x_tables: eb_tables: arpreply target: used from hooks OUTPUT, but only usable from PREROUTING
BUG: unable to handle kernel paging request at ffff8802c5c40d87
IP: slab_put_obj mm/slab.c:2612 [inline]
IP: free_block+0x158/0x280 mm/slab.c:3405
PGD a837067 P4D a837067 PUD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 12651 Comm: syz-executor5 Not tainted 4.16.0-rc6+ #288
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:slab_put_obj mm/slab.c:2612 [inline]
RIP: 0010:free_block+0x158/0x280 mm/slab.c:3405
RSP: 0018:ffff8801964df350 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffff8801db133dc8 RCX: 00000000ffffffff
RDX: ffff8801c5c40d88 RSI: ffff8801c5c40d88 RDI: 0000000000000000
RBP: ffff8801964df398 R08: 0000000007171000 R09: ffff8801db133dc8
R10: ffff8801964df260 R11: ffff8801dac01a18 R12: ffff8801dac00dc0
R13: ffffea0007171020 R14: ffff8801dac01a00 R15: ffffea0007171000
FS:  00007f6a250e2700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8802c5c40d87 CR3: 00000001aea30006 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 cache_flusharray mm/slab.c:3456 [inline]
 ___cache_free+0x20a/0x2f0 mm/slab.c:3514
 qlink_free mm/kasan/quarantine.c:147 [inline]
 qlist_free_all+0x8c/0x160 mm/kasan/quarantine.c:166
 quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259
 kasan_kmalloc+0xca/0xe0 mm/kasan/kasan.c:537
 __do_kmalloc mm/slab.c:3705 [inline]
 __kmalloc+0x162/0x760 mm/slab.c:3714
 kmalloc include/linux/slab.h:517 [inline]
 kzalloc include/linux/slab.h:701 [inline]
 __proc_create+0x217/0x890 fs/proc/generic.c:366
 proc_create_data+0x76/0x180 fs/proc/generic.c:488
 tcp_proc_register+0xfc/0x170 net/ipv4/tcp_ipv4.c:2218
 tcp4_proc_init_net+0x1c/0x20 net/ipv4/tcp_ipv4.c:2383
 ops_init+0xec/0x500 net/core/net_namespace.c:127
 setup_net+0x37a/0x8c0 net/core/net_namespace.c:312
 copy_net_ns+0x272/0x430 net/core/net_namespace.c:435
 create_new_namespaces+0x425/0x880 kernel/nsproxy.c:107
 unshare_nsproxy_namespaces+0xae/0x1e0 kernel/nsproxy.c:206
 SYSC_unshare kernel/fork.c:2407 [inline]
 SyS_unshare+0x653/0xfa0 kernel/fork.c:2357
 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x454e79
RSP: 002b:00007f6a250e1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f6a250e26d4 RCX: 0000000000454e79
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000006a5 R14: 00000000006fc018 R15: 0000000000000000
Code: 0f b6 4c 24 1c 48 c1 ee 20 29 f0 d3 e8 41 0f b6 4c 24 1d 01 f0 49 8b 77 10 d3 e8 8d 4f ff 48 85 f6 41 89 4f 18 0f 84 05 01 00 00 <88> 04 0e 41 8b 47 18 85 c0 0f 84 e0 fe ff ff 49 8b 4e 40 4d 8d 
RIP: slab_put_obj mm/slab.c:2612 [inline] RSP: ffff8801964df350
RIP: free_block+0x158/0x280 mm/slab.c:3405 RSP: ffff8801964df350
CR2: ffff8802c5c40d87
---[ end trace 2e98a5c189f417c1 ]---