[ 71.408224][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 71.408238][ T42] audit: type=1400 audit(1786964466.358:209): avc: denied { transition } for pid=5970 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.417801][ T42] audit: type=1400 audit(1786964466.358:210): avc: denied { noatsecure } for pid=5970 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.424266][ T42] audit: type=1400 audit(1786964466.358:211): avc: denied { rlimitinh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.430038][ T42] audit: type=1400 audit(1786964466.358:212): avc: denied { siginh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.782419][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.785144][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[ 73.965136][ T42] audit: type=1400 audit(1786964468.918:213): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.006914][ T42] audit: type=1400 audit(1786964468.958:214): avc: denied { write } for pid=5978 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.995204][ T42] audit: type=1400 audit(1786964469.948:215): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.054144][ T42] audit: type=1400 audit(1786964470.008:216): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.195803][ T42] audit: type=1400 audit(1786964470.148:217): avc: denied { write } for pid=5989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 75.259794][ T42] audit: type=1400 audit(1786964470.208:218): avc: denied { write } for pid=5994 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 76.936763][ T42] kauditd_printk_skb: 2 callbacks suppressed
[ 76.936775][ T42] audit: type=1400 audit(1786964471.888:221): avc: denied { write } for pid=6003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 76.998581][ T42] audit: type=1400 audit(1786964471.948:222): avc: denied { write } for pid=6006 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:41099' (ED25519) to the list of known hosts.
[ 77.765225][ T42] audit: type=1400 audit(1786964472.718:223): avc: denied { read write } for pid=6016 comm="syz-executor373" name="video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 77.774452][ T42] audit: type=1400 audit(1786964472.718:224): avc: denied { open } for pid=6016 comm="syz-executor373" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 77.781241][ T6017] ==================================================================
[ 77.784073][ T42] audit: type=1400 audit(1786964472.718:225): avc: denied { ioctl } for pid=6016 comm="syz-executor373" path="/dev/video0" dev="devtmpfs" ino=954 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 77.786539][ T6017] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x2063/0x4160
[ 77.786577][ T6017] Write of size 720 at addr ffffc900038f9d50 by task vivid-000-vid-c/6017
[ 77.786590][ T6017]
[ 77.786600][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full)
[ 77.786621][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.786631][ T6017] Call Trace:
[ 77.786662][ T6017]
[ 77.786669][ T6017] dump_stack_lvl+0x100/0x190
[ 77.786692][ T6017] print_report+0x13d/0x4b0
[ 77.786717][ T6017] ? _raw_spin_lock_irqsave+0x52/0x60
[ 77.786737][ T6017] ? tpg_fill_plane_buffer+0x2063/0x4160
[ 77.786761][ T6017] kasan_report+0xdf/0x1c0
[ 77.786786][ T6017] ? tpg_fill_plane_buffer+0x2063/0x4160
[ 77.786812][ T6017] kasan_check_range+0x10f/0x1e0
[ 77.786836][ T6017] __asan_memcpy+0x3c/0x60
[ 77.786858][ T6017] tpg_fill_plane_buffer+0x2063/0x4160
[ 77.786889][ T6017] vivid_fillbuff+0x963/0x3ff0
[ 77.786910][ T6017] ? __pfx_stack_trace_save+0x10/0x10
