[?25l[?1c7[ ok 8[?25h[?0c.
[   38.333881] audit: type=1800 audit(1556651418.185:33): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[   38.356313] audit: type=1800 audit(1556651418.185:34): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   41.539059] random: sshd: uninitialized urandom read (32 bytes read)
[   41.948889] audit: type=1400 audit(1556651421.795:35): avc:  denied  { map } for  pid=7134 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   41.994906] random: sshd: uninitialized urandom read (32 bytes read)
[   42.687929] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts.
[   48.281394] random: sshd: uninitialized urandom read (32 bytes read)
2019/04/30 19:10:28 fuzzer started
[   48.479285] audit: type=1400 audit(1556651428.325:36): avc:  denied  { map } for  pid=7143 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   50.448825] random: cc1: uninitialized urandom read (8 bytes read)
2019/04/30 19:10:31 dialing manager at 10.128.0.105:41179
2019/04/30 19:10:31 syscalls: 2434
2019/04/30 19:10:31 code coverage: enabled
2019/04/30 19:10:31 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/04/30 19:10:31 extra coverage: extra coverage is not supported by the kernel
2019/04/30 19:10:31 setuid sandbox: enabled
2019/04/30 19:10:31 namespace sandbox: enabled
2019/04/30 19:10:31 Android sandbox: /sys/fs/selinux/policy does not exist
2019/04/30 19:10:31 fault injection: enabled
2019/04/30 19:10:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/04/30 19:10:31 net packet injection: enabled
2019/04/30 19:10:31 net device setup: enabled
[   52.903134] random: crng init done
19:12:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/92)

19:12:43 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000040), 0xfffffe1d, 0x0, 0x0, 0xf1)
recvfrom(r2, &(0x7f0000000900)=""/4096, 0xfee0, 0x0, 0x0, 0xbf)

19:12:43 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_execute_func(&(0x7f0000000280)="44d9ee4a2ae92c86b64c0f05be03100020c4a37bf0c50341e2e941d82a4a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fdee51bc421045f450f2f02c421dd589fc4e10bf8c426f2f045f6196462bfffffffff0252262e2e66450f7d64c608c4a3bd4877f88a0383397fd3ff3a0065f20f7cd8efa1a12ad764d3cf53af6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000f2d8f0b000000c2a0c10b00cca27a0e0f414e53d2c40f0f9f8a6465b2aa66450fc4650000c4e39978c104c441c05983f9070bb3ddcdcda2660f38346800c4e3295e4c3dc8a3c4c1045ccc7d7526802d08000000fa0f5fd2660f6d829a000000c401f82b90b6d50000f30f5ea5a9a50000ffffbedc4e61c9553131b83a00a2f1fbfb3b62")

19:12:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0x5b8b0a79)

19:12:43 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x3c}, 0x0, @in6}}, 0xe8)
close(r0)

19:12:43 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0xffffffff00000000, 0x100010)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000980)={0x0, 0x2, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x80)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f0000000300)={0x38}, 0x8, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

