./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4026057591
<...>
Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts.
execve("./syz-executor4026057591", ["./syz-executor4026057591"], 0x7ffe4122c8e0 /* 10 vars */) = 0
brk(NULL) = 0x555556bfb000
brk(0x555556bfbc40) = 0x555556bfbc40
arch_prctl(ARCH_SET_FS, 0x555556bfb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4026057591", 4096) = 28
brk(0x555556c1cc40) = 0x555556c1cc40
brk(0x555556c1d000) = 0x555556c1d000
mprotect(0x7f4f76010000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
syzkaller login: [ 76.291757][ T5005] ------------[ cut here ]------------
[ 76.297522][ T5005] refcount_t: decrement hit 0; leaking memory.
[ 76.307321][ T5005] WARNING: CPU: 1 PID: 5005 at lib/refcount.c:31 refcount_warn_saturate+0x1d7/0x1f0
[ 76.316944][ T5005] Modules linked in:
[ 76.320871][ T5005] CPU: 1 PID: 5005 Comm: syz-executor402 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 76.331363][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 76.341528][ T5005] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0
[ 76.347800][ T5005] Code: 05 fb 8e 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 d8 8e 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f
[ 76.367541][ T5005] RSP: 0018:ffffc9000398f1b8 EFLAGS: 00010282
[ 76.373708][ T5005] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 76.381720][ T5005] RDX: ffff888027121dc0 RSI: ffffffff814c03b7 RDI: 0000000000000001
[ 76.389797][ T5005] RBP: ffff8881406d05fc R08: 0000000000000001 R09: 0000000000000000
[ 76.397829][ T5005] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000731e3c
[ 76.405890][ T5005] R13: 00000000ffffffef R14: ffff8881406d05fc R15: ffff88814acc25a8
[ 76.413935][ T5005] FS: 0000555556bfb300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 76.422879][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.429546][ T5005] CR2: 000000000045ad50 CR3: 00000000727ee000 CR4: 00000000003506e0
[ 76.437588][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 76.445652][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 76.453687][ T5005] Call Trace:
[ 76.456973][ T5005]
[ 76.459908][ T5005] ? __warn+0xe6/0x390
[ 76.466518][ T5005] ? preempt_schedule_notrace+0x5f/0xd0
[ 76.472130][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 76.477778][ T5005] ? report_bug+0x2da/0x500
[ 76.482335][ T5005] ? handle_bug+0x3c/0x70
[ 76.486789][ T5005] ? exc_invalid_op+0x18/0x50
[ 76.491516][ T5005] ? asm_exc_invalid_op+0x1a/0x20
[ 76.496667][ T5005] ? __warn_printk+0x187/0x310
[ 76.501510][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 76.507175][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 76.512773][ T5005] ref_tracker_free+0x539/0x820
[ 76.517713][ T5005] ? ref_tracker_dir_exit+0x6a0/0x6a0
[ 76.523177][ T5005] ? fib6_nh_init+0x121b/0x1bd0
[ 76.528166][ T5005] ? lock_downgrade+0x690/0x690
[ 76.533069][ T5005] ? find_held_lock+0x2d/0x110
[ 76.537925][ T5005] fib6_nh_init+0xb96/0x1bd0
[ 76.542575][ T5005] ? icmp6_dst_alloc+0x670/0x670
[ 76.547625][ T5005] ? ip_fib_metrics_init+0x3ce/0x7f0
[ 76.552952][ T5005] ? gre_gso_segment+0x1750/0x1750
[ 76.558170][ T5005] ? kasan_set_track+0x25/0x30
[ 76.563057][ T5005] ? __kasan_kmalloc+0xa2/0xb0
[ 76.567934][ T5005] ip6_route_info_create+0x10f3/0x1980
[ 76.573489][ T5005] ? fib6_nh_init+0x1bd0/0x1bd0
[ 76.578374][ T5005] ip6_route_add+0x28/0x150
[ 76.582909][ T5005] inet6_rtm_newroute+0x156/0x160
[ 76.588121][ T5005] ? ip6_route_multipath_add+0x2070/0x2070
[ 76.594059][ T5005] ? ip6_route_multipath_add+0x2070/0x2070
[ 76.599894][ T5005] rtnetlink_rcv_msg+0x43d/0xd50
[ 76.604929][ T5005] ? rtnl_getlink+0xb00/0xb00
[ 76.609654][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.615760][ T5005] ? __sys_sendmsg+0xf7/0x1c0
[ 76.620492][ T5005] ? do_syscall_64+0x39/0xb0
[ 76.625242][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.631285][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.637382][ T5005] netlink_rcv_skb+0x165/0x440
