[ 491.287588][T15273] skb 0xffff8880a6c83a40 0xffff88809579c040: truesize 131328, sk alloc 164865 sctp_wfree 9093 [ 491.303164][T15316] skb 0xffff8880a0cd3a40 0xffff88809d7277c0: truesize 131328, sk alloc 428033 sctp_wfree 9093 [ 491.306261][T15307] skb 0xffff88808fe21dc0 0xffff88809480c000: truesize 768, sk alloc 769 sctp_wfree 9099 [ 491.329423][T15319] skb 0xffff88809f6e3d40 0xffff8880930af000: truesize 131328, sk alloc 297473 sctp_wfree 9093 [ 491.333366][T15316] skb 0xffff8880a0cd3a40 0xffff88809d7277c0: truesize 131328, sk alloc 427777 sctp_wfree 9099 [ 491.355043][T15281] skb 0xffff88807d1a7780 0xffff888093267040: truesize 131328, sk alloc 164609 sctp_wfree 9099 [ 491.355527][T15319] skb 0xffff88809f6e3d40 0xffff8880930af000: truesize 131328, sk alloc 297217 sctp_wfree 9099 [ 491.368980][T15281] skb 0xffff888094ada280 0xffff888093267040: truesize 33024, sk alloc 33281 sctp_wfree 9093 [ 491.384216][T15273] skb 0xffff8880a6c83a40 0xffff88809579c040: truesize 131328, sk alloc 164609 sctp_wfree 9099 [ 491.396689][T15316] skb 0xffff8880a0cd3040 0xffff88809d7277c0: truesize 131328, sk alloc 296449 sctp_wfree 9093 [ 491.405026][T15281] skb 0xffff888094ada280 0xffff888093267040: truesize 33024, sk alloc 33025 sctp_wfree 9099 [ 491.408288][T15273] skb 0xffff8880a6c83540 0xffff88809579c040: truesize 33024, sk alloc 33281 sctp_wfree 9093 [ 491.428444][T15316] skb 0xffff8880a0cd3040 0xffff88809d7277c0: truesize 131328, sk alloc 296193 sctp_wfree 9099 [ 491.432950][T15319] skb 0xffff88809f2745c0 0xffff8880930af000: truesize 131328, sk alloc 165889 sctp_wfree 9093 [ 491.451835][T15319] skb 0xffff88809f2745c0 0xffff8880930af000: truesize 131328, sk alloc 165633 sctp_wfree 9099 [ 491.467333][T15273] skb 0xffff8880a6c83540 0xffff88809579c040: truesize 33024, sk alloc 33025 sctp_wfree 9099 [ 491.487307][T15319] skb 0xffff888095454b80 0xffff8880930af000: truesize 33024, sk alloc 34305 sctp_wfree 9093 [ 491.502779][T15316] skb 0xffff8880a0cd3400 0xffff88809d7277c0: truesize 131328, sk alloc 164865 sctp_wfree 9093 [ 491.518839][T15316] skb 0xffff8880a0cd3400 0xffff88809d7277c0: truesize 131328, sk alloc 164609 sctp_wfree 9099 [ 491.528405][T15319] skb 0xffff888095454b80 0xffff8880930af000: truesize 33024, sk alloc 34049 sctp_wfree 9099 [ 491.532533][T15316] skb 0xffff88807bce5680 0xffff88809d7277c0: truesize 33024, sk alloc 33281 sctp_wfree 9093 [ 491.560935][T15316] skb 0xffff88807bce5680 0xffff88809d7277c0: truesize 33024, sk alloc 33025 sctp_wfree 9099 [ 491.573544][T15319] skb 0xffff888095fea700 0xffff8880930af000: truesize 768, sk alloc 1025 sctp_wfree 9093 [ 491.586850][T15319] skb 0xffff888095fea700 0xffff8880930af000: truesize 768, sk alloc 769 sctp_wfree 9099 [ 491.632681][ T0] NOHZ: local_softirq_pending 08 [ 492.268559][ T0] NOHZ: local_softirq_pending 08 [ 493.568421][ T897] tipc: TX() has been purged, node left! Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. [ 496.430151][T15360] skb 0xffff888096e46780 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1 sctp_sock_rfree 9144 [ 496.448355][T15360] skb 0xffff888096e463c0 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1 sctp_sock_rfree 9144 [ 496.460499][T15360] skb 0xffff888096e46a00 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1 sctp_sock_rfree 9144 [ 496.472125][T15360] skb 0xffff888098a68980 0xffff888093d34800: truesize 768, sk alloc 769 sctp_set_owner_w 137 [ 496.483416][T15360] skb 0xffff888098a68980 0xffff888093d34800: truesize 768, sk alloc 1025 sctp_set_owner_w 149 [ 496.496755][T15360] skb 0xffff8880a18b0780 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1025 sctp_sock_rfree 9144 [ 496.508764][T15360] skb 0xffff8880a27a1ac0 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1025 sctp_sock_rfree 9144 [ 496.520347][T15360] skb 0xffff888085ae7900 0xffff888093d34800: truesize 768, rlen 768, sk alloc 1025 sctp_sock_rfree 9144 [ 496.532513][T15360] skb 0xffff8880a90dd200 0xffff888093d34800: truesize 131328, sk alloc 132353 sctp_set_owner_w 137 [ 496.543347][T15360] skb 0xffff8880a90dd200 0xffff888093d34800: truesize 131328, sk alloc 132609 sctp_set_owner_w 149 [ 496.554075][T15360] skb 0xffff8880a708ed40 0xffff888093d34800: truesize 131328, sk alloc 263937 sctp_set_owner_w 137 [ 496.564847][T15360] skb 0xffff8880a708ed40 0xffff888093d34800: truesize 131328, sk alloc 264193 sctp_set_owner_w 149 [ 496.575556][T15360] skb 0xffff8880a90dd840 0xffff888093d34800: truesize 131328, sk alloc 395521 sctp_set_owner_w 137 [ 496.586449][T15360] skb 0xffff8880a90dd840 0xffff888093d34800: truesize 131328, sk alloc 395777 sctp_set_owner_w 149 [ 496.599527][T15360] skb 0xffff8880a27a15c0 0xffff888093d34800: truesize 33024, sk alloc 428801 sctp_set_owner_w 137 [ 496.611394][T15360] skb 0xffff8880a27a15c0 0xffff888093d34800: truesize 33024, sk alloc 429057 sctp_set_owner_w 149 [ 496.622161][T15360] skb 0xffff888097a7fa00 0xffff888093d34800: truesize 768, rlen 768, sk alloc 429057 sctp_sock_rfree 9144 [ 496.633671][T15360] skb 0xffff88809f16b900 0xffff888093d34800: truesize 768, rlen 768, sk alloc 429057 sctp_sock_rfree 9144 [ 496.645599][T15360] skb 0xffff88809f2f7340 0xffff888093d34800: truesize 768, rlen 768, sk alloc 429057 sctp_sock_rfree 9144 [ 496.656950][T15360] skb 0xffff88809f75bc00 0xffff888093d34800: truesize 768, rlen 768, sk alloc 429057 sctp_sock_rfree 9144 [ 496.669823][T15360] skb 0xffff88808d64acc0 0xffff888093d34800: truesize 131328, rlen 65508, sk alloc 429057 sctp_sock_rfree 9144 [ 496.682018][T15360] skb 0xffff88808c930500 0xffff888093d34800: truesize 131328, rlen 65708, sk alloc 429057 sctp_sock_rfree 9144 [ 496.696005][T15360] skb 0xffff8880a2417040 0xffff888093d34800: truesize 131328, rlen 65508, sk alloc 429057 sctp_sock_rfree 9144 [ 496.708841][T15360] skb 0xffff88808ce6cb40 0xffff888093d34800: truesize 131328, rlen 65708, sk alloc 429057 sctp_sock_rfree 9144 [ 496.720826][T15360] skb 0xffff8880a708ed40 0xffff888093d34800: truesize 131328, sk alloc 429057 sctp_wfree 9093 [ 496.731688][T15360] skb 0xffff8880a708ed40 0xffff888093d34800: truesize 131328, sk alloc 428801 sctp_wfree 9099 [ 496.741959][T15360] skb 0xffff8880a90dd840 0xffff888093d34800: truesize 131328, sk alloc 297473 sctp_wfree 9093 [ 496.752228][T15360] skb 0xffff8880a90dd840 0xffff888093d34800: truesize 131328, sk alloc 297217 sctp_wfree 9099 [ 496.762684][T15360] skb 0xffff8880a27a15c0 0xffff888093d34800: truesize 33024, sk alloc 165889 sctp_wfree 