Extracting prog: 28.971853446s Minimizing prog: 21m45.727948792s Simplifying prog options: 0s Extracting C: 24.406477735s Simplifying C: 5m40.524126581s 19 programs, timeouts [30s 1m40s 6m0s] extracting reproducer from 19 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939-ioctl$TIOCL_PASTESEL detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) program crashed: WARNING: refcount bug in sk_skb_reason_drop single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="9f258091f2e335550bb8c330d59964c4182613e63be0b125b7f4c8fa4a5340d1aad2e1b5c0fbd84ffbccb6c73c4c1558b3b3761641d1a17ea2ba2014bdda6ace8a9978116097808ba1f54c4bfa0aee9adb9ea7c628ff57d7aea0b01f18be5526ca0dbc96a2bdb6af0583b73d80fd49649ae4b07b3e190cf07a5b5e948b046da1b77b1c60e09684ff1bd599c61fbb7c0a3b56e08d98e6c3afc975796d223431785436d447e805e64ae959e35fbe128b0f5691bc0a6cd35040166a9ca397f465473161223f1945023996ef05d96e958ca9beab91b8f826fe53a4934f61dbba2ca1a19f5341ab028a12e9bfa1431aacb367b0fef9ada10148544ec0107b8125cc076e8762a2a4df53973d8aa945cb2f49a2d316064c3d12a5756ca8683db49ff03d4e2dbc5527f7954fe6b6ea265c9bc44cddd356e7d12bb104ed0f7adbd24a9d8f68b5dd28f02fe90c839e6b30870b79dde11bb147c837da494e424174a2dcd6fdf8abbf296fba12b11d3220b0cec8fb98f8b51763b89f78971f9321885f07643e75920151fb51c1ccfbe557a34a9fc364afa8387323e9ba81484a862a507ffe9276ab643c1d6b64ae02747ca78f40dab5acf23c4b59a9f80f63a47557a1606e7b621bcf64c06ee55307a35dc5b80c4cc3cda5a6aa1f453819abc6a17421b34fcc58a73c80c255cf2332978ba71126db126168e1375a81ad26ce6a52f23ab83d833eac3a176c2d8791d4080917cdebb6fe1241c5d949369e5d2f238fe03cd75ebc3a13b3887175781d4c8ca4304c88b515e14fb905e61b2712b575cb9c275c127943e46d7932d363053324b403029966ecb7018a7d5f94f4c939b126c8764e41190361ada42afd8de5021272170d07a0ee240c91fb0a20e0c9a5e52d6a040f9aa66bd96bd85e90ef7363d55a5ed5746018f2eba942239dd063871bfa157db46e4dfe28ba980aa3755c76949581353f19da301d718c3c7543134eb2939466e567a4c36988df090f58fd931ae2f554ebc5086013960d7dcd5f5faf6537e9c925ae033fe9058640a44454ef458cc0309dbe8a223835d56685059998ab04addb439f2f4936b0ca3d41cc9780b2ca1004c5c79415fbb6a7ebbd6e9efb70aca00c3333e7603481df1f4c70344d34fcfd75c9801c67ccccabaf6fc81db09bed7feb792a57b434916408712e10d157b9e548dac4c2773d910e7b7a27b2c644a03628cea0d5741aa32e5db32b3154e3f6f2f8c0f015300aadebb6cf73f98e6a4f27b7fd44ef1ce061b8f29f70c7808f0c8905c85b7879c2c13c041095dd83deb12ca87204c9cecf149a720daa5301f24c8120f7924f69af7082d0e4edc39eb809385e0b3c1185f047e1474e2660456e63625d617e5f5adacc417f81a67790b4a341fdb9293a9b6165925f3e9a5a44060982888d8a5eac775d2970fb258c9f7670dd3f2e30343686755341cb34070e145394eeb5f94b218582097335502f3cf6096c7172412ab0e55f7616d1117641593565ad58f7008d06dfa12457651cfaeea81eb1c495d8c4a44c8f017f93fab43c43ffa6c68c8cc0966cebe6b598fd7b2349f39d865e036eb255fe3c030cfbbbcf5b6e21dfccb3173af3ed65fb115b55e3c333c9577c2b28e3921e602fecbf85339b9cb06d13263fd5e648d41ab2263d4b2c33e617429f5ce63cf30f6716c80238e1b3c50f5fbbca584c732e66d7e30528bbc3cf611196b017549a7f5dcaefd611d0163ffffa611d17eb51022818cc4673d96771f707e939c5b32bd26ff50a4dea1378b55ed21b2545a488302fa121763e1b8637f6db8886660f67cde5579b2135f7a51c59096152a713b1c884de82baa2a9b979555abcb4aa658b18cb32e34a1eec5e57367ba13d47f3dd447530c0dc7842ff8b5c5b36ea928d204569ac556187afd9bc6f4fb711f979b21406182ba6b9ea1e4245f5d5c27160a92db24c19af46344db8651b74fe