[ 76.642193][ T5005] ? rtnl_getlink+0xb00/0xb00
[ 76.646969][ T5005] ? netlink_ack+0x1360/0x1360
[ 76.651777][ T5005] ? lock_sync+0x190/0x190
[ 76.656299][ T5005] ? netlink_deliver_tap+0x1b1/0xcf0
[ 76.661636][ T5005] netlink_unicast+0x547/0x7f0
[ 76.666511][ T5005] ? netlink_attachskb+0x890/0x890
[ 76.671752][ T5005] ? __virt_addr_valid+0x61/0x2e0
[ 76.676877][ T5005] ? __phys_addr_symbol+0x30/0x70
[ 76.682146][ T5005] ? __check_object_size+0x323/0x730
[ 76.687545][ T5005] netlink_sendmsg+0x925/0xe30
[ 76.692519][ T5005] ? netlink_unicast+0x7f0/0x7f0
[ 76.697548][ T5005] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 76.702873][ T5005] ? netlink_unicast+0x7f0/0x7f0
[ 76.707910][ T5005] sock_sendmsg+0xde/0x190
[ 76.712370][ T5005] ____sys_sendmsg+0x733/0x920
[ 76.717231][ T5005] ? copy_msghdr_from_user+0xfc/0x150
[ 76.722655][ T5005] ? kernel_sendmsg+0x50/0x50
[ 76.727460][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.733550][ T5005] ___sys_sendmsg+0x110/0x1b0
[ 76.738253][ T5005] ? do_recvmmsg+0x6f0/0x6f0
[ 76.742873][ T5005] ? lock_sync+0x190/0x190
[ 76.747410][ T5005] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 76.752759][ T5005] ? do_raw_spin_lock+0x124/0x2b0
[ 76.758004][ T5005] ? spin_bug+0x1c0/0x1c0
[ 76.762564][ T5005] ? _raw_spin_lock_irq+0x45/0x50
[ 76.767723][ T5005] ? __fget_light+0x20a/0x270
[ 76.772461][ T5005] __sys_sendmsg+0xf7/0x1c0
[ 76.777047][ T5005] ? __sys_sendmsg_sock+0x40/0x40
[ 76.782126][ T5005] ? lock_downgrade+0x690/0x690
[ 76.787102][ T5005] ? lockdep_hardirqs_on+0x7d/0x100
[ 76.792353][ T5005] ? _raw_spin_unlock_irq+0x2e/0x50
[ 76.797644][ T5005] ? ptrace_notify+0xfe/0x140
[ 76.802376][ T5005] do_syscall_64+0x39/0xb0
[ 76.806887][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.812844][ T5005] RIP: 0033:0x7f4f75fa3c09
[ 76.817329][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 76.837199][ T5005] RSP: 002b:00007ffdb583f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 76.845685][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f75fa3c09
[ 76.853789][ T5005] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 76.861774][ T5005] RBP: 00007f4f75f67db0 R08: 0000000000000000 R09: 0000000000000000
[ 76.869812][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f75f67e40
[ 76.877988][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 76.886057][ T5005]
[ 76.889130][ T5005] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.896437][ T5005] CPU: 1 PID: 5005 Comm: syz-executor402 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 76.906957][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 76.917032][ T5005] Call Trace:
[ 76.920328][ T5005]
[ 76.923277][ T5005] dump_stack_lvl+0xd9/0x150
[ 76.927896][ T5005] panic+0x686/0x730
[ 76.931828][ T5005] ? panic_smp_self_stop+0xa0/0xa0
[ 76.936977][ T5005] ? show_trace_log_lvl+0x284/0x390
[ 76.942248][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 76.947846][ T5005] check_panic_on_warn+0xb1/0xc0
[ 76.952830][ T5005] __warn+0xf2/0x390
[ 76.956771][ T5005] ? preempt_schedule_notrace+0x5f/0xd0
[ 76.962348][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 76.968019][ T5005] report_bug+0x2da/0x500
[ 76.972382][ T5005] handle_bug+0x3c/0x70
[ 76.976565][ T5005] exc_invalid_op+0x18/0x50
[ 76.981095][ T5005] asm_exc_invalid_op+0x1a/0x20
[ 76.985968][ T5005] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0
[ 76.992163][ T5005] Code: 05 fb 8e 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 d8 8e 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f
[ 77.011797][ T5005] RSP: 0018:ffffc9000398f1b8 EFLAGS: 00010282
[ 77.017891][ T5005] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 77.025882][ T5005] RDX: ffff888027121dc0 RSI: ffffffff814c03b7 RDI: 0000000000000001
[ 77.033871][ T5005] RBP: ffff8881406d05fc R08: 0000000000000001 R09: 0000000000000000
[ 77.041973][ T5005] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000731e3c
