Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
[+] Starting sw_sync use-after-free bug reproducer...
[+] Detected 2 online CPU(s)
[+] Main thread pinned to CPU 0
[+] Running 100 epochs of 1000 rounds (4 fences/round)...
[   95.870369][ T6018] refcount_t: addition on 0; use-after-free.
[   95.870855][ T6018] ------------[ cut here ]------------
[   95.870862][ T6018] kernel BUG at lib/refcount.c:34!
[   95.870897][ T6018] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[   95.893774][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz-executor369 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.905024][ T6018] Tainted: [L]=SOFTLOCKUP
[   95.909330][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   95.919372][ T6018] RIP: 0010:refcount_warn_saturate.cold+0x12/0x14
[   95.925796][ T6018] Code: 89 ea be 01 00 00 00 48 c7 c7 40 c1 c3 90 e8 0a 5a 01 00 e9 72 e3 02 04 e8 c0 54 d7 00 48 c7 c7 a0 4a 81 8c e8 04 85 eb ff 90 <0f> 0b e8 ac 54 d7 00 48 c7 c7 40 4b 81 8c e8 f0 84 eb ff 90 0f 0b
[   95.945386][ T6018] RSP: 0018:ffffc90003e57cb8 EFLAGS: 00010086
[   95.951469][ T6018] RAX: 000000000000002a RBX: ffff88802d271570 RCX: 0000000000000000
[   95.959413][ T6018] RDX: 000000000000002a RSI: ffffffff81ebf219 RDI: fffff520007caf88
[   95.967441][ T6018] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[   95.975398][ T6018] R10: ffffc90003e57a7f R11: 0000000000000001 R12: 0000000000000000
[   95.983338][ T6018] R13: dffffc0000000000 R14: ffff88802d271300 R15: ffffc90003e57d18
[   95.991283][ T6018] FS:  00007f83e74d26c0(0000) GS:ffff88812257d000(0000) knlGS:0000000000000000
[   96.000183][ T6018] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.006758][ T6018] CR2: 00007f83e75a93c8 CR3: 00000000357c8000 CR4: 00000000003526f0
[   96.014705][ T6018] Call Trace:
[   96.017957][ T6018]  <TASK>
[   96.020874][ T6018]  sync_timeline_signal+0x6d9/0x8a0
[   96.026057][ T6018]  ? __pfx_sync_timeline_signal+0x10/0x10
[   96.031752][ T6018]  sw_sync_ioctl+0x7b4/0x13f0
[   96.036417][ T6018]  ? __fget_files+0x34/0x3d0
[   96.040979][ T6018]  ? __pfx_sw_sync_ioctl+0x10/0x10
[   96.046064][ T6018]  ? selinux_file_ioctl+0x1e0/0x290
[   96.051239][ T6018]  ? selinux_file_ioctl+0x1e7/0x290
[   96.056424][ T6018]  ? __pfx_sw_sync_ioctl+0x10/0x10
[   96.061509][ T6018]  __x64_sys_ioctl+0x18e/0x210
[   96.066255][ T6018]  do_syscall_64+0x123/0x790
[   96.070815][ T6018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.076676][ T6018] RIP: 0033:0x7f83e7507d5b
[   96.081077][ T6018] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   96.100660][ T6018] RSP: 002b:00007f83e74d2100 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.109047][ T6018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f83e7507d5b
[   96.116992][ T6018] RDX: 00007f83e74d2170 RSI: 0000000040045701 RDI: 0000000000000003
[   96.124934][ T6018] RBP: 00000000000003d0 R08: 0000000000000000 R09: 00007f83e74d26c0
[   96.132890][ T6018] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f83e74d2170
[   96.140832][ T6018] R13: 00000000000000f3 R14: 00007ffcce841440 R15: 00007ffcce841528
[   96.148780][ T6018]  </TASK>
[   96.151779][ T6018] Modules linked in:
[   96.155653][ T6018] ---[ end trace 0000000000000000 ]---
[   96.161078][ T6018] RIP: 0010:refcount_warn_saturate.cold+0x12/0x14
[   96.161101][ T6018] Code: 89 ea be 01 00 00 00 48 c7 c7 40 c1 c3 90 e8 0a 5a 01 00 e9 72 e3 02 04 e8 c0 54 d7 00 48 c7 c7 a0 4a 81 8c e8 04 85 eb ff 90 <0f> 0b e8 ac 54 d7 00 48 c7 c7 40 4b 81 8c e8 f0 84 eb ff 90 0f 0b
[   96.161111][ T6018] RSP: 0018:ffffc90003e57cb8 EFLAGS: 00010086
[   96.161121][ T6018] RAX: 000000000000002a RBX: ffff88802d271570 RCX: 0000000000000000
[   96.161128][ T6018] RDX: 000000000000002a RSI: ffffffff81ebf219 RDI: fffff520007caf88
[   96.161135][ T6018] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[   96.161142][ T6018] R10: ffffc90003e57a7f R11: 0000000000000001 R12: 0000000000000000
[   96.161148][ T6018] R13: dffffc0000000000 R14: ffff88802d271300 R15: ffffc90003e57d18
[   96.161156][ T6018] FS:  00007f83e74d26c0(0000) GS:ffff88812257d000(0000) knlGS:0000000000000000
[   96.161167][ T6018] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.161174][ T6018] CR2: 00007f83e75a93c8 CR3: 00000000357c8000 CR4: 00000000003526f0
[   96.161182][ T6018] Kernel panic - not syncing: Fatal exception
[   97.329988][ T6018] Shutting down cpus with NMI
[   97.334926][ T6018] Kernel Offset: disabled
[   97.339238][ T6018] Rebooting in 86400 seconds..