[ 66.991557][ T43] kauditd_printk_skb: 6 callbacks suppressed
[ 66.991575][ T43] audit: type=1400 audit(1791694685.103:202): avc: denied { write } for pid=5978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.047690][ T43] audit: type=1400 audit(1791694685.153:203): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.131768][ T43] audit: type=1400 audit(1791694685.243:204): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.195581][ T43] audit: type=1400 audit(1791694685.303:205): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.369704][ T43] audit: type=1400 audit(1791694685.483:206): avc: denied { write } for pid=5994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.432754][ T43] audit: type=1400 audit(1791694685.543:207): avc: denied { write } for pid=5997 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.525966][ T43] audit: type=1400 audit(1791694685.633:208): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.591468][ T43] audit: type=1400 audit(1791694685.703:209): avc: denied { write } for pid=6003 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.767618][ T43] audit: type=1400 audit(1791694685.873:210): avc: denied { write } for pid=6006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.822578][ T43] audit: type=1400 audit(1791694685.933:211): avc: denied { write } for pid=6009 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:65409' (ED25519) to the list of known hosts.
[+] calloc successful.
[+] add_key successful.
[+] mkdir /tmp/lower successful.
[+] mkdir /tmp/upper successful.
[+] unlink successful.
[+] mount ecryptfs successful.
[ 69.690564][ T6037] ==================================================================
[ 69.690577][ T6037] BUG: KASAN: slab-out-of-bounds in ecryptfs_from_hex+0x18c/0x1d0
[ 69.690601][ T6037] Read of size 1 at addr ffff888048a432e0 by task syz-executor328/6037
[ 69.690614][ T6037]
[ 69.690623][ T6037] CPU: 3 UID: 0 PID: 6037 Comm: syz-executor328 Not tainted syzkaller #0 PREEMPT(full)
[ 69.690640][ T6037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 69.690656][ T6037] Call Trace:
[ 69.690661][ T6037]
[ 69.690667][ T6037] dump_stack_lvl+0x100/0x190
[ 69.690691][ T6037] print_report+0x13d/0x4b0
[ 69.690717][ T6037] ? __virt_addr_valid+0x239/0x430
[ 69.690736][ T6037] ? ecryptfs_from_hex+0x18c/0x1d0
[ 69.690754][ T6037] kasan_report+0xdf/0x1c0
[ 69.690792][ T6037] ? ecryptfs_from_hex+0x18c/0x1d0
[ 69.690810][ T6037] ecryptfs_from_hex+0x18c/0x1d0
[ 69.690826][ T6037] ? __pfx_ecryptfs_from_hex+0x10/0x10
[ 69.690843][ T6037] write_tag_3_packet+0x145/0x1430
[ 69.690862][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x17b/0x3d0
[ 69.690885][ T6037] ? __pfx_write_tag_3_packet+0x10/0x10
[ 69.690906][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x260/0x3d0
[ 69.690927][ T6037] ? __mutex_unlock_slowpath+0x35d/0x930
[ 69.690951][ T6037] ? down_write+0x146/0x1f0
[ 69.690975][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x260/0x3d0
[ 69.690996][ T6037] ecryptfs_generate_key_packet_set+0x7ae/0x1880
[ 69.691016][ T6037] ? crng_make_state+0x477/0x6c0
[ 69.691036][ T6037] ? __asan_memset+0x23/0x50
[ 69.691052][ T6037] ? __pfx_ecryptfs_generate_key_packet_set+0x10/0x10
