Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes executing program INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 607.902738] ================================================================== [ 607.910266] BUG: KASAN: use-after-free in ip6t_do_table+0x14e2/0x17e0 [ 607.916844] Read of size 8 at addr ffff8801c6868000 by task syz-executor372/18241 [ 607.924733] [ 607.926346] CPU: 0 PID: 18241 Comm: syz-executor372 Not tainted 4.9.141+ #23 [ 607.933742] ffff8801c6b2f010 ffffffff81b42e79 ffffea00071a1a00 ffff8801c6868000 [ 607.942057] 0000000000000000 ffff8801c6868000 dffffc0000000000 ffff8801c6b2f048 [ 607.950076] ffffffff815009b8 ffff8801c6868000 0000000000000008 0000000000000000 [ 607.958227] Call Trace: [ 607.960881] [] dump_stack+0xc1/0x128 [ 607.966278] [] print_address_description+0x6c/0x234 [ 607.972944] [] kasan_report.cold.6+0x242/0x2fe [ 607.979165] [] ? ip6t_do_table+0x14e2/0x17e0 [ 607.985300] [] __asan_report_load8_noabort+0x14/0x20 [ 607.992133] [] ip6t_do_table+0x14e2/0x17e0 [ 607.998240] [] ? udp_packet+0x1d9/0x230 [ 608.004086] [] ? nf_conntrack_in+0x812/0x1940 [ 608.010237] [] ? mark_held_locks+0xc7/0x130 [ 608.016191] [] ? ip6t_alloc_initial_table+0x670/0x670 [ 608.023300] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.029903] [] ? retint_kernel+0x2d/0x2d [ 608.035620] [] ip6table_mangle_hook+0x2d7/0x660 [ 608.042005] [] nf_iterate+0x126/0x310 [ 608.047432] [] nf_hook_slow+0x114/0x1e0 [ 608.053133] [] ? nf_iterate+0x310/0x310 [ 608.058761] [] __ip6_local_out+0x484/0x620 [ 608.064624] [] ? __ip6_local_out+0x230/0x620 [ 608.070671] [] ? ip6_find_1stfragopt+0x300/0x300 [ 608.077108] [] ? ip6_output+0x64a/0x6d0 [ 608.082710] [] ? icmpv6_send+0x1b0/0x1b0 [ 608.088400] [] ip6_local_out+0x29/0x180 [ 608.094261] [] ip6_send_skb+0xa1/0x340 [ 608.099838] [] ? csum_ipv6_magic+0x2e/0x90 [ 608.105737] [] udp_v6_send_skb+0x429/0xe70 [ 608.111820] [] udp_v6_push_pending_frames+0x22d/0x340 [ 608.118657] [] ? udp_v6_send_skb+0xe70/0xe70 [ 608.124757] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 608.131082] [] udpv6_sendmsg+0x1dc1/0x2430 [ 608.136979] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 608.143121] [] ? __lock_acquire+0x654/0x4a10 [ 608.149519] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 608.156521] [] ? trace_hardirqs_on+0x10/0x10 [ 608.162839] [] ? sock_has_perm+0x1c1/0x3e0 [ 608.169321] [] ? sock_has_perm+0x293/0x3e0 [ 608.175205] [] ? sock_has_perm+0x9f/0x3e0 [ 608.180989] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 608.188651] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 608.195437] [] ? check_preemption_disabled+0x3b/0x200 [ 608.202254] [] ? check_preemption_disabled+0x3b/0x200 [ 608.209110] [] ? inet_sendmsg+0x143/0x4d0 [ 608.214896] [] inet_sendmsg+0x203/0x4d0 [ 608.220585] [] ? inet_sendmsg+0x73/0x4d0 [ 608.226286] [] ? inet_recvmsg+0x4c0/0x4c0 [ 608.232126] [] sock_sendmsg+0xbb/0x110 [ 608.237646] [] ___sys_sendmsg+0x47a/0x840 [ 608.243421] [] ? trace_hardirqs_on+0x10/0x10 [ 608.249454] [] ? copy_msghdr_from_user+0x530/0x530 [ 608.256037] [] ? __alloc_pages_nodemask+0x11df/0x1bd0 [ 608.262906] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 608.269641] [] ? check_preemption_disabled+0x3b/0x200 [ 608.276470] [] ? check_preemption_disabled+0x3b/0x200 [ 608.283310] [] ? __fget+0x214/0x3d0 [ 608.288564] [] ? __fget+0x23b/0x3d0 [ 608.293904] [] ? __fget+0x47/0x3d0 [ 608.299080] [] ? __fget_light+0x169/0x1f0 [ 608.304890] [] ? __fdget+0x18/0x20 [ 608.310061] [] __sys_sendmmsg+0x23c/0x3d0 [ 608.315836] [] ? SyS_sendmsg+0x50/0x50 [ 608.321350] [] ? _raw_spin_unlock+0x2c/0x50 [ 608.327356] [] ? handle_mm_fault+0x54b/0x2350 [ 608.333477] [] ? vm_insert_page+0x6f0/0x6f0 [ 608.339465] [] ? __do_page_fault+0x431/0xa60 [ 608.346690] [] ? __do_page_fault+0x554/0xa60 [ 608.352726] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 608.359068] [] compat_SyS_sendmmsg+0x32/0x40 [ 608.365108] [] ? compat_SyS_sendmsg+0x40/0x40 [ 608.371228] [] do_fast_syscall_32+0x2f1/0xa10 [ 608.377350] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.384006] [] entry_SYSENTER_compat+0x90/0xa2 [ 608.390208] [ 608.391812] The buggy address belongs to the page: [ 608.396732] page:ffffea00071a1a00 count:0 mapcount:-127 mapping: (null) index:0x0 [ 608.405240] flags: 0x4000000000000000() [ 608.409207] page dumped because: kasan: bad access detected [ 608.414984] [ 608.416587] Memory state around the buggy address: [ 608.421500] ffff8801c6867f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 608.428931] ffff8801c6867f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 608.436445] >ffff8801c6868000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 608.443860] ^ [ 608.447214] ffff8801c6868080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 608.454557] ffff8801c6868100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 608.461895] ================================================================== [ 608.469240] Disabling lock debugging due to kernel taint [ 608.474792] Kernel panic - not syncing: panic_on_warn set ... [ 608.474792] [ 608.482161] CPU: 0 PID: 18241 Comm: syz-executor372 Tainted: G B 4.9.141+ #23 [ 608.490817] ffff8801c6b2ef70 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 608.499060] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801c6b2f030 [ 608.507202] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 608.515220] Call Trace: [ 608.517807] [] dump_stack+0xc1/0x128 [ 608.523331] [] panic+0x1bf/0x39f [ 608.528402] [] ? add_taint.cold.5+0x16/0x16 [ 608.534519] [] kasan_end_report+0x47/0x4f [ 608.540310] [] kasan_report.cold.6+0x76/0x2fe [ 608.546454] [] ? ip6t_do_table+0x14e2/0x17e0 [ 608.552498] [] __asan_report_load8_noabort+0x14/0x20 [ 608.559231] [] ip6t_do_table+0x14e2/0x17e0 [ 608.565368] [] ? udp_packet+0x1d9/0x230 [ 608.571865] [] ? nf_conntrack_in+0x812/0x1940 [ 608.578011] [] ? mark_held_locks+0xc7/0x130 [ 608.583992] [] ? ip6t_alloc_initial_table+0x670/0x670 [ 