[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.994957][ T6530] ------------[ cut here ]------------ [ 68.000591][ T6530] refcount_t: addition on 0; use-after-free. [ 68.007413][ T6530] WARNING: CPU: 1 PID: 6530 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 [ 68.016942][ T6530] Modules linked in: [ 68.020841][ T6530] CPU: 1 PID: 6530 Comm: syz-executor027 Not tainted 5.15.0-rc6-next-20211022-syzkaller #0 [ 68.031134][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.041330][ T6530] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 68.047570][ T6530] Code: 09 31 ff 89 de e8 27 1f 9f fd 84 db 0f 85 36 ff ff ff e8 3a 1b 9f fd 48 c7 c7 00 2e 04 8a c6 05 c7 25 a3 09 01 e8 92 ce 31 05 <0f> 0b e9 17 ff ff ff e8 1b 1b 9f fd 0f b6 1d ac 25 a3 09 31 ff 89 [ 68.067288][ T6530] RSP: 0018:ffffc90002987f10 EFLAGS: 00010286 [ 68.073440][ T6530] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.081537][ T6530] RDX: ffff88801ba78000 RSI: ffffffff815f06f8 RDI: fffff52000530fd4 [ 68.089655][ T6530] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 68.097715][ T6530] R10: ffffffff815ea4ce R11: 0000000000000000 R12: 0000000000000000 [ 68.105874][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.114084][ T6530] FS: 0000555556f48300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 68.123090][ T6530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.130386][ T6530] CR2: 00007ffc79bc8020 CR3: 000000001c76c000 CR4: 00000000003506e0 [ 68.138565][ T6530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.146628][ T6530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.154665][ T6530] Call Trace: [ 68.157967][ T6530] [ 68.160895][ T6530] __x64_sys_memfd_secret+0x182/0x1e0 [ 68.166691][ T6530] do_syscall_64+0x35/0xb0 [ 68.171134][ T6530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.177101][ T6530] RIP: 0033:0x7f1f04c4bf89 [ 68.181526][ T6530] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.201220][ T6530] RSP: 002b:00007ffc79adf9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 68.209756][ T6530] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f04c4bf89 [ 68.217829][ T6530] RDX: 00007f1f04c0ee93 RSI: 0000000000000012 RDI: 0000000000080000 [ 68.225887][ T6530] RBP: 00007f1f04c0ff70 R08: 0000000000000000 R09: 0000000000000000 [ 68.233943][ T6530] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f1f04c10000 [ 68.241935][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.249981][ T6530] [ 68.253065][ T6530] Kernel panic - not syncing: panic_on_warn set ... [ 68.259658][ T6530] CPU: 1 PID: 6530 Comm: syz-executor027 Not tainted 5.15.0-rc6-next-20211022-syzkaller #0 [ 68.269703][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.279754][ T6530] Call Trace: [ 68.283024][ T6530] [ 68.285941][ T6530] dump_stack_lvl+0xcd/0x134 [ 68.290534][ T6530] panic+0x2b0/0x6dd [ 68.294419][ T6530] ? __warn_printk+0xf3/0xf3 [ 68.298997][ T6530] ? __warn.cold+0x1a/0x44 [ 68.303416][ T6530] ? refcount_warn_saturate+0x169/0x1e0 [ 68.308963][ T6530] __warn.cold+0x35/0x44 [ 68.313190][ T6530] ? wake_up_klogd.part.0+0x9e/0xd0 [ 68.318386][ T6530] ? refcount_warn_saturate+0x169/0x1e0 [ 68.323919][ T6530] report_bug+0x1bd/0x210 [ 68.328241][ T6530] handle_bug+0x3c/0x60 [ 68.332396][ T6530] exc_invalid_op+0x14/0x40 [ 68.336900][ T6530] asm_exc_invalid_op+0x12/0x20 [ 68.341923][ T6530] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 68.348067][ T6530] Code: 09 31 ff 89 de e8 27 1f 9f fd 84 db 0f 85 36 ff ff ff e8 3a 1b 9f fd 48 c7 c7 00 2e 04 8a c6 05 c7 25 a3 09 01 e8 92 ce 31 05 <0f> 0b e9 17 ff ff ff e8 1b 1b 9f fd 0f b6 1d ac 25 a3 09 31 ff 89 [ 68.367659][ T6530] RSP: 0018:ffffc90002987f10 EFLAGS: 00010286 [ 68.373726][ T6530] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.381682][ T6530] RDX: ffff88801ba78000 RSI: ffffffff815f06f8 RDI: fffff52000530fd4 [ 68.389635][ T6530] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 68.397586][ T6530] R10: ffffffff815ea4ce R11: 0000000000000000 R12: 0000000000000000 [ 68.405543][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.413528][ T6530] ? wake_up_klogd.part.0+0x8e/0xd0 [ 68.418716][ T6530] ? vprintk+0x88/0x90 [ 68.422773][ T6530] __x64_sys_memfd_secret+0x182/0x1e0 [ 68.428218][ T6530] do_syscall_64+0x35/0xb0 [ 68.432635][ T6530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.438519][ T6530] RIP: 0033:0x7f1f04c4bf89 [ 68.442933][ T6530] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.462525][ T6530] RSP: 002b:00007ffc79adf9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 68.470924][ T6530] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f04c4bf89 [ 68.478877][ T6530] RDX: 00007f1f04c0ee93 RSI: 0000000000000012 RDI: 0000000000080000 [ 68.486918][ T6530] RBP: 00007f1f04c0ff70 R08: 0000000000000000 R09: 0000000000000000 [ 68.494885][ T6530] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f1f04c10000 [ 68.502840][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.510818][ T6530] [ 68.514158][ T6530] Kernel Offset: disabled [ 68.518552][ T6530] Rebooting in 86400 seconds..