[ 69.691080][ T6037] ecryptfs_write_metadata+0x590/0x930
[ 69.691100][ T6037] ? __pfx_ecryptfs_write_metadata+0x10/0x10
[ 69.691120][ T6037] ? ecryptfs_get_lower_file+0x8e/0x220
[ 69.691136][ T6037] ecryptfs_initialize_file+0xb6/0x180
[ 69.691151][ T6037] ecryptfs_create+0x393/0x550
[ 69.691165][ T6037] ? __pfx_ecryptfs_create+0x10/0x10
[ 69.691178][ T6037] lookup_open+0x1255/0x1990
[ 69.691198][ T6037] path_openat+0xa2c/0x2440
[ 69.691220][ T6037] ? __pfx_path_openat+0x10/0x10
[ 69.691242][ T6037] do_file_open+0x20e/0x430
[ 69.691263][ T6037] ? __pfx_do_file_open+0x10/0x10
[ 69.691289][ T6037] ? _raw_spin_unlock+0x28/0x50
[ 69.691305][ T6037] ? alloc_fd+0x471/0x7a0
[ 69.691328][ T6037] do_sys_openat2+0x10f/0x1e0
[ 69.691341][ T6037] ? __pfx_do_sys_openat2+0x10/0x10
[ 69.691356][ T6037] ? __x64_sys_mount+0x239/0x310
[ 69.691372][ T6037] __x64_sys_openat+0x12d/0x210
[ 69.691385][ T6037] ? __pfx___x64_sys_openat+0x10/0x10
[ 69.691398][ T6037] ? ksys_write+0x1ac/0x250
[ 69.691418][ T6037] do_syscall_64+0x123/0x790
[ 69.691439][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.691455][ T6037] RIP: 0033:0x7fde6f0cb677
[ 69.691466][ T6037] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 69.691480][ T6037] RSP: 002b:00007ffc67310690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 69.691495][ T6037] RAX: ffffffffffffffda RBX: 0000555560ff1400 RCX: 00007fde6f0cb677
[ 69.691504][ T6037] RDX: 0000000000000042 RSI: 00007fde6f1040d5 RDI: ffffffffffffff9c
[ 69.691514][ T6037] RBP: 00007fde6f104095 R08: 0000000000000000 R09: 0000000000000000
[ 69.691523][ T6037] R10: 00000000000001b6 R11: 0000000000000202 R12: 00007ffc67310858
[ 69.691532][ T6037] R13: 0000000000000002 R14: 00007fde6f12ecc0 R15: 0000000000000002
[ 69.691545][ T6037]
[ 69.691551][ T6037]
[ 69.691554][ T6037] Allocated by task 6037:
[ 69.691561][ T6037] kasan_save_stack+0x30/0x50
[ 69.691578][ T6037] kasan_save_track+0x14/0x30
[ 69.691595][ T6037] __kasan_kmalloc+0xaa/0xb0
[ 69.691611][ T6037] __kmalloc_noprof+0x32f/0x840
[ 69.691628][ T6037] user_preparse+0x9b/0x1c0
[ 69.691647][ T6037] __key_create_or_update+0x413/0xe30
[ 69.691678][ T6037] key_create_or_update+0x42/0x60
[ 69.691696][ T6037] __do_sys_add_key+0x2e8/0x460
[ 69.691709][ T6037] do_syscall_64+0x123/0x790
[ 69.691727][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.691740][ T6037]
[ 69.691743][ T6037] The buggy address belongs to the object at ffff888048a43000
[ 69.691743][ T6037] which belongs to the cache kmalloc-1k of size 1024
[ 69.691754][ T6037] The buggy address is located 0 bytes to the right of
[ 69.691754][ T6037] allocated 736-byte region [ffff888048a43000, ffff888048a432e0)
[ 69.691767][ T6037]
[ 69.691771][ T6037] The buggy address belongs to the physical page:
[ 69.691777][ T6037] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888048a45000 pfn:0x48a40
[ 69.691790][ T6037] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 69.691801][ T6037] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 69.691814][ T6037] page_type: f5(slab)
[ 69.691826][ T6037] raw: 00fff00000000240 ffff88801d042dc0 ffff88801d040888 ffffea00015b1010
[ 69.691839][ T6037] raw: ffff888048a45000 0000000000100008 00000000f5000000 0000000000000000
