Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. 2023/08/22 04:59:02 ignoring optional flag "sandboxArg"="0" 2023/08/22 04:59:02 parsed 1 programs 2023/08/22 04:59:04 executed programs: 0 [ 97.658747][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.670466][ T5384] syz-execprog[5384]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.680378][ T5384] syz-execprog[5384]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.732205][ T4443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.739460][ T4443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.747748][ T4443] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.755306][ T4443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.762939][ T4443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.896096][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 97.962040][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.969300][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.976850][ T5393] bridge_slave_0: entered allmulticast mode [ 97.983718][ T5393] bridge_slave_0: entered promiscuous mode [ 97.991867][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.999296][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.006561][ T5393] bridge_slave_1: entered allmulticast mode [ 98.013459][ T5393] bridge_slave_1: entered promiscuous mode [ 98.041407][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.054032][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.082662][ T5393] team0: Port device team_slave_0 added [ 98.090402][ T5393] team0: Port device team_slave_1 added [ 98.116365][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.123370][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.149490][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.163621][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.170831][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.197494][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.237906][ T5393] hsr_slave_0: entered promiscuous mode [ 98.245125][ T5393] hsr_slave_1: entered promiscuous mode [ 98.891172][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.907061][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.919297][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.933307][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.051598][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.077889][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.093316][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100505][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.125990][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.133512][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.355004][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.419120][ T5393] veth0_vlan: entered promiscuous mode [ 99.435776][ T5393] veth1_vlan: entered promiscuous mode [ 99.479291][ T5393] veth0_macvtap: entered promiscuous mode [ 99.493415][ T5393] veth1_macvtap: entered promiscuous mode [ 99.519248][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.536998][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.552063][ T5393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.563142][ T5393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.574316][ T5393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583326][ T5393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.658054][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.679787][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.714725][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.723484][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.790628][ T4443] Bluetooth: hci0: command 0x0409 tx timeout [ 99.796723][ T5454] syz-executor.0[5454]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.810359][ T5454] loop0: detected capacity change from 0 to 64 [ 99.819850][ T5454] hfs: unable to locate alternate MDB [ 99.825800][ T5454] hfs: continuing without an alternate MDB [ 99.880049][ T5458] syz-executor.0[5458]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.900131][ T5458] loop0: detected capacity change from 0 to 64 [ 99.922056][ T5458] hfs: unable to locate alternate MDB [ 99.927630][ T5458] hfs: continuing without an alternate MDB [ 100.004832][ T5462] syz-executor.0[5462]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.029873][ T5462] loop0: detected capacity change from 0 to 64 [ 100.040382][ T5462] hfs: unable to locate alternate MDB [ 100.046148][ T5462] hfs: continuing without an alternate MDB [ 100.071038][ C1] ------------[ cut here ]------------ [ 100.076843][ C1] refcount_t: underflow; use-after-free. [ 100.083106][ C1] WARNING: CPU: 1 PID: 22 at lib/refcount.c:28 refcount_warn_saturate+0x140/0x1f0 [ 100.092400][ C1] Modules linked in: [ 100.096357][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted 6.5.0-rc7-next-20230821-syzkaller-11453-g47d9bb711707 #0 [ 100.107581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 100.117718][ C1] RIP: 0010:refcount_warn_saturate+0x140/0x1f0 [ 100.123977][ C1] Code: 0a 31 ff 89 de