[ 65.169473][ T43] kauditd_printk_skb: 10 callbacks suppressed
[ 65.169486][ T43] audit: type=1400 audit(1789225489.478:209): avc: denied { transition } for pid=5977 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 65.171692][ T43] audit: type=1400 audit(1789225489.478:210): avc: denied { noatsecure } for pid=5977 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 65.171719][ T43] audit: type=1400 audit(1789225489.478:211): avc: denied { rlimitinh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 65.171738][ T43] audit: type=1400 audit(1789225489.478:212): avc: denied { siginh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.882172][ T43] audit: type=1400 audit(1789225492.188:213): avc: denied { write } for pid=5979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.944896][ T43] audit: type=1400 audit(1789225492.248:214): avc: denied { write } for pid=5982 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.534491][ T43] audit: type=1400 audit(1789225492.838:215): avc: denied { write } for pid=5985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.593317][ T43] audit: type=1400 audit(1789225492.898:216): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.462513][ T43] audit: type=1400 audit(1789225493.768:217): avc: denied { write } for pid=5995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.522448][ T43] audit: type=1400 audit(1789225493.828:218): avc: denied { write } for pid=5998 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.202410][ T43] kauditd_printk_skb: 2 callbacks suppressed
[ 70.202426][ T43] audit: type=1400 audit(1789225494.508:221): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.261290][ T43] audit: type=1400 audit(1789225494.568:222): avc: denied { write } for pid=6010 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.359641][ T43] audit: type=1400 audit(1789225494.668:223): avc: denied { write } for pid=6013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.424623][ T43] audit: type=1400 audit(1789225494.728:224): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.526245][ T43] audit: type=1400 audit(1789225494.838:225): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.582348][ T43] audit: type=1400 audit(1789225494.888:226): avc: denied { write } for pid=6022 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.666166][ T43] audit: type=1400 audit(1789225494.978:227): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 70.721145][ T43] audit: type=1400 audit(1789225495.028:228): avc: denied { write } for pid=6028 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 71.510151][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.510211][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '[localhost]:7708' (ED25519) to the list of known hosts.
modprobe: can't change directory to 'syzkaller': No such file or directory
[ 76.629084][ T9] cfg80211: failed to load regulatory.db
[ 77.271600][ T43] audit: type=1400 audit(1789225501.578:229): avc: denied { read } for pid=6038 comm="syz-executor559" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 77.272033][ T43] audit: type=1400 audit(1789225501.578:230): avc: denied { open } for pid=6038 comm="syz-executor559" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 77.309020][ T6038] vidtv vidtv.0: Successfully removed vidtv
[ 77.812142][ T6038] ==================================================================
[ 77.812157][ T6038] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x536/0x5d0
[ 77.812189][ T6038] Read of size 8 at addr ffff88802dee7320 by task syz-executor559/6038
[ 77.812204][ T6038]
[ 77.812213][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz-executor559 Not tainted syzkaller #0 PREEMPT(full)
[ 77.812233][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.812244][ T6038] Call Trace:
[ 77.812258][ T6038]
[ 77.812265][ T6038] dump_stack_lvl+0x100/0x190
[ 77.812291][ T6038] print_report+0x13d/0x4b0
[ 77.812318][ T6038] ? __virt_addr_valid+0x239/0x430
[ 77.812337][ T6038] ? dvb_frontend_release+0x536/0x5d0
[ 77.812360][ T6038] kasan_report+0xdf/0x1c0
[ 77.812382][ T6038] ? dvb_frontend_release+0x536/0x5d0
[ 77.812408][ T6038] dvb_frontend_release+0x536/0x5d0
