[ 74.743333][ T42] kauditd_printk_skb: 10 callbacks suppressed
[ 74.743345][ T42] audit: type=1400 audit(1786798158.967:209): avc: denied { transition } for pid=5976 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.759822][ T42] audit: type=1400 audit(1786798158.977:210): avc: denied { noatsecure } for pid=5976 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.766960][ T42] audit: type=1400 audit(1786798158.977:211): avc: denied { rlimitinh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.773467][ T42] audit: type=1400 audit(1786798158.977:212): avc: denied { siginh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 78.287510][ T42] audit: type=1400 audit(1786798162.507:213): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.343953][ T42] audit: type=1400 audit(1786798162.567:214): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.702664][ T42] audit: type=1400 audit(1786798162.927:215): avc: denied { write } for pid=5986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.769494][ T42] audit: type=1400 audit(1786798162.987:216): avc: denied { write } for pid=5990 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.870712][ T42] audit: type=1400 audit(1786798163.097:217): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.916148][ T42] audit: type=1400 audit(1786798163.137:218): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.016781][ T42] kauditd_printk_skb: 2 callbacks suppressed
[ 80.016793][ T42] audit: type=1400 audit(1786798164.237:221): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.067617][ T42] audit: type=1400 audit(1786798164.287:222): avc: denied { write } for pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.551327][ T42] audit: type=1400 audit(1786798164.777:223): avc: denied { write } for pid=6015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.607838][ T42] audit: type=1400 audit(1786798164.827:224): avc: denied { write } for pid=6019 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.708949][ T42] audit: type=1400 audit(1786798164.927:225): avc: denied { write } for pid=6024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 80.777714][ T42] audit: type=1400 audit(1786798164.997:226): avc: denied { write } for pid=6027 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:2589' (ED25519) to the list of known hosts.
[ 81.319723][ T42] audit: type=1400 audit(1786798165.537:227): avc: denied { write } for pid=6038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 81.426488][ T42] audit: type=1400 audit(1786798165.647:228): avc: denied { write } for pid=6041 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.138900][ T1343] cfg80211: failed to load regulatory.db
[ 100.121182][ T6035] ==================================================================
[ 100.124489][ T6035] BUG: KASAN: use-after-free in filemap_map_pages+0x1b75/0x1f80
[ 100.127625][ T6035] Read of size 8 at addr ffff88803f851a00 by task syz-executor403/6035
[ 100.132811][ T6035]
[ 100.134235][ T6035] CPU: 2 UID: 0 PID: 6035 Comm: syz-executor403 Not tainted syzkaller #0 PREEMPT(full)
[ 100.134257][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 100.134267][ T6035] Call Trace:
[ 100.134299][ T6035]
[ 100.134306][ T6035] dump_stack_lvl+0x100/0x190
[ 100.134332][ T6035] print_report+0x13d/0x4b0
[ 100.134356][ T6035] ? __virt_addr_valid+0x239/0x430
