Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 65.246163][ T39] cfg80211: failed to load regulatory.db 2025/05/26 07:46:57 ignoring optional flag "sandboxArg"="0" 2025/05/26 07:46:58 parsed 1 programs [ 67.847871][ T3457] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/05/26 07:47:02 executed programs: 0 [ 70.707363][ T3894] tipc: Started in network mode [ 70.714990][ T3894] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.735380][ T3894] tipc: Enabled bearer , priority 10 [ 70.866036][ C1] ------------[ cut here ]------------ [ 70.871515][ C1] refcount_t: addition on 0; use-after-free. [ 70.877648][ C1] WARNING: CPU: 1 PID: 3923 at lib/refcount.c:25 refcount_warn_saturate+0x8c/0x140 [ 70.887031][ C1] Modules linked in: [ 70.890921][ C1] CPU: 1 UID: 0 PID: 3923 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 70.901414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.911491][ C1] RIP: 0010:refcount_warn_saturate+0x8c/0x140 [ 70.917553][ C1] Code: ff 90 0f 0b 90 90 e9 d3 b8 5b 01 cc 80 3d 05 05 c6 02 00 75 b8 c6 05 fc 04 c6 02 01 90 48 c7 c7 6b 49 fb 83 e8 d5 ce 57 ff 90 <0f> 0b 90 90 c3 cc cc cc cc cc 80 3d de 04 c6 02 00 75 90 c6 05 d5 [ 70.937334][ C1] RSP: 0018:ffffc90000128c60 EFLAGS: 00010246 [ 70.943381][ C1] RAX: c42bb32bd25bb700 RBX: ffff88811f033200 RCX: 0000000000000100 [ 70.951434][ C1] RDX: 0000000000000002 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 70.959418][ C1] RBP: ffff88810c8b5848 R08: 0000000000001fff R09: ffffffff844fda50 [ 70.967732][ C1] R10: 0000000000005ffd R11: 00000000ffffdfff R12: ffff88810c8b5a28 [ 70.975678][ C1] R13: ffff88810c8b5838 R14: ffff8881067c1000 R15: 0000000000000248 [ 70.983645][ C1] FS: 000055556c4ac500(0000) GS:ffff8881b6309000(0000) knlGS:0000000000000000 [ 70.992559][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.999151][ C1] CR2: 00007f98d76cb6b0 CR3: 000000010d292000 CR4: 00000000003506f0 [ 71.007296][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.015239][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.023230][ C1] Call Trace: [ 71.026500][ C1] [ 71.029320][ C1] tipc_crypto_xmit+0x8ec/0xa10 [ 71.034144][ C1] tipc_crypto_clone_msg+0x63/0xd0 [ 71.039244][ C1] tipc_crypto_xmit+0x91e/0xa10 [ 71.044066][ C1] ? tipc_crypto_xmit+0x51/0xa10 [ 71.049106][ C1] ? tipc_bearer_xmit_skb+0x43/0x170 [ 71.054378][ C1] ? tipc_bearer_xmit_skb+0x43/0x170 [ 71.059654][ C1] tipc_bearer_xmit_skb+0x100/0x170 [ 71.064937][ C1] ? tipc_disc_timeout+0x39/0x2a0 [ 71.070058][ C1] tipc_disc_timeout+0x210/0x2a0 [ 71.074989][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 71.080543][ C1] ? call_timer_fn+0x6f/0x2d0 [ 71.085192][ C1] call_timer_fn+0xcc/0x2d0 [ 71.089696][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 71.095167][ C1] __run_timer_base+0x1b5/0x240 [ 71.100300][ C1] run_timer_softirq+0x3a/0x70 [ 71.105051][ C1] handle_softirqs+0x11b/0x3a0 [ 71.109845][ C1] __irq_exit_rcu+0x52/0x120 [ 71.114410][ C1] sysvec_apic_timer_interrupt+0x92/0xb0 [ 71.120125][ C1] [ 71.123034][ C1] [ 71.125960][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.132000][ C1] RIP: 0010:internal_create_group+0x218/0x500 [ 71.138141][ C1] Code: 8b 44 24 18 89 44 24 10 49 8b 5d 20 48 85 db 0f 84 b1 00 00 00 48 8b 03 48 85 c0 0f 84 a5 00 00 00 31 ed eb 11 48 8b 44 eb 08 <48> ff c5 48 85 c0 0f 84 90 00 00 00 44 0f b7 60 08 45 85 ff 74 0d [ 71.157995][ C1] RSP: 0018:ffffc90002c97af8 EFLAGS: 00000246 [ 71.164029][ C1] RAX: ffffffff8483a7e0 RBX: ffffffff8414a3b0 