255941bcaba1086c676f67a255c62de898191239d5305e8f51e139fc4a73e4f8f58f428e294c9d5b72b28615dac5c75bd03aeeb9032b837df630750eabdab9dceef5b76e371adc0da26e0a8265e5d4d56e87aa275a982bc6fb1ab383c07641a05e030a6af356585a2538881484ee16427fd0def173ef985c52fddf30cd7080acfa01b73b674c78e8ff16bcebba27a0eb39df1696da83a314c3bf3b7ec9454538f7e8df4cbaa9f6542a6e55b1596b8e5199895b00eee524f11e04061af7b5b49781ece40cbf43c298ed60ea1881711703a2da521cded074c6e5faca8d15ba07ad47bcfd1b6af54ccbd164ef07eca4853e864dba7d490e2640f94ed8d43b91175b447ad3de7de2890fb9b2a6c0f990cb595e9c6f12cd21e261a2cd1dbf99555333c7393e6a9ff12a4d386f92fe92233888448591c1212300da9e71594ca166865ec7bc21a45200a6a7c6eacefb6cae496b32ed31ba7a33d5ab681190e94f19fc0ec95beca639b5ed0f8a2ee30affeb9f25337c633a57b2dc8bf5c1e8f527aa2deb28c7a4f8a3992de388", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="9f258091f2e335550bb8c330d59964c4182613e63be0b125b7f4c8fa4a5340d1aad2e1b5c0fbd84ffbccb6c73c4c1558b3b3761641d1a17ea2ba2014bdda6ace8a9978116097808ba1f54c4bfa0aee9adb9ea7c628ff57d7aea0b01f18be5526ca0dbc96a2bdb6af0583b73d80fd49649ae4b07b3e190cf07a5b5e948b046da1b77b1c60e09684ff1bd599c61fbb7c0a3b56e08d98e6c3afc975796d223431785436d447e805e64ae959e35fbe128b0f5691bc0a6cd35040166a9ca397f465473161223f1945023996ef05d96e958ca9beab91b8f826fe53a4934f61dbba2ca1a19f5341ab028a12e9bfa1431aacb367b0fef9ada10148544ec0107b8125cc076e8762a2a4df53973d8aa945cb2f49a2d316064c3d12a5756ca8683db49ff03d4e2dbc5527f7954fe6b6ea265c9bc44cddd356e7d12bb104ed0f7adbd24a9d8f68b5dd28f02fe90c839e6b30870b79dde11bb147c837da494e424174a2dcd6fdf8abbf296fba12b11d3220b0cec8fb98f8b51763b89f78971f9321885f07643e75920151fb51c1ccfbe557a34a9fc364afa8387323e9ba81484a862a507ffe9276ab643c1d6b64ae02747ca78f40dab5acf23c4b59a9f80f63a47557a1606e7b621bcf64c06ee55307a35dc5b80c4cc3cda5a6aa1f453819abc6a17421b34fcc58a73c80c255cf2332978ba71126db126168e1375a81ad26ce6a52f23ab83d833eac3a176c2d8791d4080917cdebb6fe1241c5d949369e5d2f238fe03cd75ebc3a13b3887175781d4c8ca4304c88b515e14fb905e61b2712b575cb9c275c127943e46d7932d363053324b403029966ecb7018a7d5f94f4c939b126c8764e41190361ada42afd8de5021272170d07a0ee240c91fb0a20e0c9a5e52d6a040f9aa66bd96bd85e90ef7363d55a5ed5746018f2eba942239dd063871bfa157db46e4dfe28ba980aa3755c76949581353f19da301d718c3c7543134eb2939466e567a4c36988df090f58fd931ae2f554ebc5086013960d7dcd5f5faf6537e9c925ae033fe9058640a44454ef458cc0309dbe8a223835d56685059998ab04addb439f2f4936b0ca3d41cc9780b2ca1004c5c79415fbb6a7ebbd6e9efb70aca00c3333e7603481df1f4c70344d34fcfd75c9801c67ccccabaf6fc81db09bed7feb792a57b434916408712e10d157b9e548dac4c2773d910e7b7a27b2c644a03628cea0d5741aa32e5db32b3154e3f6f2f8c0f015300aadebb6cf73f98e6a4f27b7fd44ef1ce061b8f29f70c7808f0c8905c85b7879c2c13c041095dd83deb12ca87204c9cecf149a720daa5301f24c8120f7924f69af7082d0e4edc39eb809385e0b3c1185f047e1474e2660456e63625d617e5f5adacc417f81a67790b4a341fdb9293a9b6165925f3e9a5a44060982888d8a5eac775d2970fb258c9f7670dd3f2e30343686755341cb34070e145394eeb5f94b218582097335502f3cf6096c7172412ab0e55f7616d1117641593565ad58f7008d06dfa12457651cfaeea81eb1c495d8c4a44c8f017f93fab43c43ffa6c68c8cc0966cebe6b598fd7b2349f39d865e036eb255fe3c030cfbbbcf5b6e21dfccb3173af3ed65fb115b55e3c333c9577c2b28e3921e602fecbf85339b9cb06d13263fd5e648d41ab2263d4b2c33e617429f5ce63cf30f6716c80238e1b3c50f5fbbca584c732e66d7e30528bbc