[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   80.450490] audit: type=1800 audit(1549926208.501:25): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   80.470176] audit: type=1800 audit(1549926208.501:26): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   80.489656] audit: type=1800 audit(1549926208.501:27): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts.
2019/02/11 23:03:41 fuzzer started
syzkaller login: [   96.511903] cc1 (10878) used greatest stack depth: 53632 bytes left
2019/02/11 23:03:46 dialing manager at 10.128.0.26:36375
2019/02/11 23:03:47 syscalls: 1
2019/02/11 23:03:47 code coverage: enabled
2019/02/11 23:03:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/02/11 23:03:47 extra coverage: extra coverage is not supported by the kernel
2019/02/11 23:03:47 setuid sandbox: enabled
2019/02/11 23:03:47 namespace sandbox: enabled
2019/02/11 23:03:47 Android sandbox: /sys/fs/selinux/policy does not exist
2019/02/11 23:03:47 fault injection: enabled
2019/02/11 23:03:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/02/11 23:03:47 net packet injection: enabled
2019/02/11 23:03:47 net device setup: enabled
23:04:27 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffff9, 0x1000000000000009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000180)={0xffffffffffffffff})

[  140.187726] IPVS: ftp: loaded support on port[0] = 21
[  140.321210] chnl_net:caif_netlink_parms(): no params data found
[  140.386706] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.393269] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.401454] device bridge_slave_0 entered promiscuous mode
[  140.410492] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.417091] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.425335] device bridge_slave_1 entered promiscuous mode
[  140.455844] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  140.466344] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  140.493868] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  140.502224] team0: Port device team_slave_0 added
[  140.508437] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  140.516807] team0: Port device team_slave_1 added
[  140.522928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  140.531260] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  140.666881] device hsr_slave_0 entered promiscuous mode
[  140.832188] device hsr_slave_1 entered promiscuous mode
[  141.063521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  141.071071] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  141.097783] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.104356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.111414] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.117999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.200306] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  141.206627] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.220736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  141.234131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.244783] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.254763] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.265911] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  141.283163] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  141.289283] 8021q: adding VLAN 0 to HW filter on device team0
[  141.306547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.314921] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.321375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.335744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  141.347763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  141.357824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.366519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.374737] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.381176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.389241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.405274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  141.412325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.426512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  141.434034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.443497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.457920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  141.466330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.474436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.483289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.507298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  141.515027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.524737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.539160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  141.546386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.555173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.568159] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  141.574358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.598685] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  141.616132] 8021q: adding VLAN 0 to HW filter on device batadv0
23:04:29 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffff9, 0x1000000000000009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000180)={0xffffffffffffffff})

23:04:29 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffff9, 0x1000000000000009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000180)={0xffffffffffffffff})

23:04:30 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffff9, 0x1000000000000009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000180)={0xffffffffffffffff})

23:04:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev}, 0x20)

23:04:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev}, 0x20)

23:04:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev}, 0x20)

23:04:30 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev}, 0x20)

23:04:30 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:30 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:30 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:30 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:30 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:31 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:31 executing program 0:
r0 = memfd_create(&(0x7f0000000140)=':posix_acl_accesssystem\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x20)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x5}, 0x285)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x322})

23:04:31 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x2a, 0x1, 0x0, "0f348062d210669ffac1d7300000000062b24d0a0e4065af6600faffffff00", 0x7f775f83})

23:04:31 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x2a, 0x1, 0x0, "0f348062d210669ffac1d7300000000062b24d0a0e4065af6600faffffff00", 0x7f775f83})

23:04:31 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x2a, 0x1, 0x0, "0f348062d210669ffac1d7300000000062b24d0a0e4065af6600faffffff00", 0x7f775f83})

23:04:31 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x2a, 0x1, 0x0, "0f348062d210669ffac1d7300000000062b24d0a0e4065af6600faffffff00", 0x7f775f83})

23:04:31 executing program 0:
unshare(0x2000400)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c0401, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

23:04:31 executing program 0:
unshare(0x2000400)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c0401, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

23:04:31 executing program 0:
unshare(0x2000400)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c0401, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

23:04:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
lseek(r0, 0x135, 0x0)

23:04:31 executing program 0:
unshare(0x2000400)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c0401, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

23:04:32 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000180)={0x100000001, 0x2, 0x28, "6f6be499822fe4e9ba0230f5b5590abc6125f34754e2b66e6f85ec8f4c8d5eed87ed541a41cd2e4d84e6e0d52675e23404d7dfe3c7200c62e1ad78be", 0x6, "7b96eb072f4105a6127b5544ed76d3116734056f8eb2a5c16916f889a34ee88a74119d4021e3b5fabd99dbdbf5dfdaf4271c71d62878813076418ec2", 0x20})
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x1)
r1 = syz_open_dev$midi(0x0, 0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
msync(&(0x7f000012e000/0x4000)=nil, 0x4000, 0x4)
munlock(&(0x7f000079a000/0x1000)=nil, 0x1000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080))
accept4$inet(r1, 0x0, &(0x7f0000000300), 0x800)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_0\x00'}})
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={<r2=>0x0, 0x2}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x5, @rand_addr="686a581c04348ef1f15419b06f7c79c3", 0xfffffffffffff000}}, 0xffffffff, 0x15508378, 0x9, 0x800, 0x4}, 0x98)

