[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.252' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.412998][ T6532] ------------[ cut here ]------------ [ 56.419539][ T6532] refcount_t: addition on 0; use-after-free. [ 56.425841][ T6532] WARNING: CPU: 1 PID: 6532 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 [ 56.436015][ T6532] Modules linked in: [ 56.440091][ T6532] CPU: 0 PID: 6532 Comm: syz-executor254 Not tainted 5.15.0-rc6-syzkaller #0 [ 56.449023][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.459158][ T6532] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 56.465504][ T6532] Code: 09 31 ff 89 de e8 27 5e 9c fd 84 db 0f 85 36 ff ff ff e8 da 57 9c fd 48 c7 c7 40 ee e3 89 c6 05 52 67 7f 09 01 e8 52 1c 19 05 <0f> 0b e9 17 ff ff ff e8 bb 57 9c fd 0f b6 1d 37 67 7f 09 31 ff 89 [ 56.485346][ T6532] RSP: 0018:ffffc9000112ff10 EFLAGS: 00010286 [ 56.492018][ T6532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.500304][ T6532] RDX: ffff888020ec8000 RSI: ffffffff815e9da8 RDI: fffff52000225fd4 [ 56.508268][ T6532] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 56.516303][ T6532] R10: ffffffff815e3b4e R11: 0000000000000000 R12: 0000000000000000 [ 56.524428][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.532461][ T6532] FS: 00005555569e8300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 56.541459][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.548060][ T6532] CR2: 00007f126dacb6c0 CR3: 0000000070f6c000 CR4: 0000000000350ef0 [ 56.556070][ T6532] Call Trace: [ 56.559597][ T6532] __x64_sys_memfd_secret+0x182/0x1e0 [ 56.565062][ T6532] do_syscall_64+0x35/0xb0 [ 56.570061][ T6532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.575974][ T6532] RIP: 0033:0x7f417cfc9f79 [ 56.580453][ T6532] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.600213][ T6532] RSP: 002b:00007ffffeda1c48 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 56.608628][ T6532] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f417cfc9f79 [ 56.616630][ T6532] RDX: 00007f417cf8ce83 RSI: 0000000000000012 RDI: 0000000000000000 [ 56.624762][ T6532] RBP: 00007f417cf8df60 R08: 0000000000000000 R09: 0000000000000000 [ 56.632979][ T6532] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f417cf8dff0 [ 56.641028][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.649235][ T6532] Kernel panic - not syncing: panic_on_warn set ... [ 56.655818][ T6532] CPU: 0 PID: 6532 Comm: syz-executor254 Not tainted 5.15.0-rc6-syzkaller #0 [ 56.664815][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.674852][ T6532] Call Trace: [ 56.678110][ T6532] dump_stack_lvl+0xcd/0x134 [ 56.682688][ T6532] panic+0x2b0/0x6dd [ 56.686566][ T6532] ? __warn_printk+0xf3/0xf3 [ 56.691143][ T6532] ? __warn.cold+0x1a/0x44 [ 56.695544][ T6532] ? refcount_warn_saturate+0x169/0x1e0 [ 56.701073][ T6532] __warn.cold+0x35/0x44 [ 56.705667][ T6532] ? wake_up_klogd.part.0+0x8e/0xd0 [ 56.710876][ T6532] ? refcount_warn_saturate+0x169/0x1e0 [ 56.716409][ T6532] report_bug+0x1bd/0x210 [ 56.720727][ T6532] handle_bug+0x3c/0x60 [ 56.725061][ T6532] exc_invalid_op+0x14/0x40 [ 56.729545][ T6532] asm_exc_invalid_op+0x12/0x20 [ 56.734381][ T6532] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 56.740540][ T6532] Code: 09 31 ff 89 de e8 27 5e 9c fd 84 db 0f 85 36 ff ff ff e8 da 57 9c fd 48 c7 c7 40 ee e3 89 c6 05 52 67 7f 09 01 e8 52 1c 19 05 <0f> 0b e9 17 ff ff ff e8 bb 57 9c fd 0f b6 1d 37 67 7f 09 31 ff 89 [ 56.760664][ T6532] RSP: 0018:ffffc9000112ff10 EFLAGS: 00010286 [ 56.766732][ T6532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.775489][ T6532] RDX: ffff888020ec8000 RSI: ffffffff815e9da8 RDI: fffff52000225fd4 [ 56.784159][ T6532] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 56.792202][ T6532] R10: ffffffff815e3b4e R11: 0000000000000000 R12: 0000000000000000 [ 56.800184][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.808144][ T6532] ? wake_up_klogd.part.0+0x8e/0xd0 [ 56.813443][ T6532] ? vprintk+0x88/0x90 [ 56.817520][ T6532] __x64_sys_memfd_secret+0x182/0x1e0 [ 56.822882][ T6532] do_syscall_64+0x35/0xb0 [ 56.827290][ T6532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.833173][ T6532] RIP: 0033:0x7f417cfc9f79 [ 56.837593][ T6532] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.857470][ T6532] RSP: 002b:00007ffffeda1c48 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 56.865957][ T6532] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f417cfc9f79 [ 56.873929][ T6532] RDX: 00007f417cf8ce83 RSI: 0000000000000012 RDI: 0000000000000000 [ 56.882163][ T6532] RBP: 00007f417cf8df60 R08: 0000000000000000 R09: 0000000000000000 [ 56.890222][ T6532] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f417cf8dff0 [ 56.898176][ T6532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.906329][ T6532] Kernel Offset: disabled [ 56.910696][ T6532] Rebooting in 86400 seconds..