[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   20.710969] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   24.172565] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available)
[   24.515929] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available)
[   25.466158] random: sshd: uninitialized urandom read (32 bytes read, 91 bits of entropy available)
Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts.
[   31.203488] random: sshd: uninitialized urandom read (32 bytes read, 96 bits of entropy available)
2018/08/29 14:24:21 fuzzer started
[   32.631704] random: cc1: uninitialized urandom read (8 bytes read, 99 bits of entropy available)
2018/08/29 14:24:24 dialing manager at 10.128.0.26:38441
2018/08/29 14:24:26 syscalls: 1
2018/08/29 14:24:26 code coverage: enabled
2018/08/29 14:24:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/08/29 14:24:26 setuid sandbox: enabled
2018/08/29 14:24:26 namespace sandbox: enabled
2018/08/29 14:24:26 fault injection: CONFIG_FAULT_INJECTION is not enabled
2018/08/29 14:24:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/08/29 14:24:26 net packed injection: enabled
2018/08/29 14:24:26 net device setup: enabled
[   36.190129] random: nonblocking pool is initialized
14:25:01 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
r3 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="c6", 0x1}], 0x1)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080))
tkill(r3, 0x1004000000016)
close(r1)

14:25:01 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')

14:25:01 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='userloppp1ptoc\'\x00', 0x6)
fcntl$addseals(r0, 0x409, 0xd)

14:25:01 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))

14:25:01 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x8001}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0), 0x0)
setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000140)=0x39a, 0x4)

14:25:01 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000))
ftruncate(r1, 0x0)

14:25:01 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1ff, 0x82)
r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)='\f', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

14:25:01 executing program 3:
exit(0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000400)={0x7d, 0x7d, 0x0, {{0x0, 0x5c, 0x0, 0x7ff, {}, 0x0, 0x0, 0x0, 0x0, 0x12, ')trusted+mime_type', 0x12, ')trusted+mime_type', 0x1, '$', 0x4, '-em0'}, 0xc, '\\securitylo('}}, 0x7d)

[   71.392187] IPVS: Creating netns size=2552 id=1
[   71.459524] IPVS: Creating netns size=2552 id=2
[   71.525546] IPVS: Creating netns size=2552 id=3
[   71.607346] IPVS: Creating netns size=2552 id=4
[   71.735819] IPVS: Creating netns size=2552 id=5
[   71.878143] IPVS: Creating netns size=2552 id=6
[   72.042048] IPVS: Creating netns size=2552 id=7
[   72.257801] IPVS: Creating netns size=2552 id=8
[   72.485799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.559411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.709568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   72.807145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   72.965823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.065643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   73.083228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   73.131268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   73.215972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   73.267578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.338129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   73.371335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   73.607886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   73.686130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   73.703622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.744671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   73.755740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   73.774856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   73.793281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   73.848248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.908857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   73.916642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.022808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   74.034402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   74.043505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.143561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   74.159322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   74.175223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.234153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   74.241202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.255082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   74.317183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.325551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   74.339455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   74.386354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   74.418896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   74.451908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   74.472428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.523548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.552412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.578472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.604944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.654925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.670290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.709572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.759029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   74.954620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   74.964325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.022099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   75.030400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.158933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.183713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.245234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.253996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.272667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.334490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.351004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.414688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.444131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   75.454807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.516556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.547193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   75.655888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.738635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.698502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   78.848817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   78.918028] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.010952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.045510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.170057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.198733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.359206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.643456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.666980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.713685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.797241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   79.916464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.977328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.016593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.149749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
14:25:11 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast1}, 0x0, 0x2}}, 0x2e)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

14:25:11 executing program 1:
exit(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
dup3(r0, r1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)