[  144.218142] IPVS: ftp: loaded support on port[0] = 21
[  144.468323] chnl_net:caif_netlink_parms(): no params data found
[  144.530434] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.537165] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.545378] device bridge_slave_0 entered promiscuous mode
[  144.572243] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.578728] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.587004] device bridge_slave_1 entered promiscuous mode
[  144.656607] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  144.675775] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  144.712543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  144.720852] team0: Port device team_slave_0 added
[  144.727868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  144.736404] team0: Port device team_slave_1 added
[  144.753532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  144.761945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  144.886620] device hsr_slave_0 entered promiscuous mode
[  144.962700] device hsr_slave_1 entered promiscuous mode
[  145.002976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  145.010528] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  145.059423] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.065998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.073119] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.079614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.215802] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  145.222790] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.243218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  145.256033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.265209] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.292705] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.318825] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  145.357666] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  145.364327] 8021q: adding VLAN 0 to HW filter on device team0
[  145.400796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.410289] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.416865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.485555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.493957] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.500420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.509777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.534271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  145.546044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  145.563844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.572015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.581150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.589792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.598800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.610140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  145.617161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.625748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.654662] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  145.660787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.696884] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  145.715809] 8021q: adding VLAN 0 to HW filter on device batadv0
23:04:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
lseek(r0, 0x135, 0x0)

23:04:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
lseek(r0, 0x135, 0x0)

23:04:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
lseek(r0, 0x135, 0x0)

23:04:34 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000960000"], 0xb)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#! ')
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0)

[  146.378719] ==================================================================
[  146.386140] BUG: KMSAN: uninit-value in tipc_conn_rcv_sub+0x187/0x9d0
[  146.392730] CPU: 1 PID: 840 Comm: kworker/u4:13 Not tainted 5.0.0-rc1+ #9
[  146.399654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  146.409015] Workqueue: tipc_rcv tipc_conn_recv_work
[  146.414037] Call Trace:
[  146.416638]  dump_stack+0x173/0x1d0
[  146.420279]  kmsan_report+0x12e/0x2a0
[  146.424094]  __msan_warning+0x82/0xf0
[  146.427902]  tipc_conn_rcv_sub+0x187/0x9d0
[  146.432159]  tipc_conn_recv_work+0x3dc/0x5e0
[  146.436586]  ? secondary_startup_64+0x66/0xb0
[  146.441086]  ? tipc_conn_send_work+0x11a0/0x11a0
[  146.445843]  ? tipc_conn_send_work+0x11a0/0x11a0
[  146.450608]  process_one_work+0x1607/0x1f80
[  146.454959]  worker_thread+0x111c/0x2460
[  146.459056]  kthread+0x4a1/0x4e0
[  146.462433]  ? process_one_work+0x1f80/0x1f80
[  146.466954]  ? schedule_tail+0x1b2/0x410
[  146.471027]  ? kthread_blkcg+0xf0/0xf0
[  146.474929]  ret_from_fork+0x35/0x40
[  146.478652] 
[  146.480280] Local variable description: ----s.i@tipc_conn_recv_work
[  146.486675] Variable was created at:
[  146.490390]  tipc_conn_recv_work+0x68/0x5e0
[  146.494718]  process_one_work+0x1607/0x1f80
[  146.499032] ==================================================================
[  146.506389] Disabling lock debugging due to kernel taint
[  146.511831] Kernel panic - not syncing: panic_on_warn set ...
[  146.517718] CPU: 1 PID: 840 Comm: kworker/u4:13 Tainted: G    B             5.0.0-rc1+ #9
[  146.526028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  146.535393] Workqueue: tipc_rcv tipc_conn_recv_work
[  146.540406] Call Trace:
[  146.543003]  dump_stack+0x173/0x1d0
[  146.546641]  panic+0x3d1/0xb01
[  146.549862]  kmsan_report+0x293/0x2a0
[  146.553680]  __msan_warning+0x82/0xf0
[  146.557492]  tipc_conn_rcv_sub+0x187/0x9d0
[  146.561751]  tipc_conn_recv_work+0x3dc/0x5e0
[  146.566184]  ? secondary_startup_64+0x66/0xb0
[  146.570681]  ? tipc_conn_send_work+0x11a0/0x11a0
[  146.575439]  ? tipc_conn_send_work+0x11a0/0x11a0
[  146.580224]  process_one_work+0x1607/0x1f80
[  146.584575]  worker_thread+0x111c/0x2460
[  146.588664]  kthread+0x4a1/0x4e0
[  146.592032]  ? process_one_work+0x1f80/0x1f80
[  146.596616]  ? schedule_tail+0x1b2/0x410
[  146.600687]  ? kthread_blkcg+0xf0/0xf0
[  146.604587]  ret_from_fork+0x35/0x40
[  146.609538] Kernel Offset: disabled
[  146.613163] Rebooting in 86400 seconds..