------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 1 PID: 848 at lib/refcount.c:28 refcount_warn_saturate+0x12b/0x140 lib/refcount.c:28 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 848 Comm: kworker/u4:4 Not tainted 5.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: tc_filter_workqueue tcindex_destroy_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x128/0x182 lib/dump_stack.c:118 panic+0x22a/0x4e3 kernel/panic.c:221 __warn.cold.10+0x25/0x26 kernel/panic.c:582 report_bug+0x1ad/0x270 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:175 [inline] do_error_trap+0x123/0x210 arch/x86/kernel/traps.c:267 do_invalid_op+0x31/0x40 arch/x86/kernel/traps.c:286 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:refcount_warn_saturate+0x12b/0x140 lib/refcount.c:28 Code: 0a f7 fd 0f 0b e9 53 ff ff ff 48 89 df e8 3d 3c 55 fe e9 23 ff ff ff 48 c7 c7 40 ef ad 87 c6 05 47 07 51 06 01 e8 71 0a f7 fd <0f> 0b e9 2c ff ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 41 RSP: 0018:ffffc90003497d68 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88809b83342c RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8b6993a0 RBP: 0000000000000003 R08: ffffed1015d266a1 R09: ffffed1015d266a1 R10: ffffed1015d266a0 R11: ffff8880ae933507 R12: ffffc90003497e00 R13: ffff88809b833430 R14: 0000000000000001 R15: ffff8880aa434858 process_one_work+0x908/0x15d0 kernel/workqueue.c:2266 worker_thread+0x82/0xb50 kernel/workqueue.c:2412 kthread+0x340/0x410 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Kernel Offset: disabled Rebooting in 86400 seconds..