forked to background, child pid 3188[ 26.822993][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 no interfaces have a carrier [ 26.836056][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 71.509004][ T4229] ================================================================== [ 71.517117][ T4229] BUG: KASAN: use-after-free in nf_tables_trans_destroy_work+0x7f4/0x820 [ 71.525591][ T4229] Read of size 1 at addr ffff88807c227054 by task kworker/1:3/4229 [ 71.533494][ T4229] [ 71.535834][ T4229] CPU: 1 PID: 4229 Comm: kworker/1:3 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 71.545726][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 71.555809][ T4229] Workqueue: events nf_tables_trans_destroy_work [ 71.562161][ T4229] Call Trace: [ 71.565438][ T4229] [ 71.568373][ T4229] dump_stack_lvl+0xcd/0x134 [ 71.572992][ T4229] print_report.cold+0x2ba/0x719 [ 71.577936][ T4229] ? nf_tables_trans_destroy_work+0x7f4/0x820 [ 71.584021][ T4229] kasan_report+0xb1/0x1e0 [ 71.588449][ T4229] ? nf_tables_trans_destroy_work+0x7f4/0x820 [ 71.594535][ T4229] nf_tables_trans_destroy_work+0x7f4/0x820 [ 71.600445][ T4229] ? nf_tables_destroy_set+0xa0/0xa0 [ 71.605751][ T4229] process_one_work+0x991/0x1610 [ 71.610700][ T4229] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 71.616097][ T4229] ? rwlock_bug.part.0+0x90/0x90 [ 71.621041][ T4229] ? _raw_spin_lock_irq+0x41/0x50 [ 71.626075][ T4229] worker_thread+0x665/0x1080 [ 71.630763][ T4229] ? __kthread_parkme+0x15f/0x220 [ 71.635788][ T4229] ? process_one_work+0x1610/0x1610 [ 71.640992][ T4229] kthread+0x2e4/0x3a0 [ 71.645061][ T4229] ? kthread_complete_and_exit+0x40/0x40 [ 71.650698][ T4229] ret_from_fork+0x1f/0x30 [ 71.655131][ T4229] [ 71.658144][ T4229] [ 71.660461][ T4229] Allocated by task 5174: [ 71.664781][ T4229] kasan_save_stack+0x1e/0x40 [ 71.669467][ T4229] __kasan_kmalloc+0xa9/0xd0 [ 71.674064][ T4229] nf_tables_addchain.constprop.0+0x7ff/0x1830 [ 71.680239][ T4229] nf_tables_newchain+0x16d1/0x1ef0 [ 71.685448][ T4229] nfnetlink_rcv_batch+0x171f/0x2600 [ 71.690744][ T4229] nfnetlink_rcv+0x3af/0x420 [ 71.695342][ T4229] netlink_unicast+0x543/0x7f0 [ 71.700107][ T4229] netlink_sendmsg+0x917/0xe10 [ 71.704962][ T4229] sock_sendmsg+0xcf/0x120 [ 71.709379][ T4229] ____sys_sendmsg+0x712/0x8c0 [ 71.714139][ T4229] ___sys_sendmsg+0x110/0x1b0 [ 71.718832][ T4229] __sys_sendmsg+0xf3/0x1c0 [ 71.723348][ T4229] do_syscall_64+0x35/0xb0 [ 71.727786][ T4229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.733703][ T4229] [ 71.736022][ T4229] Freed by task 5174: [ 71.739999][ T4229] kasan_save_stack+0x1e/0x40 [ 71.744685][ T4229] kasan_set_track+0x21/0x30 [ 71.749286][ T4229] kasan_set_free_info+0x20/0x30 [ 71.754234][ T4229] ____kasan_slab_free+0x166/0x1c0 [ 71.759357][ T4229] slab_free_freelist_hook+0x8b/0x1c0 [ 71.764738][ T4229] kfree+0xe2/0x580 [ 71.768547][ T4229] nf_tables_chain_destroy+0x4ec/0x640 [ 71.774016][ T4229] __nft_release_table+0x96c/0xcd0 [ 71.779140][ T4229] nft_rcv_nl_event+0x3f6/0x5b0 [ 71.784006][ T4229] notifier_call_chain+0xb5/0x200 [ 71.789034][ T4229] blocking_notifier_call_chain+0x67/0x90 [ 71.794760][ T4229] netlink_release+0xcad/0x1db0 [ 71.799617][ T4229] __sock_release+0xcd/0x280 [ 71.804221][ T4229] sock_close+0x18/0x20 [ 71.808743][ T4229] __fput+0x277/0x9d0 [ 71.812747][ T4229] task_work_run+0xdd/0x1a0 [ 71.817265][ T4229] exit_to_user_mode_prepare+0x23c/0x250 [ 71.822906][ T4229] syscall_exit_to_user_mode+0x19/0x50 [ 71.828380][ T4229] do_syscall_64+0x42/0xb0 [ 71.832815][ T4229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.838719][ T4229] [ 71.841036][ T4229] The buggy address belongs to the object at ffff88807c227000 [ 71.841036][ T4229] which belongs to the cache kmalloc-cg-128 of size 128 [ 71.855369][ T4229] The buggy address is located 84 bytes inside of [ 71.855369][ T4229] 128-byte region [ffff88807c227000, ffff88807c227080) [ 71.868555][ T4229] [ 71.870872][ T4229] The buggy address belongs to the physical page: [ 71.877274][ T4229] page:ffffea0001f089c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c227 [ 71.887437][ T4229] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 71.895086][ T4229] raw: 00fff00000000200 ffffea0000805980 dead000000000003 ffff888011842a00 [ 71.903681][ T4229] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 71.912266][ T4229] page dumped because: kasan: bad access detected [ 71.918673][ T4229] page_owner tracks the page as allocated [ 71.924387][ T4229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3897, tgid 3897 (syz-executor278), ts 64286860928, free_ts 64282959910 [ 71.942980][ T4229] get_page_from_freelist+0x109b/0x2ce0 [ 71.948542][ T4229] __alloc_pages+0x1c7/0x510 [ 71.953153][ T4229] alloc_pages+0x1a6/0x270 [ 71.957579][ T4229] allocate_slab+0x27e/0x3d0 [ 71.962174][ T4229] ___slab_alloc+0x84f/0xe80 [ 71.966767][ T4229] __slab_alloc.constprop.0+0x4d/0xa0 [ 71.972145][ T4229] kmem_cache_alloc_trace+0x323/0x3e0 [ 71.977520][ T4229] nf_tables_addchain.constprop.0+0x7ff/0x1830 [ 71.983691][ T4229] nf_tables_newchain+0x16d1/0x1ef0 [ 71.988900][ T4229] nfnetlink_rcv_batch+0x171f/0x2600 [ 71.994195][ T4229] nfnetlink_rcv+0x3af/0x420 [ 71.998817][ T4229] netlink_unicast+0x543/0x7f0 [ 72.003589][ T4229] netlink_sendmsg+0x917/0xe10 [ 72.008374][ T4229] sock_sendmsg+0xcf/0x120 [ 72.012797][ T4229] ____sys_sendmsg+0x712/0x8c0 [ 72.017562][ T4229] ___sys_sendmsg+0x110/0x1b0 [ 72.022246][ T4229] page last free stack trace: [ 72.026912][ T4229] free_pcp_prepare+0x5e4/0xd20 [ 72.031777][ T4229] free_unref_page_list+0x16f/0xb90 [ 72.036990][ T4229] release_pages+0xbd3/0x1400 [ 72.041681][ T4229] tlb_batch_pages_flush+0xa8/0x1a0 [ 72.046898][ T4229] tlb_finish_mmu+0x147/0x7e0 [ 72.051612][ T4229] exit_mmap+0x1d2/0x490 [ 72.055864][ T4229] __mmput+0x122/0x4b0 [ 72.059942][ T4229] mmput+0x56/0x60 [ 72.063671][ T4229] do_exit+0x9e2/0x29b0 [ 72.067837][ T4229] do_group_exit+0xd2/0x2f0 [ 72.072439][ T4229] __x64_sys_exit_group+0x3a/0x50 [ 72.077481][ T4229] do_syscall_64+0x35/0xb0 [ 72.081908][ T4229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.087815][ T4229] [ 72.090137][ T4229] Memory state around the buggy address: [ 72.095761][ T4229] ffff88807c226f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.103819][ T4229] ffff88807c226f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.111878][ T4229] >ffff88807c227000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.119931][ T4229] ^ [ 72.126600][ T4229] ffff88807c227080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.134656][ T4229] ffff88807c227100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.142706][ T4229] ================================================================== [ 72.150896][ T4229] Kernel panic - not syncing: panic_on_warn set ... [ 72.157518][ T4229] CPU: 1 PID: 4229 Comm: kworker/1:3 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 [ 72.167235][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 72.177376][ T4229] Workqueue: events nf_tables_trans_destroy_work [ 72.183726][ T4229] Call Trace: [ 72.187007][ T4229] [ 72.189937][ T4229] dump_stack_lvl+0xcd/0x134 [ 72.194542][ T4229] panic+0x2c8/0x627 [ 72.198450][ T4229] ? panic_print_sys_info.part.0+0x10b/0x10b [ 72.204454][ T4229] ? nf_tables_trans_destroy_work+0x7f4/0x820 [ 72.210637][ T4229] end_report.part.0+0x3f/0x7c [ 72.215417][ T4229] kasan_report.cold+0xa/0xf [ 72.220016][ T4229] ? nf_tables_trans_destroy_work+0x7f4/0x820 [ 72.226107][ T4229] nf_tables_trans_destroy_work+0x7f4/0x820 [ 72.232026][ T4229] ? nf_tables_destroy_set+0xa0/0xa0 [ 72.237335][ T4229] process_one_work+0x991/0x1610 [ 72.242290][ T4229] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 72.247689][ T4229] ? rwlock_bug.part.0+0x90/0x90 [ 72.252634][ T4229] ? _raw_spin_lock_irq+0x41/0x50 [ 72.257676][ T4229] worker_thread+0x665/0x1080 [ 72.262376][ T4229] ? __kthread_parkme+0x15f/0x220 [ 72.267403][ T4229] ? process_one_work+0x1610/0x1610 [ 72.272623][ T4229] kthread+0x2e4/0x3a0 [ 72.276706][ T4229] ? kthread_complete_and_exit+0x40/0x40 [ 72.282350][ T4229] ret_from_fork+0x1f/0x30 [ 72.286792][ T4229] [ 72.290093][ T4229] Kernel Offset: disabled [ 72.294421][ T4229] Rebooting in 86400 seconds..