[ 84.174785][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 84.174797][ T42] audit: type=1400 audit(1787919067.730:208): avc: denied { transition } for pid=5977 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 84.190224][ T42] audit: type=1400 audit(1787919067.740:209): avc: denied { noatsecure } for pid=5977 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 84.198079][ T42] audit: type=1400 audit(1787919067.740:210): avc: denied { rlimitinh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 84.206409][ T42] audit: type=1400 audit(1787919067.740:211): avc: denied { siginh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 87.320695][ T62] cfg80211: failed to load regulatory.db
[ 87.401389][ T42] audit: type=1400 audit(1787919070.960:212): avc: denied { write } for pid=5983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.471968][ T42] audit: type=1400 audit(1787919071.030:213): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.855013][ T42] audit: type=1400 audit(1787919071.410:214): avc: denied { write } for pid=5989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.922299][ T42] audit: type=1400 audit(1787919071.480:215): avc: denied { write } for pid=5992 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.139176][ T42] audit: type=1400 audit(1787919071.690:216): avc: denied { write } for pid=5995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 88.208715][ T42] audit: type=1400 audit(1787919071.760:217): avc: denied { write } for pid=5998 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.259518][ T42] kauditd_printk_skb: 4 callbacks suppressed
[ 89.259532][ T42] audit: type=1400 audit(1787919072.810:222): avc: denied { write } for pid=6017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.337522][ T42] audit: type=1400 audit(1787919072.890:223): avc: denied { write } for pid=6020 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.567227][ T42] audit: type=1400 audit(1787919073.120:224): avc: denied { write } for pid=6023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.627579][ T42] audit: type=1400 audit(1787919073.180:225): avc: denied { write } for pid=6026 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.365949][ T42] audit: type=1400 audit(1787919073.920:226): avc: denied { write } for pid=6029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.428731][ T42] audit: type=1400 audit(1787919073.980:227): avc: denied { write } for pid=6032 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:30197' (ED25519) to the list of known hosts.
[ 91.995751][ T42] audit: type=1400 audit(1787919075.550:228): avc: denied { search } for pid=6043 comm="syz-executor875" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 92.010398][ T42] audit: type=1400 audit(1787919075.560:229): avc: denied { write } for pid=6043 comm="syz-executor875" name="current_tracer" dev="tracefs" ino=6162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[ 92.019471][ T42] audit: type=1400 audit(1787919075.560:230): avc: denied { open } for pid=6043 comm="syz-executor875" path="/sys/kernel/tracing/current_tracer" dev="tracefs" ino=6162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[ 92.053718][ T42] audit: type=1400 audit(1787919075.610:231): avc: denied { read write } for pid=6043 comm="syz-executor875" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 92.057575][ T6043] loop0: detected capacity change from 0 to 2048
[ 92.240512][ T6044] ==================================================================
[ 92.243921][ T6044] BUG: KASAN: slab-use-after-free in blk_log_remap+0x128/0x150
[ 92.246842][ T6044] Read of size 8 at addr ffff888046c23000 by task syz-executor875/6044
[ 92.252352][ T6044]
