Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.71' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 71.931522][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor854'. [ 71.947759][ T8422] ------------[ cut here ]------------ [ 71.956765][ T8422] refcount_t: decrement hit 0; leaking memory. [ 71.976399][ T8422] WARNING: CPU: 0 PID: 8422 at lib/refcount.c:31 refcount_warn_saturate+0xbf/0x1e0 [ 71.986520][ T8422] Modules linked in: [ 71.991786][ T8422] CPU: 1 PID: 8422 Comm: syz-executor854 Not tainted 5.12.0-rc4-syzkaller #0 [ 72.001177][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.012084][ T8422] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 72.018224][ T8422] Code: 1d 6a 5a e8 09 31 ff 89 de e8 8d 1a ab fd 84 db 75 e0 e8 d4 13 ab fd 48 c7 c7 a0 e1 c1 89 c6 05 4a 5a e8 09 01 e8 2e 36 fb 04 <0f> 0b eb c4 e8 b8 13 ab fd 0f b6 1d 39 5a e8 09 31 ff 89 de e8 58 [ 72.038273][ T8422] RSP: 0018:ffffc900018befd0 EFLAGS: 00010282 [ 72.044539][ T8422] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.053719][ T8422] RDX: ffff88801ef19c40 RSI: ffffffff815c51f5 RDI: fffff52000317dec [ 72.061868][ T8422] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 72.070283][ T8422] R10: ffffffff815bdf8e R11: 0000000000000000 R12: ffff888018cf4568 [ 72.078550][ T8422] R13: ffff888018cf4c00 R14: ffff8880228f2000 R15: ffffffff8d659b80 [ 72.086663][ T8422] FS: 00000000014eb300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.095912][ T8422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.102668][ T8422] CR2: 000055d7bf2b3138 CR3: 0000000014933000 CR4: 00000000001506f0 [ 72.111660][ T8422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.119801][ T8422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.127848][ T8422] Call Trace: [ 72.132372][ T8422] ip6gre_tunnel_uninit+0x3d7/0x440 [ 72.137625][ T8422] ? ip6erspan_tunnel_uninit+0x3f0/0x3f0 [ 72.143430][ T8422] register_netdevice+0xadf/0x1500 [ 72.148622][ T8422] ? netdev_change_features+0xb0/0xb0 [ 72.154226][ T8422] ? memset+0x20/0x40 [ 72.158258][ T8422] ip6gre_newlink_common.constprop.0+0x158/0x410 [ 72.165056][ T8422] ? skb_tunnel_info_txcheck+0x370/0x370 [ 72.170854][ T8422] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.177142][ T8422] ? ip6gre_tunnel_find+0x483/0x640 [ 72.183572][ T8422] ip6gre_newlink+0x275/0x7a0 [ 72.188322][ T8422] ? ip6erspan_newlink+0x790/0x790 [ 72.194610][ T8422] __rtnl_newlink+0x1062/0x1710 [ 72.199671][ T8422] ? rtnl_setlink+0x3c0/0x3c0 [ 72.204407][ T8422] ? find_held_lock+0x2d/0x110 [ 72.209230][ T8422] ? is_bpf_text_address+0xa9/0x160 [ 72.214700][ T8422] ? lock_downgrade+0x6e0/0x6e0 [ 72.219696][ T8422] ? unwind_next_frame+0xec8/0x1ce0 [ 72.224987][ T8422] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.231380][ T8422] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 72.237218][ T8422] ? is_bpf_text_address+0xcb/0x160 [ 72.242711][ T8422] ? kernel_text_address+0xbd/0xf0 [ 72.247911][ T8422] ? __kernel_text_address+0x9/0x30 [ 72.253241][ T8422] ? unwind_get_return_address+0x51/0x90 [ 72.258947][ T8422] ? create_prof_cpu_mask+0x20/0x20 [ 72.264539][ T8422] ? arch_stack_walk+0x93/0xe0 [ 72.269560][ T8422] ? fs_reclaim_release+0x9c/0xe0 [ 72.274655][ T8422] ? rcu_read_lock_sched_held+0x3a/0x70 [ 72.280314][ T8422] rtnl_newlink+0x64/0xa0 [ 72.284686][ T8422] ? __rtnl_newlink+0x1710/0x1710 [ 72.290072][ T8422] rtnetlink_rcv_msg+0x44e/0xad0 [ 72.295089][ T8422] ? rtnetlink_put_metrics+0x510/0x510 [ 72.300977][ T8422] netlink_rcv_skb+0x153/0x420 [ 72.305781][ T8422] ? rtnetlink_put_metrics+0x510/0x510 [ 72.312470][ T8422] ? netlink_ack+0xaa0/0xaa0 [ 72.317119][ T8422] ? netlink_deliver_tap+0x227/0xba0 [ 72.323066][ T8422] netlink_unicast+0x533/0x7d0 [ 72.327896][ T8422] ? netlink_attachskb+0x870/0x870 [ 72.333203][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.339599][ T8422] ? __phys_addr_symbol+0x2c/0x70 [ 72.344691][ T8422] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.350629][ T8422] ? __check_object_size+0x171/0x3f0 [ 72.355977][ T8422] netlink_sendmsg+0x856/0xd90 [ 72.360878][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 72.365884][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.372240][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 72.377222][ T8422] sock_sendmsg+0xcf/0x120 [ 72.381770][ T8422] ____sys_sendmsg+0x6e8/0x810 [ 72.386620][ T8422] ? kernel_sendmsg+0x50/0x50 [ 72.391425][ T8422] ? do_recvmmsg+0x6d0/0x6d0 [ 72.396059][ T8422] ? lock_chain_count+0x20/0x20 [ 72.401105][ T8422] ___sys_sendmsg+0xf3/0x170 [ 72.405940][ T8422] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.411369][ T8422] ? __lock_acquire+0x16b3/0x54c0 [ 72.416443][ T8422] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.422831][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.429245][ T8422] ? __fget_light+0x215/0x280 [ 72.434095][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.441939][ T8422] __sys_sendmsg+0xe5/0x1b0 [ 72.446805][ T8422] ? __sys_sendmsg_sock+0x30/0x30 [ 72.453240][ T8422] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.459218][ T8422] do_syscall_64+0x2d/0x70 [ 72.465697][ T8422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.472877][ T8422] RIP: 0033:0x43f2a9 [ 72.476833][ T8422] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.498158][ T8422] RSP: 002b:00007ffcea45d6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.508248][ T8422] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043f2a9 [ 72.517513][ T8422] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 72.526823][ T8422] RBP: 0000000000403290 R08: 0000000000000070 R09: 0000000000400488 [ 72.536240][ T8422] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000403320 [ 72.544849][ T8422] R13: 0000000000000000 R14: 00000000004ad018 R15: 0000000000400488 [ 72.553479][ T8422] Kernel panic - not syncing: panic_on_warn set ... [ 72.560151][ T8422] CPU: 1 PID: 8422 Comm: syz-executor854 Not tainted 5.12.0-rc4-syzkaller #0 [ 72.568953][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.579041][ T8422] Call Trace: [ 72.582391][ T8422] dump_stack+0x141/0x1d7 [ 72.586753][ T8422] panic+0x306/0x73d [ 72.590667][ T8422] ? __warn_printk+0xf3/0xf3 [ 72.595281][ T8422] ? __warn.cold+0x1a/0x44 [ 72.599731][ T8422] ? refcount_warn_saturate+0xbf/0x1e0 [ 72.605266][ T8422] __warn.cold+0x35/0x44 [ 72.609528][ T8422] ? refcount_warn_saturate+0xbf/0x1e0 [ 72.615015][ T8422] report_bug+0x1bd/0x210 [ 72.619388][ T8422] handle_bug+0x3c/0x60 [ 72.623584][ T8422] exc_invalid_op+0x14/0x40 [ 72.628127][ T8422] asm_exc_invalid_op+0x12/0x20 [ 72.633024][ T8422] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 72.639132][ T8422] Code: 1d 6a 5a e8 09 31 ff 89 de e8 8d 1a ab fd 84 db 75 e0 e8 d4 13 ab fd 48 c7 c7 a0 e1 c1 89 c6 05 4a 5a e8 09 01 e8 2e 36 fb 04 <0f> 0b eb c4 e8 b8 13 ab fd 0f b6 1d 39 5a e8 09 31 ff 89 de e8 58 [ 72.658753][ T8422] RSP: 0018:ffffc900018befd0 EFLAGS: 00010282 [ 72.664837][ T8422] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.672838][ T8422] RDX: ffff88801ef19c40 RSI: ffffffff815c51f5 RDI: fffff52000317dec [ 72.680817][ T8422] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 72.688797][ T8422] R10: ffffffff815bdf8e R11: 0000000000000000 R12: ffff888018cf4568 [ 72.696782][ T8422] R13: ffff888018cf4c00 R14: ffff8880228f2000 R15: ffffffff8d659b80 [ 72.704779][ T8422] ? wake_up_klogd.part.0+0x8e/0xd0 [ 72.710018][ T8422] ? vprintk_func+0x95/0x1e0 [ 72.714653][ T8422] ip6gre_tunnel_uninit+0x3d7/0x440 [ 72.719871][ T8422] ? ip6erspan_tunnel_uninit+0x3f0/0x3f0 [ 72.725542][ T8422] register_netdevice+0xadf/0x1500 [ 72.730687][ T8422] ? netdev_change_features+0xb0/0xb0 [ 72.736083][ T8422] ? memset+0x20/0x40 [ 