[ 64.936207][ T43] kauditd_printk_skb: 10 callbacks suppressed
[ 64.936229][ T43] audit: type=1400 audit(1790629246.341:209): avc: denied { transition } for pid=5977 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.936273][ T43] audit: type=1400 audit(1790629246.341:210): avc: denied { noatsecure } for pid=5977 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.936982][ T43] audit: type=1400 audit(1790629246.341:211): avc: denied { rlimitinh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 64.937126][ T43] audit: type=1400 audit(1790629246.341:212): avc: denied { siginh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.689132][ T43] audit: type=1400 audit(1790629249.091:213): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.750416][ T43] audit: type=1400 audit(1790629249.161:214): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.856393][ T43] audit: type=1400 audit(1790629249.261:215): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.912260][ T43] audit: type=1400 audit(1790629249.321:216): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.834639][ T43] audit: type=1400 audit(1790629251.241:217): avc: denied { write } for pid=5998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.896987][ T43] audit: type=1400 audit(1790629251.301:218): avc: denied { write } for pid=6001 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.000022][ T43] audit: type=1400 audit(1790629251.401:219): avc: denied { write } for pid=6004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.061518][ T43] audit: type=1400 audit(1790629251.471:220): avc: denied { write } for pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.152698][ T43] audit: type=1400 audit(1790629251.561:221): avc: denied { write } for pid=6010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.208964][ T43] audit: type=1400 audit(1790629251.611:222): avc: denied { write } for pid=6013 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.481475][ T43] audit: type=1400 audit(1790629251.891:223): avc: denied { write } for pid=6016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.539914][ T43] audit: type=1400 audit(1790629251.941:224): avc: denied { write } for pid=6019 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.632818][ T43] audit: type=1400 audit(1790629252.041:225): avc: denied { write } for pid=6022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.681426][ T43] audit: type=1400 audit(1790629252.091:226): avc: denied { write } for pid=6025 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.922790][ T43] audit: type=1400 audit(1790629252.331:227): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.975794][ T43] audit: type=1400 audit(1790629252.381:228): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 71.643130][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.643169][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '[localhost]:41370' (ED25519) to the list of known hosts.
[ 71.976713][ T5899] input: AT Raw Set 2 keyboard as /devices/serio2/input/input5
[ 72.190154][ T5422] ==================================================================
[ 72.190170][ T5422] BUG: KASAN: slab-use-after-free in atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.190199][ T5422] Read of size 4 at addr ffff888058b2e164 by task kworker/3:3/5422
[ 72.190213][ T5422]
[ 72.190222][ T5422] CPU: 3 UID: 0 PID: 5422 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full)
[ 72.190241][ T5422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 72.190253][ T5422] Workqueue: events atkbd_event_work
[ 72.190274][ T5422] Call Trace:
[ 72.190282][ T5422]
[ 72.190289][ T5422] dump_stack_lvl+0x100/0x190
[ 72.190315][ T5422] print_report+0x13d/0x4b0
[ 72.190341][ T5422] ? __virt_addr_valid+0x239/0x430
[ 72.190360][ T5422] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.190381][ T5422] kasan_report+0xdf/0x1c0
[ 72.190406][ T5422] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.190430][ T5422] atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.190453][ T5422] ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10
[ 72.190475][ T5422] ? ps2_command+0xde/0x130
[ 72.190498][ T5422] ? process_one_work+0xa2c/0x1b10
[ 72.190533][ T5422] atkbd_event_work+0x12c/0x160
[ 72.190553][ T5422] process_one_work+0xac7/0x1b10
[ 72.190584][ T5422] ? __pfx_process_one_work+0x10/0x10
