Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 72.132612][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor937'. [ 72.142201][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor937'. [ 72.165980][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor937'. [ 72.175603][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor937'. [ 72.185512][ T8430] ------------[ cut here ]------------ [ 72.191099][ T8430] refcount_t: decrement hit 0; leaking memory. [ 72.197832][ T8430] WARNING: CPU: 0 PID: 8430 at lib/refcount.c:31 refcount_warn_saturate+0xbf/0x1e0 [ 72.207893][ T8430] Modules linked in: [ 72.211788][ T8430] CPU: 0 PID: 8430 Comm: syz-executor937 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 72.221875][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.232204][ T8430] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 72.238702][ T8430] Code: 1d 5b 7f e6 09 31 ff 89 de e8 7d b6 a7 fd 84 db 75 e0 e8 c4 af a7 fd 48 c7 c7 60 3e c2 89 c6 05 3b 7f e6 09 01 e8 04 00 fe 04 <0f> 0b eb c4 e8 a8 af a7 fd 0f b6 1d 2a 7f e6 09 31 ff 89 de e8 48 [ 72.258720][ T8430] RSP: 0018:ffffc900017aefa0 EFLAGS: 00010282 [ 72.265077][ T8430] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.273264][ T8430] RDX: ffff888014818000 RSI: ffffffff815c3fd5 RDI: fffff520002f5de6 [ 72.281250][ T8430] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 72.289293][ T8430] R10: ffffffff815bd77e R11: 0000000000000000 R12: ffff88802acce568 [ 72.297472][ T8430] R13: ffff888024c94000 R14: 00000000ffffffff R15: ffffffff8d675580 [ 72.305516][ T8430] FS: 00000000015c9300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.314574][ T8430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.321163][ T8430] CR2: 00000000200004c0 CR3: 000000001e0f7000 CR4: 00000000001506f0 [ 72.329893][ T8430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.337974][ T8430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.346015][ T8430] Call Trace: [ 72.349300][ T8430] ipip6_tunnel_uninit+0x389/0x3f0 [ 72.354497][ T8430] ? ipip6_dellink+0x2d0/0x2d0 [ 72.359310][ T8430] register_netdevice+0xadf/0x1500 [ 72.364746][ T8430] ? netdev_change_features+0xb0/0xb0 [ 72.370217][ T8430] ipip6_tunnel_create+0x29e/0x4e0 [ 72.375452][ T8430] ipip6_newlink+0x137/0x370 [ 72.380067][ T8430] ? ipip6_changelink+0x5b0/0x5b0 [ 72.385528][ T8430] ? alloc_netdev_mqs+0xade/0xe80 [ 72.390603][ T8430] ? rtnl_create_link+0x746/0xae0 [ 72.395752][ T8430] ? ipip6_changelink+0x5b0/0x5b0 [ 72.400799][ T8430] __rtnl_newlink+0x1062/0x1710 [ 72.405732][ T8430] ? rtnl_setlink+0x3c0/0x3c0 [ 72.410419][ T8430] ? find_held_lock+0x2d/0x110 [ 72.415285][ T8430] ? is_bpf_text_address+0xa9/0x160 [ 72.420499][ T8430] ? lock_downgrade+0x6e0/0x6e0 [ 72.425514][ T8430] ? unwind_next_frame+0xec8/0x1ce0 [ 72.430755][ T8430] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.436920][ T8430] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 72.442726][ T8430] ? is_bpf_text_address+0xcb/0x160 [ 72.447938][ T8430] ? kernel_text_address+0xbd/0xf0 [ 72.453256][ T8430] ? __kernel_text_address+0x9/0x30 [ 72.458472][ T8430] ? unwind_get_return_address+0x51/0x90 [ 72.464228][ T8430] ? create_prof_cpu_mask+0x20/0x20 [ 72.469443][ T8430] ? arch_stack_walk+0x93/0xe0 [ 72.474586][ T8430] ? fs_reclaim_release+0x9c/0xf0 [ 72.479642][ T8430] ? rcu_read_lock_sched_held+0x3a/0x70 [ 72.485270][ T8430] rtnl_newlink+0x64/0xa0 [ 72.489638][ T8430] ? __rtnl_newlink+0x1710/0x1710 [ 72.494948][ T8430] rtnetlink_rcv_msg+0x44e/0xad0 [ 72.499914][ T8430] ? rtnetlink_put_metrics+0x510/0x510 [ 72.505478][ T8430] netlink_rcv_skb+0x153/0x420 [ 72.510253][ T8430] ? rtnetlink_put_metrics+0x510/0x510 [ 72.516111][ T8430] ? netlink_ack+0xaa0/0xaa0 [ 72.520744][ T8430] ? netlink_deliver_tap+0x227/0xba0 [ 72.526226][ T8430] netlink_unicast+0x533/0x7d0 [ 72.531009][ T8430] ? netlink_attachskb+0x870/0x870 [ 