Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts.
2021/12/15 03:23:08 fuzzer started
2021/12/15 03:23:08 connecting to host at 10.128.0.169:41677
2021/12/15 03:23:08 checking machine...
2021/12/15 03:23:08 checking revisions...
2021/12/15 03:23:09 testing simple program...
syzkaller login: [ 49.134197][ T3607] cgroup: Unknown subsys name 'net'
[ 49.270587][ T3607] cgroup: Unknown subsys name 'rlimit'
[ 50.548372][ T3613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 50.556723][ T3613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 50.564605][ T3613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 50.572577][ T3613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 50.579996][ T3613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 50.587843][ T3613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 50.673861][ T3610] chnl_net:caif_netlink_parms(): no params data found
[ 50.716871][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.724354][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.735074][ T3610] device bridge_slave_0 entered promiscuous mode
[ 50.744365][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.751789][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.759491][ T3610] device bridge_slave_1 entered promiscuous mode
[ 50.780090][ T3610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 50.791208][ T3610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 50.814975][ T3610] team0: Port device team_slave_0 added
[ 50.823225][ T3610] team0: Port device team_slave_1 added
[ 50.841107][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 50.848146][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.874505][ T3610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 50.887271][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 50.894427][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.920726][ T3610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 50.946703][ T3610] device hsr_slave_0 entered promiscuous mode
[ 50.953957][ T3610] device hsr_slave_1 entered promiscuous mode
[ 51.033838][ T3610] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 51.045090][ T3610] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 51.053778][ T3610] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 51.063883][ T3610] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 51.084098][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.091357][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.098991][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.106128][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.151350][ T3610] 8021q: adding VLAN 0 to HW filter on device bond0
[ 51.164476][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 51.175561][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 51.184187][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 51.194806][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 51.208548][ T3610] 8021q: adding VLAN 0 to HW filter on device team0
[ 51.220738][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 51.229324][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.236403][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.247060][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 51.256269][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.263582][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.283136][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 51.300775][ T3610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 51.313029][ T3610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 51.325541][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 51.334258][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 51.343133][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 51.352296][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 51.362005][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 51.383923][ T3610] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 51.393152][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 51.400656][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 51.417944][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 51.436552][ T3610] device veth0_vlan entered promiscuous mode
[ 51.443503][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 51.452054][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 51.459767][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 51.473993][ T3610] device veth1_vlan entered promiscuous mode
[ 51.492532][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 51.500535][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 51.509911][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 51.521038][ T3610] device veth0_macvtap entered promiscuous mode
[ 51.530246][ T3610] device veth1_macvtap entered promiscuous mode
[ 51.545385][ T3610] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 51.554301][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 51.563688][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 51.577040][ T3610] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 51.584858][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 51.599678][ T3610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.609181][ T3610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.618469][ T3610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.627929][ T3610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.705515][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.723076][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.732499][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.740457][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.751042][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 51.762894][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2021/12/15 03:23:11 building call list...
executing program
[ 52.084361][ T8] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.933916][ T3601] can: request_module (can-proto-0) failed.
[ 53.960179][ T3601] can: request_module (can-proto-0) failed.
[ 53.980949][ T3601] can: request_module (can-proto-0) failed.
[ 54.176948][ T3601] ------------[ cut here ]------------
[ 54.183213][ T3601] refcount_t: decrement hit 0; leaking memory.