3cf611196b017549a7f5dcaefd611d0163ffffa611d17eb51022818cc4673d96771f707e939c5b32bd26ff50a4dea1378b55ed21b2545a488302fa121763e1b8637f6db8886660f67cde5579b2135f7a51c59096152a713b1c884de82baa2a9b979555abcb4aa658b18cb32e34a1eec5e57367ba13d47f3dd447530c0dc7842ff8b5c5b36ea928d204569ac556187afd9bc6f4fb711f979b21406182ba6b9ea1e4245f5d5c27160a92db24c19af46344db8651b74fe255941bcaba1086c676f67a255c62de898191239d5305e8f51e139fc4a73e4f8f58f428e294c9d5b72b28615dac5c75bd03aeeb9032b837df630750eabdab9dceef5b76e371adc0da26e0a8265e5d4d56e87aa275a982bc6fb1ab383c07641a05e030a6af356585a2538881484ee16427fd0def173ef985c52fddf30cd7080acfa01b73b674c78e8ff16bcebba27a0eb39df1696da83a314c3bf3b7ec9454538f7e8df4cbaa9f6542a6e55b1596b8e5199895b00eee524f11e04061af7b5b49781ece40cbf43c298ed60ea1881711703a2da521cded074c6e5faca8d15ba07ad47bcfd1b6af54ccbd164ef07eca4853e864dba7d490e2640f94ed8d43b91175b447ad3de7de2890fb9b2a6c0f990cb595e9c6f12cd21e261a2cd1dbf99555333c7393e6a9ff12a4d386f92fe92233888448591c1212300da9e71594ca166865ec7bc21a45200a6a7c6eacefb6cae496b32ed31ba7a33d5ab681190e94f19fc0ec95beca639b5ed0f8a2ee30affeb9f25337c633a57b2dc8bf5c1e8f527aa2deb28c7a4f8a3992de388", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-socket$can_j1939-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="9f258091f2e335550bb8c330d59964c4182613e63be0b125b7f4c8fa4a5340d1aad2e1b5c0fbd84ffbccb6c73c4c1558b3b3761641d1a17ea2ba2014bdda6ace8a9978116097808ba1f54c4bfa0aee9adb9ea7c628ff57d7aea0b01f18be5526ca0dbc96a2bdb6af0583b73d80fd49649ae4b07b3e190cf07a5b5e948b046da1b77b1c60e09684ff1bd599c61fbb7c0a3b56e08d98e6c3afc975796d223431785436d447e805e64ae959e35fbe128b0f5691bc0a6cd35040166a9ca397f465473161223f1945023996ef05d96e958ca9beab91b8f826fe53a4934f61dbba2ca1a19f5341ab028a12e9bfa1431aacb367b0fef9ada10148544ec0107b8125cc076e8762a2a4df53973d8aa945cb2f49a2d316064c3d12a5756ca8683db49ff03d4e2dbc5527f7954fe6b6ea265c9bc44cddd356e7d12bb104ed0f7adbd24a9d8f68b5dd28f02fe90c839e6b30870b79dde11bb147c837da494e424174a2dcd6fdf8abbf296fba12b11d3220b0cec8fb98f8b51763b89f78971f9321885f07643e75920151fb51c1ccfbe557a34a9fc364afa8387323e9ba81484a862a507ffe9276ab643c1d6b64ae02747ca78f40dab5acf23c4b59a9f80f63a47557a1606e7b621bcf64c06ee55307a35dc5b80c4cc3cda5a6aa1f453819abc6a17421b34fcc58a73c80c255cf2332978ba71126db126168e1375a81ad26ce6a52f23ab83d833eac3a176c2d8791d4080917cdebb6fe1241c5d949369e5d2f238fe03cd75ebc3a13b3887175781d4c8ca4304c88b515e14fb905e61b2712b575cb9c275c127943e46d7932d363053324b403029966ecb7018a7d5f94f4c939b126c8764e41190361ada42afd8de5021272170d07a0ee240c91fb0a20e0c9a5e52d6a040f9aa66bd96bd85e90ef7363d55a5ed5746018f2eba942239dd063871bfa157db46e4dfe28ba980aa3755c76949581353f19da301d718c3c7543134eb2939466e567a4c36988df090f58fd931ae2f554ebc5086013960d7dcd5f5faf6537e9c925ae033fe9058640a44454ef458cc0309dbe8a223835d56685059998ab04addb439f2f4936b0ca3d41cc9780b2ca1004c5c79415fbb6a7ebbd6e9efb70aca00c3333e7603481df1f4c70344d34fcfd75c9801c67ccccabaf6fc81db09bed7feb792a57b434916408712e10d157b9e548dac4c2773d910e7b7a27b2c644a03628cea0d5741aa32e5db32b3154e3f6f2f8c0f015300aadebb6cf73f98e6a4f27b7fd44ef1ce061b8f29f70c7808f0c8905c85b7879c2c13c041095dd83deb12ca87204c9cecf149a720daa5301f24c8120f7924f69af7082d0e4edc39eb809385e0b3c1185f047e1474e2660456e63625d617e5f5adacc417f81a67790b4a341fdb9293a9b6165