[ 69.691851][ T6037] head: 00fff00000000240 ffff88801d042dc0 ffff88801d040888 ffffea00015b1010
[ 69.691863][ T6037] head: ffff888048a45000 0000000000100008 00000000f5000000 0000000000000000
[ 69.691875][ T6037] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 69.691887][ T6037] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 69.691894][ T6037] page dumped because: kasan: bad access detected
[ 69.691901][ T6037] page_owner tracks the page as allocated
[ 69.691905][ T6037] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5773, tgid 5773 (syz-executor), ts 50740633132
[ 69.691928][ T6037] post_alloc_hook+0xfd/0x120
[ 69.691940][ T6037] get_page_from_freelist+0x110d/0x35d0
[ 69.691955][ T6037] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 69.691970][ T6037] new_slab+0xa9/0x6e0
[ 69.691982][ T6037] refill_objects+0xe3/0x410
[ 69.691996][ T6037] __pcs_replace_empty_main+0x35e/0x650
[ 69.692009][ T6037] __kmalloc_noprof+0x67c/0x840
[ 69.692024][ T6037] batadv_hash_new+0x74/0x2e0
[ 69.692043][ T6037] batadv_bla_init+0x361/0x700
[ 69.692055][ T6037] batadv_mesh_init+0x550/0x8d0
[ 69.692073][ T6037] batadv_meshif_init_late+0xb26/0xe60
[ 69.692085][ T6037] register_netdevice+0x685/0x25a0
[ 69.692100][ T6037] batadv_meshif_newlink+0x8f/0xc0
[ 69.692119][ T6037] rtnl_newlink+0x1697/0x2620
[ 69.692133][ T6037] rtnetlink_rcv_msg+0x95e/0xe90
[ 69.692147][ T6037] netlink_rcv_skb+0x159/0x420
[ 69.692167][ T6037] page last free pid 5752 tgid 5752 ts 50049458993 stack trace:
[ 69.692177][ T6037] free_pages_prepare+0x586/0xe00
[ 69.692189][ T6037] __free_contig_range_common+0x14f/0x250
[ 69.692202][ T6037] free_pages_bulk+0x12a/0x200
[ 69.692216][ T6037] vm_area_free_pages+0xb2/0x2a0
[ 69.692231][ T6037] vfree+0xf7/0x6d0
[ 69.692248][ T6037] kcov_close+0x34/0x60
[ 69.692263][ T6037] __fput+0x400/0xb60
[ 69.692282][ T6037] task_work_run+0x150/0x240
[ 69.692301][ T6037] do_exit+0x8da/0x2a50
[ 69.692317][ T6037] do_group_exit+0xd5/0x2a0
[ 69.692334][ T6037] get_signal+0x1ec7/0x21e0
[ 69.692348][ T6037] arch_do_signal_or_restart+0x91/0x7e0
[ 69.692367][ T6037] exit_to_user_mode_loop+0x139/0x700
[ 69.692385][ T6037] do_syscall_64+0x661/0x790
[ 69.692402][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.692415][ T6037]
[ 69.692418][ T6037] Memory state around the buggy address:
[ 69.692425][ T6037] ffff888048a43180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.692434][ T6037] ffff888048a43200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.692443][ T6037] >ffff888048a43280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 69.692450][ T6037] ^
[ 69.692458][ T6037] ffff888048a43300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.692467][ T6037] ffff888048a43380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.692474][ T6037] ==================================================================
[ 69.692537][ T6037] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.956459][ T6037] CPU: 3 UID: 0 PID: 6037 Comm: syz-executor328 Not tainted syzkaller #0 PREEMPT(full)
[ 69.959264][ T6037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 69.962216][ T6037] Call Trace:
[ 69.963269][ T6037]
[ 69.964205][ T6037] dump_stack_lvl+0x100/0x190
[ 69.965586][ T6037] vpanic+0x553/0x970