[   81.348805] SELinux: failure in selinux_parse_skb(), unable to parse packet
[   81.356062] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ffffffff8343632e
[   81.356062] 
[   81.367082] CPU: 1 PID: 5921 Comm: syz-executor0 Not tainted 4.4.153-g5e24b4e #26
[   81.374698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   81.384050]  0000000000000000 7e795c94272022da ffff8801ba92f500 ffffffff81e162ed
[   81.392111]  ffffffff83a44c60 00000000ffffffff ffff8800ad288000 ffff8801ba92f840
[   81.400170]  0000000000001200 ffff8801ba92f5c0 ffffffff8140d474 0000000041b58ab3
[   81.408233] Call Trace:
[   81.410817]  [<ffffffff81e162ed>] dump_stack+0xc1/0x124
[   81.416181]  [<ffffffff8140d474>] panic+0x19e/0x38d
[   81.421194]  [<ffffffff8140d2d6>] ? add_taint.cold.4+0x16/0x16
[   81.427162]  [<ffffffff830cb730>] ? nf_iterate+0x210/0x210
[   81.432783]  [<ffffffff8343632e>] ? ip6_xmit+0x18ae/0x1a00
[   81.438411]  [<ffffffff8343632e>] ? ip6_xmit+0x18ae/0x1a00
[   81.444036]  [<ffffffff81132bc2>] __stack_chk_fail+0x22/0x30
[   81.449829]  [<ffffffff8343632e>] ip6_xmit+0x18ae/0x1a00
[   81.455278]  [<ffffffff814fe152>] ? kasan_slab_free+0x72/0xc0
[   81.461163]  [<ffffffff814fb6b4>] ? kfree+0xf4/0x310
[   81.466268]  [<ffffffff82f4a6e3>] ? pskb_expand_head+0x683/0x970
[   81.472416]  [<ffffffff83434a80>] ? ip6_finish_output2+0x1ca0/0x1ca0
[   81.478917]  [<ffffffff8122c7a2>] ? __lock_is_held+0xa2/0xf0
[   81.484711]  [<ffffffff831f2581>] ? ipv4_dst_check+0x111/0x160
[   81.490678]  [<ffffffff8342fde0>] ? ip6_append_data+0x2b0/0x2b0
[   81.496737]  [<ffffffff834f63c5>] inet6_csk_xmit+0x245/0x490
[   81.502534]  [<ffffffff834f627f>] ? inet6_csk_xmit+0xff/0x490
[   81.508427]  [<ffffffff834f6180>] ? inet6_csk_update_pmtu+0x160/0x160
[   81.515003]  [<ffffffff83564ab3>] ? udp6_set_csum+0xd3/0xa70
[   81.520795]  [<ffffffff835a5a0c>] l2tp_xmit_skb+0xb9c/0xe80
[   81.526503]  [<ffffffff835b1f60>] pppol2tp_sendmsg+0x4e0/0x7d0
[   81.532474]  [<ffffffff81c7663f>] ? selinux_socket_sendmsg+0x3f/0x50
[   81.538964]  [<ffffffff835b1a80>] ? pppol2tp_release+0x310/0x310
[   81.545108]  [<ffffffff82f2757c>] sock_sendmsg+0xcc/0x110
[   81.550647]  [<ffffffff82f28d41>] ___sys_sendmsg+0x441/0x880
[   81.556446]  [<ffffffff82f28900>] ? copy_msghdr_from_user+0x550/0x550
[   81.563024]  [<ffffffff8157e8ff>] ? __fget_light+0x9f/0x1f0
[   81.568730]  [<ffffffff8157ea68>] ? __fdget+0x18/0x20
[   81.573928]  [<ffffffff82f24486>] ? sockfd_lookup_light+0xb6/0x160
[   81.580251]  [<ffffffff82f2b3d4>] __sys_sendmmsg+0x1d4/0x2e0
[   81.586048]  [<ffffffff82f2b200>] ? SyS_sendmsg+0x50/0x50
[   81.591587]  [<ffffffff834e870a>] ? ip6_datagram_connect+0x3a/0x50
[   81.597904]  [<ffffffff8330335e>] ? inet_dgram_connect+0x11e/0x200
[   81.604228]  [<ffffffff81528560>] ? fput+0x20/0x150
[   81.609246]  [<ffffffff82f27f6a>] ? SYSC_connect+0x22a/0x300
[   81.615043]  [<ffffffff82f27d40>] ? SYSC_bind+0x280/0x280
[   81.620581]  [<ffffffff812d5b21>] ? compat_SyS_futex+0x1e1/0x2f0
[   81.626727]  [<ffffffff812d5940>] ? compat_SyS_get_robust_list+0x310/0x310
[   81.633742]  [<ffffffff82f29f61>] ? SyS_socket+0x121/0x1b0
[   81.639363]  [<ffffffff82f29e40>] ? move_addr_to_kernel+0x50/0x50
[   81.645619]  [<ffffffff83014e22>] compat_SyS_sendmmsg+0x32/0x40
[   81.651674]  [<ffffffff83014df0>] ? compat_SyS_sendmsg+0x40/0x40
[   81.657816]  [<ffffffff81006d94>] do_fast_syscall_32+0x324/0x8b0
[   81.663955]  [<ffffffff838ce1c3>] sysenter_flags_fixed+0xd/0x1a
[   81.670476] Dumping ftrace buffer:
[   81.674046]    (ftrace buffer empty)
[   81.677758] Kernel Offset: disabled
[   81.681401] Rebooting in 86400 seconds..