[ 100.134378][ T6035] ? filemap_map_pages+0x1b75/0x1f80
[ 100.134403][ T6035] kasan_report+0xdf/0x1c0
[ 100.134427][ T6035] ? filemap_map_pages+0x1b75/0x1f80
[ 100.134452][ T6035] filemap_map_pages+0x1b75/0x1f80
[ 100.134480][ T6035] ? __pfx_filemap_map_pages+0x10/0x10
[ 100.134506][ T6035] ? __pfx_filemap_map_pages+0x10/0x10
[ 100.134530][ T6035] do_fault+0x985/0x1750
[ 100.134552][ T6035] __handle_mm_fault+0x187d/0x2a00
[ 100.134568][ T6035] ? mt_find+0x45e/0x8e0
[ 100.134590][ T6035] ? __pfx___handle_mm_fault+0x10/0x10
[ 100.134604][ T6035] ? __pfx_mt_find+0x10/0x10
[ 100.134627][ T6035] ? find_vma+0xbf/0x140
[ 100.134644][ T6035] ? __pfx_find_vma+0x10/0x10
[ 100.134664][ T6035] handle_mm_fault+0x37b/0xa30
[ 100.134680][ T6035] do_user_addr_fault+0x74c/0x12f0
[ 100.134708][ T6035] exc_page_fault+0x6f/0xd0
[ 100.134727][ T6035] asm_exc_page_fault+0x26/0x30
[ 100.134743][ T6035] RIP: 0010:fault_in_readable+0xde/0x190
[ 100.134763][ T6035] Code: 68 46 ae ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 77 4c ae ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 62 4c ae ff <44> 8a 33 e8 5a 4c ae ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0
[ 100.134776][ T6035] RSP: 0018:ffffc90003a87af8 EFLAGS: 00050293
[ 100.134791][ T6035] RAX: 0000000000000000 RBX: 00007fe62c200000 RCX: ffffffff825c2758
[ 100.134802][ T6035] RDX: ffff888033b84a80 RSI: ffffffff825c271e RDI: ffff888033b84a80
[ 100.134812][ T6035] RBP: 00007fe62c200001 R08: 0000000000000006 R09: 00007fe62c200001
[ 100.134821][ T6035] R10: 00007fe62c200000 R11: 0000000000000000 R12: 0000000000000001
[ 100.134830][ T6035] R13: 1ffff92000750f60 R14: 0000000000000000 R15: 00007fe62c200000
[ 100.134847][ T6035] ? fault_in_readable+0x118/0x190
[ 100.134865][ T6035] ? fault_in_readable+0xde/0x190
[ 100.134883][ T6035] ? fault_in_readable+0xde/0x190
[ 100.134901][ T6035] ? __pfx_fault_in_readable+0x10/0x10
[ 100.134920][ T6035] fault_in_iov_iter_readable+0x101/0x2c0
[ 100.134943][ T6035] generic_perform_write+0x863/0xa40
[ 100.134968][ T6035] ? __pfx_generic_perform_write+0x10/0x10
[ 100.134990][ T6035] ? file_update_time_flags+0x373/0x500
[ 100.135013][ T6035] shmem_file_write_iter+0x10e/0x140
[ 100.135034][ T6035] vfs_write+0x6ac/0x1050
[ 100.135049][ T6035] ? __pfx_shmem_file_write_iter+0x10/0x10
[ 100.135068][ T6035] ? __pfx_vfs_write+0x10/0x10
[ 100.135081][ T6035] ? find_held_lock+0x2b/0x80
[ 100.135101][ T6035] __x64_sys_pwrite64+0x1eb/0x250
[ 100.135117][ T6035] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 100.135133][ T6035] do_syscall_64+0x115/0x870
[ 100.135151][ T6035] ? clear_bhb_loop+0x70/0xc0
[ 100.135168][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.135183][ T6035] RIP: 0033:0x7fe62c7fce5e
[ 100.135197][ T6035] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 100.135211][ T6035] RSP: 002b:00007fe62b9fe1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 100.135224][ T6035] RAX: ffffffffffffffda RBX: 00007fe62b9fe6c0 RCX: 00007fe62c7fce5e
[ 100.135234][ T6035] RDX: 0000000000000001 RSI: 00007fe62c200000 RDI: 0000000000000003
[ 100.135243][ T6035] RBP: 0000000000000021 R08: 0000000000000000 R09: 0000000000000000
[ 100.135252][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffd0
[ 100.135261][ T6035] R13: 0000000000000000 R14: 00007ffdde346d90 R15: 00007ffdde346e78