[ 77.812432][ T6038] ? __pfx_dvb_frontend_release+0x10/0x10
[ 77.812456][ T6038] __fput+0x3ff/0xb50
[ 77.812481][ T6038] fput_close_sync+0x118/0x250
[ 77.812505][ T6038] ? __pfx_fput_close_sync+0x10/0x10
[ 77.812531][ T6038] __x64_sys_close+0x8b/0x120
[ 77.812555][ T6038] do_syscall_64+0x123/0x790
[ 77.812579][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.812597][ T6038] RIP: 0033:0x7f0337e7b377
[ 77.812610][ T6038] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 77.812627][ T6038] RSP: 002b:00007ffec3794c40 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[ 77.812644][ T6038] RAX: ffffffffffffffda RBX: 0000555582fc7400 RCX: 00007f0337e7b377
[ 77.812656][ T6038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 77.812666][ T6038] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[ 77.812676][ T6038] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffec3794cbc
[ 77.812686][ T6038] R13: 00007f0337edc076 R14: 0000555582fc87a0 R15: 00007ffec3794e10
[ 77.812703][ T6038]
[ 77.812708][ T6038]
[ 77.812712][ T6038] Allocated by task 1:
[ 77.812720][ T6038] kasan_save_stack+0x30/0x50
[ 77.812738][ T6038] kasan_save_track+0x14/0x30
[ 77.812754][ T6038] __kasan_kmalloc+0xaa/0xb0
[ 77.812770][ T6038] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 77.812794][ T6038] vidtv_demod_i2c_probe+0x6e/0x8a0
[ 77.812809][ T6038] i2c_device_probe+0x658/0xd10
[ 77.812832][ T6038] really_probe+0x241/0xa60
[ 77.812849][ T6038] __driver_probe_device+0x210/0x460
[ 77.812866][ T6038] driver_probe_device+0x4a/0x140
[ 77.812883][ T6038] __device_attach_driver+0x1df/0x320
[ 77.812900][ T6038] bus_for_each_drv+0x159/0x1e0
[ 77.812923][ T6038] __device_attach+0x1e4/0x4d0
[ 77.812940][ T6038] device_initial_probe+0xaf/0xd0
[ 77.812958][ T6038] bus_probe_device+0x64/0x160
[ 77.812971][ T6038] device_add+0x121d/0x1970
[ 77.812990][ T6038] i2c_new_client_device+0x660/0xd30
[ 77.813016][ T6038] dvb_module_probe+0x165/0x310
[ 77.813039][ T6038] vidtv_bridge_probe+0x370/0xa30
[ 77.813054][ T6038] platform_probe+0x106/0x1d0
[ 77.813077][ T6038] really_probe+0x241/0xa60
[ 77.813091][ T6038] __driver_probe_device+0x210/0x460
[ 77.813108][ T6038] driver_probe_device+0x4a/0x140
[ 77.813124][ T6038] __driver_attach+0x21f/0x5b0
[ 77.813140][ T6038] bus_for_each_dev+0x13e/0x1d0
[ 77.813161][ T6038] bus_add_driver+0x305/0x5b0
[ 77.813174][ T6038] driver_register+0x1e2/0x360
[ 77.813191][ T6038] vidtv_bridge_init+0x52/0x80
[ 77.813207][ T6038] do_one_initcall+0x11c/0x6f0
[ 77.813222][ T6038] kernel_init_freeable+0x6ea/0x7b0
[ 77.813242][ T6038] kernel_init+0x21/0x1e0
[ 77.813270][ T6038] ret_from_fork+0x730/0xd60
[ 77.813286][ T6038] ret_from_fork_asm+0x1a/0x30
[ 77.813301][ T6038]
[ 77.813305][ T6038] Freed by task 6038:
[ 77.813313][ T6038] kasan_save_stack+0x30/0x50
[ 77.813329][ T6038] kasan_save_track+0x14/0x30
[ 77.813345][ T6038] kasan_save_free_info+0x3b/0x70
[ 77.813368][ T6038] __kasan_slab_free+0x5f/0x80
[ 77.813385][ T6038] kfree+0x22b/0x6d0
[ 77.813405][ T6038] i2c_device_remove+0x81/0x280
[ 77.813427][ T6038] device_remove+0xcb/0x180
[ 77.813441][ T6038] device_release_driver_internal+0x44e/0x620
[ 77.813460][ T6038] bus_remove_device+0x2bc/0x560
[ 77.813473][ T6038] device_del+0x376/0x9b0
[ 77.813488][ T6038] device_unregister+0x1d/0xe0
[ 77.813503][ T6038] i2c_unregister_device+0xf5/0x270
[ 77.813525][ T6038] dvb_module_release+0x69/0x90
[ 77.813545][ T6038] vidtv_bridge_remove+0xd8/0x140
[ 77.813560][ T6038] platform_remove+0x5f/0x80
[ 77.813581][ T6038] device_remove+0xcb/0x180
[ 77.813595][ T6038] device_release_driver_internal+0x44e/0x620
[ 77.813614][ T6038] unbind_store+0xf8/0x110
[ 77.813637][ T6038] drv_attr_store+0x74/0xb0
[ 77.813657][ T6038] sysfs_kf_write+0xf2/0x150
[ 77.813674][ T6038] kernfs_fop_write_iter+0x3e0/0x5f0
[ 77.813688][ T6038] vfs_write+0x6af/0x1050
[ 77.813700][ T6038] ksys_write+0x12a/0x250
[ 77.813714][ T6038] do_syscall_64+0x123/0x790
[ 77.813732][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.813747][ T6038]
[ 77.813750][ T6038] The buggy address belongs to the object at ffff88802dee7000
[ 77.813750][ T6038] which belongs to the cache kmalloc-2k of size 2048
[ 77.813763][ T6038] The buggy address is located 800 bytes inside of