[ 54.189984][ T3601] WARNING: CPU: 1 PID: 3601 at lib/refcount.c:31 refcount_warn_saturate+0xbf/0x1e0
[ 54.199446][ T3601] Modules linked in:
[ 54.203600][ T3601] CPU: 1 PID: 3601 Comm: syz-fuzzer Not tainted 5.16.0-rc5-next-20211214-syzkaller #0
[ 54.213347][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 54.223869][ T3601] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0
[ 54.231735][ T3601] Code: 1d 06 e6 95 09 31 ff 89 de e8 4d f8 8f fd 84 db 75 e0 e8 64 f4 8f fd 48 c7 c7 a0 4d 05 8a c6 05 e6 e5 95 09 01 e8 26 ac 28 05 <0f> 0b eb c4 e8 48 f4 8f fd 0f b6 1d d5 e5 95 09 31 ff 89 de e8 18
[ 54.251581][ T3601] RSP: 0018:ffffc90001b1fab8 EFLAGS: 00010282
[ 54.257646][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 54.265706][ T3601] RDX: ffff88801ad73a80 RSI: ffffffff815f4648 RDI: fffff52000363f49
[ 54.273858][ T3601] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[ 54.281917][ T3601] R10: ffffffff815ee3ae R11: 0000000000000000 R12: 1ffff92000363f5c
[ 54.290112][ T3601] R13: 00000000ffffffef R14: ffffffff8d309554 R15: ffffc90001b1fd10
[ 54.298270][ T3601] FS: 000000c00002e890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 54.308028][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.314789][ T3601] CR2: 00007fd830a83300 CR3: 0000000019a8d000 CR4: 00000000003506e0
[ 54.322809][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.330798][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.338933][ T3601] Call Trace:
[ 54.342379][ T3601]
[ 54.345315][ T3601] ref_tracker_free+0x4fe/0x610
[ 54.350188][ T3601] ? ref_tracker_dir_exit+0x330/0x330
[ 54.355744][ T3601] ? bpf_sk_storage_free+0x333/0x3e0
[ 54.361154][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 54.366069][ T3601] ? kfree+0x1ea/0x4b0
[ 54.370346][ T3601] __sk_destruct+0x3cd/0x710
[ 54.375025][ T3601] sk_destruct+0xbd/0xe0
[ 54.379301][ T3601] __sk_free+0xef/0x3d0
[ 54.383501][ T3601] sk_free+0x78/0xa0
[ 54.387542][ T3601] __mptcp_close_ssk+0x435/0x590
[ 54.392807][ T3601] __mptcp_destroy_sock+0x35f/0x830
[ 54.398040][ T3601] ? __mptcp_close_ssk+0x590/0x590
[ 54.403223][ T3601] ? __local_bh_enable_ip+0xa0/0x120
[ 54.408656][ T3601] mptcp_close+0x5f8/0x7f0
[ 54.413155][ T3601] inet_release+0x12e/0x280
[ 54.417676][ T3601] inet6_release+0x4c/0x70
[ 54.422386][ T3601] __sock_release+0xcd/0x280
[ 54.427155][ T3601] sock_close+0x18/0x20
[ 54.431402][ T3601] __fput+0x286/0x9f0
[ 54.435411][ T3601] ? __sock_release+0x280/0x280
[ 54.440322][ T3601] task_work_run+0xdd/0x1a0
[ 54.444897][ T3601] exit_to_user_mode_prepare+0x27e/0x290
[ 54.450562][ T3601] syscall_exit_to_user_mode+0x19/0x60
[ 54.456158][ T3601] do_syscall_64+0x42/0xb0
[ 54.460610][ T3601] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 54.466884][ T3601] RIP: 0033:0x4b12db
[ 54.470877][ T3601] Code: fb ff eb bd e8 46 96 fb ff e9 61 ff ff ff cc e8 fb 61 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 54.490936][ T3601] RSP: 002b:000000c0001b74f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 54.499537][ T3601] RAX: 0000000000000000 RBX: 000000c00001e800 RCX: 00000000004b12db
[ 54.507590][ T3601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 54.515615][ T3601] RBP: 000000c0001b7530 R08: 0000000000f0ae01 R09: 00007ffe01589080
[ 54.523649][ T3601] R10: 00007ffe01589090 R11: 0000000000000206 R12: 000000000000000c
[ 54.531659][ T3601] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000c000012500
[ 54.539636][ T3601]
[ 54.542723][ T3601] Kernel panic - not syncing: panic_on_warn set ...