72.536263][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.542615][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.548870][ T8430] ? __phys_addr_symbol+0x2c/0x70 [ 72.553999][ T8430] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.559857][ T8430] ? __check_object_size+0x171/0x3f0 [ 72.565209][ T8430] netlink_sendmsg+0x856/0xd90 [ 72.569992][ T8430] ? netlink_unicast+0x7d0/0x7d0 [ 72.575024][ T8430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.581308][ T8430] ? netlink_unicast+0x7d0/0x7d0 [ 72.586339][ T8430] sock_sendmsg+0xcf/0x120 [ 72.590796][ T8430] ____sys_sendmsg+0x6e8/0x810 [ 72.595650][ T8430] ? kernel_sendmsg+0x50/0x50 [ 72.600340][ T8430] ? do_recvmmsg+0x6d0/0x6d0 [ 72.605003][ T8430] ? lock_chain_count+0x20/0x20 [ 72.609887][ T8430] ___sys_sendmsg+0xf3/0x170 [ 72.614566][ T8430] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.619867][ T8430] ? __lock_acquire+0x16a7/0x5230 [ 72.625381][ T8430] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.631434][ T8430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.637811][ T8430] ? __fget_light+0x215/0x280 [ 72.642809][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.649252][ T8430] __sys_sendmsg+0xe5/0x1b0 [ 72.653845][ T8430] ? __sys_sendmsg_sock+0x30/0x30 [ 72.658907][ T8430] ? __context_tracking_enter+0xef/0x100 [ 72.664688][ T8430] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.670653][ T8430] do_syscall_64+0x2d/0x70 [ 72.675213][ T8430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.681122][ T8430] RIP: 0033:0x43fd09 [ 72.685377][ T8430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.705213][ T8430] RSP: 002b:00007ffc864dea28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.713707][ T8430] RAX: ffffffffffffffda RBX: 00000000000119c8 RCX: 000000000043fd09 [ 72.721712][ T8430] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 72.729859][ T8430] RBP: 0000000000000000 R08: 00007ffc864debc8 R09: 00007ffc864debc8 [ 72.737923][ T8430] R10: 00007ffc864debc8 R11: 0000000000000246 R12: 00007ffc864dea3c [ 72.746076][ T8430] R13: 431bde82d7b634db R14: 00000000004ae018 R15: 0000000000400488 [ 72.754335][ T8430] Kernel panic - not syncing: panic_on_warn set ... [ 72.760934][ T8430] CPU: 0 PID: 8430 Comm: syz-executor937 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 72.770903][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.780957][ T8430] Call Trace: [ 72.784230][ T8430] dump_stack+0x141/0x1d7 [ 72.788556][ T8430] panic+0x306/0x73d [ 72.792446][ T8430] ? __warn_printk+0xf3/0xf3 [ 72.797031][ T8430] ? __warn.cold+0x1a/0x44 [ 72.801484][ T8430] ? refcount_warn_saturate+0xbf/0x1e0 [ 72.807066][ T8430] __warn.cold+0x35/0x44 [ 72.811322][ T8430] ? refcount_warn_saturate+0xbf/0x1e0 [ 72.816789][ T8430] report_bug+0x1bd/0x210 [ 72.821120][ T8430] handle_bug+0x3c/0x60 [ 72.825268][ T8430] exc_invalid_op+0x14/0x40 [ 72.829765][ T8430] asm_exc_invalid_op+0x12/0x20 [ 72.834611][ T8430] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 72.840700][ T8430] Code: 1d 5b 7f e6 09 31 ff 89 de e8 7d b6 a7 fd 84 db 75 e0 e8 c4 af a7 fd 48 c7 c7 60 3e c2 89 c6 05 3b 7f e6 09 01 e8 04 00 fe 04 <0f> 0b eb c4 e8 a8 af a7 fd 0f b6 1d 2a 7f e6 09 31 ff 89 de e8 48 [ 72.860297][ T8430] RSP: 0018:ffffc900017aefa0 EFLAGS: 00010282 [ 72.866350][ T8430] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.874308][ T8430] RDX: ffff888014818000 RSI: ffffffff815c3fd5 RDI: fffff520002f5de6 [ 72.882272][ T8430] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 72.890236][ T8430] R10: ffffffff815bd77e R11: 0000000000000000 R12: ffff88802acce568 [ 72.898199][ T8430] R13: ffff888024c94000 R14: 00000000ffffffff R15: ffffffff8d675580 [ 72.906196][ T8430] ? wake_up_klogd.part.0+0x8e/0xd0 [ 72.911530][ T8430] ? vprintk_func+0x95/0x260 [ 72.916129][ T8430] ipip6_tunnel_uninit+0x389/0x3f0 [ 72.921253][ T8430] ? ipip6_dellink+0x2d0/0x2d0 [ 72.926024][ T8430] register_netdevice+0xadf/0x1500 [ 72.931140][ T8430] ? netdev_change_features+0xb0/0xb0 [ 72.936532][ T8430] ipip6_tunnel_create+0x29e/0x4e0 [ 72.941639][ T8430] ipip6_newlink+0x137/0x370 [ 72.946219][ T8430] ? ipip6_changelink+0x5b0/0x5b0 [ 72.951233][ T8430] ? alloc_netdev_mqs+0xade/0xe80 [ 72.956249][ T8430] ? rtnl_create_link+0x746/0xae0 [ 72.961261][ T8430] ? ipip6_changelink+0x5b0/0x5b0 [ 72.966271][ T8430] __rtnl_newlink+0x1062/0x1710 [ 72.971155][ T8430] ? rtnl_setlink+0x3c0/0x3c0 [ 72.975843][ T8430] ? find_held_lock+0x2d/0x110 [ 72.980686][ T8430] ? is_bpf_text_address+0xa9/0x160 [ 72.985885][ T8430] ? lock_downgrade+0x6e0/0x6e0 [ 72.990811][ T8430] ? unwind_next_frame+0xec8/0x1ce0 [ 72.995998][ T8430] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.002065][ T8430] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.007802][ T8430] ? is_bpf_text_address+0xcb/0x160 [ 73.013019][ T8430] ? kernel_text_address+0xbd/0xf0 [ 73.018125][ T8430] ? __kernel_text_address+0x9/0x30 [ 73.023315][ T8430] ? unwind_get_return_address+0x51/0x90 [ 73.028953][ T8430] ? create_prof_cpu_mask+0x20/0x20 [ 73.034148][ T8430] ? arch_stack_walk+0x93/0xe0 [ 73.038982][ T8430] ? fs_reclaim_release+0x9c/0xf0 [ 73.045221][ T8430] ? rcu_read_lock_sched_held+0x3a/0x70 [ 73.050862][ T8430] rtnl_newlink+0x64/0xa0 [ 73.055184][ T8430] ? __rtnl_newlink+0x1710/0x1710 [ 73.060202][ T8430] rtnetlink_rcv_msg+0x44e/0xad0 [ 73.065143][ T8430] ? rtnetlink_put_metrics+0x510/0x510 [ 73.070607][ T8430] netlink_rcv_skb+0x153/0x420 [ 73.075365][ T8430] ? rtnetlink_put_metrics+0x510/0x510 [ 73.080820][ T8430] ? netlink_ack+0xaa0/0xaa0 [ 73.085506][ T8430] ? netlink_deliver_tap+0x227/0xba0 [ 73.090800][ T8430] netlink_unicast+0x533/0x7d0 [ 73.095577][ T8430] ? netlink_attachskb+0x870/0x870 [ 73.100677][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.106911][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.113142][ T8430] ? __phys_addr_symbol+0x2c/0x70 [ 73.118171][ T8430] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.123884][ T8430] ? __check_object_size+0x171/0x3f0 [ 73.129168][ T8430] netlink_sendmsg+0x856/0xd90 [ 73.133931][ T8430] ? netlink_unicast+0x7d0/0x7d0 [ 73.138881][ T8430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.145118][ T8430] ? netlink_unicast+0x7d0/0x7d0 [ 73.150042][ T8430] sock_sendmsg+0xcf/0x120 [ 73.154481][ T8430] ____sys_sendmsg+0x6e8/0x810 [ 73.159241][ T8430] ? kernel_sendmsg+0x50/0x50 [ 73.163907][ T8430] ? do_recvmmsg+0x6d0/0x6d0 [ 73.168489][ T8430] ? lock_chain_count+0x20/0x20 [ 73.173342][ T8430] ___sys_sendmsg+0xf3/0x170 [ 73.178112][ T8430] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.183389][ T8430] ? __lock_acquire+0x16a7/0x5230 [ 73.188410][ T8430] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.194402][ T8430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.200668][ T8430] ? __fget_light+0x215/0x280 [ 73.205337][ T8430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.211576][ T8430] __sys_sendmsg+0xe5/0x1b0 [ 73.216071][ T8430] ? __sys_sendmsg_sock+0x30/0x30 [ 73.221089][ T8430] ? __context_tracking_enter+0xef/0x100 [ 73.226754][ T8430] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.232640][ T8430] do_syscall_64+0x2d/0x70 [ 73.237043][ T8430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.242927][ T8430] RIP: 0033:0x43fd09 [ 73.246809][ T8430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.266404][ T8430] RSP: 002b:00007ffc864dea28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.274818][ T8430] RAX: ffffffffffffffda RBX: 00000000000119c8 RCX: 000000000043fd09 [ 73.282775][ T8430] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 73.290737][ T8430] RBP: 0000000000000000 R08: 00007ffc864debc8 R09: 00007ffc864debc8 [ 73.298722][ T8430] R10: 00007ffc864debc8 R11: 0000000000000246 R12: 00007ffc864dea3c [ 73.306687][ T8430] R13: 431bde82d7b634db R14: 00000000004ae018 R15: 0000000000400488 [ 73.315504][ T8430] Kernel Offset: disabled [ 73.319912][ T8430] Rebooting in 86400 seconds..