program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000002eb407a800000000000a58000000060a0b040000000000000000010000012c0004802800018007000100637400001c0002800800024000000014080001400000001305000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2023) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)=0x39c4, 0x12) (async) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) (async) r4 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) connect$netrom(r8, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000008300)=""/4111, 0x100f}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600000f500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000fcac0000"], 0x0) [ 84.609857][ T46] Bluetooth: hci0: command tx timeout [ 84.761440][ T5343] ================================================================== [ 84.765124][ T5343] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x37/0x170 [ 84.768821][ T5343] Write of size 4 at addr ffff888036e245e4 by task syz.0.0/5343 [ 84.772363][ T5343] [ 84.773450][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.773464][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.773470][ T5343] Call Trace: [ 84.773478][ T5343] [ 84.773484][ T5343] dump_stack_lvl+0xe8/0x150 [ 84.773501][ T5343] print_report+0xca/0x240 [ 84.773513][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 84.773524][ T5343] kasan_report+0x118/0x150 [ 84.773592][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 84.773602][ T5343] kasan_check_range+0x2b0/0x2c0 [ 84.773613][ T5343] sk_skb_reason_drop+0x37/0x170 [ 84.773623][ T5343] nr_transmit_buffer+0x11d/0x1b0 [ 84.773634][ T5343] nr_establish_data_link+0x62/0xb0 [ 84.773643][ T5343] nr_connect+0x6e6/0xde0 [ 84.773658][ T5343] ? __pfx_nr_connect+0x10/0x10 [ 84.773671][ T5343] ? tomoyo_socket_connect_permission+0x164/0x290 [ 84.773685][ T5343] ? bpf_lsm_socket_connect+0x9/0x20 [ 84.773700][ T5343] __sys_connect+0x316/0x440 [ 84.773714][ T5343] ? __pfx___sys_connect+0x10/0x10 [ 84.773729][ T5343] ? rcu_is_watching+0x15/0xb0 [ 84.773743][ T5343] __x64_sys_connect+0x7a/0x90 [ 84.773755][ T5343] do_syscall_64+0xec/0xf80 [ 84.773801][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.773811][ T5343] ? trace_irq_disable+0x37/0x100 [ 84.773824][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 84.773834][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.773844][ T5343] RIP: 0033:0x7f43aa38f7c9 [ 84.773855][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.773864][ T5343] RSP: 002b:00007f43ab227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 84.773876][ T5343] RAX: ffffffffffffffda RBX: 00007f43aa5e6090 RCX: 00007f43aa38f7c9 [ 84.773883][ T5343] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000009 [ 84.773889][ T5343] RBP: 00007f43aa413f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.773896][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.773902][ T5343] R13: 00007f43aa5e6128 R14: 00007f43aa5e6090 R15: 00007ffe7ee77c28 [ 84.773913][ T5343] [ 84.773916][ T5343] [ 84.865510][ T5343] Allocated by task 5343: [ 84.867400][ T5343] kasan_save_track+0x3e/0x80 [ 84.869555][ T5343] __kasan_slab_alloc+0x6c/0x80 [ 84.871779][ T5343] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 84.874347][ T5343] __alloc_skb+0x1dc/0x3a0 [ 84.876274][ T5343] nr_write_internal+0xe2/0xc60 [ 84.878487][ T5343] nr_establish_data_link+0x62/0xb0 [ 84.880742][ T5343] nr_connect+0x6e6/0xde0 [ 84.882618][ T5343] __sys_connect+0x316/0x440 [ 84.884590][ T5343] __x64_sys_connect+0x7a/0x90 [ 84.886560][ T5343] do_syscall_64+0xec/0xf80 [ 84.888449][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.890898][ T5343] [ 84.891943][ T5343] Freed by task 5343: [ 84.893488][ T5343] kasan_save_track+0x3e/0x80 [ 84.895474][ T5343] kasan_save_free_info+0x46/0x50 [ 84.897622][ T5343] __kasan_slab_free+0x5c/0x80 [ 84.899672][ T5343] kmem_cache_free+0x197/0x620 [ 84.901653][ T5343] nr_route_frame+0x467/0x7e0 [ 84.903604][ T5343] nr_transmit_buffer+0xe7/0x1b0 [ 84.905668][ T5343] nr_establish_data_link+0x62/0xb0 [ 84.907918][ T5343] nr_connect+0x6e6/0xde0 [ 84.909800][ T5343] __sys_connect+0x316/0x440 [ 84.911601][ T5343] __x64_sys_connect+0x7a/0x90 [ 84.913628][ T5343] do_syscall_64+0xec/0xf80 [ 84.915403][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.917842][ T5343] [ 84.918968][ T5343] The buggy address belongs to the object at ffff888036e24500 [ 84.918968][ T5343] which belongs to the cache skbuff_head_cache of size 240 [ 84.925399][ T5343] The buggy address is located 228 bytes inside of [ 84.925399][ T5343] freed 240-byte region [ffff888036e24500, ffff888036e245f0) [ 84.931954][ T5343] [ 84.933232][ T5343] The buggy address belongs to the physical page: [ 84.936005][ T5343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36e24 [ 84.939642][ T5343] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 