[ 72.190611][ T5422] ? lock_acquire+0x1d1/0x380
[ 72.190633][ T5422] ? __pfx_atkbd_event_work+0x10/0x10
[ 72.190654][ T5422] worker_thread+0x5ef/0xe50
[ 72.190672][ T5422] ? __pfx_worker_thread+0x10/0x10
[ 72.190699][ T5422] ? kthread+0x13a/0x450
[ 72.190721][ T5422] ? __pfx_worker_thread+0x10/0x10
[ 72.190745][ T5422] kthread+0x373/0x450
[ 72.190767][ T5422] ? __pfx_kthread+0x10/0x10
[ 72.190790][ T5422] ret_from_fork+0x730/0xd60
[ 72.190810][ T5422] ? __pfx_ret_from_fork+0x10/0x10
[ 72.190828][ T5422] ? __switch_to+0x800/0x10f0
[ 72.190851][ T5422] ? __pfx_kthread+0x10/0x10
[ 72.190875][ T5422] ret_from_fork_asm+0x1a/0x30
[ 72.190899][ T5422]
[ 72.190905][ T5422]
[ 72.190909][ T5422] Allocated by task 5899:
[ 72.190918][ T5422] kasan_save_stack+0x30/0x50
[ 72.190938][ T5422] kasan_save_track+0x14/0x30
[ 72.190957][ T5422] __kasan_kmalloc+0xaa/0xb0
[ 72.190976][ T5422] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 72.190991][ T5422] input_allocate_device+0x44/0x350
[ 72.191014][ T5422] atkbd_connect+0x9e/0x9c0
[ 72.191031][ T5422] serio_driver_probe+0x77/0xa0
[ 72.191054][ T5422] really_probe+0x241/0xa60
[ 72.191073][ T5422] __driver_probe_device+0x210/0x460
[ 72.191093][ T5422] driver_probe_device+0x4a/0x140
[ 72.191112][ T5422] __device_attach_driver+0x1df/0x320
[ 72.191133][ T5422] bus_for_each_drv+0x159/0x1e0
[ 72.191149][ T5422] __device_attach+0x1e4/0x4d0
[ 72.191168][ T5422] device_initial_probe+0xaf/0xd0
[ 72.191189][ T5422] bus_probe_device+0x64/0x160
[ 72.191205][ T5422] device_add+0x121d/0x1970
[ 72.191227][ T5422] serio_handle_event+0x59b/0x990
[ 72.191250][ T5422] process_one_work+0xac7/0x1b10
[ 72.191272][ T5422] worker_thread+0x5ef/0xe50
[ 72.191284][ T5422] kthread+0x373/0x450
[ 72.191303][ T5422] ret_from_fork+0x730/0xd60
[ 72.191318][ T5422] ret_from_fork_asm+0x1a/0x30
[ 72.191334][ T5422]
[ 72.191337][ T5422] Freed by task 6041:
[ 72.191345][ T5422] kasan_save_stack+0x30/0x50
[ 72.191362][ T5422] kasan_save_track+0x14/0x30
[ 72.191380][ T5422] kasan_save_free_info+0x3b/0x70
[ 72.191395][ T5422] __kasan_slab_free+0x5f/0x80
[ 72.191414][ T5422] kfree+0x22b/0x6d0
[ 72.191427][ T5422] input_dev_release+0xab/0xd0
[ 72.191447][ T5422] device_release+0xd2/0x270
[ 72.191461][ T5422] kobject_put+0x1f7/0x640
[ 72.191479][ T5422] put_device+0x1f/0x30
[ 72.191493][ T5422] input_unregister_device+0xd8/0x110
[ 72.191509][ T5422] atkbd_disconnect+0xcb/0x150
[ 72.191531][ T5422] serio_driver_remove+0x7b/0xa0
[ 72.191553][ T5422] device_remove+0xcb/0x180
[ 72.191570][ T5422] device_release_driver_internal+0x44e/0x620
[ 72.191592][ T5422] serio_unregister_port+0x23/0x40
[ 72.191614][ T5422] userio_char_release+0x91/0xe0
[ 72.191632][ T5422] __fput+0x3ff/0xb50
[ 72.191653][ T5422] fput_close_sync+0x118/0x250
[ 72.191675][ T5422] __x64_sys_close+0x8b/0x120
[ 72.191689][ T5422] do_syscall_64+0x123/0x790
[ 72.191704][ T5422] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.191719][ T5422]
[ 72.191723][ T5422] The buggy address belongs to the object at ffff888058b2e000
[ 72.191723][ T5422] which belongs to the cache kmalloc-4k of size 4096
[ 72.191736][ T5422] The buggy address is located 356 bytes inside of
[ 72.191736][ T5422] freed 4096-byte region [ffff888058b2e000, ffff888058b2f000)
[ 72.191752][ T5422]
[ 72.191756][ T5422] The buggy address belongs to the physical page:
[ 72.191764][ T5422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58b28
[ 72.191779][ T5422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 72.191791][ T5422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 72.191807][ T5422] page_type: f5(slab)
[ 72.191821][ T5422] raw: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[ 72.191836][ T5422] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 72.191852][ T5422] head: 00fff00000000040 ffff88801c043040 dead000000000100 dead000000000122
[ 72.191867][ T5422] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 72.191882][ T5422] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 72.191897][ T5422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 72.191906][ T5422] page dumped because: kasan: bad access detected
[ 72.191914][ T5422] page_owner tracks the page as allocated
[ 72.191919][ T5422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 111, tgid 111 (kworker/u33:5), ts 71950870517