608.591165] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.597729] [] ? retint_kernel+0x2d/0x2d [ 608.603430] [] ip6table_mangle_hook+0x2d7/0x660 [ 608.609904] [] nf_iterate+0x126/0x310 [ 608.615342] [] nf_hook_slow+0x114/0x1e0 [ 608.620949] [] ? nf_iterate+0x310/0x310 [ 608.626553] [] __ip6_local_out+0x484/0x620 [ 608.632448] [] ? __ip6_local_out+0x230/0x620 [ 608.638496] [] ? ip6_find_1stfragopt+0x300/0x300 [ 608.644893] [] ? ip6_output+0x64a/0x6d0 [ 608.651190] [] ? icmpv6_send+0x1b0/0x1b0 [ 608.656963] [] ip6_local_out+0x29/0x180 [ 608.662569] [] ip6_send_skb+0xa1/0x340 [ 608.668084] [] ? csum_ipv6_magic+0x2e/0x90 [ 608.674045] [] udp_v6_send_skb+0x429/0xe70 [ 608.680089] [] udp_v6_push_pending_frames+0x22d/0x340 [ 608.686910] [] ? udp_v6_send_skb+0xe70/0xe70 [ 608.692959] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 608.699179] [] udpv6_sendmsg+0x1dc1/0x2430 [ 608.705139] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 608.711280] [] ? __lock_acquire+0x654/0x4a10 [ 608.717500] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 608.724493] [] ? trace_hardirqs_on+0x10/0x10 [ 608.730532] [] ? sock_has_perm+0x1c1/0x3e0 [ 608.736396] [] ? sock_has_perm+0x293/0x3e0 [ 608.742794] [] ? sock_has_perm+0x9f/0x3e0 [ 608.748673] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 608.756390] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 608.763138] [] ? check_preemption_disabled+0x3b/0x200 [ 608.769977] [] ? check_preemption_disabled+0x3b/0x200 [ 608.776807] [] ? inet_sendmsg+0x143/0x4d0 [ 608.782592] [] inet_sendmsg+0x203/0x4d0 [ 608.789169] [] ? inet_sendmsg+0x73/0x4d0 [ 608.794876] [] ? inet_recvmsg+0x4c0/0x4c0 [ 608.800668] [] sock_sendmsg+0xbb/0x110 [ 608.806190] [] ___sys_sendmsg+0x47a/0x840 [ 608.812247] [] ? trace_hardirqs_on+0x10/0x10 [ 608.818312] [] ? copy_msghdr_from_user+0x530/0x530 [ 608.824878] [] ? __alloc_pages_nodemask+0x11df/0x1bd0 [ 608.831742] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 608.838492] [] ? check_preemption_disabled+0x3b/0x200 [ 608.845338] [] ? check_preemption_disabled+0x3b/0x200 [ 608.852262] [] ? __fget+0x214/0x3d0 [ 608.857780] [] ? __fget+0x23b/0x3d0 [ 608.863238] [] ? __fget+0x47/0x3d0 [ 608.868420] [] ? __fget_light+0x169/0x1f0 [ 608.874223] [] ? __fdget+0x18/0x20 [ 608.879416] [] __sys_sendmmsg+0x23c/0x3d0 [ 608.885213] [] ? SyS_sendmsg+0x50/0x50 [ 608.890785] [] ? _raw_spin_unlock+0x2c/0x50 [ 608.896759] [] ? handle_mm_fault+0x54b/0x2350 [ 608.902976] [] ? vm_insert_page+0x6f0/0x6f0 [ 608.909017] [] ? __do_page_fault+0x431/0xa60 [ 608.915232] [] ? __do_page_fault+0x554/0xa60 [ 608.921783] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 608.928374] [] compat_SyS_sendmmsg+0x32/0x40 [ 608.934591] [] ? compat_SyS_sendmsg+0x40/0x40 [ 608.940979] [] do_fast_syscall_32+0x2f1/0xa10 [ 608.947516] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.954347] [] entry_SYSENTER_compat+0x90/0xa2 [ 608.961857] Kernel Offset: disabled [ 608.965476] Rebooting in 86400 seconds..