Warning: Permanently added '[localhost]:19213' (ED25519) to the list of known hosts. [ 68.067787][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 68.136816][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.141107][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.144024][ T5304] bridge_slave_0: entered allmulticast mode [ 68.146976][ T5304] bridge_slave_0: entered promiscuous mode [ 68.153545][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.156074][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.158675][ T5304] bridge_slave_1: entered allmulticast mode [ 68.162428][ T5304] bridge_slave_1: entered promiscuous mode [ 68.179013][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.184417][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.201560][ T5304] team0: Port device team_slave_0 added [ 68.205941][ T5304] team0: Port device team_slave_1 added [ 68.219779][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.222367][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.233202][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.239179][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.242527][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.253733][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.277433][ T5304] hsr_slave_0: entered promiscuous mode [ 68.280564][ T5304] hsr_slave_1: entered promiscuous mode [ 68.376007][ T5304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.382415][ T5304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.387399][ T5304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.393324][ T5304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.413703][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.416278][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.419338][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.422366][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.467825][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.482269][ T3060] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.486067][ T3060] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.497904][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.535472][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.538319][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.550779][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.553148][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.587874][ T5304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.610334][ T5304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.652935][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.701688][ T5304] veth0_vlan: entered promiscuous mode [ 68.714281][ T5304] veth1_vlan: entered promiscuous mode [ 68.765338][ T5304] veth0_macvtap: entered promiscuous mode [ 68.771566][ T5304] veth1_macvtap: entered promiscuous mode [ 68.802023][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.811492][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.833697][ T5304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.837389][ T5304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843058][ T5304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.846416][ T5304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 68.916392][ T5315] ax25_connect(): syz-executor194 uses autobind, please contact jreuter@yaina.de [ 68.921112][ T5315] ------------[ cut here ]------------ [ 68.922776][ T5315] refcount_t: decrement hit 0; leaking memory. [ 68.925378][ T5315] WARNING: CPU: 0 PID: 5315 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 68.931567][ T5315] Modules linked in: [ 68.933072][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor194 Not tainted 6.14.0-rc7-syzkaller #0 [ 68.936388][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.940036][ T5315] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 68.941965][ T5315] Code: b2 00 00 00 e8 37 56 cc fc 5b 5d c3 cc cc cc cc e8 2b 56 cc fc c6 05 45 90 31 0b 01 90 48 c7 c7 40 b7 80 8c e8 07 12 8c fc 90 <0f> 0b 90 90 eb d9 e8 0b 56 cc fc c6 05 22 90 31 0b 01 90 48 c7 c7 [ 68.950119][ T5315] RSP: 0018:ffffc9000d357c48 EFLAGS: 00010246 [ 68.952558][ T5315] RAX: 297c44a401696700 RBX: ffff88801201a64c RCX: ffff88801f0a8000 [ 68.955733][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 68.958901][ T5315] RBP: 0000000000000004 R08: ffffffff81819e52 R09: 1ffff11003f8519a [ 68.962423][ T5315] R10: dffffc0000000000 R11: ffffed1003f8519b R12: ffff88801201a608 [ 68.965543][ T5315] R13: 0000000000000000 R14: ffff88801201a64c R15: dffffc0000000000 [ 68.968666][ T5315] FS: 000055558a442380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.972399][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.975009][ T5315] CR2: 00007f7f5e7400f0 CR3: 0000000000c62000 CR4: 0000000000352ef0 [ 68.978206][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.981789][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.985023][ T5315] Call Trace: [ 68.986405][ T5315] [ 68.987570][ T5315] ? __warn+0x165/0x4d0 [ 68.989281][ T5315] ? refcount_warn_saturate+0xfa/0x1d0 [ 68.991655][ T5315] ? report_bug+0x2b3/0x500 [ 68.994294][ T5315] ? refcount_warn_saturate+0xfa/0x1d0 [ 68.996564][ T5315] ? handle_bug+0x60/0x90 [ 68.998611][ T5315] ? exc_invalid_op+0x1a/0x50 [ 69.000581][ T5315] ? asm_exc_invalid_op+0x1a/0x20 [ 69.002525][ T5315] ? __warn_printk+0x292/0x360 [ 69.004536][ T5315] ? refcount_warn_saturate+0xfa/0x1d0 [ 69.006720][ T5315] ? refcount_warn_saturate+0xf9/0x1d0 [ 69.008910][ T5315] ref_tracker_free+0x6af/0x7e0 [ 69.010965][ T5315] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 69.013479][ T5315] ? __pfx_ref_tracker_free+0x10/0x10 [ 69.015683][ T5315] ? ax25_destroy_socket+0x551/0x5c0 [ 69.017894][ T5315] ax25_release+0x368/0x960 [ 69.019962][ T5315] sock_close+0xbc/0x240 [ 69.021737][ T5315] ? __pfx_sock_close+0x10/0x10 [ 69.023444][ T5315] __fput+0x3e9/0x9f0 [ 69.024767][ T5315] __x64_sys_close+0x7f/0x110 [ 69.026357][ T5315] do_syscall_64+0xf3/0x230 [ 69.028084][ T5315] ? clear_bhb_loop+0x35/0x90 [ 69.029958][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.032386][ T5315] RIP: 0033:0x7f7f5e6c29e0 [ 69.034101][ T5315] Code: ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 80 3d c1 e6 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c [ 69.041350][ T5315] RSP: 002b:00007ffcad996538 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 69.043918][ T5315] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f7f5e6c29e0 [ 69.046734][ T5315] RDX: ffffffffffffffb8 RSI: 0000400000000240 RDI: 0000000000000006 [ 69.049844][ T5315] RBP: 00007ffcad996570 R08: 0000000000000001 R09: 0000000000000001 [ 69.052701][ T5315] R10: 0000000000000001 R11: 0000000000000202 R12: 00000000000f4240 [ 69.055707][ T5315] R13: 00007f7f5e710453 R14: 00007ffcad996554 R15: 00007ffcad996560 [ 69.059430][ T5315] [ 69.061411][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.064560][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor194 Not tainted 6.14.0-rc7-syzkaller #0 [ 69.068345][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.072619][ T5315] Call Trace: [ 69.074094][ T5315] [ 69.075239][ T5315] dump_stack_lvl+0x241/0x360 [ 69.077127][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.079313][ T5315] ? __pfx__printk+0x10/0x10 [ 69.081172][ T5315] ? _printk+0xd5/0x120 [ 69.082749][ T5315] ? __init_begin+0x41000/0x41000 [ 69.084758][ T5315] ? vscnprintf+0x5d/0x90 [ 69.086470][ T5315] panic+0x349/0x880 [ 69.088008][ T5315] ? __warn+0x174/0x4d0 [ 69.089746][ T5315] ? __pfx_panic+0x10/0x10 [ 69.091538][ T5315] __warn+0x344/0x4d0 [ 69.093121][ T5315] ? refcount_warn_saturate+0xfa/0x1d0 [ 69.095386][ T5315] report_bug+0x2b3/0x500 [ 69.097131][ T5315] ? refcount_warn_saturate+0xfa/0x1d0 [ 69.099150][ T5315] handle_bug+0x60/0x90 [ 69.100728][ T5315] exc_invalid_op+0x1a/0x50 [ 69.102490][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 69.104479][ T5315] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 69.106792][ T5315] Code: b2 00 00 00 e8 37 56 cc fc 5b 5d c3 cc cc cc cc e8 2b 56 cc fc c6 05 45 90 31 0b 01 90 48 c7 c7 40 b7 80 8c e8 07 12 8c fc 90 <0f> 0b 90 90 eb d9 e8 0b 56 cc fc c6 05 22 90 31 0b 01 90 48 c7 c7 [ 69.113305][ T5315] RSP: 0018:ffffc9000d357c48 EFLAGS: 00010246 [ 69.115371][ T5315] RAX: 297c44a401696700 RBX: ffff88801201a64c RCX: ffff88801f0a8000 [ 69.118016][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 69.120555][ T5315] RBP: 0000000000000004 R08: ffffffff81819e52 R09: 1ffff11003f8519a [ 69.123078][ T5315] R10: dffffc0000000000 R11: ffffed1003f8519b R12: ffff88801201a608 [ 69.126149][ T5315] R13: 0000000000000000 R14: ffff88801201a64c R15: dffffc0000000000 [ 69.129294][ T5315] ? __warn_printk+0x292/0x360 [ 69.131107][ T5315] ? refcount_warn_saturate+0xf9/0x1d0 [ 69.133186][ T5315] ref_tracker_free+0x6af/0x7e0 [ 69.135092][ T5315] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 69.137406][ T5315] ? __pfx_ref_tracker_free+0x10/0x10 [ 69.139490][ T5315] ? ax25_destroy_socket+0x551/0x5c0 [ 69.141581][ T5315] ax25_release+0x368/0x960 [ 69.143547][ T5315] sock_close+0xbc/0x240 [ 69.145098][ T5315] ? __pfx_sock_close+0x10/0x10 [ 69.146762][ T5315] __fput+0x3e9/0x9f0 [ 69.148349][ T5315] __x64_sys_close+0x7f/0x110 [ 69.150201][ T5315] do_syscall_64+0xf3/0x230 [ 69.152020][ T5315] ? clear_bhb_loop+0x35/0x90 [ 69.153934][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.156221][ T5315] RIP: 0033:0x7f7f5e6c29e0 [ 69.158028][ T5315] Code: ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 80 3d c1 e6 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c [ 69.165428][ T5315] RSP: 002b:00007ffcad996538 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 69.168501][ T5315] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f7f5e6c29e0 [ 69.171568][ T5315] RDX: ffffffffffffffb8 RSI: 0000400000000240 RDI: 0000000000000006 [ 69.174674][ T5315] RBP: 00007ffcad996570 R08: 0000000000000001 R09: 0000000000000001 [ 69.177656][ T5315] R10: 0000000000000001 R11: 0000000000000202 R12: 00000000000f4240 [ 69.180257][ T5315] R13: 00007f7f5e710453 R14: 00007ffcad996554 R15: 00007ffcad996560 [ 69.183245][ T5315] [ 69.184579][ T5315] Kernel Offset: disabled [ 69.186172][ T5315] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:36:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000063 RBX=ffffffff9a999100 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d3572f0 R8 =ffffffff8584363b R9 =1ffff11003c6f046 R10=dffffc0000000000 R11=ffffffff858435f0 R12=dffffc0000000000 R13=0000000000000063 R14=0000000000000063 R15=00000000000003f8 RIP=ffffffff8584366e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558a442380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f5e7400f0 CR3=0000000000c62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c2c200c0 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcad996540 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e71009c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e7100cd ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e7100bb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e7100c7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e7100db ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5e710242 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e0078616d2d74 6e756f6d2f73662f 7379732f636f7270 2f00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b005d44480851 4b504a480a56430a 565c560a464a5755 0a00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000