[ 92.253326][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz-executor875 Not tainted syzkaller #0 PREEMPT(full)
[ 92.253346][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.253356][ T6044] Call Trace:
[ 92.253365][ T6044]
[ 92.253371][ T6044] dump_stack_lvl+0x100/0x190
[ 92.253400][ T6044] print_report+0x13d/0x4b0
[ 92.253423][ T6044] ? __virt_addr_valid+0x239/0x430
[ 92.253447][ T6044] ? blk_log_remap+0x128/0x150
[ 92.253465][ T6044] kasan_report+0xdf/0x1c0
[ 92.253493][ T6044] ? blk_log_remap+0x128/0x150
[ 92.253511][ T6044] blk_log_remap+0x128/0x150
[ 92.253525][ T6044] ? __pfx_blk_log_remap+0x10/0x10
[ 92.253541][ T6044] print_one_line+0x22f/0x430
[ 92.253558][ T6044] ? __pfx_blk_log_action+0x10/0x10
[ 92.253574][ T6044] print_trace_line+0x97d/0x1790
[ 92.253592][ T6044] ? __pfx_print_trace_line+0x10/0x10
[ 92.253609][ T6044] tracing_read_pipe+0x586/0xd60
[ 92.253629][ T6044] ? rw_verify_area+0xce/0x6d0
[ 92.253648][ T6044] ? __pfx_tracing_read_pipe+0x10/0x10
[ 92.253665][ T6044] vfs_read+0x1e4/0xb40
[ 92.253684][ T6044] ? __pfx_vfs_read+0x10/0x10
[ 92.253701][ T6044] ? find_held_lock+0x2b/0x80
[ 92.253719][ T6044] ? __fget_files+0x215/0x3d0
[ 92.253743][ T6044] ? __fget_files+0x21f/0x3d0
[ 92.253767][ T6044] ksys_read+0x12a/0x250
[ 92.253785][ T6044] ? __pfx_ksys_read+0x10/0x10
[ 92.253806][ T6044] do_syscall_64+0x123/0x790
[ 92.253825][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.253847][ T6044] RIP: 0033:0x7fb70f890b9e
[ 92.253862][ T6044] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 92.253876][ T6044] RSP: 002b:00007fb70f8201a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 92.253893][ T6044] RAX: ffffffffffffffda RBX: 00007fb70f8216c0 RCX: 00007fb70f890b9e
[ 92.253903][ T6044] RDX: 0000000000001000 RSI: 00007fb70f820210 RDI: 0000000000000006
[ 92.253912][ T6044] RBP: 0000000000000021 R08: 0000000000000000 R09: 0000000000000000
[ 92.253922][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffd0
[ 92.253932][ T6044] R13: 0000000000000000 R14: 00007ffe57b20df0 R15: 00007ffe57b20ed8
[ 92.253947][ T6044]
[ 92.253952][ T6044]
[ 92.348973][ T6044] Allocated by task 5868:
[ 92.351862][ T6044] kasan_save_stack+0x30/0x50
[ 92.354235][ T6044] kasan_save_track+0x14/0x30
[ 92.356413][ T6044] __kasan_slab_alloc+0x89/0x90
[ 92.358482][ T6044] kmem_cache_alloc_noprof+0x26b/0x6a0
[ 92.360858][ T6044] __kernfs_new_node+0xd2/0xa10
[ 92.363152][ T6044] kernfs_new_node+0x117/0x150
[ 92.365546][ T6044] __kernfs_create_file+0x53/0x350
[ 92.367778][ T6044] sysfs_add_file_mode_ns+0x207/0x3c0
[ 92.370004][ T6044] internal_create_group+0x593/0xfb0
[ 92.372115][ T6044] internal_create_groups+0x9d/0x150
[ 92.374346][ T6044] device_add+0x71a/0x1970
[ 92.376326][ T6044] netdev_register_kobject+0x1df/0x410
[ 92.378715][ T6044] register_netdevice+0x15b6/0x25a0
[ 92.380903][ T6044] xfrmi_newlink+0x22e/0x560
[ 92.382966][ T6044] rtnl_newlink+0x1697/0x2620
[ 92.385166][ T6044] rtnetlink_rcv_msg+0x95e/0xe90
[ 92.387449][ T6044] netlink_rcv_skb+0x159/0x420
[ 92.389624][ T6044] netlink_unicast+0x585/0x850
[ 92.391579][ T6044] netlink_sendmsg+0x8b0/0xda0
[ 92.393524][ T6044] __sys_sendto+0x48b/0x4e0
[ 92.395219][ T6044] __x64_sys_sendto+0xe0/0x1c0
[ 92.396852][ T6044] do_syscall_64+0x123/0x790
[ 92.398537][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.400668][ T6044]
[ 92.401819][ T6044] Freed by task 5124:
[ 92.403537][ T6044] kasan_save_stack+0x30/0x50
[ 92.405642][ T6044] kasan_save_track+0x14/0x30
[ 92.407754][ T6044] kasan_save_free_info+0x3b/0x70
[ 92.409541][ T6044] __kasan_slab_free+0x5f/0x80
[ 92.411160][ T6044] kmem_cache_free+0x127/0x6b0
[ 92.412841][ T6044] rcu_core+0x5a2/0x10e0
[ 92.414408][ T6044] handle_softirqs+0x1e6/0x9d0
[ 92.416494][ T6044] do_softirq+0xaf/0xf0