72.740095][ T8422] ip6gre_newlink_common.constprop.0+0x158/0x410 [ 72.746465][ T8422] ? skb_tunnel_info_txcheck+0x370/0x370 [ 72.752155][ T8422] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.758429][ T8422] ? ip6gre_tunnel_find+0x483/0x640 [ 72.763649][ T8422] ip6gre_newlink+0x275/0x7a0 [ 72.768361][ T8422] ? ip6erspan_newlink+0x790/0x790 [ 72.773764][ T8422] __rtnl_newlink+0x1062/0x1710 [ 72.778667][ T8422] ? rtnl_setlink+0x3c0/0x3c0 [ 72.783403][ T8422] ? find_held_lock+0x2d/0x110 [ 72.788196][ T8422] ? is_bpf_text_address+0xa9/0x160 [ 72.793438][ T8422] ? lock_downgrade+0x6e0/0x6e0 [ 72.798304][ T8422] ? unwind_next_frame+0xec8/0x1ce0 [ 72.803520][ T8422] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.809609][ T8422] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 72.815352][ T8422] ? is_bpf_text_address+0xcb/0x160 [ 72.820565][ T8422] ? kernel_text_address+0xbd/0xf0 [ 72.825703][ T8422] ? __kernel_text_address+0x9/0x30 [ 72.830940][ T8422] ? unwind_get_return_address+0x51/0x90 [ 72.836597][ T8422] ? create_prof_cpu_mask+0x20/0x20 [ 72.841817][ T8422] ? arch_stack_walk+0x93/0xe0 [ 72.847035][ T8422] ? fs_reclaim_release+0x9c/0xe0 [ 72.852127][ T8422] ? rcu_read_lock_sched_held+0x3a/0x70 [ 72.857700][ T8422] rtnl_newlink+0x64/0xa0 [ 72.862048][ T8422] ? __rtnl_newlink+0x1710/0x1710 [ 72.867111][ T8422] rtnetlink_rcv_msg+0x44e/0xad0 [ 72.872093][ T8422] ? rtnetlink_put_metrics+0x510/0x510 [ 72.877602][ T8422] netlink_rcv_skb+0x153/0x420 [ 72.882568][ T8422] ? rtnetlink_put_metrics+0x510/0x510 [ 72.888060][ T8422] ? netlink_ack+0xaa0/0xaa0 [ 72.892667][ T8422] ? netlink_deliver_tap+0x227/0xba0 [ 72.897997][ T8422] netlink_unicast+0x533/0x7d0 [ 72.902783][ T8422] ? netlink_attachskb+0x870/0x870 [ 72.907952][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.914218][ T8422] ? __phys_addr_symbol+0x2c/0x70 [ 72.919290][ T8422] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.925092][ T8422] ? __check_object_size+0x171/0x3f0 [ 72.930412][ T8422] netlink_sendmsg+0x856/0xd90 [ 72.935218][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 72.940180][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.946445][ T8422] ? netlink_unicast+0x7d0/0x7d0 [ 72.951417][ T8422] sock_sendmsg+0xcf/0x120 [ 72.955855][ T8422] ____sys_sendmsg+0x6e8/0x810 [ 72.960658][ T8422] ? kernel_sendmsg+0x50/0x50 [ 72.965355][ T8422] ? do_recvmmsg+0x6d0/0x6d0 [ 72.969971][ T8422] ? lock_chain_count+0x20/0x20 [ 72.974876][ T8422] ___sys_sendmsg+0xf3/0x170 [ 72.979480][ T8422] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.984783][ T8422] ? __lock_acquire+0x16b3/0x54c0 [ 72.989837][ T8422] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.995965][ T8422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.002251][ T8422] ? __fget_light+0x215/0x280 [ 73.006964][ T8422] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.013231][ T8422] __sys_sendmsg+0xe5/0x1b0 [ 73.017788][ T8422] ? __sys_sendmsg_sock+0x30/0x30 [ 73.022836][ T8422] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.028760][ T8422] do_syscall_64+0x2d/0x70 [ 73.033207][ T8422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.039140][ T8422] RIP: 0033:0x43f2a9 [ 73.043048][ T8422] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.062664][ T8422] RSP: 002b:00007ffcea45d6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.071090][ T8422] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043f2a9 [ 73.079068][ T8422] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 73.087047][ T8422] RBP: 0000000000403290 R08: 0000000000000070 R09: 0000000000400488 [ 73.095027][ T8422] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000403320 [ 73.103016][ T8422] R13: 0000000000000000 R14: 00000000004ad018 R15: 0000000000400488 [ 73.111626][ T8422] Kernel Offset: disabled [ 73.116108][ T8422] Rebooting in 86400 seconds..