925f3e9a5a44060982888d8a5eac775d2970fb258c9f7670dd3f2e30343686755341cb34070e145394eeb5f94b218582097335502f3cf6096c7172412ab0e55f7616d1117641593565ad58f7008d06dfa12457651cfaeea81eb1c495d8c4a44c8f017f93fab43c43ffa6c68c8cc0966cebe6b598fd7b2349f39d865e036eb255fe3c030cfbbbcf5b6e21dfccb3173af3ed65fb115b55e3c333c9577c2b28e3921e602fecbf85339b9cb06d13263fd5e648d41ab2263d4b2c33e617429f5ce63cf30f6716c80238e1b3c50f5fbbca584c732e66d7e30528bbc3cf611196b017549a7f5dcaefd611d0163ffffa611d17eb51022818cc4673d96771f707e939c5b32bd26ff50a4dea1378b55ed21b2545a488302fa121763e1b8637f6db8886660f67cde5579b2135f7a51c59096152a713b1c884de82baa2a9b979555abcb4aa658b18cb32e34a1eec5e57367ba13d47f3dd447530c0dc7842ff8b5c5b36ea928d204569ac556187afd9bc6f4fb711f979b21406182ba6b9ea1e4245f5d5c27160a92db24c19af46344db8651b74fe255941bcaba1086c676f67a255c62de898191239d5305e8f51e139fc4a73e4f8f58f428e294c9d5b72b28615dac5c75bd03aeeb9032b837df630750eabdab9dceef5b76e371adc0da26e0a8265e5d4d56e87aa275a982bc6fb1ab383c07641a05e030a6af356585a2538881484ee16427fd0def173ef985c52fddf30cd7080acfa01b73b674c78e8ff16bcebba27a0eb39df1696da83a314c3bf3b7ec9454538f7e8df4cbaa9f6542a6e55b1596b8e5199895b00eee524f11e04061af7b5b49781ece40cbf43c298ed60ea1881711703a2da521cded074c6e5faca8d15ba07ad47bcfd1b6af54ccbd164ef07eca4853e864dba7d490e2640f94ed8d43b91175b447ad3de7de2890fb9b2a6c0f990cb595e9c6f12cd21e261a2cd1dbf99555333c7393e6a9ff12a4d386f92fe92233888448591c1212300da9e71594ca166865ec7bc21a45200a6a7c6eacefb6cae496b32ed31ba7a33d5ab681190e94f19fc0ec95beca639b5ed0f8a2ee30affeb9f25337c633a57b2dc8bf5c1e8f527aa2deb28c7a4f8a3992de388", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="9f258091f2e335550bb8c330d59964c4182613e63be0b125b7f4c8fa4a5340d1aad2e1b5c0fbd84ffbccb6c73c4c1558b3b3761641d1a17ea2ba2014bdda6ace8a9978116097808ba1f54c4bfa0aee9adb9ea7c628ff57d7aea0b01f18be5526ca0dbc96a2bdb6af0583b73d80fd49649ae4b07b3e190cf07a5b5e948b046da1b77b1c60e09684ff1bd599c61fbb7c0a3b56e08d98e6c3afc975796d223431785436d447e805e64ae959e35fbe128b0f5691bc0a6cd35040166a9ca397f465473161223f1945023996ef05d96e958ca9beab91b8f826fe53a4934f61dbba2ca1a19f5341ab028a12e9bfa1431aacb367b0fef9ada10148544ec0107b8125cc076e8762a2a4df53973d8aa945cb2f49a2d316064c3d12a5756ca8683db49ff03d4e2dbc5527f7954fe6b6ea265c9bc44cddd356e7d12bb104ed0f7adbd24a9d8f68b5dd28f02fe90c839e6b30870b79dde11bb147c837da494e424174a2dcd6fdf8abbf296fba12b11d3220b0cec8fb98f8b51763b89f78971f9321885f07643e75920151fb51c1ccfbe557a34a9fc364afa8387323e9ba81484a862a507ffe9276ab643c1d6b64ae02747ca78f40dab5acf23c4b59a9f80f63a47557a1606e7b621bcf64c06ee55307a35dc5b80c4cc3cda5a6aa1f453819abc6a17421b34fcc58a73c80c255cf2332978ba71126db126168e1375a81ad26ce6a52f23ab83d833eac3a176c2d8791d4080917cdebb6fe1241c5d949369e5d2f238fe03cd75ebc3a13b3887175781d4c8ca4304c88b515e14fb905e61b2712b575cb9c275c127943e46d7932d363053324b403029966ecb7018a7d5f94f4c939b126c8764e41190361ada42afd8de5021272170d07a0ee240c91fb0a20e0c9a5e52d6a040f9aa66bd96bd85e90ef7363d55a5ed5746018f2eba942239dd063871bfa157db46e4dfe28ba980aa3755c76949581353f19da301d718c3c7543134eb2939466e567a4c36988df090f58fd931ae2f554ebc5086013960d7dcd5f5faf6537e9c925ae033fe9058640a44454ef458cc0309dbe8a223835d56685059998ab04addb439f2f4936b0ca3d41cc9780b2ca1004c5c79415fbb6a7ebbd6e9efb70aca00c3333e7603481df1f4c70344d34fcfd75c