[ 69.966788][ T6037] ? __pfx_vpanic+0x10/0x10
[ 69.968203][ T6037] ? mark_held_locks+0x40/0x70
[ 69.969663][ T6037] ? irqentry_exit+0x24d/0xa10
[ 69.971127][ T6037] ? ecryptfs_from_hex+0x18c/0x1d0
[ 69.972699][ T6037] panic+0xd1/0xe0
[ 69.973900][ T6037] ? __pfx_panic+0x10/0x10
[ 69.975263][ T6037] ? ecryptfs_from_hex+0x18c/0x1d0
[ 69.976849][ T6037] ? preempt_schedule_common+0x3c/0xb0
[ 69.978570][ T6037] check_panic_on_warn.cold+0x19/0x34
[ 69.980216][ T6037] end_report.part.0+0x3a/0x90
[ 69.981668][ T6037] kasan_report.cold+0xe/0x18
[ 69.983158][ T6037] ? ecryptfs_from_hex+0x18c/0x1d0
[ 69.984944][ T6037] ecryptfs_from_hex+0x18c/0x1d0
[ 69.986495][ T6037] ? __pfx_ecryptfs_from_hex+0x10/0x10
[ 69.988126][ T6037] write_tag_3_packet+0x145/0x1430
[ 69.989641][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x17b/0x3d0
[ 69.991664][ T6037] ? __pfx_write_tag_3_packet+0x10/0x10
[ 69.993355][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x260/0x3d0
[ 69.996000][ T6037] ? __mutex_unlock_slowpath+0x35d/0x930
[ 69.997894][ T6037] ? down_write+0x146/0x1f0
[ 69.999313][ T6037] ? ecryptfs_find_global_auth_tok_for_sig+0x260/0x3d0
[ 70.001387][ T6037] ecryptfs_generate_key_packet_set+0x7ae/0x1880
[ 70.003372][ T6037] ? crng_make_state+0x477/0x6c0
[ 70.005036][ T6037] ? __asan_memset+0x23/0x50
[ 70.006497][ T6037] ? __pfx_ecryptfs_generate_key_packet_set+0x10/0x10
[ 70.008587][ T6037] ecryptfs_write_metadata+0x590/0x930
[ 70.010261][ T6037] ? __pfx_ecryptfs_write_metadata+0x10/0x10
[ 70.012078][ T6037] ? ecryptfs_get_lower_file+0x8e/0x220
[ 70.013860][ T6037] ecryptfs_initialize_file+0xb6/0x180
[ 70.016070][ T6037] ecryptfs_create+0x393/0x550
[ 70.018021][ T6037] ? __pfx_ecryptfs_create+0x10/0x10
[ 70.020187][ T6037] lookup_open+0x1255/0x1990
[ 70.021594][ T6037] path_openat+0xa2c/0x2440
[ 70.023016][ T6037] ? __pfx_path_openat+0x10/0x10
[ 70.024581][ T6037] do_file_open+0x20e/0x430
[ 70.025996][ T6037] ? __pfx_do_file_open+0x10/0x10
[ 70.027526][ T6037] ? _raw_spin_unlock+0x28/0x50
[ 70.028993][ T6037] ? alloc_fd+0x471/0x7a0
[ 70.030317][ T6037] do_sys_openat2+0x10f/0x1e0
[ 70.031781][ T6037] ? __pfx_do_sys_openat2+0x10/0x10
[ 70.033419][ T6037] ? __x64_sys_mount+0x239/0x310
[ 70.034976][ T6037] __x64_sys_openat+0x12d/0x210
[ 70.036480][ T6037] ? __pfx___x64_sys_openat+0x10/0x10
[ 70.038122][ T6037] ? ksys_write+0x1ac/0x250
[ 70.039523][ T6037] do_syscall_64+0x123/0x790
[ 70.040922][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.042741][ T6037] RIP: 0033:0x7fde6f0cb677
[ 70.044229][ T6037] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 70.050017][ T6037] RSP: 002b:00007ffc67310690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 70.052514][ T6037] RAX: ffffffffffffffda RBX: 0000555560ff1400 RCX: 00007fde6f0cb677
[ 70.054965][ T6037] RDX: 0000000000000042 RSI: 00007fde6f1040d5 RDI: ffffffffffffff9c
[ 70.057350][ T6037] RBP: 00007fde6f104095 R08: 0000000000000000 R09: 0000000000000000
[ 70.059800][ T6037] R10: 00000000000001b6 R11: 0000000000000202 R12: 00007ffc67310858
[ 70.062171][ T6037] R13: 0000000000000002 R14: 00007fde6f12ecc0 R15: 0000000000000002
[ 70.064717][ T6037]
[ 70.066369][ T6037] Kernel Offset: disabled
[ 70.067706][ T6037] Rebooting in 86400 seconds..