e8 c0 fd 63 fd 84 db 0f 85 6e ff ff ff e8 83 02 64 fd 48 c7 c7 a0 a3 e8 8a c6 05 70 1c 94 0a 01 e8 10 1f 2a fd <0f> 0b e9 4f ff ff ff e8 64 02 64 fd 0f b6 1d 56 1c 94 0a 31 ff 89 [ 100.127689][ T5465] syz-executor.0[5465]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.143840][ C1] RSP: 0018:ffffc900001c7c40 EFLAGS: 00010282 [ 100.143865][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 [ 100.143878][ C1] RDX: ffff888017a73b80 RSI: ffffffff814df276 RDI: 0000000000000001 [ 100.143892][ C1] RBP: ffff88802864bfc4 R08: 0000000000000001 R09: 0000000000000000 [ 100.143905][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 100.143916][ C1] R13: ffff88802864bfc4 R14: ffff888068f34038 R15: 0000000000000002 [ 100.143928][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 100.143946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.143962][ C1] CR2: 00007f2ebf877108 CR3: 000000001be5f000 CR4: 00000000003506e0 [ 100.176200][ T5465] loop0: detected capacity change from 0 to 64 [ 100.176825][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.189180][ T5465] hfs: unable to locate alternate MDB [ 100.193078][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.193096][ C1] Call Trace: [ 100.193105][ C1] [ 100.193113][ C1] ? show_regs+0x8f/0xa0 [ 100.193146][ C1] ? __warn+0xe6/0x380 [ 100.203175][ T5465] hfs: continuing without an alternate MDB [ 100.210787][ C1] ? refcount_warn_saturate+0x140/0x1f0 [ 100.280317][ C1] ? report_bug+0x3bc/0x580 [ 100.285360][ C1] ? handle_bug+0x3c/0x70 [ 100.289744][ C1] ? exc_invalid_op+0x17/0x40 [ 100.294624][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 100.299703][ C1] ? __warn_printk+0x1a6/0x350 [ 100.304551][ C1] ? refcount_warn_saturate+0x140/0x1f0 [ 100.310191][ C1] ip6_dst_destroy+0x3a0/0x450 [ 100.315432][ C1] ? rt6_nh_age_exceptions+0xb0/0xb0 [ 100.320883][ C1] dst_destroy+0x10d/0x820 [ 100.325620][ C1] rcu_core+0x826/0x1c50 [ 100.330027][ C1] ? rcu_report_dead+0x620/0x620 [ 100.335120][ C1] __do_softirq+0x218/0x965 [ 100.339671][ C1] ? __lock_text_end+0x5/0x5 [ 100.344411][ C1] ? run_ksoftirqd+0x54/0x60 [ 100.349131][ C1] ? _local_bh_enable+0xa0/0xa0 [ 100.354208][ C1] run_ksoftirqd+0x31/0x60 [ 100.358736][ C1] smpboot_thread_fn+0x67d/0xa00 [ 100.364089][ C1] ? sort_range+0x30/0x30 [ 100.369157][ C1] kthread+0x33a/0x430 [ 100.373852][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 100.379541][ C1] ret_from_fork+0x45/0x80 [ 100.384618][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 100.390811][ C1] ret_from_fork_asm+0x11/0x20 [ 100.395647][ C1] [ 100.398719][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.406728][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted 6.5.0-rc7-next-20230821-syzkaller-11453-g47d9bb711707 #0 [ 100.417889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 100.428026][ C1] Call Trace: [ 100.431335][ C1] [ 100.434283][ C1] dump_stack_lvl+0xd9/0x1b0 [ 100.438920][ C1] panic+0x6a6/0x750 [ 100.442858][ C1] ? panic_smp_self_stop+0xa0/0xa0 [ 100.448011][ C1] ? refcount_warn_saturate+0x140/0x1f0 [ 100.453597][ C1] check_panic_on_warn+0xab/0xb0 [ 100.458580][ C1] __warn+0xf2/0x380 [ 100.462956][ C1] ? refcount_warn_saturate+0x140/0x1f0 [ 100.468894][ C1] report_bug+0x3bc/0x580 [ 100.473738][ C1] handle_bug+0x3c/0x70 [ 100.477973][ C1] exc_invalid_op+0x17/0x40 [ 100.482530][ C1] asm_exc_invalid_op+0x1a/0x20 [ 100.487443][ C1] RIP: 0010:refcount_warn_saturate+0x140/0x1f0 [ 100.493639][ C1] Code: 0a 31 ff 89 de e8 c0 fd 63 fd 84 db 0f 85 6e ff ff ff e8 83 02 64 fd 48 c7 c7 a0 a3 e8 8a c6 05 70 1c 94 0a 01 e8 10 1f 2a fd <0f> 0b e9 4f ff ff ff e8 64 02 64 fd 0f b6 1d 56 1c 94 0a 31 ff 89 [ 100.513461][ C1] RSP: 0018:ffffc900001c7c40 EFLAGS: 00010282 [ 100.519568][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 [ 100.527664][ C1] RDX: ffff888017a73b80 RSI: ffffffff814df276 RDI: 0000000000000001 [ 100.535849][ C1] RBP: ffff88802864bfc4 R08: 0000000000000001 R09: 0000000000000000 [ 100.543940][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 100.552129][ C1] R13: ffff88802864bfc4 R14: ffff888068f34038 R15: 0000000000000002 [ 100.560148][ C1] ? __warn_printk+0x1a6/0x350 [ 100.565323][ C1] ip6_dst_destroy+0x3a0/0x450 [ 100.570316][ C1] ? rt6_nh_age_exceptions+0xb0/0xb0 [ 100.575648][ C1] dst_destroy+0x10d/0x820 [ 100.580115][ C1] rcu_core+0x826/0x1c50 [ 100.584425][ C1] ? rcu_report_dead+0x620/0x620 [ 100.589415][ C1] __do_softirq+0x218/0x965 [ 100.593979][ C1] ? __lock_text_end+0x5/0x5 [ 100.598611][ C1] ? run_ksoftirqd+0x54/0x60 [ 100.603240][ C1] ? _local_bh_enable+0xa0/0xa0 [ 100.608127][ C1] run_ksoftirqd+0x31/0x60 [ 100.612572][ C1] smpboot_thread_fn+0x67d/0xa00 [ 100.617726][ C1] ? sort_range+0x30/0x30 [ 100.622182][ C1] kthread+0x33a/0x430 [ 100.626379][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 100.632149][ C1] ret_from_fork+0x45/0x80 [ 100.637049][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 100.642912][ C1] ret_from_fork_asm+0x11/0x20 [ 100.648006][ C1] [ 100.652346][ C1] Kernel Offset: disabled [ 100.656685][ C1] Rebooting in 86400 seconds..