[ 92.418190][ T6044] __local_bh_enable_ip+0xff/0x120
[ 92.420257][ T6044] __alloc_skb+0x5db/0x710
[ 92.422069][ T6044] alloc_skb_with_frags+0xdd/0x760
[ 92.424318][ T6044] sock_alloc_send_pskb+0x801/0x980
[ 92.426517][ T6044] unix_dgram_sendmsg+0x3c7/0x1810
[ 92.428221][ T6044] __sys_sendto+0x48b/0x4e0
[ 92.430002][ T6044] __x64_sys_sendto+0xe0/0x1c0
[ 92.431942][ T6044] do_syscall_64+0x123/0x790
[ 92.433836][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.436467][ T6044]
[ 92.437569][ T6044] Last potentially related work creation:
[ 92.440311][ T6044] kasan_save_stack+0x30/0x50
[ 92.443084][ T6044] kasan_record_aux_stack+0xa7/0xc0
[ 92.445551][ T6044] __call_rcu_common.constprop.0+0xa5/0x9b0
[ 92.447762][ T6044] kernfs_put.part.0+0x3a6/0xaa0
[ 92.449328][ T6044] kernfs_remove_by_name_ns+0xf3/0x120
[ 92.451028][ T6044] remove_files+0x96/0x1c0
[ 92.452369][ T6044] sysfs_remove_group+0x8b/0x1b0
[ 92.453976][ T6044] sysfs_remove_groups+0x60/0xb0
[ 92.456093][ T6044] device_remove_attrs+0x203/0x290
[ 92.458329][ T6044] device_del+0x36e/0x9b0
[ 92.460304][ T6044] unregister_netdevice_many_notify+0x1503/0x2150
[ 92.463370][ T6044] ops_undo_list+0x8ff/0xab0
[ 92.465687][ T6044] cleanup_net+0x499/0x920
[ 92.467750][ T6044] process_one_work+0xac7/0x1b10
[ 92.469640][ T6044] worker_thread+0x5ef/0xe50
[ 92.471454][ T6044] kthread+0x373/0x450
[ 92.473137][ T6044] ret_from_fork+0x730/0xd60
[ 92.475005][ T6044] ret_from_fork_asm+0x1a/0x30
[ 92.476966][ T6044]
[ 92.477981][ T6044] The buggy address belongs to the object at ffff888046c23000
[ 92.477981][ T6044] which belongs to the cache kernfs_node_cache of size 176
[ 92.484635][ T6044] The buggy address is located 0 bytes inside of
[ 92.484635][ T6044] freed 176-byte region [ffff888046c23000, ffff888046c230b0)
[ 92.490656][ T6044]
[ 92.491702][ T6044] The buggy address belongs to the physical page:
[ 92.494271][ T6044] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888046c23690 pfn:0x46c23
[ 92.499122][ T6044] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 92.501972][ T6044] page_type: f5(slab)
[ 92.503526][ T6044] raw: 00fff00000000200 ffff88801dede500 ffffea00011b07d0 ffffea00011b09d0
[ 92.506485][ T6044] raw: ffff888046c23690 0000000800110009 00000000f5000000 0000000000000000
[ 92.509575][ T6044] page dumped because: kasan: bad access detected
[ 92.511931][ T6044] page_owner tracks the page as allocated
[ 92.514342][ T6044] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5868, tgid 5868 (syz-executor), ts 72534727158
[ 92.522330][ T6044] post_alloc_hook+0xfd/0x120
[ 92.524219][ T6044] get_page_from_freelist+0x110d/0x35b0
[ 92.526372][ T6044] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 92.528401][ T6044] new_slab+0xa5/0x640
[ 92.529692][ T6044] refill_objects+0xe3/0x410
[ 92.531330][ T6044] __pcs_replace_empty_main+0x372/0x680
[ 92.533367][ T6044] kmem_cache_alloc_noprof+0x46e/0x6a0
[ 92.535251][ T6044] __kernfs_new_node+0xd2/0xa10
[ 92.537133][ T6044] kernfs_new_node+0x117/0x150
[ 92.539097][ T6044] kernfs_create_link+0xcc/0x240
[ 92.541255][ T6044] sysfs_do_create_link_sd+0x90/0x140
[ 92.543954][ T6044] sysfs_create_link+0x61/0xc0
[ 92.546587][ T6044] __netdev_adjacent_dev_insert+0x819/0xbf0
[ 92.549286][ T6044] __netdev_upper_dev_link+0x3d8/0x7e0
[ 92.551442][ T6044] netdev_master_upper_dev_link+0x9f/0xd0
[ 92.553710][ T6044] batadv_hardif_enable_interface+0x87c/0xf80
[ 92.556169][ T6044] page last free pid 5793 tgid 5793 ts 69952822053 stack trace:
[ 92.559170][ T6044] free_pages_prepare+0x586/0xe00
[ 92.561224][ T6044] __free_contig_range_common+0x14f/0x250
[ 92.563702][ T6044] free_pages_bulk+0x12a/0x200
[ 92.566095][ T6044] vm_area_free_pages+0xad/0x2b0