9801c67ccccabaf6fc81db09bed7feb792a57b434916408712e10d157b9e548dac4c2773d910e7b7a27b2c644a03628cea0d5741aa32e5db32b3154e3f6f2f8c0f015300aadebb6cf73f98e6a4f27b7fd44ef1ce061b8f29f70c7808f0c8905c85b7879c2c13c041095dd83deb12ca87204c9cecf149a720daa5301f24c8120f7924f69af7082d0e4edc39eb809385e0b3c1185f047e1474e2660456e63625d617e5f5adacc417f81a67790b4a341fdb9293a9b6165925f3e9a5a44060982888d8a5eac775d2970fb258c9f7670dd3f2e30343686755341cb34070e145394eeb5f94b218582097335502f3cf6096c7172412ab0e55f7616d1117641593565ad58f7008d06dfa12457651cfaeea81eb1c495d8c4a44c8f017f93fab43c43ffa6c68c8cc0966cebe6b598fd7b2349f39d865e036eb255fe3c030cfbbbcf5b6e21dfccb3173af3ed65fb115b55e3c333c9577c2b28e3921e602fecbf85339b9cb06d13263fd5e648d41ab2263d4b2c33e617429f5ce63cf30f6716c80238e1b3c50f5fbbca584c732e66d7e30528bbc3cf611196b017549a7f5dcaefd611d0163ffffa611d17eb51022818cc4673d96771f707e939c5b32bd26ff50a4dea1378b55ed21b2545a488302fa121763e1b8637f6db8886660f67cde5579b2135f7a51c59096152a713b1c884de82baa2a9b979555abcb4aa658b18cb32e34a1eec5e57367ba13d47f3dd447530c0dc7842ff8b5c5b36ea928d204569ac556187afd9bc6f4fb711f979b21406182ba6b9ea1e4245f5d5c27160a92db24c19af46344db8651b74fe255941bcaba1086c676f67a255c62de898191239d5305e8f51e139fc4a73e4f8f58f428e294c9d5b72b28615dac5c75bd03aeeb9032b837df630750eabdab9dceef5b76e371adc0da26e0a8265e5d4d56e87aa275a982bc6fb1ab383c07641a05e030a6af356585a2538881484ee16427fd0def173ef985c52fddf30cd7080acfa01b73b674c78e8ff16bcebba27a0eb39df1696da83a314c3bf3b7ec9454538f7e8df4cbaa9f6542a6e55b1596b8e5199895b00eee524f11e04061af7b5b49781ece40cbf43c298ed60ea1881711703a2da521cded074c6e5faca8d15ba07ad47bcfd1b6af54ccbd164ef07eca4853e864dba7d490e2640f94ed8d43b91175b447ad3de7de2890fb9b2a6c0f990cb595e9c6f12cd21e261a2cd1dbf99555333c7393e6a9ff12a4d386f92fe92233888448591c1212300da9e71594ca166865ec7bc21a45200a6a7c6eacefb6cae496b32ed31ba7a33d5ab681190e94f19fc0ec95beca639b5ed0f8a2ee30affeb9f25337c633a57b2dc8bf5c1e8f527aa2deb28c7a4f8a3992de388", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-read$msr-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-sched_setaffinity-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-sched_setscheduler-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-prlimit64-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-ioctl$TIOCL_GETMOUSEREPORTING-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-ioctl$TCSETA-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x1, 0x1, 0x800a, 0x5, "5f7300fbffffff00"}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty20-socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="9f258091f2e335550bb8c330d59964c4182613e63be0b125b7f4c8fa4a5340d1aad2e1b5c0fbd84ffbccb6c73c4c1558b3b3761641d1a17ea2ba2014bdda6ace8a9978116097808ba1f54c4bfa0aee9adb9ea7c628ff57d7aea0b01f18be5526ca0dbc96a2bdb6af0583b73d80fd49649ae4b07b3e190cf07a5b5e948b046da1b77b1c60e09684ff1bd599c61fbb7c0a3b56e08d98e6c3afc975796d223431785436d447e805e64ae959e35fbe128b0f5691bc0a6cd35040166a9ca397f465473161223f1945023996ef05d96e958ca9beab91b8f826fe53a4934f61dbba2ca1a19f5341ab028a12e9bfa1431aacb367b0fef9ada10148544ec0107b8125cc076e8762a2a4df53973d8aa945cb2f49a2d316064c3d12a5756ca8683db49ff03d4e2dbc5527f7954fe6b6ea265c9bc44cddd356e7d12bb104ed0f7adbd24a9d8f68b5dd28f02fe90c839e6b30870b79dde11bb147c837da