[ 77.049974][ T5005] R13: 00000000ffffffef R14: ffff8881406d05fc R15: ffff88814acc25a8
[ 77.057975][ T5005] ? __warn_printk+0x187/0x310
[ 77.062786][ T5005] ? refcount_warn_saturate+0x1d7/0x1f0
[ 77.068372][ T5005] ref_tracker_free+0x539/0x820
[ 77.073263][ T5005] ? ref_tracker_dir_exit+0x6a0/0x6a0
[ 77.078697][ T5005] ? fib6_nh_init+0x121b/0x1bd0
[ 77.083671][ T5005] ? lock_downgrade+0x690/0x690
[ 77.088554][ T5005] ? find_held_lock+0x2d/0x110
[ 77.093441][ T5005] fib6_nh_init+0xb96/0x1bd0
[ 77.098074][ T5005] ? icmp6_dst_alloc+0x670/0x670
[ 77.103048][ T5005] ? ip_fib_metrics_init+0x3ce/0x7f0
[ 77.108362][ T5005] ? gre_gso_segment+0x1750/0x1750
[ 77.113501][ T5005] ? kasan_set_track+0x25/0x30
[ 77.118304][ T5005] ? __kasan_kmalloc+0xa2/0xb0
[ 77.123112][ T5005] ip6_route_info_create+0x10f3/0x1980
[ 77.128615][ T5005] ? fib6_nh_init+0x1bd0/0x1bd0
[ 77.133526][ T5005] ip6_route_add+0x28/0x150
[ 77.138090][ T5005] inet6_rtm_newroute+0x156/0x160
[ 77.143159][ T5005] ? ip6_route_multipath_add+0x2070/0x2070
[ 77.149039][ T5005] ? ip6_route_multipath_add+0x2070/0x2070
[ 77.154986][ T5005] rtnetlink_rcv_msg+0x43d/0xd50
[ 77.159962][ T5005] ? rtnl_getlink+0xb00/0xb00
[ 77.164667][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.170683][ T5005] ? __sys_sendmsg+0xf7/0x1c0
[ 77.175394][ T5005] ? do_syscall_64+0x39/0xb0
[ 77.180014][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.186029][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.192059][ T5005] netlink_rcv_skb+0x165/0x440
[ 77.196866][ T5005] ? rtnl_getlink+0xb00/0xb00
[ 77.201584][ T5005] ? netlink_ack+0x1360/0x1360
[ 77.206385][ T5005] ? lock_sync+0x190/0x190
[ 77.210869][ T5005] ? netlink_deliver_tap+0x1b1/0xcf0
[ 77.216214][ T5005] netlink_unicast+0x547/0x7f0
[ 77.221024][ T5005] ? netlink_attachskb+0x890/0x890
[ 77.226169][ T5005] ? __virt_addr_valid+0x61/0x2e0
[ 77.231247][ T5005] ? __phys_addr_symbol+0x30/0x70
[ 77.237187][ T5005] ? __check_object_size+0x323/0x730
[ 77.242519][ T5005] netlink_sendmsg+0x925/0xe30
[ 77.247328][ T5005] ? netlink_unicast+0x7f0/0x7f0
[ 77.252309][ T5005] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 77.257620][ T5005] ? netlink_unicast+0x7f0/0x7f0
[ 77.262591][ T5005] sock_sendmsg+0xde/0x190
[ 77.267124][ T5005] ____sys_sendmsg+0x733/0x920
[ 77.271923][ T5005] ? copy_msghdr_from_user+0xfc/0x150
[ 77.277326][ T5005] ? kernel_sendmsg+0x50/0x50
[ 77.282043][ T5005] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.289415][ T5005] ___sys_sendmsg+0x110/0x1b0
[ 77.294128][ T5005] ? do_recvmmsg+0x6f0/0x6f0
[ 77.298770][ T5005] ? lock_sync+0x190/0x190
[ 77.303221][ T5005] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 77.308460][ T5005] ? do_raw_spin_lock+0x124/0x2b0
[ 77.313521][ T5005] ? spin_bug+0x1c0/0x1c0
[ 77.317888][ T5005] ? _raw_spin_lock_irq+0x45/0x50
[ 77.322954][ T5005] ? __fget_light+0x20a/0x270
[ 77.327679][ T5005] __sys_sendmsg+0xf7/0x1c0
[ 77.332216][ T5005] ? __sys_sendmsg_sock+0x40/0x40
[ 77.337313][ T5005] ? lock_downgrade+0x690/0x690
[ 77.342224][ T5005] ? lockdep_hardirqs_on+0x7d/0x100
[ 77.347460][ T5005] ? _raw_spin_unlock_irq+0x2e/0x50
[ 77.352694][ T5005] ? ptrace_notify+0xfe/0x140
[ 77.357408][ T5005] do_syscall_64+0x39/0xb0
[ 77.361850][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.367786][ T5005] RIP: 0033:0x7f4f75fa3c09
[ 77.372219][ T5005] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.391852][ T5005] RSP: 002b:00007ffdb583f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 77.400294][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f75fa3c09
[ 77.408284][ T5005] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 77.416279][ T5005] RBP: 00007f4f75f67db0 R08: 0000000000000000 R09: 0000000000000000
[ 77.424282][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f75f67e40
[ 77.432271][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 77.440376][ T5005]
[ 77.443684][ T5005] Kernel Offset: disabled
[ 77.448120][ T5005] Rebooting in 86400 seconds..