RCX: 0000000000000000 [ 71.171996][ C1] RDX: eaa80ef672c38389 RSI: ffffffff840f2807 RDI: 00000000ffffffff [ 71.180046][ C1] RBP: 0000000000000009 R08: 0000000000000000 R09: ffff888102acd4c0 [ 71.188106][ C1] R10: 0000000000000003 R11: ffff888100a8e800 R12: 0000000000000124 [ 71.196147][ C1] R13: ffffffff83714cf0 R14: ffff8881138cb420 R15: 0000000000000000 [ 71.204270][ C1] ? internal_create_group+0x28a/0x500 [ 71.209734][ C1] ? preempt_count_add+0x53/0xb0 [ 71.214649][ C1] sysfs_create_groups+0x2f/0x80 [ 71.219575][ C1] device_add_attrs+0x3f/0x1e0 [ 71.224402][ C1] device_add+0x1d2/0x440 [ 71.228723][ C1] netdev_register_kobject+0x88/0x140 [ 71.234068][ C1] register_netdevice+0x46b/0x900 [ 71.239103][ C1] __ip_tunnel_create+0x1db/0x2a0 [ 71.244103][ C1] ? ip_tunnel_init_net+0x38/0x2f0 [ 71.249207][ C1] ip_tunnel_init_net+0x161/0x2f0 [ 71.254216][ C1] ops_init+0x70/0x170 [ 71.258268][ C1] setup_net+0xc4/0x310 [ 71.262394][ C1] copy_net_ns+0x25b/0x390 [ 71.266788][ C1] create_new_namespaces+0x11a/0x210 [ 71.272048][ C1] unshare_nsproxy_namespaces+0x79/0xa0 [ 71.277664][ C1] ksys_unshare+0x1da/0x350 [ 71.282151][ C1] __x64_sys_unshare+0xd/0x20 [ 71.286830][ C1] do_syscall_64+0xe2/0x210 [ 71.291319][ C1] ? fpregs_assert_state_consistent+0x23/0x50 [ 71.297475][ C1] ? clear_bhb_loop+0x40/0x90 [ 71.302227][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.308107][ C1] RIP: 0033:0x7fc694990167 [ 71.312582][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.332193][ C1] RSP: 002b:00007fff3c7e6ea8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 71.341314][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc694990167 [ 71.349284][ C1] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 0000000040000000 [ 71.357249][ C1] RBP: 00007fff3c7e6f10 R08: 0000000000000000 R09: 0000000000000000 [ 71.365196][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7e6f10 [ 71.373149][ C1] R13: 00007fff3c7e6f18 R14: 0000000000000009 R15: 0000000000000000 [ 71.381111][ C1] [ 71.384113][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.391361][ C1] CPU: 1 UID: 0 PID: 3923 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 71.401921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.411953][ C1] Call Trace: [ 71.415205][ C1] [ 71.418021][ C1] panic+0x10e/0x2f0 [ 71.421894][ C1] ? refcount_warn_saturate+0x8c/0x140 [ 71.427332][ C1] __warn+0x191/0x220 [ 71.431369][ C1] ? refcount_warn_saturate+0x8c/0x140 [ 71.436790][ C1] report_bug+0xd0/0x170 [ 71.441000][ C1] ? refcount_warn_saturate+0x8c/0x140 [ 71.446974][ C1] ? refcount_warn_saturate+0x8e/0x140 [ 71.452404][ C1] handle_bug+0x84/0x160 [ 71.456613][ C1] exc_invalid_op+0x1a/0x50 [ 71.461080][ C1] asm_exc_invalid_op+0x1a/0x20 [ 71.465897][ C1] RIP: 0010:refcount_warn_saturate+0x8c/0x140 [ 71.471929][ C1] Code: ff 90 0f 0b 90 90 e9 d3 b8 5b 01 cc 80 3d 05 05 c6 02 00 75 b8 c6 05 fc 04 c6 02 01 90 48 c7 c7 6b 49 fb 83 e8 d5 ce 57 ff 90 <0f> 0b 90 90 c3 cc cc cc cc cc 80 3d de 04 c6 02 00 75 90 c6 05 d5 [ 71.491685][ C1] RSP: 0018:ffffc90000128c60 EFLAGS: 00010246 [ 71.497804][ C1] RAX: c42bb32bd25bb700 RBX: ffff88811f033200 RCX: 0000000000000100 [ 71.505763][ C1] RDX: 0000000000000002 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 71.513874][ C1] RBP: ffff88810c8b5848 R08: 0000000000001fff R09: ffffffff844fda50 [ 71.521846][ C1] R10: 0000000000005ffd R11: 00000000ffffdfff R12: ffff88810c8b5a28 [ 71.529882][ C1] R13: ffff88810c8b5838 R14: ffff8881067c1000 R15: 0000000000000248 [ 71.537834][ C1] tipc_crypto_xmit+0x8ec/0xa10 [ 71.542659][ C1] tipc_crypto_clone_msg+0x63/0xd0 [ 71.547827][ C1] tipc_crypto_xmit+0x91e/0xa10 [ 71.552752][ C1] ? tipc_crypto_xmit+0x51/0xa10 [ 71.557656][ C1] ? tipc_bearer_xmit_skb+0x43/0x170 [ 71.562903][ C1] ? tipc_bearer_xmit_skb+0x43/0x170 [ 71.568146][ C1] tipc_bearer_xmit_skb+0x100/0x170 [ 71.573309][ C1] ? tipc_disc_timeout+0x39/0x2a0 [ 71.578323][ C1] tipc_disc_timeout+0x210/0x2a0 [ 71.583222][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 71.588651][ C1] ? call_timer_fn+0x6f/0x2d0 [ 71.593298][ C1] call_timer_fn+0xcc/0x2d0 [ 71.597767][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 71.603193][ C1] __run_timer_base+0x1b5/0x240 [ 71.608010][ C1] run_timer_softirq+0x3a/0x70 [ 71.612995][ C1] handle_softirqs+0x11b/0x3a0 [ 71.617800][ C1] __irq_exit_rcu+0x52/0x120 [ 71.622438][ C1] sysvec_apic_timer_interrupt+0x92/0xb0 [ 71.628258][ C1] [ 71.631166][ C1] [ 71.634257][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.640322][ C1] RIP: 0010:internal_create_group+0x218/0x500 [ 71.646356][ C1] Code: 8b 44 24 18 89 44 24 10 49 8b 5d 20 48 85 db 0f 84 b1 00 00 00 48 8b 03 48 85 c0 0f 84 a5 00 00 00 31 ed eb 11 48 8b 44 eb 08 <48> ff c5 48 85 c0 0f 84 90 00 00 00 44 0f b7 60 08 45 85 ff 74 0d [ 71.665955][ C1] RSP: 0018:ffffc90002c97af8 EFLAGS: 00000246 [ 71.672011][ C1] RAX: ffffffff8483a7e0 RBX: ffffffff8414a3b0 RCX: 0000000000000000 [ 71.680134][ C1] RDX: eaa80ef672c38389 RSI: ffffffff840f2807 RDI: 00000000ffffffff [ 71.688076][ C1] RBP: 0000000000000009 R08: 0000000000000000 R09: ffff888102acd4c0 [ 71.696025][ C1] R10: 0000000000000003 R11: ffff888100a8e800 R12: 0000000000000124 [ 71.704142][ C1] R13: ffffffff83714cf0 R14: ffff8881138cb420 R15: 0000000000000000 [ 71.712084][ C1] ? internal_create_group+0x28a/0x500 [ 71.717597][ C1] ? preempt_count_add+0x53/0xb0 [ 71.722496][ C1] sysfs_create_groups+0x2f/0x80 [ 71.727396][ C1] device_add_attrs+0x3f/0x1e0 [ 71.732156][ C1] device_add+0x1d2/0x440 [ 71.736447][ C1] netdev_register_kobject+0x88/0x140 [ 71.741858][ C1] register_netdevice+0x46b/0x900 [ 71.746849][ C1] __ip_tunnel_create+0x1db/0x2a0 [ 71.751865][ C1] ? ip_tunnel_init_net+0x38/0x2f0 [ 71.756948][ C1] ip_tunnel_init_net+0x161/0x2f0 [ 71.762045][ C1] ops_init+0x70/0x170 [ 71.766090][ C1] setup_net+0xc4/0x310 [ 71.770215][ C1] copy_net_ns+0x25b/0x390 [ 71.774605][ C1] create_new_namespaces+0x11a/0x210 [ 71.779862][ C1] unshare_nsproxy_namespaces+0x79/0xa0 [ 71.785371][ C1] ksys_unshare+0x1da/0x350 [ 71.790015][ C1] __x64_sys_unshare+0xd/0x20 [ 71.794662][ C1] do_syscall_64+0xe2/0x210 [ 71.799226][ C1] ? fpregs_assert_state_consistent+0x23/0x50 [ 71.805347][ C1] ? clear_bhb_loop+0x40/0x90 [ 71.809986][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.815936][ C1] RIP: 0033:0x7fc694990167 [ 71.820324][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.840090][ C1] RSP: 002b:00007fff3c7e6ea8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 71.848556][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc694990167 [ 71.856506][ C1] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 0000000040000000 [ 71.864456][ C1] RBP: 00007fff3c7e6f10 R08: 0000000000000000 R09: 0000000000000000 [ 71.872489][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7e6f10 [ 71.880430][ C1] R13: 00007fff3c7e6f18 R14: 0000000000000009 R15: 0000000000000000 [ 71.888372][ C1] [ 71.891589][ C1] Kernel Offset: disabled [ 71.895906][ C1] Rebooting in 86400 seconds..