9093 [ 496.773018][T15360] skb 0xffff8880a27a15c0 0xffff888093d34800: truesize 33024, sk alloc 165633 sctp_wfree 9099 [ 496.783239][T15360] skb 0xffff8880a708ed40 0xffff88809802e7c0: truesize 131328, sk alloc 131329 sctp_set_owner_w 137 [ 496.793956][T15360] skb 0xffff8880a708ed40 0xffff88809802e7c0: truesize 131328, sk alloc 131585 sctp_set_owner_w 149 [ 496.804717][T15360] skb 0xffff8880a90dd840 0xffff88809802e7c0: truesize 131328, sk alloc 262913 sctp_set_owner_w 137 [ 496.815457][T15360] skb 0xffff8880a90dd840 0xffff88809802e7c0: truesize 131328, sk alloc 263169 sctp_set_owner_w 149 [ 496.827062][T15360] skb 0xffff8880a27a15c0 0xffff88809802e7c0: truesize 33024, sk alloc 296193 sctp_set_owner_w 137 [ 496.837820][T15360] skb 0xffff8880a27a15c0 0xffff88809802e7c0: truesize 33024, sk alloc 296449 sctp_set_owner_w 149 [ 496.851453][T15360] skb 0xffff8880a2417040 0xffff88809802e7c0: truesize 131328, rlen 65508, sk alloc 296449 sctp_sock_rfree 9144 [ 496.863830][T15360] skb 0xffff88808ce6cb40 0xffff88809802e7c0: truesize 131328, rlen 65708, sk alloc 296449 sctp_sock_rfree 9144 [ 496.875735][T15360] skb 0xffff888093770340 0xffff88809802e7c0: truesize 768, rlen 768, sk alloc 296449 sctp_sock_rfree 9144 [ 496.887648][T15360] skb 0xffff8880a90dd200 0xffff88809802e7c0: truesize 131328, sk alloc 296449 sctp_wfree 9093 [ 496.898320][T15360] skb 0xffff8880a90dd200 0xffff88809802e7c0: truesize 131328, sk alloc 296193 sctp_wfree 9099 [ 496.908920][T15360] skb 0xffff8880a708ed40 0xffff88809802e7c0: truesize 131328, sk alloc 296193 sctp_wfree 9093 [ 496.919382][T15360] skb 0xffff8880a708ed40 0xffff88809802e7c0: truesize 131328, sk alloc 295937 sctp_wfree 9099 [ 496.931033][T15360] skb 0xffff8880a90dd840 0xffff88809802e7c0: truesize 131328, sk alloc 164609 sctp_wfree 9093 [ 496.941376][T15360] skb 0xffff8880a90dd840 0xffff88809802e7c0: truesize 131328, sk alloc 164353 sctp_wfree 9099 [ 496.941998][ T897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.951754][T15360] skb 0xffff8880a27a15c0 0xffff88809802e7c0: truesize 33024, sk alloc 33025 sctp_wfree 9093 [ 496.964071][ T897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.969465][T15360] skb 0xffff8880a27a15c0 0xffff88809802e7c0: truesize 33024, sk alloc 32769 sctp_wfree 9099 [ 496.969472][T15360] ------------[ cut here ]------------ [ 496.969476][T15360] refcount_t: underflow; use-after-free. [ 496.969862][T15360] WARNING: CPU: 0 PID: 15360 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0 [ 497.007212][T15360] Kernel panic - not syncing: panic_on_warn set ... [ 497.013798][T15360] CPU: 0 PID: 15360 Comm: syz-executor018 Not tainted 5.6.0-rc5-syzkaller #0 [ 497.022531][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.032565][T15360] Call Trace: [ 497.035951][T15360] dump_stack+0x1e9/0x30e [ 497.040359][T15360] panic+0x264/0x7a0 [ 497.044240][T15360] ? __warn+0x102/0x210 [ 497.048384][T15360] ? refcount_warn_saturate+0x15b/0x1a0 [ 497.053912][T15360] __warn+0x209/0x210 [ 497.057883][T15360] ? refcount_warn_saturate+0x15b/0x1a0 [ 497.063420][T15360] report_bug+0x1ac/0x2d0 [ 497.067783][T15360] do_error_trap+0xca/0x1c0 [ 497.072265][T15360] do_invalid_op+0x32/0x40 [ 497.076664][T15360] ? refcount_warn_saturate+0x15b/0x1a0 [ 497.082247][T15360] invalid_op+0x23/0x30 [ 497.086395][T15360] RIP: 0010:refcount_warn_saturate+0x15b/0x1a0 [ 497.092648][T15360] Code: c7 d4 00 d1 88 31 c0 e8 33 1f b3 fd 0f 0b eb 85 e8 2a 4a e0 fd c6 05 4e 70 b1 05 01 48 c7 c7 00 01 d1 88 31 c0 e8 15 1f b3 fd <0f> 0b e9 64 ff ff ff e8 09 4a e0 fd c6 05 2e 70 b1 05 01 48 c7 c7 [ 497.112342][T15360] RSP: 0018:ffffc900025277b0 EFLAGS: 00010246 [ 497.118406][T15360] RAX: e6ef09c15dffea00 RBX: 0000000000000003 RCX: ffff88808b6a8540 [ 497.126367][T15360] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 497.134321][T15360] RBP: 0000000000000003 R08: ffffffff815e16d6 R09: fffffbfff15dbb2e [ 497.142345][T15360] R10: fffffbfff15dbb2e R11: 0000000000000000 R12: dffffc0000000000 [ 497.150301][T15360] R13: 1ffff11013f90fa0 R14: ffff88809802e7c0 R15: ffff8880a27a15c0 [ 497.158338][T15360] ? vprintk_emit+0x2e6/0x3b0 [ 497.163114][T15360] sctp_wfree+0x49a/0x880 [ 497.167481][T15360] skb_release_head_state+0xfb/0x210 [ 497.172798][T15360] __kfree_skb+0x22/0x1c0 [ 497.177235][T15360] sctp_chunk_put+0x17b/0x200 [ 497.181919][T15360] __sctp_outq_teardown+0x80a/0x9d0 [ 497.187139][T15360] sctp_association_free+0x21e/0x7c0 [ 497.192480][T15360] ? sctp_do_sm+0x2e2a/0x5560 [ 497.197179][T15360] sctp_do_sm+0x3c01/0x5560 [ 497.201754][T15360] ? rcu_read_lock_sched_held+0x106/0x170 [ 497.207464][T15360] ? _sctp_make_chunk+0x10c/0x3e0 [ 497.212466][T15360] ? rcu_read_lock_sched_held+0x106/0x170 [ 497.218247][T15360] ? trace_kmem_cache_alloc+0xcb/0x120 [ 497.223698][T15360] ? _sctp_make_chunk+0x10c/0x3e0 [ 497.228697][T15360] ? sctp_auth_send_cid+0x60/0x250 [ 497.233796][T15360] sctp_primitive_ABORT+0x93/0xc0 [ 497.238815][T15360] sctp_close+0x2aa/0x7d0 [ 497.243197][T15360] ? ip_mc_drop_socket+0x267/0x280 [ 497.248324][T15360] inet_release+0x135/0x180 [ 497.252805][T15360] sock_close+0xd8/0x260 [ 497.257022][T15360] ? sock_mmap+0x90/0x90 [ 497.261347][T15360] __fput+0x2d8/0x730 [ 497.265365][T15360] task_work_run+0x176/0x1b0 [ 497.269978][T15360] do_exit+0x5ef/0x1f80 [ 497.274155][T15360] ? debug_smp_processor_id+0x5/0x20 [ 497.279433][T15360] do_group_exit+0x15e/0x2c0 [ 497.284044][T15360] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 497.289744][T15360] __do_sys_exit_group+0x13/0x20 [ 497.294659][T15360] __se_sys_exit_group+0x10/0x10 [ 497.299582][T15360] __x64_sys_exit_group+0x37/0x40 [ 497.304660][T15360] do_syscall_64+0xf3/0x1b0 [ 497.309163][T15360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 497.315028][T15360] RIP: 0033:0x43ebc8 [ 497.318915][T15360] Code: Bad RIP value. [ 497.322971][T15360] RSP: 002b:00007ffcf53d3908 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 497.331419][T15360] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ebc8 [ 497.339379][T15360] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 497.347350][T15360] RBP: 00000000004be4a0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 497.355311][T15360] R10: 000000002059aff8 R11: 0000000000000246 R12: 0000000000000001 [ 497.363959][T15360] R13: 00000000006cc180 R14: 0000000000000000 R15: 0000000000000000 [ 497.373641][T15360] Kernel Offset: disabled [ 497.378044][T15360] Rebooting in 86400 seconds..