[ 92.568813][ T6044] vfree+0x108/0x730
[ 92.570772][ T6044] kcov_close+0x34/0x60
[ 92.572796][ T6044] __fput+0x3ff/0xb50
[ 92.574620][ T6044] task_work_run+0x150/0x240
[ 92.576552][ T6044] do_exit+0x951/0x2ae0
[ 92.578270][ T6044] do_group_exit+0xd5/0x2a0
[ 92.580131][ T6044] get_signal+0x1ec7/0x21e0
[ 92.581956][ T6044] arch_do_signal_or_restart+0x91/0x7e0
[ 92.584204][ T6044] exit_to_user_mode_loop+0x139/0x700
[ 92.587182][ T6044] do_syscall_64+0x661/0x790
[ 92.589374][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.591387][ T6044]
[ 92.592328][ T6044] Memory state around the buggy address:
[ 92.594150][ T6044] ffff888046c22f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 92.597192][ T6044] ffff888046c22f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 92.600924][ T6044] >ffff888046c23000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 92.605440][ T6044] ^
[ 92.607156][ T6044] ffff888046c23080: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 92.609799][ T6044] ffff888046c23100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 92.612470][ T6044] ==================================================================
[ 92.617223][ T6044] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 92.619537][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz-executor875 Not tainted syzkaller #0 PREEMPT(full)
[ 92.622585][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.625953][ T6044] Call Trace:
[ 92.627310][ T6044]
[ 92.628816][ T6044] dump_stack_lvl+0x100/0x190
[ 92.631370][ T6044] vpanic+0x553/0x970
[ 92.633663][ T6044] ? __pfx_vpanic+0x10/0x10
[ 92.635838][ T6044] ? mark_held_locks+0x40/0x70
[ 92.637591][ T6044] ? blk_log_remap+0x128/0x150
[ 92.639271][ T6044] panic+0xd1/0xe0
[ 92.640553][ T6044] ? __pfx_panic+0x10/0x10
[ 92.642289][ T6044] ? blk_log_remap+0x128/0x150
[ 92.644025][ T6044] ? preempt_schedule_common+0x3c/0xb0
[ 92.646087][ T6044] check_panic_on_warn.cold+0x19/0x34
[ 92.648275][ T6044] end_report.part.0+0x3a/0x90
[ 92.650306][ T6044] kasan_report.cold+0xe/0x18
[ 92.652429][ T6044] ? blk_log_remap+0x128/0x150
[ 92.654738][ T6044] blk_log_remap+0x128/0x150
[ 92.657031][ T6044] ? __pfx_blk_log_remap+0x10/0x10
[ 92.659079][ T6044] print_one_line+0x22f/0x430
[ 92.660754][ T6044] ? __pfx_blk_log_action+0x10/0x10
[ 92.662726][ T6044] print_trace_line+0x97d/0x1790
[ 92.664950][ T6044] ? __pfx_print_trace_line+0x10/0x10
[ 92.667298][ T6044] tracing_read_pipe+0x586/0xd60
[ 92.669606][ T6044] ? rw_verify_area+0xce/0x6d0
[ 92.671891][ T6044] ? __pfx_tracing_read_pipe+0x10/0x10
[ 92.674602][ T6044] vfs_read+0x1e4/0xb40
[ 92.676146][ T6044] ? __pfx_vfs_read+0x10/0x10
[ 92.677911][ T6044] ? find_held_lock+0x2b/0x80
[ 92.679708][ T6044] ? __fget_files+0x215/0x3d0
[ 92.681601][ T6044] ? __fget_files+0x21f/0x3d0
[ 92.683654][ T6044] ksys_read+0x12a/0x250
[ 92.685491][ T6044] ? __pfx_ksys_read+0x10/0x10
[ 92.687748][ T6044] do_syscall_64+0x123/0x790
[ 92.689927][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.692701][ T6044] RIP: 0033:0x7fb70f890b9e
[ 92.694841][ T6044] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 92.702296][ T6044] RSP: 002b:00007fb70f8201a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 92.705301][ T6044] RAX: ffffffffffffffda RBX: 00007fb70f8216c0 RCX: 00007fb70f890b9e
[ 92.708689][ T6044] RDX: 0000000000001000 RSI: 00007fb70f820210 RDI: 0000000000000006
[ 92.711998][ T6044] RBP: 0000000000000021 R08: 0000000000000000 R09: 0000000000000000
[ 92.715618][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffd0
[ 92.718644][ T6044] R13: 0000000000000000 R14: 00007ffe57b20df0 R15: 00007ffe57b20ed8
[ 92.721516][ T6044]
[ 92.723457][ T6044] Kernel Offset: disabled
[ 92.725232][ T6044] Rebooting in 86400 seconds..