[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   19.621189] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   25.536197] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available)
[   25.829731] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available)
[   26.660323] random: sshd: uninitialized urandom read (32 bytes read, 66 bits of entropy available)
Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts.
[   32.362835] random: sshd: uninitialized urandom read (32 bytes read, 75 bits of entropy available)
2018/08/26 08:21:45 fuzzer started
[   33.634146] random: cc1: uninitialized urandom read (8 bytes read, 77 bits of entropy available)
2018/08/26 08:21:47 dialing manager at 10.128.0.26:34351
2018/08/26 08:21:50 syscalls: 1
2018/08/26 08:21:50 code coverage: enabled
2018/08/26 08:21:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/08/26 08:21:50 setuid sandbox: enabled
2018/08/26 08:21:50 namespace sandbox: enabled
2018/08/26 08:21:50 fault injection: CONFIG_FAULT_INJECTION is not enabled
2018/08/26 08:21:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/08/26 08:21:50 net packed injection: enabled
2018/08/26 08:21:50 net device setup: enabled
[   38.812162] random: nonblocking pool is initialized
08:22:34 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x0)

08:22:34 executing program 1:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0)

08:22:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff31, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)

08:22:34 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0)

08:22:34 executing program 4:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)

08:22:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='team0\x00')
sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x20000010, 0x1000000007400, 0x100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0)

08:22:34 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioperm(0x0, 0x2, 0x0)
ioperm(0x0, 0x3, 0x0)

08:22:34 executing program 6:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001500)=@get={0x1, &(0x7f0000000500)=""/4096, 0x3ff})

[   81.839773] IPVS: Creating netns size=2552 id=1
[   81.924850] IPVS: Creating netns size=2552 id=2
[   81.989505] IPVS: Creating netns size=2552 id=3
[   82.084929] IPVS: Creating netns size=2552 id=4
[   82.235506] IPVS: Creating netns size=2552 id=5
[   82.376016] IPVS: Creating netns size=2552 id=6
[   82.559777] IPVS: Creating netns size=2552 id=7
[   82.801076] IPVS: Creating netns size=2552 id=8
[   82.969819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   83.064117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   83.281045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   83.438029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   83.446527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   83.560505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   83.634588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   83.722032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   83.924277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   83.969615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   83.983091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   84.053606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   84.066847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   84.175355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   84.231022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   84.251147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.348052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   84.365992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.409098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   84.488998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   84.542281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   84.553128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   84.567373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   84.610399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   84.651719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   84.663997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   84.703635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   84.771034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   84.850964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.897931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   84.951825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.983287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   85.047276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   85.097712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   85.105332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   85.150398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   85.167888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   85.219837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.248419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   85.317759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.328384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   85.431577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   85.467559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   85.476600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   85.505867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   85.585831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.596116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   85.647212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   85.659348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.670942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   85.697241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   85.750937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.765165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   85.863265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.884449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.956044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   85.967760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.052731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   86.159344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.190709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   86.204639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.320520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   86.408134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.499819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.488201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   89.671755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   89.784114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.896766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   90.066727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.107455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   90.236384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.411407] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   90.458920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.506221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   90.731135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.819618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   90.832202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.851970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   91.122246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.191813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
08:22:44 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="3fe0a5e14f746ae21e8aff1758bd69753ee0fae6639557b2ea2628f8ec4cc8120000010400000000"])
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e21, @broadcast}})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020")

08:22:44 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="000000006d345f8f762070")
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80800, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup3(r0, r2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r4, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000080)=""/162, &(0x7f0000000140)=0xa2)

[   92.265785] IPVS: length: 162 != 24
08:22:45 executing program 1:
r0 = socket$inet6(0xa, 0x200000004, 0xfffffffffffffffc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000300), 0xaa8e, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400080)
accept$unix(r1, 0x0, &(0x7f00000001c0))
recvfrom$inet6(r0, &(0x7f0000000040)=""/58, 0x3a, 0x40000000, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote, 0x400000}, 0x1c)

08:22:45 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000001400)={0x8, 0x1f, 0x0, 0x0, 0x0, {}, [@generic="d303199add05a4c6e1ea45d691"]}, 0x24}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10)
sendmmsg(r1, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0)