[ 77.786930][ T6017] ? check_noncircular+0x97/0x160
[ 77.786958][ T6017] ? __pfx_vivid_fillbuff+0x10/0x10
[ 77.786985][ T6017] ? v4l2_ctrl_request_setup+0x45a/0xa60
[ 77.787004][ T6017] ? lockdep_hardirqs_on+0x78/0x100
[ 77.787025][ T6017] ? vivid_thread_vid_cap_tick+0x81b/0x1470
[ 77.787044][ T6017] vivid_thread_vid_cap_tick+0x81b/0x1470
[ 77.787064][ T6017] vivid_thread_vid_cap+0x454/0xd70
[ 77.787087][ T6017] ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 77.787104][ T6017] ? do_raw_spin_lock+0x128/0x260
[ 77.787129][ T6017] ? find_held_lock+0x2b/0x80
[ 77.787141][ T6017] ? __kthread_parkme+0xbb/0x230
[ 77.787167][ T6017] ? rcu_is_watching+0x12/0xc0
[ 77.787188][ T6017] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 77.787206][ T6017] ? lockdep_hardirqs_on+0x78/0x100
[ 77.787224][ T6017] ? __kthread_parkme+0x18c/0x230
[ 77.787248][ T6017] ? kthread+0x13a/0x450
[ 77.787264][ T6017] ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 77.787283][ T6017] kthread+0x370/0x450
[ 77.787300][ T6017] ? __pfx_kthread+0x10/0x10
[ 77.787318][ T6017] ret_from_fork+0x72b/0xd50
[ 77.787341][ T6017] ? __pfx_ret_from_fork+0x10/0x10
[ 77.787361][ T6017] ? __switch_to+0x800/0x10f0
[ 77.787380][ T6017] ? __pfx_kthread+0x10/0x10
[ 77.787395][ T6017] ret_from_fork_asm+0x1a/0x30
[ 77.787425][ T6017]
[ 77.787431][ T6017]
[ 77.875925][ T6017] The buggy address belongs to a vmalloc virtual mapping
[ 77.878132][ T6017] The buggy address belongs to the physical page:
[ 77.880132][ T6017] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a460000 pfn:0x2a460
[ 77.883264][ T6017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 77.885454][ T6017] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 77.888165][ T6017] raw: ffff88802a460000 0000000000000000 00000001ffffffff 0000000000000000
[ 77.890901][ T6017] page dumped because: kasan: bad access detected
[ 77.892975][ T6017] page_owner tracks the page as allocated
[ 77.894745][ T6017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6016, tgid 6016 (syz-executor373), ts 77775340251, free_ts 77775265836
[ 77.900674][ T6017] post_alloc_hook+0xfd/0x120
[ 77.902239][ T6017] get_page_from_freelist+0xf48/0x3530
[ 77.904002][ T6017] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 77.905851][ T6017] alloc_pages_bulk_noprof+0x5de/0x13c0
[ 77.907678][ T6017] alloc_pages_bulk_mempolicy_noprof+0x255/0x1270
[ 77.909695][ T6017] __vmalloc_node_range_noprof+0x69d/0x1630
[ 77.911544][ T6017] vmalloc_user_noprof+0x9e/0xe0
[ 77.913150][ T6017] vb2_vmalloc_alloc+0x135/0x410
[ 77.914698][ T6017] __vb2_queue_alloc+0x8d5/0x1160
[ 77.916274][ T6017] vb2_core_reqbufs+0x899/0xf30
[ 77.917808][ T6017] vb2_ioctl_reqbufs+0x291/0x450
[ 77.919373][ T6017] vidioc_reqbufs+0x86/0x100
[ 77.920828][ T6017] v4l_reqbufs+0x175/0x1d0
[ 77.922276][ T6017] __video_do_ioctl+0xb2a/0xdf0
[ 77.923810][ T6017] video_usercopy+0x47a/0x1730
[ 77.925323][ T6017] v4l2_ioctl+0x1bd/0x250
[ 77.926685][ T6017] page last free pid 6016 tgid 6016 stack trace:
[ 77.928659][ T6017] __free_frozen_pages+0x79f/0x1090
[ 77.930289][ T6017] __kasan_populate_vmalloc+0x1ea/0x210
[ 77.932007][ T6017] alloc_vmap_area+0x95d/0x2bb0
[ 77.933588][ T6017] __get_vm_area_node+0x1ca/0x330
[ 77.935169][ T6017] __vmalloc_node_range_noprof+0x228/0x1630
[ 77.937025][ T6017] vmalloc_user_noprof+0x9e/0xe0
[ 77.938582][ T6017] vb2_vmalloc_alloc+0x135/0x410
[ 77.940134][ T6017] __vb2_queue_alloc+0x8d5/0x1160
[ 77.941732][ T6017] vb2_core_reqbufs+0x899/0xf30
[ 77.943312][ T6017] vb2_ioctl_reqbufs+0x291/0x450