494e424174a2dcd6fdf8abbf296fba12b11d3220b0cec8fb98f8b51763b89f78971f9321885f07643e75920151fb51c1ccfbe557a34a9fc364afa8387323e9ba81484a862a507ffe9276ab643c1d6b64ae02747ca78f40dab5acf23c4b59a9f80f63a47557a1606e7b621bcf64c06ee55307a35dc5b80c4cc3cda5a6aa1f453819abc6a17421b34fcc58a73c80c255cf2332978ba71126db126168e1375a81ad26ce6a52f23ab83d833eac3a176c2d8791d4080917cdebb6fe1241c5d949369e5d2f238fe03cd75ebc3a13b3887175781d4c8ca4304c88b515e14fb905e61b2712b575cb9c275c127943e46d7932d363053324b403029966ecb7018a7d5f94f4c939b126c8764e41190361ada42afd8de5021272170d07a0ee240c91fb0a20e0c9a5e52d6a040f9aa66bd96bd85e90ef7363d55a5ed5746018f2eba942239dd063871bfa157db46e4dfe28ba980aa3755c76949581353f19da301d718c3c7543134eb2939466e567a4c36988df090f58fd931ae2f554ebc5086013960d7dcd5f5faf6537e9c925ae033fe9058640a44454ef458cc0309dbe8a223835d56685059998ab04addb439f2f4936b0ca3d41cc9780b2ca1004c5c79415fbb6a7ebbd6e9efb70aca00c3333e7603481df1f4c70344d34fcfd75c9801c67ccccabaf6fc81db09bed7feb792a57b434916408712e10d157b9e548dac4c2773d910e7b7a27b2c644a03628cea0d5741aa32e5db32b3154e3f6f2f8c0f015300aadebb6cf73f98e6a4f27b7fd44ef1ce061b8f29f70c7808f0c8905c85b7879c2c13c041095dd83deb12ca87204c9cecf149a720daa5301f24c8120f7924f69af7082d0e4edc39eb809385e0b3c1185f047e1474e2660456e63625d617e5f5adacc417f81a67790b4a341fdb9293a9b6165925f3e9a5a44060982888d8a5eac775d2970fb258c9f7670dd3f2e30343686755341cb34070e145394eeb5f94b218582097335502f3cf6096c7172412ab0e55f7616d1117641593565ad58f7008d06dfa12457651cfaeea81eb1c495d8c4a44c8f017f93fab43c43ffa6c68c8cc0966cebe6b598fd7b2349f39d865e036eb255fe3c030cfbbbcf5b6e21dfccb3173af3ed65fb115b55e3c333c9577c2b28e3921e602fecbf85339b9cb06d13263fd5e648d41ab2263d4b2c33e617429f5ce63cf30f6716c80238e1b3c50f5fbbca584c732e66d7e30528bbc3cf611196b017549a7f5dcaefd611d0163ffffa611d17eb51022818cc4673d96771f707e939c5b32bd26ff50a4dea1378b55ed21b2545a488302fa121763e1b8637f6db8886660f67cde5579b2135f7a51c59096152a713b1c884de82baa2a9b979555abcb4aa658b18cb32e34a1eec5e57367ba13d47f3dd447530c0dc7842ff8b5c5b36ea928d204569ac556187afd9bc6f4fb711f979b21406182ba6b9ea1e4245f5d5c27160a92db24c19af46344db8651b74fe255941bcaba1086c676f67a255c62de898191239d5305e8f51e139fc4a73e4f8f58f428e294c9d5b72b28615dac5c75bd03aeeb9032b837df630750eabdab9dceef5b76e371adc0da26e0a8265e5d4d56e87aa275a982bc6fb1ab383c07641a05e030a6af356585a2538881484ee16427fd0def173ef985c52fddf30cd7080acfa01b73b674c78e8ff16bcebba27a0eb39df1696da83a314c3bf3b7ec9454538f7e8df4cbaa9f6542a6e55b1596b8e5199895b00eee524f11e04061af7b5b49781ece40cbf43c298ed60ea1881711703a2da521cded074c6e5faca8d15ba07ad47bcfd1b6af54ccbd164ef07eca4853e864dba7d490e2640f94ed8d43b91175b447ad3de7de2890fb9b2a6c0f990cb595e9c6f12cd21e261a2cd1dbf99555333c7393e6a9ff12a4d386f92fe92233888448591c1212300da9e71594ca166865ec7bc21a45200a6a7c6eacefb6cae496b32ed31ba7a33d5ab681190e94f19fc0ec95beca639b5ed0f8a2ee30affeb9f25337c633a57b2dc8bf5c1e8f527aa2deb28c7a4f8a3992de388", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program crashed: WARNING: refcount bug in sk_skb_reason_drop testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f0000000a00)={&(0x7f0000000240)="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", 0x6fffff9}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) program did not crash testing