08:22:45 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'em0['}, {}, {0x20, 'vboxnet1'}, {0x20, 'nodevsecurity'}, {}, {0x20, 'lo*#vmnet0*'}], 0xa, "847e187b6ecd5c1d154d970c069938f2d7608ad5144b0f2de91b9826bbf3e89d4915acbe6f1dc2038bdfa74864bde69a1473c291df869bba925f516d2fbd479ca5957c054d9019237f74048e2a8fdf3fb4b70c662d4f2d295ee92b674149a2f3f686ff586ae183c12f7ed5d8268f4c0d7b8a0fb37b5003683a5080635f6335edeeea"}, 0xb7)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000100)={0x4, 0x7fffffff, 0x3, 0x6}, 0x10)
sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0)
ioctl(r0, 0x9, &(0x7f0000000140)="315c47be434b6635ef6f9be8b8b4eba989bab10251cfaaceb91103302919311859d2453f648e64d652e330bc2e4603647ac78978f694c80ecee9a46bfaa4497c789d61fdd20f6239b8123937f65c20cd6b99cd07ccd93fcc6f99d99e5f32c28364c07aca65829ef0b5fbf2ab778bad6bf64a2ade4390ac64cd39f38046a93420b0d1941aec89c69605440ea8c63ba7c218ae46923e9562eb4176005d")

08:22:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e)
clone(0x0, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000440), &(0x7f0000002040))
r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x401, 0x0)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000001c0)={0x1000, 0x8, 0x6, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffff9}, {r3, 0x0, 0x8}, {r1, 0x0, 0x6}, {r0}, {r3, 0x0, 0xffffffffffffffe0}, {r1, 0x0, 0x7}]})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000180)='gre0\x00', 0x20})
dup3(r0, r1, 0x0)

08:22:45 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0xc0002, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
clone(0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000240), &(0x7f00000003c0))
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000001c0)={@loopback}, 0x8)

08:22:45 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee)
read(r0, &(0x7f0000000000)=""/126, 0xfffffeab)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x4, 0x9, 0x80000000, 0x1000, 0x2})

[   93.004239] IPVS: length: 162 != 24
08:22:45 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x2)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x80000000000)

08:22:45 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc))
r2 = syz_open_pts(r1, 0x2)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd3ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000080))
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1)

08:22:45 executing program 6:
r0 = socket(0xf, 0x2, 0xc)
write(r0, &(0x7f0000000100)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd7f0000e8ffffffff39f09f16aa5b6ef2e8219503532da365bd0a1c7ed07449b598ece7a837cbc936a90784ca8d7f4f82419af0c3dfe7d3e770438871ce294e9efa99c25fd1d74e1101662bfbc20ce5a0cc33c655b6079539d65e6a6ac8f2eaaeb62ea395f5451df143e8e01cbf0f3bc71d690c372dbd61b984086edf51b4174ba95aa274b17defed16ca8d3a7f9fdff54b83c0308d6229e10046d869e8294a7f399b75bbbdf24a40c16cb865dee60ddd8a1c8c308ef047533cf6508dbf816d51e33577178654c92977b0184a72bc7fb7599fb1d90d9aa177923aad69a00fcab381501c389c1a12c0b6dcbc8bfdf7089fb853551c04f661d483e1167749d15d272abab104", 0x5d)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
dup2(r1, r0)