[ 77.944877][ T6017] vidioc_reqbufs+0x86/0x100
[ 77.946330][ T6017] v4l_reqbufs+0x175/0x1d0
[ 77.947737][ T6017] __video_do_ioctl+0xb2a/0xdf0
[ 77.949804][ T6017] video_usercopy+0x47a/0x1730
[ 77.951335][ T6017] v4l2_ioctl+0x1bd/0x250
[ 77.952764][ T6017] __x64_sys_ioctl+0x18e/0x210
[ 77.954278][ T6017]
[ 77.955045][ T6017] Memory state around the buggy address:
[ 77.956801][ T6017] ffffc900038f9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.959323][ T6017] ffffc900038f9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.961805][ T6017] >ffffc900038fa000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 77.964311][ T6017] ^
[ 77.965605][ T6017] ffffc900038fa080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 77.968126][ T6017] ffffc900038fa100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 77.970608][ T6017] ==================================================================
[ 77.973432][ T6017] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.975706][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full)
[ 77.978830][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.981944][ T6017] Call Trace:
[ 77.983027][ T6017]
[ 77.983969][ T6017] dump_stack_lvl+0x100/0x190
[ 77.985473][ T6017] vpanic+0x552/0x970
[ 77.986747][ T6017] ? __pfx_vpanic+0x10/0x10
[ 77.988179][ T6017] ? mark_held_locks+0x40/0x70
[ 77.989697][ T6017] ? tpg_fill_plane_buffer+0x2063/0x4160
[ 77.991458][ T6017] panic+0xd1/0xe0
[ 77.992687][ T6017] ? __pfx_panic+0x10/0x10
[ 77.994096][ T6017] ? tpg_fill_plane_buffer+0x2063/0x4160
[ 77.995867][ T6017] ? preempt_schedule_common+0x42/0xc0
[ 77.997596][ T6017] ? check_panic_on_warn+0x1f/0x90
[ 77.999218][ T6017] check_panic_on_warn.cold+0x19/0x34
[ 78.000901][ T6017] end_report.part.0+0x3a/0x90
[ 78.002433][ T6017] kasan_report.cold+0xe/0x18
[ 78.003915][ T6017] ? tpg_fill_plane_buffer+0x2063/0x4160
[ 78.005675][ T6017] kasan_check_range+0x10f/0x1e0
[ 78.007240][ T6017] __asan_memcpy+0x3c/0x60
[ 78.008658][ T6017] tpg_fill_plane_buffer+0x2063/0x4160
[ 78.010373][ T6017] vivid_fillbuff+0x963/0x3ff0
[ 78.011884][ T6017] ? __pfx_stack_trace_save+0x10/0x10
[ 78.013595][ T6017] ? check_noncircular+0x97/0x160
[ 78.015184][ T6017] ? __pfx_vivid_fillbuff+0x10/0x10
[ 78.016840][ T6017] ? v4l2_ctrl_request_setup+0x45a/0xa60
[ 78.018610][ T6017] ? lockdep_hardirqs_on+0x78/0x100
[ 78.020243][ T6017] ? vivid_thread_vid_cap_tick+0x81b/0x1470
[ 78.022106][ T6017] vivid_thread_vid_cap_tick+0x81b/0x1470
[ 78.023893][ T6017] vivid_thread_vid_cap+0x454/0xd70
[ 78.025536][ T6017] ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 78.027320][ T6017] ? do_raw_spin_lock+0x128/0x260
[ 78.028916][ T6017] ? find_held_lock+0x2b/0x80
[ 78.030397][ T6017] ? __kthread_parkme+0xbb/0x230
[ 78.031967][ T6017] ? rcu_is_watching+0x12/0xc0
[ 78.033539][ T6017] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 78.035368][ T6017] ? lockdep_hardirqs_on+0x78/0x100
[ 78.037013][ T6017] ? __kthread_parkme+0x18c/0x230
[ 78.038608][ T6017] ? kthread+0x13a/0x450
[ 78.039947][ T6017] ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 78.041728][ T6017] kthread+0x370/0x450
[ 78.043045][ T6017] ? __pfx_kthread+0x10/0x10
[ 78.044515][ T6017] ret_from_fork+0x72b/0xd50
[ 78.045975][ T6017] ? __pfx_ret_from_fork+0x10/0x10
[ 78.047582][ T6017] ? __switch_to+0x800/0x10f0
[ 78.049072][ T6017] ? __pfx_kthread+0x10/0x10
[ 78.050534][ T6017] ret_from_fork_asm+0x1a/0x30
[ 78.052062][ T6017]
[ 78.053897][ T6017] Kernel Offset: disabled
[ 78.055272][ T6017] Rebooting in 86400 seconds..