[ 100.135275][ T6035]
[ 100.135281][ T6035]
[ 100.261607][ T6035] The buggy address belongs to the physical page:
[ 100.264058][ T6035] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3f851
[ 100.267900][ T6035] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 100.270631][ T6035] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 100.273878][ T6035] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 100.277091][ T6035] page dumped because: kasan: bad access detected
[ 100.279128][ T6035] page_owner tracks the page as freed
[ 100.281072][ T6035] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 6004, tgid 6004 (cmp), ts 79653237963, free_ts 79740307238
[ 100.287690][ T6035] post_alloc_hook+0xfd/0x120
[ 100.289518][ T6035] get_page_from_freelist+0xf48/0x3530
[ 100.291530][ T6035] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 100.293784][ T6035] alloc_pages_mpol+0x1fb/0x540
[ 100.295627][ T6035] alloc_pages_noprof+0x1a/0x160
[ 100.297027][ T6035] __pmd_alloc+0x3b/0x950
[ 100.298293][ T6035] __handle_mm_fault+0xa9c/0x2a00
[ 100.300021][ T6035] handle_mm_fault+0x37b/0xa30
[ 100.301876][ T6035] do_user_addr_fault+0x5a3/0x12f0
[ 100.303909][ T6035] exc_page_fault+0x6f/0xd0
[ 100.305577][ T6035] asm_exc_page_fault+0x26/0x30
[ 100.307014][ T6035] page last free pid 6002 tgid 6002 stack trace:
[ 100.308943][ T6035] __free_frozen_pages+0x79f/0x1090
[ 100.310532][ T6035] tlb_remove_table_rcu+0x2cf/0x380
[ 100.311889][ T6035] rcu_core+0x5a2/0x10d0
[ 100.313008][ T6035] handle_softirqs+0x1ea/0x9b0
[ 100.314404][ T6035] __irq_exit_rcu+0x162/0x210
[ 100.315803][ T6035] irq_exit_rcu+0x9/0x30
[ 100.317283][ T6035] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 100.319196][ T6035] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 100.321043][ T6035]
[ 100.321795][ T6035] Memory state around the buggy address:
[ 100.323478][ T6035] ffff88803f851900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.326200][ T6035] ffff88803f851980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.328569][ T6035] >ffff88803f851a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.330998][ T6035] ^
[ 100.332318][ T6035] ffff88803f851a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.334959][ T6035] ffff88803f851b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.337622][ T6035] ==================================================================
[ 100.340612][ T6035] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.342818][ T6035] CPU: 2 UID: 0 PID: 6035 Comm: syz-executor403 Not tainted syzkaller #0 PREEMPT(full)
[ 100.346104][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 100.349295][ T6035] Call Trace:
[ 100.350423][ T6035]
[ 100.351548][ T6035] dump_stack_lvl+0x100/0x190
[ 100.353371][ T6035] vpanic+0x552/0x970
[ 100.354914][ T6035] ? __pfx_vpanic+0x10/0x10
[ 100.356600][ T6035] ? mark_held_locks+0x40/0x70
[ 100.358509][ T6035] ? irqentry_exit+0x24d/0xa00
[ 100.360404][ T6035] ? filemap_map_pages+0x1b75/0x1f80
[ 100.362536][ T6035] panic+0xd1/0xe0
[ 100.364027][ T6035] ? __pfx_panic+0x10/0x10
[ 100.365760][ T6035] ? check_panic_on_warn+0x1f/0x90
[ 100.367658][ T6035] check_panic_on_warn.cold+0x19/0x34
[ 100.369460][ T6035] end_report.part.0+0x3a/0x90
[ 100.371110][ T6035] kasan_report.cold+0xe/0x18
[ 100.372720][ T6035] ? filemap_map_pages+0x1b75/0x1f80
[ 100.374547][ T6035] filemap_map_pages+0x1b75/0x1f80
[ 100.376401][ T6035] ? __pfx_filemap_map_pages+0x10/0x10
[ 100.378528][ T6035] ? __pfx_filemap_map_pages+0x10/0x10
[ 100.380632][ T6035] do_fault+0x985/0x1750
[ 100.382277][ T6035] __handle_mm_fault+0x187d/0x2a00
[ 100.384253][ T6035] ? mt_find+0x45e/0x8e0
[ 100.386003][ T6035] ? __pfx___handle_mm_fault+0x10/0x10
[ 100.388226][ T6035] ? __pfx_mt_find+0x10/0x10
[ 100.390006][ T6035] ? find_vma+0xbf/0x140
[ 100.391572][ T6035] ? __pfx_find_vma+0x10/0x10
[ 100.393382][ T6035] handle_mm_fault+0x37b/0xa30
[ 100.395215][ T6035] do_user_addr_fault+0x74c/0x12f0
[ 100.397146][ T6035] exc_page_fault+0x6f/0xd0
[ 100.398696][ T6035] asm_exc_page_fault+0x26/0x30
[ 100.400253][ T6035] RIP: 0010:fault_in_readable+0xde/0x190
[ 100.402185][ T6035] Code: 68 46 ae ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 77 4c ae ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 62 4c ae ff <44> 8a 33 e8 5a 4c ae ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0
[ 100.408823][ T6035] RSP: 0018:ffffc90003a87af8 EFLAGS: 00050293
[ 100.410949][ T6035] RAX: 0000000000000000 RBX: 00007fe62c200000 RCX: ffffffff825c2758
[ 100.413830][ T6035] RDX: ffff888033b84a80 RSI: ffffffff825c271e RDI: ffff888033b84a80
[ 100.416616][ T6035] RBP: 00007fe62c200001 R08: 0000000000000006 R09: 00007fe62c200001
[ 100.419305][ T6035] R10: 00007fe62c200000 R11: 0000000000000000 R12: 0000000000000001
[ 100.421965][ T6035] R13: 1ffff92000750f60 R14: 0000000000000000 R15: 00007fe62c200000
[ 100.424874][ T6035] ? fault_in_readable+0x118/0x190
[ 100.426842][ T6035] ? fault_in_readable+0xde/0x190
[ 100.428752][ T6035] ? fault_in_readable+0xde/0x190
[ 100.430508][ T6035] ? __pfx_fault_in_readable+0x10/0x10
[ 100.432423][ T6035] fault_in_iov_iter_readable+0x101/0x2c0
[ 100.434581][ T6035] generic_perform_write+0x863/0xa40
[ 100.436574][ T6035] ? __pfx_generic_perform_write+0x10/0x10
[ 100.438528][ T6035] ? file_update_time_flags+0x373/0x500
[ 100.440480][ T6035] shmem_file_write_iter+0x10e/0x140
[ 100.442546][ T6035] vfs_write+0x6ac/0x1050
[ 100.444279][ T6035] ? __pfx_shmem_file_write_iter+0x10/0x10
[ 100.446228][ T6035] ? __pfx_vfs_write+0x10/0x10
[ 100.447902][ T6035] ? find_held_lock+0x2b/0x80
[ 100.449638][ T6035] __x64_sys_pwrite64+0x1eb/0x250
[ 100.451560][ T6035] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 100.453595][ T6035] do_syscall_64+0x115/0x870
[ 100.455286][ T6035] ? clear_bhb_loop+0x70/0xc0
[ 100.456956][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.459173][ T6035] RIP: 0033:0x7fe62c7fce5e
[ 100.460826][ T6035] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 100.468047][ T6035] RSP: 002b:00007fe62b9fe1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 100.471130][ T6035] RAX: ffffffffffffffda RBX: 00007fe62b9fe6c0 RCX: 00007fe62c7fce5e
[ 100.474092][ T6035] RDX: 0000000000000001 RSI: 00007fe62c200000 RDI: 0000000000000003
[ 100.477043][ T6035] RBP: 0000000000000021 R08: 0000000000000000 R09: 0000000000000000
[ 100.479984][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffd0
[ 100.482509][ T6035] R13: 0000000000000000 R14: 00007ffdde346d90 R15: 00007ffdde346e78
[ 100.485080][ T6035]
[ 100.487093][ T6035] Kernel Offset: disabled
[ 100.488817][ T6035] Rebooting in 86400 seconds..