84.942703][ T5343] page_type: f5(slab) [ 84.944456][ T5343] raw: 04fff00000000000 ffff888030418c80 dead000000000122 0000000000000000 [ 84.948078][ T5343] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 84.951547][ T5343] page dumped because: kasan: bad access detected [ 84.954385][ T5343] page_owner tracks the page as allocated [ 84.956940][ T5343] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 784, tgid 784 (kworker/0:2), ts 84740950526, free_ts 82320231116 [ 84.965275][ T5343] post_alloc_hook+0x234/0x290 [ 84.967556][ T5343] get_page_from_freelist+0x24e0/0x2580 [ 84.970396][ T5343] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.972841][ T5343] alloc_pages_mpol+0x232/0x4a0 [ 84.974849][ T5343] allocate_slab+0x86/0x3b0 [ 84.976820][ T5343] ___slab_alloc+0xe53/0x1820 [ 84.978905][ T5343] __slab_alloc+0x65/0x100 [ 84.981020][ T5343] kmem_cache_alloc_node_noprof+0x4ce/0x720 [ 84.983543][ T5343] __alloc_skb+0x1dc/0x3a0 [ 84.985288][ T5343] mld_newpack+0x13c/0xc40 [ 84.987066][ T5343] add_grhead+0x5a/0x2a0 [ 84.989006][ T5343] add_grec+0x1452/0x1740 [ 84.990997][ T5343] mld_send_initial_cr+0x288/0x550 [ 84.993249][ T5343] mld_dad_work+0x46/0x490 [ 84.995220][ T5343] process_scheduled_works+0xad1/0x1770 [ 84.997419][ T5343] worker_thread+0x8a0/0xda0 [ 84.999559][ T5343] page last free pid 5339 tgid 5339 stack trace: [ 85.002425][ T5343] __free_frozen_pages+0xbc8/0xd30 [ 85.004670][ T5343] rcu_core+0xc8e/0x1720 [ 85.006572][ T5343] handle_softirqs+0x22b/0x7c0 [ 85.008648][ T5343] __irq_exit_rcu+0x60/0x150 [ 85.011020][ T5343] irq_exit_rcu+0x9/0x30 [ 85.012961][ T5343] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 85.015345][ T5343] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.017902][ T5343] [ 85.018966][ T5343] Memory state around the buggy address: [ 85.021339][ T5343] ffff888036e24480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 85.024833][ T5343] ffff888036e24500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.028556][ T5343] >ffff888036e24580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 85.032115][ T5343] ^ [ 85.036152][ T5343] ffff888036e24600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 85.040144][ T5343] ffff888036e24680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.043333][ T5343] ================================================================== [ 85.105174][ T5343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.108248][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.111982][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.116393][ T5343] Call Trace: [ 85.117856][ T5343] [ 85.119110][ T5343] vpanic+0x1e0/0x670 [ 85.120841][ T5343] panic+0xb9/0xc0 [ 85.122492][ T5343] ? __pfx_panic+0x10/0x10 [ 85.124482][ T5343] ? preempt_schedule_thunk+0x16/0x30 [ 85.126547][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 85.128738][ T5343] ? preempt_schedule_thunk+0x16/0x30 [ 85.130930][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 85.133141][ T5343] check_panic_on_warn+0x89/0xb0 [ 85.135242][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 85.137731][ T5343] end_report+0x6f/0x140 [ 85.139733][ T5343] kasan_report+0x129/0x150 [ 85.141711][ T5343] ? sk_skb_reason_drop+0x37/0x170 [ 85.144008][ T5343] kasan_check_range+0x2b0/0x2c0 [ 85.146291][ T5343] sk_skb_reason_drop+0x37/0x170 [ 85.148367][ T5343] nr_transmit_buffer+0x11d/0x1b0 [ 85.150432][ T5343] nr_establish_data_link+0x62/0xb0 [ 85.152453][ T5343] nr_connect+0x6e6/0xde0 [ 85.154301][ T5343] ? __pfx_nr_connect+0x10/0x10 [ 85.156424][ T5343] ? tomoyo_socket_connect_permission+0x164/0x290 [ 85.159203][ T5343] ? bpf_lsm_socket_connect+0x9/0x20 [ 85.161524][ T5343] __sys_connect+0x316/0x440 [ 85.163548][ T5343] ? __pfx___sys_connect+0x10/0x10 [ 85.165778][ T5343] ? rcu_is_watching+0x15/0xb0 [ 85.167976][ T5343] __x64_sys_connect+0x7a/0x90 [ 85.169922][ T5343] do_syscall_64+0xec/0xf80 [ 85.171774][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.174375][ T5343] ? trace_irq_disable+0x37/0x100 [ 85.176611][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 85.178635][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.181103][ T5343] RIP: 0033:0x7f43aa38f7c9 [ 85.182920][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.192619][ T5343] RSP: 002b:00007f43ab227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 85.196831][ T5343] RAX: ffffffffffffffda RBX: 00007f43aa5e6090 RCX: 00007f43aa38f7c9 [ 85.200157][ T5343] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000009 [ 85.203407][ T5343] RBP: 00007f43aa413f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.206625][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.209724][ T5343] R13: 00007f43aa5e6128 R14: 00007f43aa5e6090 R15: 00007ffe7ee77c28 [ 85.212943][ T5343] [ 85.214773][ T5343] Kernel Offset: disabled [ 85.217038][ T5343] Rebooting in 86400 seconds..