Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. 2025/11/22 19:45:51 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 109.431205][ T5324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.184199][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.191935][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.199115][ T5346] bridge_slave_0: entered allmulticast mode [ 112.206447][ T5346] bridge_slave_0: entered promiscuous mode [ 112.214058][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.221875][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.229272][ T5346] bridge_slave_1: entered allmulticast mode [ 112.236266][ T5346] bridge_slave_1: entered promiscuous mode [ 112.374120][ T5346] team0: Port device team_slave_0 added [ 112.382133][ T5346] team0: Port device team_slave_1 added [ 112.526941][ T5346] hsr_slave_0: entered promiscuous mode [ 112.533561][ T5346] hsr_slave_1: entered promiscuous mode [ 113.053908][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.065475][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.077054][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.089002][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.292415][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.322773][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.330165][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.340100][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.347266][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.653076][ T5346] veth0_vlan: entered promiscuous mode [ 115.666272][ T5346] veth1_vlan: entered promiscuous mode [ 116.191261][ T5346] veth0_macvtap: entered promiscuous mode [ 116.204665][ T5346] veth1_macvtap: entered promiscuous mode [ 116.247489][ T1096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.267946][ T1096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.291846][ T1096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.315059][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.626221][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.737461][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.814362][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.914378][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.124184][ T1096] bridge_slave_1: left allmulticast mode [ 117.131075][ T1096] bridge_slave_1: left promiscuous mode [ 117.136918][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.148868][ T1096] bridge_slave_0: left allmulticast mode [ 117.155592][ T1096] bridge_slave_0: left promiscuous mode [ 117.161879][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.446239][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.465482][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.482794][ T1096] hsr_slave_0: left promiscuous mode [ 117.489102][ T1096] hsr_slave_1: left promiscuous mode [ 117.502943][ T1096] veth1_macvtap: left promiscuous mode [ 117.508608][ T1096] veth0_macvtap: left promiscuous mode [ 117.514675][ T1096] veth1_vlan: left promiscuous mode [ 117.521676][ T1096] veth0_vlan: left promiscuous mode [ 117.923116][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 117.956327][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 118.242778][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.251271][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/22 19:46:06 executed programs: 0 [ 123.164533][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.172170][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.180132][ T5770] bridge_slave_0: entered allmulticast mode [ 123.187227][ T5770] bridge_slave_0: entered promiscuous mode [ 123.195183][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.202576][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.209812][ T5770] bridge_slave_1: entered allmulticast mode [ 123.216777][ T5770] bridge_slave_1: entered promiscuous mode [ 123.349339][ T5770] team0: Port device team_slave_0 added [ 123.357037][ T5770] team0: Port device team_slave_1 added [ 123.499208][ T5770] hsr_slave_0: entered promiscuous mode [ 123.506985][ T5770] hsr_slave_1: entered promiscuous mode [ 124.017240][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.028325][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.042489][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.055916][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.104461][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.111678][ T5770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.119209][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.126485][ T5770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.176577][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.200237][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.305617][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.319028][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.326242][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.346995][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.354251][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.716331][ T5770] veth0_vlan: entered promiscuous mode [ 126.728839][ T5770] veth1_vlan: entered promiscuous mode [ 127.246613][ T5770] veth0_macvtap: entered promiscuous mode [ 127.257235][ T5770] veth1_macvtap: entered promiscuous mode [ 127.311605][ T3036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.331576][ T3036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.358359][ T3036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.369635][ T3036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.429389][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.437589][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.463253][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.471379][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.516971][ T5992] ------------[ cut here ]------------ [ 128.522700][ T5992] refcount_t: saturated; leaking memory. [ 128.528772][ T5992] WARNING: CPU: 1 PID: 5992 at lib/refcount.c:19 refcount_warn_saturate+0x13a/0x1d0 [ 128.538567][ T5992] Modules linked in: [ 128.542725][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.551894][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.562226][ T5992] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 128.568420][ T5992] Code: e0 12 45 89 e8 07 41 bb fd 90 0f 0b 90 90 eb b7 e8 bb 35 f7 fd c6 05 99 ef 72 08 01 90 48 c7 c7 20 12 45 89 e8 e7 40 bb fd 90 <0f> 0b 90 90 eb 97 e8 9b 35 f7 fd c6 05 7d ef 72 08 01 90 48 c7 c7 [ 128.588211][ T5992] RSP: 0018:ffffc90003587588 EFLAGS: 00010246 [ 128.594393][ T5992] RAX: 3820b733b9153400 RBX: 0000000000000000 RCX: ffff888026911e00 [ 128.602509][ T5992] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 128.611039][ T5992] RBP: ffffc900035876b0 R08: ffff8880b8f24253 R09: 1ffff110171e484a [ 128.619027][ T5992] R10: dffffc0000000000 R11: ffffed10171e484b R12: ffff888073d391c0 [ 128.627081][ T5992] R13: 1ffff920006b0ec4 R14: ffff888073d391c0 R15: 0000000000000000 [ 128.635142][ T5992] FS: 00007fc2caeb96c0(0000) GS:ffff88812a5c4000(0000) knlGS:0000000000000000 [ 128.644313][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.651078][ T5992] CR2: 00007fc31c1d54e8 CR3: 000000007a052000 CR4: 00000000003526f0 [ 128.659088][ T5992] Call Trace: [ 128.662960][ T5992] [ 128.665938][ T5992] __vma_enter_locked+0x593/0x5d0 [ 128.671528][ T5992] ? __vma_start_write+0x23/0x140 [ 128.676606][ T5992] ? __pfx___vma_enter_locked+0x10/0x10 [ 128.683247][ T5992] __vma_start_write+0x23/0x140 [ 128.688142][ T5992] vma_modify+0xf62/0x1a70 [ 128.693248][ T5992] vma_modify_flags_uffd+0x1ff/0x250 [ 128.698573][ T5992] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 128.704983][ T5992] ? mas_find+0xb0e/0xd30 [ 128.709892][ T5992] userfaultfd_release_all+0x34c/0x5d0 [ 128.715424][ T5992] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 128.721993][ T5992] userfaultfd_release+0xe7/0x1b0 [ 128.727052][ T5992] ? __pfx_userfaultfd_release+0x10/0x10 [ 128.733254][ T5992] ? __pfx___might_resched+0x10/0x10 [ 128.738664][ T5992] ? __pfx_userfaultfd_release+0x10/0x10 [ 128.744927][ T5992] __fput+0x44c/0xa70 [ 128.748948][ T5992] task_work_run+0x1d4/0x260 [ 128.754882][ T5992] ? __pfx_task_work_run+0x10/0x10 [ 128.760630][ T5992] ? kernel_clone+0x238/0x840 [ 128.765352][ T5992] get_signal+0x11ec/0x1340 [ 128.770054][ T5992] arch_do_signal_or_restart+0xa0/0x790 [ 128.775622][ T5992] ? __pfx___x64_sys_clone+0x10/0x10 [ 128.781009][ T5992] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 128.787271][ T5992] ? exit_to_user_mode_loop+0x40/0x130 [ 128.792899][ T5992] exit_to_user_mode_loop+0x72/0x130 [ 128.798197][ T5992] do_syscall_64+0x2bd/0xfa0 [ 128.802908][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.808139][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.814307][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 128.819001][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.824994][ T5992] RIP: 0033:0x7fc2c9f8f749 [ 128.829481][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.849223][ T5992] RSP: 002b:00007fc2caeb8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 128.857758][ T5992] RAX: fffffffffffffff4 RBX: 00007fc2ca1e6090 RCX: 00007fc2c9f8f749 [ 128.865924][ T5992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.873954][ T5992] RBP: 00007fc2ca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.881982][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.890022][ T5992] R13: 00007fc2ca1e6128 R14: 00007fc2ca1e6090 R15: 00007fff5b64a828 [ 128.898109][ T5992] [ 128.901238][ T5992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.908544][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 128.917760][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.927842][ T5992] Call Trace: [ 128.931119][ T5992] [ 128.934037][ T5992] dump_stack_lvl+0x99/0x250 [ 128.938629][ T5992] ? __asan_memcpy+0x40/0x70 [ 128.943206][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.948393][ T5992] ? __pfx__printk+0x10/0x10 [ 128.952973][ T5992] vpanic+0x237/0x6d0 [ 128.957027][ T5992] ? __pfx_vpanic+0x10/0x10 [ 128.961514][ T5992] ? is_module_text_address+0x190/0x1e0 [ 128.967053][ T5992] panic+0xb9/0xc0 [ 128.970768][ T5992] ? __pfx_panic+0x10/0x10 [ 128.975178][ T5992] __warn+0x31b/0x4b0 [ 128.979149][ T5992] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.984706][ T5992] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.990262][ T5992] report_bug+0x2be/0x4f0 [ 128.994594][ T5992] ? refcount_warn_saturate+0x13a/0x1d0 [ 129.000174][ T5992] ? refcount_warn_saturate+0x13a/0x1d0 [ 129.005801][ T5992] ? refcount_warn_saturate+0x13c/0x1d0 [ 129.011495][ T5992] handle_bug+0x84/0x160 [ 129.015755][ T5992] exc_invalid_op+0x1a/0x50 [ 129.020342][ T5992] asm_exc_invalid_op+0x1a/0x20 [ 129.025376][ T5992] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 129.031544][ T5992] Code: e0 12 45 89 e8 07 41 bb fd 90 0f 0b 90 90 eb b7 e8 bb 35 f7 fd c6 05 99 ef 72 08 01 90 48 c7 c7 20 12 45 89 e8 e7 40 bb fd 90 <0f> 0b 90 90 eb 97 e8 9b 35 f7 fd c6 05 7d ef 72 08 01 90 48 c7 c7 [ 129.051258][ T5992] RSP: 0018:ffffc90003587588 EFLAGS: 00010246 [ 129.057328][ T5992] RAX: 3820b733b9153400 RBX: 0000000000000000 RCX: ffff888026911e00 [ 129.065288][ T5992] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 129.073245][ T5992] RBP: ffffc900035876b0 R08: ffff8880b8f24253 R09: 1ffff110171e484a [ 129.081203][ T5992] R10: dffffc0000000000 R11: ffffed10171e484b R12: ffff888073d391c0 [ 129.089159][ T5992] R13: 1ffff920006b0ec4 R14: ffff888073d391c0 R15: 0000000000000000 [ 129.097209][ T5992] ? refcount_warn_saturate+0x139/0x1d0 [ 129.102750][ T5992] __vma_enter_locked+0x593/0x5d0 [ 129.107766][ T5992] ? __vma_start_write+0x23/0x140 [ 129.112953][ T5992] ? __pfx___vma_enter_locked+0x10/0x10 [ 129.118491][ T5992] __vma_start_write+0x23/0x140 [ 129.123331][ T5992] vma_modify+0xf62/0x1a70 [ 129.127825][ T5992] vma_modify_flags_uffd+0x1ff/0x250 [ 129.133104][ T5992] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 129.138989][ T5992] ? mas_find+0xb0e/0xd30 [ 129.143393][ T5992] userfaultfd_release_all+0x34c/0x5d0 [ 129.148841][ T5992] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 129.154811][ T5992] userfaultfd_release+0xe7/0x1b0 [ 129.159823][ T5992] ? __pfx_userfaultfd_release+0x10/0x10 [ 129.165445][ T5992] ? __pfx___might_resched+0x10/0x10 [ 129.170716][ T5992] ? __pfx_userfaultfd_release+0x10/0x10 [ 129.176507][ T5992] __fput+0x44c/0xa70 [ 129.180501][ T5992] task_work_run+0x1d4/0x260 [ 129.185074][ T5992] ? __pfx_task_work_run+0x10/0x10 [ 129.190514][ T5992] ? kernel_clone+0x238/0x840 [ 129.195184][ T5992] get_signal+0x11ec/0x1340 [ 129.199684][ T5992] arch_do_signal_or_restart+0xa0/0x790 [ 129.205231][ T5992] ? __pfx___x64_sys_clone+0x10/0x10 [ 129.210680][ T5992] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.216827][ T5992] ? exit_to_user_mode_loop+0x40/0x130 [ 129.222269][ T5992] exit_to_user_mode_loop+0x72/0x130 [ 129.227547][ T5992] do_syscall_64+0x2bd/0xfa0 [ 129.232150][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.237362][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.243417][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 129.248101][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.253998][ T5992] RIP: 0033:0x7fc2c9f8f749 [ 129.258407][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.278273][ T5992] RSP: 002b:00007fc2caeb8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 129.286697][ T5992] RAX: fffffffffffffff4 RBX: 00007fc2ca1e6090 RCX: 00007fc2c9f8f749 [ 129.294672][ T5992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.302648][ T5992] RBP: 00007fc2ca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.310706][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.318681][ T5992] R13: 00007fc2ca1e6128 R14: 00007fc2ca1e6090 R15: 00007fff5b64a828 [ 129.326674][ T5992] [ 129.330113][ T5992] Kernel Offset: disabled [ 129.334519][ T5992] Rebooting in 86400 seconds..