[ 72.191945][ T5422] post_alloc_hook+0xfd/0x120
[ 72.191959][ T5422] get_page_from_freelist+0x110d/0x35d0
[ 72.191975][ T5422] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 72.191991][ T5422] new_slab+0xa9/0x6e0
[ 72.192005][ T5422] refill_objects+0xe3/0x410
[ 72.192019][ T5422] __pcs_replace_empty_main+0x35e/0x650
[ 72.192033][ T5422] __kmalloc_node_track_caller_noprof+0x6a8/0x870
[ 72.192053][ T5422] kmalloc_reserve+0xe8/0x350
[ 72.192069][ T5422] __alloc_skb+0x185/0x710
[ 72.192089][ T5422] nsim_dev_trap_report_work+0x2af/0xd20
[ 72.192113][ T5422] process_one_work+0xac7/0x1b10
[ 72.192137][ T5422] worker_thread+0x5ef/0xe50
[ 72.192150][ T5422] kthread+0x373/0x450
[ 72.192171][ T5422] ret_from_fork+0x730/0xd60
[ 72.192187][ T5422] ret_from_fork_asm+0x1a/0x30
[ 72.192204][ T5422] page last free pid 6037 tgid 6037 ts 71717612468 stack trace:
[ 72.192215][ T5422] __free_frozen_pages+0x79f/0x10f0
[ 72.192238][ T5422] qlist_free_all+0x47/0xf0
[ 72.192255][ T5422] kasan_quarantine_reduce+0x1a0/0x1f0
[ 72.192273][ T5422] __kasan_slab_alloc+0x69/0x90
[ 72.192293][ T5422] __kmalloc_noprof+0x2cc/0x840
[ 72.192310][ T5422] tomoyo_supervisor+0x65d/0x1340
[ 72.192334][ T5422] tomoyo_path_permission+0x270/0x3b0
[ 72.192351][ T5422] tomoyo_path_perm+0x364/0x460
[ 72.192367][ T5422] security_file_truncate+0xb5/0x1e0
[ 72.192389][ T5422] do_ftruncate+0x216/0x8a0
[ 72.192407][ T5422] ksys_ftruncate+0x61/0xb0
[ 72.192425][ T5422] __x64_sys_ftruncate+0x55/0x80
[ 72.192444][ T5422] do_syscall_64+0x123/0x790
[ 72.192459][ T5422] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.192475][ T5422]
[ 72.192479][ T5422] Memory state around the buggy address:
[ 72.192487][ T5422] ffff888058b2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.192498][ T5422] ffff888058b2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.192510][ T5422] >ffff888058b2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.192519][ T5422] ^
[ 72.192533][ T5422] ffff888058b2e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.192545][ T5422] ffff888058b2e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.192554][ T5422] ==================================================================
[ 72.192564][ T5422] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 72.482317][ T5422] CPU: 3 UID: 0 PID: 5422 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full)
[ 72.485222][ T5422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 72.488467][ T5422] Workqueue: events atkbd_event_work
[ 72.490670][ T5422] Call Trace:
[ 72.492073][ T5422]
[ 72.492977][ T5422] dump_stack_lvl+0x100/0x190
[ 72.494564][ T5422] vpanic+0x553/0x970
[ 72.495808][ T5422] ? __pfx_vpanic+0x10/0x10
[ 72.497321][ T5422] ? __pfx_vprintk_emit+0x10/0x10
[ 72.499365][ T5422] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.502159][ T5422] panic+0xd1/0xe0
[ 72.503828][ T5422] ? __pfx_panic+0x10/0x10
[ 72.505879][ T5422] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.507834][ T5422] check_panic_on_warn.cold+0x19/0x34
[ 72.509624][ T5422] end_report.part.0+0x3a/0x90
[ 72.511412][ T5422] kasan_report.cold+0xe/0x18
[ 72.512916][ T5422] ? atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.514776][ T5422] atkbd_set_repeat_rate.isra.0+0x44a/0x4e0
[ 72.516971][ T5422] ? __pfx_atkbd_set_repeat_rate.isra.0+0x10/0x10
[ 72.519075][ T5422] ? ps2_command+0xde/0x130
[ 72.520915][ T5422] ? process_one_work+0xa2c/0x1b10
[ 72.522572][ T5422] atkbd_event_work+0x12c/0x160
[ 72.524287][ T5422] process_one_work+0xac7/0x1b10
[ 72.526145][ T5422] ? __pfx_process_one_work+0x10/0x10
[ 72.528257][ T5422] ? lock_acquire+0x1d1/0x380
[ 72.529918][ T5422] ? __pfx_atkbd_event_work+0x10/0x10
[ 72.531612][ T5422] worker_thread+0x5ef/0xe50
[ 72.533249][ T5422] ? __pfx_worker_thread+0x10/0x10
[ 72.535351][ T5422] ? kthread+0x13a/0x450
[ 72.536748][ T5422] ? __pfx_worker_thread+0x10/0x10
[ 72.538804][ T5422] kthread+0x373/0x450
[ 72.540196][ T5422] ? __pfx_kthread+0x10/0x10
[ 72.541928][ T5422] ret_from_fork+0x730/0xd60
[ 72.543625][ T5422] ? __pfx_ret_from_fork+0x10/0x10
[ 72.545170][ T5422] ? __switch_to+0x800/0x10f0
[ 72.546952][ T5422] ? __pfx_kthread+0x10/0x10
[ 72.548848][ T5422] ret_from_fork_asm+0x1a/0x30
[ 72.550338][ T5422]
[ 72.552076][ T5422] Kernel Offset: disabled
[ 72.553716][ T5422] Rebooting in 86400 seconds..