Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
syzkaller login: [   38.093745][ T2554] ==================================================================
[   38.101848][ T2554] BUG: KASAN: use-after-free in nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.110515][ T2554] Read of size 1 at addr ffff88807706d154 by task kworker/1:2/2554
[   38.118387][ T2554] 
[   38.120695][ T2554] CPU: 1 PID: 2554 Comm: kworker/1:2 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0
[   38.130386][ T2554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[   38.140424][ T2554] Workqueue: events nf_tables_trans_destroy_work
[   38.146744][ T2554] Call Trace:
[   38.150019][ T2554]  <TASK>
[   38.152945][ T2554]  dump_stack_lvl+0x1e3/0x2cb
[   38.157619][ T2554]  ? io_alloc_page_table+0x110/0x110
[   38.162956][ T2554]  ? _printk+0xcf/0x10f
[   38.167100][ T2554]  ? __wake_up_klogd+0xd6/0x100
[   38.171937][ T2554]  ? __wake_up_klogd+0xcd/0x100
[   38.176771][ T2554]  ? panic+0x766/0x766
[   38.180826][ T2554]  ? _printk+0xcf/0x10f
[   38.184970][ T2554]  print_address_description+0x65/0x4b0
[   38.190498][ T2554]  print_report+0x108/0x220
[   38.194984][ T2554]  ? __lock_acquire+0x1f60/0x1f60
[   38.199996][ T2554]  ? do_raw_spin_lock+0x148/0x360
[   38.205013][ T2554]  ? trace_lock_acquire+0x7f/0x1d0
[   38.210107][ T2554]  ? nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.216157][ T2554]  kasan_report+0xfb/0x130
[   38.220557][ T2554]  ? nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.226610][ T2554]  nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.232491][ T2554]  ? rcu_read_lock_sched_held+0x5f/0x130
[   38.238107][ T2554]  ? nft_object_dump+0x1e0/0x1e0
[   38.243029][ T2554]  ? read_word_at_a_time+0xe/0x20
[   38.248037][ T2554]  process_one_work+0x81c/0xd10
[   38.252873][ T2554]  ? worker_detach_from_pool+0x260/0x260
[   38.258487][ T2554]  ? _raw_spin_lock_irqsave+0x120/0x120
[   38.264014][ T2554]  ? kthread_data+0x4d/0xc0
[   38.268498][ T2554]  ? wq_worker_running+0x95/0x190
[   38.273502][ T2554]  worker_thread+0xb14/0x1330
[   38.278165][ T2554]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   38.284043][ T2554]  kthread+0x266/0x300
[   38.288092][ T2554]  ? rcu_lock_release+0x20/0x20
[   38.292923][ T2554]  ? kthread_blkcg+0xd0/0xd0
[   38.297497][ T2554]  ret_from_fork+0x1f/0x30
[   38.301897][ T2554]  </TASK>
[   38.304895][ T2554] 
[   38.307198][ T2554] Allocated by task 4635:
[   38.311502][ T2554]  ____kasan_kmalloc+0xdc/0x110
[   38.316334][ T2554]  kmem_cache_alloc_trace+0x97/0x310
[   38.321599][ T2554]  nf_tables_newchain+0x1487/0x30b0
[   38.326778][ T2554]  nfnetlink_rcv+0x1231/0x2640
[   38.331523][ T2554]  netlink_unicast+0x7e7/0x9c0
[   38.336267][ T2554]  netlink_sendmsg+0x9b3/0xcd0
[   38.341016][ T2554]  ____sys_sendmsg+0x597/0x8e0
[   38.345760][ T2554]  __sys_sendmsg+0x28e/0x390
[   38.350340][ T2554]  do_syscall_64+0x2b/0x70
[   38.354739][ T2554]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   38.360615][ T2554] 
[   38.362924][ T2554] Freed by task 4635:
[   38.366880][ T2554]  kasan_set_track+0x4c/0x70
[   38.371453][ T2554]  kasan_set_free_info+0x1f/0x40
[   38.376394][ T2554]  ____kasan_slab_free+0xd8/0x120
[   38.381401][ T2554]  slab_free_freelist_hook+0x12e/0x1a0
[   38.386848][ T2554]  kfree+0xda/0x210
[   38.390638][ T2554]  __nft_release_table+0xc88/0xea0
[   38.395730][ T2554]  nft_rcv_nl_event+0x48b/0x570
[   38.400559][ T2554]  blocking_notifier_call_chain+0x108/0x1b0
[   38.406435][ T2554]  netlink_release+0xf0a/0x1720
[   38.411271][ T2554]  sock_close+0xd7/0x260
[   38.415499][ T2554]  __fput+0x3ba/0x880
[   38.419464][ T2554]  task_work_run+0x146/0x1c0
[   38.424035][ T2554]  exit_to_user_mode_loop+0x134/0x160
[   38.429393][ T2554]  exit_to_user_mode_prepare+0xad/0x110
[   38.434921][ T2554]  syscall_exit_to_user_mode+0x2e/0x60
[   38.440362][ T2554]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   38.446234][ T2554] 
[   38.448538][ T2554] The buggy address belongs to the object at ffff88807706d100
[   38.448538][ T2554]  which belongs to the cache kmalloc-cg-128 of size 128
[   38.462833][ T2554] The buggy address is located 84 bytes inside of
[   38.462833][ T2554]  128-byte region [ffff88807706d100, ffff88807706d180)
[   38.476009][ T2554] 
[   38.478320][ T2554] The buggy address belongs to the physical page:
[   38.484709][ T2554] page:ffffea0001dc1b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7706d
[   38.494836][ T2554] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[   38.502360][ T2554] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888012042a00
[   38.510933][ T2554] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   38.519495][ T2554] page dumped because: kasan: bad access detected
[   38.525882][ T2554] page_owner tracks the page as allocated
[   38.531571][ T2554] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4634, tgid 4634 (syz-executor385), ts 38089885211, free_ts 38088010177
[   38.550140][ T2554]  get_page_from_freelist+0x72b/0x7a0
[   38.555504][ T2554]  __alloc_pages+0x259/0x560
[   38.560076][ T2554]  alloc_slab_page+0x70/0xf0
[   38.564655][ T2554]  allocate_slab+0x5e/0x520
[   38.569138][ T2554]  ___slab_alloc+0x42e/0xce0
[   38.573714][ T2554]  kmem_cache_alloc_trace+0x25f/0x310
[   38.579069][ T2554]  nf_tables_newchain+0x1487/0x30b0
[   38.584250][ T2554]  nfnetlink_rcv+0x1231/0x2640
[   38.588995][ T2554]  netlink_unicast+0x7e7/0x9c0
[   38.593743][ T2554]  netlink_sendmsg+0x9b3/0xcd0
[   38.598498][ T2554]  ____sys_sendmsg+0x597/0x8e0
[   38.603244][ T2554]  __sys_sendmsg+0x28e/0x390
[   38.607812][ T2554]  do_syscall_64+0x2b/0x70
[   38.612639][ T2554]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   38.618511][ T2554] page last free stack trace:
[   38.623167][ T2554]  free_pcp_prepare+0x812/0x900
[   38.628009][ T2554]  free_unref_page_list+0xb4/0x7b0
[   38.633101][ T2554]  release_pages+0x22c3/0x2540
[   38.637845][ T2554]  tlb_flush_mmu+0x850/0xa70
[   38.642414][ T2554]  tlb_finish_mmu+0xcb/0x200
[   38.646985][ T2554]  exit_mmap+0x1dc/0x530
[   38.651212][ T2554]  __mmput+0x111/0x3a0
[   38.655281][ T2554]  exit_mm+0x211/0x2f0
[   38.659328][ T2554]  do_exit+0x4e1/0x20a0
[   38.663459][ T2554]  do_group_exit+0x23b/0x2f0
[   38.668025][ T2554]  __x64_sys_exit_group+0x3b/0x40
[   38.673025][ T2554]  do_syscall_64+0x2b/0x70
[   38.677419][ T2554]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   38.683295][ T2554] 
[   38.685597][ T2554] Memory state around the buggy address:
[   38.691205][ T2554]  ffff88807706d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   38.699284][ T2554]  ffff88807706d080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   38.707323][ T2554] >ffff88807706d100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   38.715791][ T2554]                                                  ^
[   38.722448][ T2554]  ffff88807706d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   38.730502][ T2554]  ffff88807706d200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   38.738548][ T2554] ==================================================================
executing program
[   38.751304][ T2554] Kernel panic - not syncing: panic_on_warn set ...
[   38.757909][ T2554] CPU: 1 PID: 2554 Comm: kworker/1:2 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0
[   38.767620][ T2554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[   38.777742][ T2554] Workqueue: events nf_tables_trans_destroy_work
[   38.784058][ T2554] Call Trace:
[   38.787320][ T2554]  <TASK>
[   38.790234][ T2554]  dump_stack_lvl+0x1e3/0x2cb
[   38.794899][ T2554]  ? io_alloc_page_table+0x110/0x110
[   38.800168][ T2554]  ? panic+0x766/0x766
[   38.804231][ T2554]  ? preempt_schedule_common+0xb7/0xe0
[   38.809869][ T2554]  ? preempt_schedule+0xd9/0xe0
[   38.814712][ T2554]  ? vscnprintf+0x59/0x80
[   38.819024][ T2554]  panic+0x316/0x766
[   38.822903][ T2554]  ? fb_is_primary_device+0xcc/0xcc
[   38.828091][ T2554]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[   38.834068][ T2554]  ? nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.840132][ T2554]  end_report+0x91/0xa0
[   38.844269][ T2554]  kasan_report+0x108/0x130
[   38.848754][ T2554]  ? nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.854812][ T2554]  nf_tables_trans_destroy_work+0xeb5/0xf40
[   38.860703][ T2554]  ? rcu_read_lock_sched_held+0x5f/0x130
[   38.866319][ T2554]  ? nft_object_dump+0x1e0/0x1e0
[   38.871248][ T2554]  ? read_word_at_a_time+0xe/0x20
[   38.876257][ T2554]  process_one_work+0x81c/0xd10
[   38.881095][ T2554]  ? worker_detach_from_pool+0x260/0x260
[   38.886709][ T2554]  ? _raw_spin_lock_irqsave+0x120/0x120
[   38.892236][ T2554]  ? kthread_data+0x4d/0xc0
[   38.896722][ T2554]  ? wq_worker_running+0x95/0x190
[   38.901740][ T2554]  worker_thread+0xb14/0x1330
[   38.906418][ T2554]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   38.912297][ T2554]  kthread+0x266/0x300
[   38.916347][ T2554]  ? rcu_lock_release+0x20/0x20
[   38.921182][ T2554]  ? kthread_blkcg+0xd0/0xd0
[   38.925758][ T2554]  ret_from_fork+0x1f/0x30
[   38.930174][ T2554]  </TASK>
[   38.933338][ T2554] Kernel Offset: disabled
[   38.937656][ T2554] Rebooting in 86400 seconds..