program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 detailed listing: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001780)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=32.716634299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop simplifying C reproducer testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program did not crash testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program did not crash testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop testing compiled C program (duration=32.716634299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_j1939-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-sendmsg$can_j1939 program crashed: WARNING: refcount bug in sk_skb_reason_drop reproducing took 28m19.630427035s repro crashed as (corrupted=false): vxcan0: j1939_tp_rxtimer: 0xffff88802f8eac00: rx timeout, send abort vxcan0: j1939_tp_rxtimer: 0xffff88802f8eac00: abort rx timeout. Force session deactivation ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 3 PID: 0 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Modules linked in: CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Code: ff 89 de e8 48 c9 03 fd 84 db 0f 85 66 ff ff ff e8 5b c7 03 fd c6 05 fe 37 75 0b 01 90 48 c7 c7 00 c3 b0 8b e8 67 19 c6 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 c7 03 fd 0f b6 1d d9 37 75 0b 31 RSP: 0018:ffffc90000908d40 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e2c79 RDX: ffff88801d6da440 RSI: ffffffff814e2c86 RDI: 0000000000000001 RBP: ffff8880314a6d64 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 R13: 0000000000000000 R14: ffff8880314a6d64 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001790 CR3: 000000000db7c000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:275 [inline] __refcount_dec_and_test include/linux/refcount.h:307 [inline] refcount_dec_and_test include/linux/refcount.h:325 [inline] skb_unref include/linux/skbuff.h:1232 [inline] __sk_skb_reason_drop net/core/skbuff.c:1213 [inline] sk_skb_reason_drop+0x183/0x1a0 net/core/skbuff.c:1241 kfree_skb_reason include/linux/skbuff.h:1262 [inline] kfree_skb include/linux/skbuff.h:1271 [inline] j1939_session_destroy+0x163/0x460 net/can/j1939/transport.c:282 __j1939_session_release net/can/j1939/transport.c:294 [inline] kref_put include/linux/kref.h:65 [inline] j1939_session_put net/can/j1939/transport.c:299 [inline] j1939_tp_rxtimer+0x1e8/0x4f0 net/can/j1939/transport.c:1265 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1770 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:743 Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 bb 2f 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 RSP: 0018:ffffc900001a7e08 EFLAGS: 00000206 RAX: 0000000000028eaf RBX: 0000000000000003 RCX: ffffffff8b16c979 RDX: 0000000000000000 RSI: ffffffff8b4cdac0 RDI: ffffffff8bb115a0 RBP: ffffed1003adb488 R08: 0000000000000001 R09: ffffed100d526fd9 R10: ffff88806a937ecb R11: 0000000000000000 R12: 0000000000000003 R13: ffff88801d6da440 R14: ffffffff90146ed8 R15: 0000000000000000 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x32c/0x3f0 kernel/sched/idle.c:326 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:424 start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313 common_startup_64+0x13e/0x148 ---------------- Code disassembly (best guess): 0: 4c 01 c7 add %r8,%rdi 3: 4c 29 c2 sub %r8,%rdx 6: e9 72 ff ff ff jmp 0xffffff7d b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: eb 07 jmp 0x28 21: 0f 00 2d 23 bb 2f 00 verw 0x2fbb23(%rip) # 0x2fbb4b 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 37: 00 00 00 00 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): vxcan0: j1939_tp_rxtimer: 0xffff88802f8eac00: rx timeout, send abort vxcan0: j1939_tp_rxtimer: 0xffff88802f8eac00: abort rx timeout. Force session deactivation ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 3 PID: 0 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Modules linked in: CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Code: ff 89 de e8 48 c9 03 fd 84 db 0f 85 66 ff ff ff e8 5b c7 03 fd c6 05 fe 37 75 0b 01 90 48 c7 c7 00 c3 b0 8b e8 67 19 c6 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 c7 03 fd 0f b6 1d d9 37 75 0b 31 RSP: 0018:ffffc90000908d40 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e2c79 RDX: ffff88801d6da440 RSI: ffffffff814e2c86 RDI: 0000000000000001 RBP: ffff8880314a6d64 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 R13: 0000000000000000 R14: ffff8880314a6d64 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001790 CR3: 000000000db7c000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:275 [inline] __refcount_dec_and_test include/linux/refcount.h:307 [inline] refcount_dec_and_test include/linux/refcount.h:325 [inline] skb_unref include/linux/skbuff.h:1232 [inline] __sk_skb_reason_drop net/core/skbuff.c:1213 [inline] sk_skb_reason_drop+0x183/0x1a0 net/core/skbuff.c:1241 kfree_skb_reason include/linux/skbuff.h:1262 [inline] kfree_skb include/linux/skbuff.h:1271 [inline] j1939_session_destroy+0x163/0x460 net/can/j1939/transport.c:282 __j1939_session_release net/can/j1939/transport.c:294 [inline] kref_put include/linux/kref.h:65 [inline] j1939_session_put net/can/j1939/transport.c:299 [inline] j1939_tp_rxtimer+0x1e8/0x4f0 net/can/j1939/transport.c:1265 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1770 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:743 Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 bb 2f 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 RSP: 0018:ffffc900001a7e08 EFLAGS: 00000206 RAX: 0000000000028eaf RBX: 0000000000000003 RCX: ffffffff8b16c979 RDX: 0000000000000000 RSI: ffffffff8b4cdac0 RDI: ffffffff8bb115a0 RBP: ffffed1003adb488 R08: 0000000000000001 R09: ffffed100d526fd9 R10: ffff88806a937ecb R11: 0000000000000000 R12: 0000000000000003 R13: ffff88801d6da440 R14: ffffffff90146ed8 R15: 0000000000000000 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x32c/0x3f0 kernel/sched/idle.c:326 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:424 start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313 common_startup_64+0x13e/0x148 ---------------- Code disassembly (best guess): 0: 4c 01 c7 add %r8,%rdi 3: 4c 29 c2 sub %r8,%rdx 6: e9 72 ff ff ff jmp 0xffffff7d b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: eb 07 jmp 0x28 21: 0f 00 2d 23 bb 2f 00 verw 0x2fbb23(%rip) # 0x2fbb4b 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 37: 00 00 00 00 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop