid 6261 (syz.0.17), ts 78715802715, free_ts 78669483595
[ 78.971029][ T6262] post_alloc_hook+0xfd/0x120
[ 78.972999][ T6262] get_page_from_freelist+0xf48/0x3530
[ 78.975222][ T6262] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 78.977649][ T6262] new_slab+0xa2/0x670
[ 78.979326][ T6262] refill_objects+0xe3/0x430
[ 78.981243][ T6262] __pcs_replace_empty_main+0x375/0x660
[ 78.983521][ T6262] kmem_cache_alloc_noprof+0x47a/0x6d0
[ 78.985717][ T6262] mempool_alloc_noprof+0x1b7/0x310
[ 78.987839][ T6262] netfs_alloc_subrequest+0xc1/0x3c0
[ 78.989923][ T6262] netfs_prepare_write+0x76/0x780
[ 78.992017][ T6262] netfs_unbuffered_write+0x7ba/0x21b0
[ 78.994243][ T6262] netfs_unbuffered_write_iter_locked+0x7cd/0xa80
[ 78.996848][ T6262] netfs_unbuffered_write_iter+0x442/0x720
[ 78.999204][ T6262] v9fs_file_write_iter+0xbf/0x100
[ 79.001282][ T6262] vfs_write+0x6ac/0x1050
[ 79.002971][ T6262] ksys_write+0x12a/0x250
[ 79.004659][ T6262] page last free pid 33 tgid 33 stack trace:
[ 79.006970][ T6262] __free_frozen_pages+0x79f/0x1090
[ 79.009016][ T6262] rcu_core+0x5a2/0x10d0
[ 79.010673][ T6262] handle_softirqs+0x1ea/0x9b0
[ 79.012547][ T6262] run_ksoftirqd+0x38/0x60
[ 79.014292][ T6262] smpboot_thread_fn+0x3d3/0xaa0
[ 79.016224][ T6262] kthread+0x370/0x450
[ 79.017845][ T6262] ret_from_fork+0x72b/0xd50
[ 79.019619][ T6262] ret_from_fork_asm+0x1a/0x30
[ 79.021530][ T6262]
[ 79.022470][ T6262] Memory state around the buggy address:
[ 79.024645][ T6262] ffff88803d6aaa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.027736][ T6262] ffff88803d6aab00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 79.030791][ T6262] >ffff88803d6aab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.033853][ T6262] ^
[ 79.036615][ T6262] ffff88803d6aac00: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.039720][ T6262] ffff88803d6aac80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.042822][ T6262] ==================================================================
[ 79.049563][ T6262] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.052372][ T6262] CPU: 3 UID: 0 PID: 6262 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 79.055808][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 79.059642][ T6262] Call Trace:
[ 79.060963][ T6262]
[ 79.062126][ T6262] dump_stack_lvl+0x100/0x190
[ 79.063978][ T6262] vpanic+0x552/0x970
[ 79.065538][ T6262] ? __pfx_vpanic+0x10/0x10
[ 79.067320][ T6262] ? rcu_is_watching+0x12/0xc0
[ 79.069239][ T6262] ? netfs_unbuffered_write+0x1bde/0x21b0
[ 79.071489][ T6262] panic+0xd1/0xe0
[ 79.072978][ T6262] ? __pfx_panic+0x10/0x10
[ 79.074710][ T6262] ? netfs_unbuffered_write+0x1bde/0x21b0
[ 79.076934][ T6262] ? preempt_schedule_common+0x42/0xc0
[ 79.079096][ T6262] ? check_panic_on_warn+0x1f/0x90
[ 79.081100][ T6262] check_panic_on_warn.cold+0x19/0x34
[ 79.083179][ T6262] end_report.part.0+0x3a/0x90
[ 79.085048][ T6262] kasan_report.cold+0xe/0x18
[ 79.086877][ T6262] ? netfs_unbuffered_write+0x1bde/0x21b0
[ 79.089243][ T6262] netfs_unbuffered_write+0x1bde/0x21b0
[ 79.091485][ T6262] ? __pfx_netfs_unbuffered_write+0x10/0x10
[ 79.093779][ T6262] ? rolling_buffer_init+0x8a/0xb0
[ 79.095769][ T6262] ? netfs_create_write_req+0x527/0x860
[ 79.098089][ T6262] netfs_unbuffered_write_iter_locked+0x7cd/0xa80
[ 79.100671][ T6262] netfs_unbuffered_write_iter+0x442/0x720
[ 79.102945][ T6262] v9fs_file_write_iter+0xbf/0x100
[ 79.104960][ T6262] vfs_write+0x6ac/0x1050
[ 79.106639][ T6262] ? __pfx_v9fs_file_write_iter+0x10/0x10
[ 79.108852][ T6262] ? __pfx_vfs_write+0x10/0x10
[ 79.110687][ T6262] ksys_write+0x12a/0x250
[ 79.112412][ T6262] ? __pfx_ksys_write+0x10/0x10
[ 79.114306][ T6262] ? rcu_is_watching+0x12/0xc0
[ 79.116172][ T6262] do_syscall_64+0x115/0x870
[ 79.117964][ T6262] ? clear_bhb_loop+0x40/0x90
[ 79.119784][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.122070][ T6262] RIP: 0033:0x7fe42459ce59
[ 79.123828][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.131184][ T6262] RSP: 002b:00007fe4253f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 79.134399][ T6262] RAX: ffffffffffffffda RBX: 00007fe424815fa0 RCX: 00007fe42459ce59
[ 79.137439][ T6262] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003
[ 79.140460][ T6262] RBP: 00007fe424632d6f R08: 0000000000000000 R09: 0000000000000000
[ 79.143515][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.146641][ T6262] R13: 00007fe424816038 R14: 00007fe424815fa0 R15: 00007ffd6db8e298
[ 79.149863][ T6262]
[ 79.151915][ T6262] Kernel Offset: disabled
[ 79.153705][ T6262] Rebooting in 86400 seconds..