[ 77.813763][ T6038] freed 2048-byte region [ffff88802dee7000, ffff88802dee7800)
[ 77.813779][ T6038]
[ 77.813783][ T6038] The buggy address belongs to the physical page:
[ 77.813790][ T6038] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802dee2000 pfn:0x2dee0
[ 77.813805][ T6038] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 77.813818][ T6038] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.813834][ T6038] page_type: f5(slab)
[ 77.813848][ T6038] raw: 00fff00000000240 ffff88801c042f00 ffffea0000f1a010 ffffea0000b03c10
[ 77.813863][ T6038] raw: ffff88802dee2000 0000000000080007 00000000f5000000 0000000000000000
[ 77.813878][ T6038] head: 00fff00000000240 ffff88801c042f00 ffffea0000f1a010 ffffea0000b03c10
[ 77.813892][ T6038] head: ffff88802dee2000 0000000000080007 00000000f5000000 0000000000000000
[ 77.813907][ T6038] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 77.813921][ T6038] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 77.813930][ T6038] page dumped because: kasan: bad access detected
[ 77.813937][ T6038] page_owner tracks the page as allocated
[ 77.813973][ T6038] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 220, tgid 220 (kworker/u33:6), ts 10029293342
[ 77.814000][ T6038] register_failure_stack+0x74/0xb0
[ 77.814018][ T6038] init_page_owner+0x47/0xa40
[ 77.814040][ T6038] page_ext_init+0x71d/0x780
[ 77.814053][ T6038] mm_core_init+0x229/0x270
[ 77.814071][ T6038] page_owner free stack trace missing
[ 77.814076][ T6038]
[ 77.814080][ T6038] Memory state around the buggy address:
[ 77.814088][ T6038] ffff88802dee7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.814099][ T6038] ffff88802dee7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.814111][ T6038] >ffff88802dee7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.814120][ T6038] ^
[ 77.814128][ T6038] ffff88802dee7380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.814139][ T6038] ffff88802dee7400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.814148][ T6038] ==================================================================
[ 77.814157][ T6038] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.124887][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz-executor559 Not tainted syzkaller #0 PREEMPT(full)
[ 78.128905][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.133083][ T6038] Call Trace:
[ 78.134489][ T6038]
[ 78.135751][ T6038] dump_stack_lvl+0x100/0x190
[ 78.137768][ T6038] vpanic+0x553/0x970
[ 78.139459][ T6038] ? __pfx_vpanic+0x10/0x10
[ 78.141350][ T6038] ? __pfx_vprintk_emit+0x10/0x10
[ 78.143468][ T6038] ? dvb_frontend_release+0x536/0x5d0
[ 78.145687][ T6038] panic+0xd1/0xe0
[ 78.147285][ T6038] ? __pfx_panic+0x10/0x10
[ 78.149166][ T6038] ? end_report.part.0+0x23/0x90
[ 78.151247][ T6038] ? rcu_is_watching+0x13/0xc0
[ 78.153252][ T6038] check_panic_on_warn.cold+0x19/0x34
[ 78.155506][ T6038] end_report.part.0+0x3a/0x90
[ 78.157501][ T6038] kasan_report.cold+0xe/0x18
[ 78.159491][ T6038] ? dvb_frontend_release+0x536/0x5d0
[ 78.161705][ T6038] dvb_frontend_release+0x536/0x5d0
[ 78.163874][ T6038] ? __pfx_dvb_frontend_release+0x10/0x10
[ 78.166210][ T6038] __fput+0x3ff/0xb50
[ 78.167897][ T6038] fput_close_sync+0x118/0x250
[ 78.169921][ T6038] ? __pfx_fput_close_sync+0x10/0x10
[ 78.172121][ T6038] __x64_sys_close+0x8b/0x120
[ 78.174083][ T6038] do_syscall_64+0x123/0x790
[ 78.176025][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.178478][ T6038] RIP: 0033:0x7f0337e7b377
[ 78.180352][ T6038] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 78.188211][ T6038] RSP: 002b:00007ffec3794c40 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[ 78.191616][ T6038] RAX: ffffffffffffffda RBX: 0000555582fc7400 RCX: 00007f0337e7b377
[ 78.194863][ T6038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 78.198087][ T6038] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[ 78.201363][ T6038] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffec3794cbc
[ 78.204608][ T6038] R13: 00007f0337edc076 R14: 0000555582fc87a0 R15: 00007ffec3794e10
[ 78.207877][ T6038]
[ 78.209944][ T6038] Kernel Offset: disabled
[ 78.211739][ T6038] Rebooting in 86400 seconds..