------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 0 PID: 9948 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 9948 Comm: syz-executor.4 Not tainted 5.6.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 panic+0x2e3/0x75c kernel/panic.c:221 __warn.cold+0x2f/0x35 kernel/panic.c:582 report_bug+0x27b/0x2f0 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:174 [inline] fixup_bug arch/x86/kernel/traps.c:169 [inline] do_error_trap+0x12b/0x220 arch/x86/kernel/traps.c:267 do_invalid_op+0x32/0x40 arch/x86/kernel/traps.c:286 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25 Code: 06 31 ff 89 de e8 17 53 e3 fd 84 db 0f 85 36 ff ff ff e8 da 51 e3 fd 48 c7 c7 a0 a9 51 88 c6 05 2d 68 d2 06 01 e8 7f 64 b5 fd <0f> 0b e9 17 ff ff ff e8 bb 51 e3 fd 0f b6 1d 12 68 d2 06 31 ff 89 RSP: 0018:ffffc900023e7c30 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815bf4e1 RDI: fffff5200047cf78 RBP: 0000000000000002 R08: ffff88805ba12340 R09: ffffed1015cc6659 R10: ffffed1015cc6658 R11: ffff8880ae6332c7 R12: ffff88809f2ee040 R13: ffff88805bab6144 R14: 0000000000000002 R15: ffff88809f2ee108 refcount_add include/linux/refcount.h:191 [inline] refcount_inc include/linux/refcount.h:228 [inline] get_net include/net/net_namespace.h:241 [inline] sk_alloc+0xe86/0xfa0 net/core/sock.c:1669 inet_create net/ipv4/af_inet.c:321 [inline] inet_create+0x364/0xe00 net/ipv4/af_inet.c:247 __sock_create+0x3cb/0x730 net/socket.c:1433 sock_create net/socket.c:1484 [inline] __sys_socket+0xef/0x200 net/socket.c:1526 __do_compat_sys_socketcall net/compat.c:744 [inline] __se_compat_sys_socketcall net/compat.c:719 [inline] __ia32_compat_sys_socketcall+0x372/0x660 net/compat.c:719 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline] do_fast_syscall_32+0x270/0xe8f arch/x86/entry/common.c:408 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 Kernel Offset: disabled Rebooting in 86400 seconds..