Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 2024/08/03 11:32:48 ignoring optional flag "sandboxArg"="0" 2024/08/03 11:32:48 parsed 1 programs [ 54.373341][ T2437] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.232538][ T2491] chnl_net:caif_netlink_parms(): no params data found [ 55.666474][ T2491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.950684][ T2491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.490604][ T2491] syz-executor (2491) used greatest stack depth: 11928 bytes left [ 56.536015][ T1316] bond0 (unregistering): Released all slaves [ 56.551884][ T2007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.559198][ T2007] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.566617][ T2007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.574022][ T2007] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 2024/08/03 11:32:51 executed programs: 0 [ 56.581383][ T2007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.588461][ T2007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.642198][ T2007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.649981][ T2007] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.657223][ T2007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.664636][ T2007] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.672113][ T2007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.679172][ T2007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.737619][ T2919] chnl_net:caif_netlink_parms(): no params data found [ 57.195356][ T2919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.494162][ T2919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.018798][ C1] ------------[ cut here ]------------ [ 58.024279][ C1] refcount_t: underflow; use-after-free. [ 58.029959][ C1] WARNING: CPU: 1 PID: 3319 at lib/refcount.c:28 refcount_warn_saturate+0xad/0x130 [ 58.039238][ C1] Modules linked in: [ 58.043228][ C1] CPU: 1 UID: 0 PID: 3319 Comm: syz.0.15 Not tainted 6.10.0-syzkaller #0 [ 58.051641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.061864][ C1] RIP: 0010:refcount_warn_saturate+0xad/0x130 [ 58.067908][ C1] Code: 59 ff 90 0f 0b 90 90 c3 cc cc cc cc 80 3d b1 cb 3f 02 00 75 97 c6 05 a8 cb 3f 02 01 90 48 c7 c7 a0 1a 91 83 e8 04 08 59 ff 90 <0f> 0b 90 90 c3 cc cc cc cc 80 3d 87 cb 3f 02 00 0f 85 6c ff ff ff [ 58.088010][ C1] RSP: 0018:ffffc900000e8cd0 EFLAGS: 00010246 [ 58.094274][ C1] RAX: 3d54262b5fa0aa00 RBX: ffff8881053fcf00 RCX: 0000000000000103 [ 58.102469][ C1] RDX: 0000000000000002 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 58.110621][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff83cd0040 [ 58.118830][ C1] R10: ffffc900000e8ba8 R11: ffffc900000e8b50 R12: ffff888106702a10 [ 58.127066][ C1] R13: 0000000000000000 R14: ffff888109b71c00 R15: ffff888109b71c68 [ 58.135639][ C1] FS: 00007f00977af6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 58.144591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.151164][ C1] CR2: 00007f3545a81440 CR3: 00000001053b2000 CR4: 00000000003506f0 [ 58.159395][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.167663][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.176509][ C1] Call Trace: [ 58.179781][ C1] [ 58.182609][ C1] ? __warn+0xc5/0x220 [ 58.186743][ C1] ? refcount_warn_saturate+0xad/0x130 [ 58.192653][ C1] ? report_bug+0xce/0x160 [ 58.197162][ C1] ? handle_bug+0x3e/0x70 [ 58.201519][ C1] ? exc_invalid_op+0x1a/0x50 [ 58.206268][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 58.211371][ C1] ? refcount_warn_saturate+0xad/0x130 [ 58.216806][ C1] j1939_session_put+0xa5/0x190 [ 58.221740][ C1] j1939_tp_recv+0x2c9/0x4b0 [ 58.226303][ C1] j1939_can_recv+0x1e4/0x290 [ 58.230985][ C1] can_rcv_filter+0x80/0x190 [ 58.235550][ C1] ? can_receive+0x65/0x110 [ 58.240051][ C1] can_receive+0xca/0x110 [ 58.244751][ C1] ? process_backlog+0x113/0x520 [ 58.249696][ C1] can_rcv+0x4b/0x90 [ 58.253662][ C1] __netif_receive_skb+0xa8/0x160 [ 58.258659][ C1] process_backlog+0x203/0x520 [ 58.263495][ C1] __napi_poll+0x28/0x160 [ 58.267824][ C1] net_rx_action+0x275/0x480 [ 58.272410][ C1] handle_softirqs+0x118/0x390 [ 58.277154][ C1] __irq_exit_rcu+0x45/0xc0 [ 58.281686][ C1] sysvec_apic_timer_interrupt+0x92/0xb0 [ 58.287385][ C1] [ 58.290311][ C1] [ 58.293309][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.299371][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x59/0xb0 [ 58.305854][ C1] Code: df e8 9b d7 48 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 3b 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 32 3b 45 fe 65 8b 05 e3 03 2f 7d 85 c0 74 2c 65 48 8b 04 25 28 [ 58.325898][ C1] RSP: 0018:ffffc900036cbbf8 EFLAGS: 00000206 [ 58.332667][ C1] RAX: 0000000000000001 RBX: ffff888237d20440 RCX: 0000000000000001 [ 58.340657][ C1] RDX: ffffffff83c72e30 RSI: ffffffff838588bc RDI: 0000000000000001 [ 58.348610][ C1] RBP: ffff888106b6c800 R08: 0000000000000001 R09: 0000000000000000 [ 58.356680][ C1] R10: 0000000000000000 R11: ffffffff810700a0 R12: ffffc900036cbd50 [ 58.364656][ C1] R13: 0000000000000009 R14: 0000000000000282 R15: 0000000000000009 [ 58.372716][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 58.378078][ C1] j1939_sk_sendmsg+0x425/0x570 [ 58.382922][ C1] __sock_sendmsg+0x8e/0xb0 [ 58.387486][ C1] ____sys_sendmsg+0x1a7/0x200 [ 58.392533][ C1] __sys_sendmsg+0x2c7/0x310 [ 58.397197][ C1] do_syscall_64+0xe0/0x220 [ 58.401700][ C1] ? clear_bhb_loop+0x55/0xb0 [ 58.406480][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.412479][ C1] RIP: 0033:0x7f00969773b9 [ 58.416894][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.436784][ C1] RSP: 002b:00007f00977af048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.445225][ C1] RAX: ffffffffffffffda RBX: 00007f0096b05f80 RCX: 00007f00969773b9 [ 58.453369][ C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 58.461386][ C1] RBP: 00007f00969e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 58.469459][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.477407][ C1] R13: 0000000000000006 R14: 00007f0096b05f80 R15: 00007fffbad957f8 [ 58.485388][ C1] [ 58.488471][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.495713][ C1] CPU: 1 UID: 0 PID: 3319 Comm: syz.0.15 Not tainted 6.10.0-syzkaller #0 [ 58.504082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.514621][ C1] Call Trace: [ 58.517870][ C1] [ 58.520694][ C1] dump_stack_lvl+0x3e/0xe0 [ 58.525161][ C1] panic+0x110/0x2d0 [ 58.529025][ C1] ? refcount_warn_saturate+0xad/0x130 [ 58.534480][ C1] __warn+0x18e/0x220 [ 58.538547][ C1] ? refcount_warn_saturate+0xad/0x130 [ 58.544270][ C1] report_bug+0xce/0x160 [ 58.548511][ C1] handle_bug+0x3e/0x70 [ 58.552673][ C1] exc_invalid_op+0x1a/0x50 [ 58.557658][ C1] asm_exc_invalid_op+0x1a/0x20 [ 58.562580][ C1] RIP: 0010:refcount_warn_saturate+0xad/0x130 [ 58.568699][ C1] Code: 59 ff 90 0f 0b 90 90 c3 cc cc cc cc 80 3d b1 cb 3f 02 00 75 97 c6 05 a8 cb 3f 02 01 90 48 c7 c7 a0 1a 91 83 e8 04 08 59 ff 90 <0f> 0b 90 90 c3 cc cc cc cc 80 3d 87 cb 3f 02 00 0f 85 6c ff ff ff [ 58.588552][ C1] RSP: 0018:ffffc900000e8cd0 EFLAGS: 00010246 [ 58.594693][ C1] RAX: 3d54262b5fa0aa00 RBX: ffff8881053fcf00 RCX: 0000000000000103 [ 58.602655][ C1] RDX: 0000000000000002 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 58.610594][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff83cd0040 [ 58.618528][ C1] R10: ffffc900000e8ba8 R11: ffffc900000e8b50 R12: ffff888106702a10 [ 58.626464][ C1] R13: 0000000000000000 R14: ffff888109b71c00 R15: ffff888109b71c68 [ 58.634606][ C1] j1939_session_put+0xa5/0x190 [ 58.639425][ C1] j1939_tp_recv+0x2c9/0x4b0 [ 58.643982][ C1] j1939_can_recv+0x1e4/0x290 [ 58.648707][ C1] can_rcv_filter+0x80/0x190 [ 58.653378][ C1] ? can_receive+0x65/0x110 [ 58.657842][ C1] can_receive+0xca/0x110 [ 58.662219][ C1] ? process_backlog+0x113/0x520 [ 58.667210][ C1] can_rcv+0x4b/0x90 [ 58.671091][ C1] __netif_receive_skb+0xa8/0x160 [ 58.676075][ C1] process_backlog+0x203/0x520 [ 58.680999][ C1] __napi_poll+0x28/0x160 [ 58.685291][ C1] net_rx_action+0x275/0x480 [ 58.689855][ C1] handle_softirqs+0x118/0x390 [ 58.694754][ C1] __irq_exit_rcu+0x45/0xc0 [ 58.699566][ C1] sysvec_apic_timer_interrupt+0x92/0xb0 [ 58.705163][ C1] [ 58.708073][ C1] [ 58.710975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.716916][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x59/0xb0 [ 58.723305][ C1] Code: df e8 9b d7 48 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 3b 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 32 3b 45 fe 65 8b 05 e3 03 2f 7d 85 c0 74 2c 65 48 8b 04 25 28 [ 58.743408][ C1] RSP: 0018:ffffc900036cbbf8 EFLAGS: 00000206 [ 58.749437][ C1] RAX: 0000000000000001 RBX: ffff888237d20440 RCX: 0000000000000001 [ 58.757373][ C1] RDX: ffffffff83c72e30 RSI: ffffffff838588bc RDI: 0000000000000001 [ 58.765761][ C1] RBP: ffff888106b6c800 R08: 0000000000000001 R09: 0000000000000000 [ 58.773694][ C1] R10: 0000000000000000 R11: ffffffff810700a0 R12: ffffc900036cbd50 [ 58.781636][ C1] R13: 0000000000000009 R14: 0000000000000282 R15: 0000000000000009 [ 58.789582][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 58.795031][ C1] j1939_sk_sendmsg+0x425/0x570 [ 58.800018][ C1] __sock_sendmsg+0x8e/0xb0 [ 58.804764][ C1] ____sys_sendmsg+0x1a7/0x200 [ 58.809627][ C1] __sys_sendmsg+0x2c7/0x310 [ 58.814301][ C1] do_syscall_64+0xe0/0x220 [ 58.818943][ C1] ? clear_bhb_loop+0x55/0xb0 [ 58.823687][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.829562][ C1] RIP: 0033:0x7f00969773b9 [ 58.833946][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.853522][ C1] RSP: 002b:00007f00977af048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.861910][ C1] RAX: ffffffffffffffda RBX: 00007f0096b05f80 RCX: 00007f00969773b9 [ 58.869856][ C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 58.879013][ C1] RBP: 00007f00969e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 58.887035][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.894994][ C1] R13: 0000000000000006 R14: 00007f0096b05f80 R15: 00007fffbad957f8 [ 58.903040][ C1] [ 58.906379][ C1] Kernel Offset: disabled [ 58.910761][ C1] Rebooting in 86400 seconds..