[ 68.444454][ T450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.453480][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.464258][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.473509][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.482838][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.843803][ T254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.389984][ T6559] can: request_module (can-proto-0) failed. [ 70.401517][ T6559] can: request_module (can-proto-0) failed. [ 70.412724][ T6559] can: request_module (can-proto-0) failed. [ 71.093478][ T254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.673712][ T254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.755421][ T254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.941700][ T254] device hsr_slave_0 left promiscuous mode [ 74.948319][ T254] device hsr_slave_1 left promiscuous mode [ 74.954545][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.962224][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.970645][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.978450][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.988273][ T254] device bridge_slave_1 left promiscuous mode [ 74.994776][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.003061][ T254] device bridge_slave_0 left promiscuous mode [ 75.009520][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.018987][ T254] device veth1_macvtap left promiscuous mode [ 75.025106][ T254] device veth0_macvtap left promiscuous mode [ 75.031223][ T254] device veth1_vlan left promiscuous mode [ 75.037730][ T254] device veth0_vlan left promiscuous mode [ 75.896817][ T22] ================================================================== [ 75.904889][ T22] BUG: KFENCE: use-after-free read in kvm_fastop_exception+0xf68/0x1056 [ 75.904889][ T22] [ 75.915467][ T22] Use-after-free read at 0xffff88823bda8020 (in kfence-#211): [ 75.922909][ T22] kvm_fastop_exception+0xf68/0x1056 [ 75.928182][ T22] d_lookup+0xdd/0x170 [ 75.932251][ T22] lookup_dcache+0x1e/0x130 [ 75.936750][ T22] __lookup_hash+0x29/0x180 [ 75.941244][ T22] kern_path_locked+0x17e/0x320 [ 75.946091][ T22] handle_remove+0xa2/0x5fe [ 75.950588][ T22] devtmpfsd+0x1ba/0x2ab [ 75.954835][ T22] kthread+0x3e5/0x4d0 [ 75.959170][ T22] ret_from_fork+0x1f/0x30 [ 75.963663][ T22] [ 75.965972][ T22] kfence-#211: 0xffff88823bda8000-0xffff88823bda8fff, size=4096, cache=names_cache [ 75.965972][ T22] [ 75.977410][ T22] allocated by task 22 on cpu 1 at 75.896775s: [ 75.983563][ T22] getname_kernel+0x4e/0x370 [ 75.988241][ T22] kern_path_locked+0x71/0x320 [ 75.993006][ T22] handle_remove+0xa2/0x5fe [ 75.997519][ T22] devtmpfsd+0x1ba/0x2ab [ 76.001763][ T22] kthread+0x3e5/0x4d0 [ 76.005829][ T22] ret_from_fork+0x1f/0x30 [ 76.010238][ T22] [ 76.012550][ T22] freed by task 22 on cpu 1 at 75.896796s: [ 76.018362][ T22] putname.part.0+0xe9/0x130 [ 76.022942][ T22] kern_path_locked+0xc2/0x320 [ 76.027718][ T22] handle_remove+0xa2/0x5fe [ 76.032309][ T22] devtmpfsd+0x1ba/0x2ab [ 76.036540][ T22] kthread+0x3e5/0x4d0 [ 76.040604][ T22] ret_from_fork+0x1f/0x30 [ 76.045025][ T22] [ 76.047341][ T22] CPU: 1 PID: 22 Comm: kdevtmpfs Not tainted 5.14.0-rc6-next-20210820-syzkaller #0 [ 76.056610][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.066649][ T22] RIP: 0010:kvm_fastop_exception+0xf68/0x1056 [ 76.072712][ T22] Code: d3 ed e9 e4 91 6d f8 49 8d 0e 48 83 e1 f8 4c 8b 21 41 8d 0e 83 e1 07 c1 e1 03 49 d3 ec e9 3f 9f 6d f8 49 8d 4d 00 48 83 e1 f8 <4c> 8b 21 41 8d 4d 00 83 e1 07 c1 e1 03 49 d3 ec e9 39 a9 6d f8 bd [ 76.092393][ T22] RSP: 0018:ffffc90000dcfaa8 EFLAGS: 00010282 [ 76.098449][ T22] RAX: 0000003336706174 RBX: ffff88806c831068 RCX: ffff88823bda8020 [ 76.106437][ T22] RDX: ffffed100d906214 RSI: 0000000000000005 RDI: 0000000000000007 [ 76.114394][ T22] RBP: 0000000000000005 R08: 0000000000000000 R09: ffff88806c831098 [ 76.122558][ T22] R10: ffffed100d906213 R11: 0000000000000000 R12: ffff88823bda8020 [ 76.130638][ T22] R13: ffff88823bda8020 R14: ffff88806c831098 R15: dffffc0000000000 [ 76.138693][ T22] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 76.147612][ T22] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.154201][ T22] CR2: ffff88823bda8020 CR3: 000000000b68e000 CR4: 00000000001506e0 [ 76.162162][ T22] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.170294][ T22] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.178254][ T22] Call Trace: [ 76.181534][ T22] ? d_lookup+0x158/0x170 [ 76.185871][ T22] d_lookup+0xdd/0x170 [ 76.190103][ T22] lookup_dcache+0x1e/0x130 [ 76.194728][ T22] __lookup_hash+0x29/0x180 [ 76.199326][ T22] kern_path_locked+0x17e/0x320 [ 76.204176][ T22] ? filename_lookup+0x80/0x80 [ 76.209020][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.214470][ T22] ? lock_release+0x522/0x720 [ 76.219140][ T22] handle_remove+0xa2/0x5fe [ 76.223646][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 76.229536][ T22] ? trace_hardirqs_on+0x38/0x1c0 [ 76.234558][ T22] ? trace_hardirqs_on+0x51/0x1c0 [ 76.239580][ T22] ? finish_task_switch.isra.0+0x21c/0xa20 [ 76.245377][ T22] ? finish_task_switch.isra.0+0x226/0xa20 [ 76.251189][ T22] ? finish_task_switch.isra.0+0x21c/0xa20 [ 76.256986][ T22] ? __switch_to+0x5cc/0x1060 [ 76.261660][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.267202][ T22] ? lock_acquire+0x442/0x510 [ 76.271875][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.277321][ T22] ? lock_release+0x522/0x720 [ 76.281986][ T22] ? devtmpfsd+0xaa/0x2ab [ 76.286575][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 76.291424][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 76.296439][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 76.301385][ T22] devtmpfsd+0x1ba/0x2ab [ 76.305623][ T22] ? kobject_put+0xbd/0x540 [ 76.310685][ T22] ? dmar_validate_one_drhd+0x255/0x255 [ 76.316272][ T22] kthread+0x3e5/0x4d0 [ 76.320354][ T22] ? set_kthread_struct+0x130/0x130 [ 76.325559][ T22] ret_from_fork+0x1f/0x30 [ 76.329985][ T22] ================================================================== [ 76.338033][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 76.344609][ T22] CPU: 1 PID: 22 Comm: kdevtmpfs Not tainted 5.14.0-rc6-next-20210820-syzkaller #0 [ 76.353988][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.364213][ T22] Call Trace: [ 76.367829][ T22] dump_stack_lvl+0xcd/0x134 [ 76.372425][ T22] panic+0x2af/0x6d5 [ 76.376321][ T22] ? __warn_printk+0xf0/0xf0 [ 76.380901][ T22] ? ret_from_fork+0x1f/0x30 [ 76.385481][ T22] ? kfence_report_error.cold+0x2fa/0xa76 [ 76.391195][ T22] kfence_report_error.cold+0x30b/0xa76 [ 76.396733][ T22] ? kvm_fastop_exception+0xf68/0x1056 [ 76.402630][ T22] ? kfence_print_object+0x2e0/0x2e0 [ 76.407996][ T22] ? kvm_fastop_exception+0xf68/0x1056 [ 76.413529][ T22] ? d_lookup+0xdd/0x170 [ 76.417760][ T22] ? lookup_dcache+0x1e/0x130 [ 76.422448][ T22] ? __lookup_hash+0x29/0x180 [ 76.427200][ T22] ? kern_path_locked+0x17e/0x320 [ 76.432389][ T22] ? handle_remove+0xa2/0x5fe [ 76.437147][ T22] ? devtmpfsd+0x1ba/0x2ab [ 76.441551][ T22] ? kthread+0x3e5/0x4d0 [ 76.445783][ T22] ? ret_from_fork+0x1f/0x30 [ 76.450383][ T22] kfence_handle_page_fault+0x205/0x640 [ 76.455922][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.461382][ T22] page_fault_oops+0x1c5/0x6b0 [ 76.466483][ T22] ? arch_stack_walk+0x5c/0xe0 [ 76.471235][ T22] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 76.477467][ T22] ? is_prefetch.constprop.0+0xb7/0x530 [ 76.483000][ T22] ? dump_pagetable+0xc0/0xc0 [ 76.487699][ T22] ? bpf_ksym_find+0x171/0x1c0 [ 76.492458][ T22] ? pgtable_bad+0x90/0x90 [ 76.496866][ T22] ? search_bpf_extables+0x1d6/0x2f0 [ 76.502140][ T22] ? kvm_fastop_exception+0xf68/0x1056 [ 76.507601][ T22] kernelmode_fixup_or_oops+0x221/0x280 [ 76.513164][ T22] __bad_area_nosemaphore+0x372/0x400 [ 76.519062][ T22] ? lock_acquire+0x442/0x510 [ 76.523730][ T22] do_kern_addr_fault+0x5f/0x80 [ 76.528572][ T22] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 76.534813][ T22] exc_page_fault+0x155/0x180 [ 76.539665][ T22] asm_exc_page_fault+0x1e/0x30 [ 76.544510][ T22] RIP: 0010:kvm_fastop_exception+0xf68/0x1056 [ 76.550743][ T22] Code: d3 ed e9 e4 91 6d f8 49 8d 0e 48 83 e1 f8 4c 8b 21 41 8d 0e 83 e1 07 c1 e1 03 49 d3 ec e9 3f 9f 6d f8 49 8d 4d 00 48 83 e1 f8 <4c> 8b 21 41 8d 4d 00 83 e1 07 c1 e1 03 49 d3 ec e9 39 a9 6d f8 bd [ 76.570347][ T22] RSP: 0018:ffffc90000dcfaa8 EFLAGS: 00010282 [ 76.576490][ T22] RAX: 0000003336706174 RBX: ffff88806c831068 RCX: ffff88823bda8020 [ 76.584455][ T22] RDX: ffffed100d906214 RSI: 0000000000000005 RDI: 0000000000000007 [ 76.592850][ T22] RBP: 0000000000000005 R08: 0000000000000000 R09: ffff88806c831098 [ 76.600805][ T22] R10: ffffed100d906213 R11: 0000000000000000 R12: ffff88823bda8020 [ 76.608765][ T22] R13: ffff88823bda8020 R14: ffff88806c831098 R15: dffffc0000000000 [ 76.616904][ T22] ? __d_lookup+0x37c/0x730 [ 76.621403][ T22] ? d_lookup+0x158/0x170 [ 76.625729][ T22] d_lookup+0xdd/0x170 [ 76.629792][ T22] lookup_dcache+0x1e/0x130 [ 76.634289][ T22] __lookup_hash+0x29/0x180 [ 76.638872][ T22] kern_path_locked+0x17e/0x320 [ 76.643719][ T22] ? filename_lookup+0x80/0x80 [ 76.648498][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.654130][ T22] ? lock_release+0x522/0x720 [ 76.658809][ T22] handle_remove+0xa2/0x5fe [ 76.663328][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 76.669047][ T22] ? trace_hardirqs_on+0x38/0x1c0 [ 76.674068][ T22] ? trace_hardirqs_on+0x51/0x1c0 [ 76.679177][ T22] ? finish_task_switch.isra.0+0x21c/0xa20 [ 76.685163][ T22] ? finish_task_switch.isra.0+0x226/0xa20 [ 76.691957][ T22] ? finish_task_switch.isra.0+0x21c/0xa20 [ 76.697757][ T22] ? __switch_to+0x5cc/0x1060 [ 76.702425][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.707961][ T22] ? lock_acquire+0x442/0x510 [ 76.712647][ T22] ? rcu_read_lock_sched_held+0xd/0x70 [ 76.718094][ T22] ? lock_release+0x522/0x720 [ 76.722763][ T22] ? devtmpfsd+0xaa/0x2ab [ 76.727084][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 76.731925][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 76.736954][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 76.741888][ T22] devtmpfsd+0x1ba/0x2ab [ 76.746122][ T22] ? kobject_put+0xbd/0x540 [ 76.750616][ T22] ? dmar_validate_one_drhd+0x255/0x255 [ 76.756154][ T22] kthread+0x3e5/0x4d0 [ 76.760217][ T22] ? set_kthread_struct+0x130/0x130 [ 76.765410][ T22] ret_from_fork+0x1f/0x30 [ 76.771339][ T22] Kernel Offset: disabled [ 76.775653][ T22] Rebooting in 86400 seconds..