[ 54.549306][ T3601] CPU: 1 PID: 3601 Comm: syz-fuzzer Not tainted 5.16.0-rc5-next-20211214-syzkaller #0
[ 54.559182][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 54.569317][ T3601] Call Trace:
[ 54.572598][ T3601]
[ 54.575530][ T3601] dump_stack_lvl+0xcd/0x134
[ 54.580132][ T3601] panic+0x2b0/0x6dd
[ 54.584027][ T3601] ? __warn_printk+0xf3/0xf3
[ 54.588808][ T3601] ? __warn.cold+0x1d1/0x2cf
[ 54.593665][ T3601] ? refcount_warn_saturate+0xbf/0x1e0
[ 54.599134][ T3601] __warn.cold+0x1ec/0x2cf
[ 54.603552][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 54.611111][ T3601] ? refcount_warn_saturate+0xbf/0x1e0
[ 54.616587][ T3601] report_bug+0x1bd/0x210
[ 54.620928][ T3601] handle_bug+0x3c/0x60
[ 54.625089][ T3601] exc_invalid_op+0x14/0x40
[ 54.629694][ T3601] asm_exc_invalid_op+0x12/0x20
[ 54.634656][ T3601] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0
[ 54.640732][ T3601] Code: 1d 06 e6 95 09 31 ff 89 de e8 4d f8 8f fd 84 db 75 e0 e8 64 f4 8f fd 48 c7 c7 a0 4d 05 8a c6 05 e6 e5 95 09 01 e8 26 ac 28 05 <0f> 0b eb c4 e8 48 f4 8f fd 0f b6 1d d5 e5 95 09 31 ff 89 de e8 18
[ 54.660335][ T3601] RSP: 0018:ffffc90001b1fab8 EFLAGS: 00010282
[ 54.666399][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 54.674460][ T3601] RDX: ffff88801ad73a80 RSI: ffffffff815f4648 RDI: fffff52000363f49
[ 54.683295][ T3601] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[ 54.691260][ T3601] R10: ffffffff815ee3ae R11: 0000000000000000 R12: 1ffff92000363f5c
[ 54.699317][ T3601] R13: 00000000ffffffef R14: ffffffff8d309554 R15: ffffc90001b1fd10
[ 54.707289][ T3601] ? wake_up_klogd.part.0+0x8e/0xd0
[ 54.712512][ T3601] ? vprintk+0x88/0x90
[ 54.716639][ T3601] ? refcount_warn_saturate+0xbf/0x1e0
[ 54.722124][ T3601] ref_tracker_free+0x4fe/0x610
[ 54.726991][ T3601] ? ref_tracker_dir_exit+0x330/0x330
[ 54.732390][ T3601] ? bpf_sk_storage_free+0x333/0x3e0
[ 54.737702][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 54.742571][ T3601] ? kfree+0x1ea/0x4b0
[ 54.746686][ T3601] __sk_destruct+0x3cd/0x710
[ 54.751294][ T3601] sk_destruct+0xbd/0xe0
[ 54.755563][ T3601] __sk_free+0xef/0x3d0
[ 54.759738][ T3601] sk_free+0x78/0xa0
[ 54.763643][ T3601] __mptcp_close_ssk+0x435/0x590
[ 54.768604][ T3601] __mptcp_destroy_sock+0x35f/0x830
[ 54.773830][ T3601] ? __mptcp_close_ssk+0x590/0x590
[ 54.778971][ T3601] ? __local_bh_enable_ip+0xa0/0x120
[ 54.784288][ T3601] mptcp_close+0x5f8/0x7f0
[ 54.788751][ T3601] inet_release+0x12e/0x280
[ 54.793297][ T3601] inet6_release+0x4c/0x70
[ 54.797874][ T3601] __sock_release+0xcd/0x280
[ 54.802492][ T3601] sock_close+0x18/0x20
[ 54.806663][ T3601] __fput+0x286/0x9f0
[ 54.810755][ T3601] ? __sock_release+0x280/0x280
[ 54.815634][ T3601] task_work_run+0xdd/0x1a0
[ 54.820250][ T3601] exit_to_user_mode_prepare+0x27e/0x290
[ 54.825906][ T3601] syscall_exit_to_user_mode+0x19/0x60
[ 54.831382][ T3601] do_syscall_64+0x42/0xb0
[ 54.835815][ T3601] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 54.841845][ T3601] RIP: 0033:0x4b12db
[ 54.845749][ T3601] Code: fb ff eb bd e8 46 96 fb ff e9 61 ff ff ff cc e8 fb 61 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 54.865357][ T3601] RSP: 002b:000000c0001b74f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 54.873770][ T3601] RAX: 0000000000000000 RBX: 000000c00001e800 RCX: 00000000004b12db
[ 54.881735][ T3601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 54.889728][ T3601] RBP: 000000c0001b7530 R08: 0000000000f0ae01 R09: 00007ffe01589080
[ 54.897691][ T3601] R10: 00007ffe01589090 R11: 0000000000000206 R12: 000000000000000c
[ 54.905660][ T3601] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000c000012500
[ 54.913748][ T3601]
[ 54.917151][ T3601] Kernel Offset: disabled
[ 54.921569][ T3601] Rebooting in 86400 seconds..