[  184.085797] audit: type=1400 audit(1556651563.935:37): avc:  denied  { map } for  pid=7143 comm="syz-fuzzer" path="/root/syzkaller-shm596031419" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[  184.151326] audit: type=1400 audit(1556651563.965:38): avc:  denied  { map } for  pid=7161 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  184.285201] IPVS: ftp: loaded support on port[0] = 21
[  184.597549] chnl_net:caif_netlink_parms(): no params data found
[  184.604993] IPVS: ftp: loaded support on port[0] = 21
[  184.663037] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.669465] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.676886] device bridge_slave_0 entered promiscuous mode
[  184.685941] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.692364] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.699284] device bridge_slave_1 entered promiscuous mode
[  184.723445] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  184.732558] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  184.752569] IPVS: ftp: loaded support on port[0] = 21
[  184.761690] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  184.769096] team0: Port device team_slave_0 added
[  184.776335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  184.783618] team0: Port device team_slave_1 added
[  184.799538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  184.809427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  184.922284] device hsr_slave_0 entered promiscuous mode
[  184.960752] device hsr_slave_1 entered promiscuous mode
[  185.029086] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  185.039755] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  185.055074] chnl_net:caif_netlink_parms(): no params data found
[  185.083879] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.090395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.097496] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.103941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.112847] IPVS: ftp: loaded support on port[0] = 21
[  185.147449] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.154586] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.161594] device bridge_slave_0 entered promiscuous mode
[  185.175165] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.181649] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.188477] device bridge_slave_1 entered promiscuous mode
[  185.228617] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  185.259526] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  185.281019] IPVS: ftp: loaded support on port[0] = 21
[  185.317862] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  185.325186] team0: Port device team_slave_0 added
[  185.339094] chnl_net:caif_netlink_parms(): no params data found
[  185.349318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  185.356478] team0: Port device team_slave_1 added
[  185.367316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  185.401826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  185.442073] device hsr_slave_0 entered promiscuous mode
[  185.480393] device hsr_slave_1 entered promiscuous mode
[  185.525948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  185.536040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  185.579804] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  185.587486] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.621548] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.638865] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.646012] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  185.672102] IPVS: ftp: loaded support on port[0] = 21
[  185.687921] chnl_net:caif_netlink_parms(): no params data found
[  185.714336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  185.729597] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.736038] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.743334] device bridge_slave_0 entered promiscuous mode
[  185.759268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  185.770792] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.777173] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.785224] device bridge_slave_1 entered promiscuous mode
[  185.798854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  185.825529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  185.832493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  185.842697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  185.849300] 8021q: adding VLAN 0 to HW filter on device team0
[  185.885740] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  185.923375] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  185.932530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  185.949627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  185.958950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  185.966623] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.973006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.991247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  185.999120] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.006446] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.013725] device bridge_slave_0 entered promiscuous mode
[  186.023131] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.029476] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.036761] device bridge_slave_1 entered promiscuous mode
[  186.052704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  186.060508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  186.067999] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.074399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.084446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  186.093831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  186.100785] chnl_net:caif_netlink_parms(): no params data found
[  186.123380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  186.131625] team0: Port device team_slave_0 added
[  186.137182] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  186.144517] team0: Port device team_slave_1 added
[  186.150657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  186.158231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  186.180559] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  186.188644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  186.199899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  186.209813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  186.219502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  186.227315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  186.237968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  186.246576] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  186.270947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  186.281675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  186.289216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  186.320900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  186.327993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  186.335711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  186.362832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  186.372364] team0: Port device team_slave_0 added
[  186.434076] device hsr_slave_0 entered promiscuous mode
[  186.470438] device hsr_slave_1 entered promiscuous mode
[  186.510652] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.517026] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.524962] device bridge_slave_0 entered promiscuous mode
[  186.531570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  186.538791] team0: Port device team_slave_1 added
[  186.559459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  186.568859] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  186.576364] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  186.583943] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.591187] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.598026] device bridge_slave_1 entered promiscuous mode
[  186.604549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  186.612853] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  186.632821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  186.640670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  186.651138] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  186.657158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  186.688659] chnl_net:caif_netlink_parms(): no params data found
[  186.721368] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.742202] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  186.794141] device hsr_slave_0 entered promiscuous mode
[  186.840338] device hsr_slave_1 entered promiscuous mode
[  186.894249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  186.902869] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  186.915369] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  186.924813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  186.933522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  186.941043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  186.957179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  186.978064] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  186.985755] team0: Port device team_slave_0 added
[  187.009863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  187.016783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  187.026695] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  187.033188] 8021q: adding VLAN 0 to HW filter on device team0
[  187.041164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  187.048368] team0: Port device team_slave_1 added
[  187.057826] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  187.064950] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.074774] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.081643] device bridge_slave_0 entered promiscuous mode
[  187.088477] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.095543] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.102840] device bridge_slave_1 entered promiscuous mode
[  187.111195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.131470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  187.138917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  187.147581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  187.160930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  187.168633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  187.176395] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.182772] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.197494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.206464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  187.214125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.222071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.230099] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.236475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.257613] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  187.269125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  187.324366] device hsr_slave_0 entered promiscuous mode
[  187.390428] device hsr_slave_1 entered promiscuous mode
[  187.455924] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  187.464033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.477540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  187.493411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  187.515006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.528823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  187.536810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  187.548957] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  187.556263] team0: Port device team_slave_0 added
[  187.562734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  187.575934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  187.583739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  187.594652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  187.608136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  187.616065] team0: Port device team_slave_1 added
[  187.621802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  187.629483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
19:12:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/92)

