./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4037385484 <...> Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. execve("./syz-executor4037385484", ["./syz-executor4037385484"], 0x7fff34ca6640 /* 10 vars */) = 0 brk(NULL) = 0x555556c88000 brk(0x555556c88c40) = 0x555556c88c40 arch_prctl(ARCH_SET_FS, 0x555556c88300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4037385484", 4096) = 28 brk(0x555556ca9c40) = 0x555556ca9c40 brk(0x555556caa000) = 0x555556caa000 mprotect(0x7f647f1b7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 [ 75.757228][ T5006] ------------[ cut here ]------------ [ 75.762736][ T5006] refcount_t: decrement hit 0; leaking memory. [ 75.769853][ T5006] WARNING: CPU: 0 PID: 5006 at lib/refcount.c:31 refcount_warn_saturate+0x1d7/0x1f0 [ 75.779356][ T5006] Modules linked in: [ 75.783274][ T5006] CPU: 0 PID: 5006 Comm: syz-executor403 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0 [ 75.794323][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 75.804471][ T5006] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0 [ 75.810656][ T5006] Code: 05 fb 8e 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 d8 8e 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f [ 75.830401][ T5006] RSP: 0018:ffffc900039df6b8 EFLAGS: 00010282 [ 75.836563][ T5006] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.844641][ T5006] RDX: ffff888026d71dc0 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 75.852657][ T5006] RBP: ffff888146a505fc R08: 0000000000000001 R09: 0000000000000000 [ 75.860734][ T5006] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200073bedc [ 75.868782][ T5006] R13: 00000000ffffffef R14: ffff888146a505fc R15: ffff8880284eb5a8 [ 75.876906][ T5006] FS: 0000555556c88300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.885932][ T5006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.892531][ T5006] CR2: 00000000004585c0 CR3: 000000002b1b1000 CR4: 00000000003506f0 [ 75.900577][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.908624][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.916666][ T5006] Call Trace: [ 75.919970][ T5006] [ 75.922911][ T5006] ? __warn+0xe6/0x390 [ 75.927091][ T5006] ? preempt_schedule_notrace+0x5f/0xd0 [ 75.932712][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 75.938343][ T5006] ? report_bug+0x2da/0x500 [ 75.942982][ T5006] ? handle_bug+0x3c/0x70 [ 75.947412][ T5006] ? exc_invalid_op+0x18/0x50 [ 75.952129][ T5006] ? asm_exc_invalid_op+0x1a/0x20 [ 75.957257][ T5006] ? __warn_printk+0x187/0x310 [ 75.962081][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 75.967761][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 75.973384][ T5006] ref_tracker_free+0x539/0x820 [ 75.978721][ T5006] ? ref_tracker_dir_exit+0x6a0/0x6a0 [ 75.984217][ T5006] ? fib6_nh_init+0x121b/0x1bd0 [ 75.989099][ T5006] ? lock_downgrade+0x690/0x690 [ 75.994029][ T5006] ? find_held_lock+0x2d/0x110 [ 75.998936][ T5006] fib6_nh_init+0xb96/0x1bd0 [ 76.003567][ T5006] ? icmp6_dst_alloc+0x670/0x670 [ 76.008606][ T5006] ? ip_fib_metrics_init+0x3ce/0x7f0 [ 76.013979][ T5006] ? gre_gso_segment+0x1750/0x1750 [ 76.019112][ T5006] ? kasan_set_track+0x25/0x30 [ 76.023993][ T5006] ? __kasan_kmalloc+0xa2/0xb0 [ 76.028814][ T5006] ip6_route_info_create+0x10f3/0x1980 [ 76.034359][ T5006] ? fib6_nh_init+0x1bd0/0x1bd0 [ 76.039291][ T5006] ? apparmor_capable+0x1dc/0x460 [ 76.044446][ T5006] ip6_route_add+0x28/0x150 [ 76.049018][ T5006] ipv6_route_ioctl+0x3fc/0x570 [ 76.053949][ T5006] ? debug_check_no_obj_freed+0x210/0x420 [ 76.059746][ T5006] ? lock_downgrade+0x690/0x690 [ 76.064717][ T5006] ? rt6_purge_dflt_routers+0xe60/0xe60 [ 76.070318][ T5006] ? find_held_lock+0x2d/0x110 [ 76.075191][ T5006] inet6_ioctl+0x246/0x290 [ 76.079661][ T5006] ? inet6_release+0x70/0x70 [ 76.084362][ T5006] sock_do_ioctl+0xcc/0x230 [ 76.088930][ T5006] ? get_user_ifreq+0x250/0x250 [ 76.093857][ T5006] ? vfs_fileattr_set+0xc40/0xc40 [ 76.098971][ T5006] sock_ioctl+0x1f8/0x680 [ 76.103335][ T5006] ? br_ioctl_call+0xb0/0xb0 [ 76.108032][ T5006] ? lock_downgrade+0x690/0x690 [ 76.112969][ T5006] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.118010][ T5006] ? br_ioctl_call+0xb0/0xb0 [ 76.122645][ T5006] __x64_sys_ioctl+0x197/0x210 [ 76.127535][ T5006] do_syscall_64+0x39/0xb0 [ 76.131991][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.137978][ T5006] RIP: 0033:0x7f647f14ab99 [ 76.142427][ T5006] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.162159][ T5006] RSP: 002b:00007ffef5524208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.170651][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f647f14ab99 [ 76.178729][ T5006] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000003 [ 76.186766][ T5006] RBP: 00007f647f10ed40 R08: 0000000000000000 R09: 0000000000000000 [ 76.194819][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f647f10edd0 [ 76.202821][ T5006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.210898][ T5006] [ 76.213984][ T5006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.221279][ T5006] CPU: 0 PID: 5006 Comm: syz-executor403 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0 [ 76.231716][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 76.241790][ T5006] Call Trace: [ 76.245084][ T5006] [ 76.248029][ T5006] dump_stack_lvl+0xd9/0x150 [ 76.252653][ T5006] panic+0x686/0x730 [ 76.256584][ T5006] ? panic_smp_self_stop+0xa0/0xa0 [ 76.261732][ T5006] ? show_trace_log_lvl+0x284/0x390 [ 76.266986][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 76.272563][ T5006] check_panic_on_warn+0xb1/0xc0 [ 76.277541][ T5006] __warn+0xf2/0x390 [ 76.281468][ T5006] ? preempt_schedule_notrace+0x5f/0xd0 [ 76.287043][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 76.292657][ T5006] report_bug+0x2da/0x500 [ 76.297015][ T5006] handle_bug+0x3c/0x70 [ 76.301213][ T5006] exc_invalid_op+0x18/0x50 [ 76.305740][ T5006] asm_exc_invalid_op+0x1a/0x20 [ 76.310632][ T5006] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0 [ 76.316911][ T5006] Code: 05 fb 8e 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 d8 8e 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f [ 76.336559][ T5006] RSP: 0018:ffffc900039df6b8 EFLAGS: 00010282 [ 76.344125][ T5006] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.352115][ T5006] RDX: ffff888026d71dc0 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 76.360102][ T5006] RBP: ffff888146a505fc R08: 0000000000000001 R09: 0000000000000000 [ 76.368096][ T5006] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200073bedc [ 76.376085][ T5006] R13: 00000000ffffffef R14: ffff888146a505fc R15: ffff8880284eb5a8 [ 76.384083][ T5006] ? __warn_printk+0x187/0x310 [ 76.388877][ T5006] ? refcount_warn_saturate+0x1d7/0x1f0 [ 76.394468][ T5006] ref_tracker_free+0x539/0x820 [ 76.399350][ T5006] ? ref_tracker_dir_exit+0x6a0/0x6a0 [ 76.404761][ T5006] ? fib6_nh_init+0x121b/0x1bd0 [ 76.409644][ T5006] ? lock_downgrade+0x690/0x690 [ 76.414546][ T5006] ? find_held_lock+0x2d/0x110 [ 76.419347][ T5006] fib6_nh_init+0xb96/0x1bd0 [ 76.423989][ T5006] ? icmp6_dst_alloc+0x670/0x670 [ 76.428969][ T5006] ? ip_fib_metrics_init+0x3ce/0x7f0 [ 76.434279][ T5006] ? gre_gso_segment+0x1750/0x1750 [ 76.439407][ T5006] ? kasan_set_track+0x25/0x30 [ 76.444197][ T5006] ? __kasan_kmalloc+0xa2/0xb0 [ 76.448996][ T5006] ip6_route_info_create+0x10f3/0x1980 [ 76.454505][ T5006] ? fib6_nh_init+0x1bd0/0x1bd0 [ 76.459395][ T5006] ? apparmor_capable+0x1dc/0x460 [ 76.464468][ T5006] ip6_route_add+0x28/0x150 [ 76.469008][ T5006] ipv6_route_ioctl+0x3fc/0x570 [ 76.473898][ T5006] ? debug_check_no_obj_freed+0x210/0x420 [ 76.479644][ T5006] ? lock_downgrade+0x690/0x690 [ 76.484533][ T5006] ? rt6_purge_dflt_routers+0xe60/0xe60 [ 76.490126][ T5006] ? find_held_lock+0x2d/0x110 [ 76.494950][ T5006] inet6_ioctl+0x246/0x290 [ 76.499392][ T5006] ? inet6_release+0x70/0x70 [ 76.504020][ T5006] sock_do_ioctl+0xcc/0x230 [ 76.508548][ T5006] ? get_user_ifreq+0x250/0x250 [ 76.513417][ T5006] ? vfs_fileattr_set+0xc40/0xc40 [ 76.518494][ T5006] sock_ioctl+0x1f8/0x680 [ 76.522852][ T5006] ? br_ioctl_call+0xb0/0xb0 [ 76.527470][ T5006] ? lock_downgrade+0x690/0x690 [ 76.532370][ T5006] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.537336][ T5006] ? br_ioctl_call+0xb0/0xb0 [ 76.541953][ T5006] __x64_sys_ioctl+0x197/0x210 [ 76.546759][ T5006] do_syscall_64+0x39/0xb0 [ 76.551200][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.557131][ T5006] RIP: 0033:0x7f647f14ab99 [ 76.561563][ T5006] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.581192][ T5006] RSP: 002b:00007ffef5524208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.589645][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f647f14ab99 [ 76.597644][ T5006] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000003 [ 76.605631][ T5006] RBP: 00007f647f10ed40 R08: 0000000000000000 R09: 0000000000000000 [ 76.613627][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f647f10edd0 [ 76.621622][ T5006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.629642][ T5006] [ 76.632925][ T5006] Kernel Offset: disabled [ 76.637352][ T5006] Rebooting in 86400 seconds..