[   93.139979] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'.
[   93.162171] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'.
[   93.293091] SELinux: failure in selinux_parse_skb(), unable to parse packet
[   93.300695] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ffffffff8343602e
[   93.300695] 
[   93.311702] CPU: 1 PID: 5945 Comm: syz-executor7 Not tainted 4.4.152-ge5c5f1f #89
[   93.319306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   93.328648]  0000000000000000 44d7338eeb37f5cf ffff8801bcc97580 ffffffff81e15fed
[   93.336668]  ffffffff83a44c60 00000000ffffffff ffff8801d23f92c0 ffff8801bcc978c0
[   93.344673]  0000000000001000 ffff8801bcc97640 ffffffff8140d424 0000000041b58ab3
[   93.352701] Call Trace:
[   93.355264]  [<ffffffff81e15fed>] dump_stack+0xc1/0x124
[   93.360613]  [<ffffffff8140d424>] panic+0x19e/0x38d
[   93.365608]  [<ffffffff8140d286>] ? add_taint.cold.4+0x16/0x16
[   93.371554]  [<ffffffff830cb430>] ? nf_iterate+0x210/0x210
[   93.377167]  [<ffffffff8343602e>] ? ip6_xmit+0x18ae/0x1a00
[   93.382783]  [<ffffffff8343602e>] ? ip6_xmit+0x18ae/0x1a00
[   93.388385]  [<ffffffff81132b72>] __stack_chk_fail+0x22/0x30
[   93.394162]  [<ffffffff8343602e>] ip6_xmit+0x18ae/0x1a00
[   93.399590]  [<ffffffff814fe102>] ? kasan_slab_free+0x72/0xc0
[   93.405448]  [<ffffffff814fb664>] ? kfree+0xf4/0x310
[   93.410530]  [<ffffffff82f4a3e3>] ? pskb_expand_head+0x683/0x970
[   93.416652]  [<ffffffff83434780>] ? ip6_finish_output2+0x1ca0/0x1ca0
[   93.423121]  [<ffffffff8122c752>] ? __lock_is_held+0xa2/0xf0
[   93.428893]  [<ffffffff831f2281>] ? ipv4_dst_check+0x111/0x160
[   93.434844]  [<ffffffff8342fae0>] ? ip6_append_data+0x2b0/0x2b0
[   93.440880]  [<ffffffff834f60c5>] inet6_csk_xmit+0x245/0x490
[   93.446655]  [<ffffffff834f5f7f>] ? inet6_csk_xmit+0xff/0x490
[   93.452513]  [<ffffffff834f5e80>] ? inet6_csk_update_pmtu+0x160/0x160
[   93.459078]  [<ffffffff835647b3>] ? udp6_set_csum+0xd3/0xa70
[   93.464855]  [<ffffffff835a570c>] l2tp_xmit_skb+0xb9c/0xe80
[   93.470559]  [<ffffffff835b1c60>] pppol2tp_sendmsg+0x4e0/0x7d0
[   93.476525]  [<ffffffff81c7633f>] ? selinux_socket_sendmsg+0x3f/0x50
[   93.483009]  [<ffffffff835b1780>] ? pppol2tp_release+0x310/0x310
[   93.489129]  [<ffffffff82f2727c>] sock_sendmsg+0xcc/0x110
[   93.494643]  [<ffffffff82f28a41>] ___sys_sendmsg+0x441/0x880
[   93.500433]  [<ffffffff82f28600>] ? copy_msghdr_from_user+0x550/0x550
[   93.506989]  [<ffffffff8157e568>] ? __fget+0x148/0x3b0
[   93.512250]  [<ffffffff8157e58f>] ? __fget+0x16f/0x3b0
[   93.517511]  [<ffffffff8157e467>] ? __fget+0x47/0x3b0
[   93.522677]  [<ffffffff8157e8af>] ? __fget_light+0x9f/0x1f0
[   93.528361]  [<ffffffff8157ea18>] ? __fdget+0x18/0x20
[   93.533527]  [<ffffffff82f2b02e>] __sys_sendmmsg+0x12e/0x2e0
[   93.539301]  [<ffffffff82f2af00>] ? SyS_sendmsg+0x50/0x50
[   93.544814]  [<ffffffff834e840a>] ? ip6_datagram_connect+0x3a/0x50
[   93.551120]  [<ffffffff8330305e>] ? inet_dgram_connect+0x11e/0x200
[   93.557436]  [<ffffffff81528510>] ? fput+0x20/0x150
[   93.562449]  [<ffffffff82f27c6a>] ? SYSC_connect+0x22a/0x300
[   93.568240]  [<ffffffff82f27a40>] ? SYSC_bind+0x280/0x280
[   93.573775]  [<ffffffff812d51b8>] ? SyS_futex+0x1f8/0x300
[   93.579310]  [<ffffffff812d4fc0>] ? do_futex+0x17f0/0x17f0
[   93.584920]  [<ffffffff82f29c61>] ? SyS_socket+0x121/0x1b0
[   93.590520]  [<ffffffff82f29b40>] ? move_addr_to_kernel+0x50/0x50
[   93.596728]  [<ffffffff82f2b215>] SyS_sendmmsg+0x35/0x60
[   93.602157]  [<ffffffff838cc565>] entry_SYSCALL_64_fastpath+0x22/0x9e
[   93.609112] Dumping ftrace buffer:
[   93.612665]    (ftrace buffer empty)
[   93.616355] Kernel Offset: disabled
[   93.619972] Rebooting in 86400 seconds..