[  187.667855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  187.675941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  187.685061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  187.695256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  187.703853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  187.725374] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.736752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  187.746051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  187.797779] device hsr_slave_0 entered promiscuous mode
19:12:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/92)

[  187.860389] device hsr_slave_1 entered promiscuous mode
[  187.900930] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  187.907636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  187.921358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  187.940453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  187.946572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  187.956500] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.979992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
19:12:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
statfs(&(0x7f00000000c0)='./file0\x00', 0x0)
statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/92)

[  187.995344] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  188.018712] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  188.027193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  188.039766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  188.055245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.062990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.078619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.089883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
19:12:47 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x49249249249236d, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}, {&(0x7f0000000280)=""/24, 0x20000298}], 0x2}}], 0x1, 0x0, 0x0)

[  188.099783] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  188.106634] 8021q: adding VLAN 0 to HW filter on device team0
[  188.139819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  188.148450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.156189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.171016] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  188.177118] 8021q: adding VLAN 0 to HW filter on device team0
[  188.199809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  188.219082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  188.227557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.238428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.246321] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.252743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.260570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.268372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.277489] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.283880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.291678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.298707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
19:12:48 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000658000/0x3000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xa7f, 0x4263c0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000400))
socket(0x1e, 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0)
getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)

[  188.315689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  188.335274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  188.345073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.360871] hrtimer: interrupt took 43422 ns
[  188.362983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.379491] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.385919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.401532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.409991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.426654] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.433053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.448733] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.458321] audit: type=1400 audit(1556651568.295:39): avc:  denied  { create } for  pid=7233 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  188.488641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  188.491265] audit: type=1400 audit(1556651568.325:40): avc:  denied  { write } for  pid=7233 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  188.506547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  188.527256] audit: type=1400 audit(1556651568.325:41): avc:  denied  { read } for  pid=7233 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  188.541059] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  188.574460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  188.586439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.605684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.628726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.656786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
19:12:48 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000658000/0x3000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xa7f, 0x4263c0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000400))
socket(0x1e, 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0)
getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)

[  188.676537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  188.686992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  188.697878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.706101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.719454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.735130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.746813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.757295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.774197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  188.786904] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  188.798291] 8021q: adding VLAN 0 to HW filter on device team0
[  188.809810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  188.823775] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.835141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.843516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.856491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.865035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.880337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  188.889795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  188.904715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  188.916765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  188.928826] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  188.938242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.948461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.959812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.972733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.983150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.993159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.003875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.014108] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.020553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.033212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.043823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.056367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  189.065516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.077740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  189.093017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  189.105061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  189.116589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.126785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.137185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.149793] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.156224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.173242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.189164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.202749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.209803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.225710] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  189.239759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  189.255022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  189.264856] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  189.277233] 8021q: adding VLAN 0 to HW filter on device team0
[  189.284656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.298253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.306137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.323752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.337745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  189.347429] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  189.364413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.384148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  189.401941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.417108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.427862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.440765] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.447173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.463369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
19:12:49 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000040), 0xfffffe1d, 0x0, 0x0, 0xf1)
recvfrom(r2, &(0x7f0000000900)=""/4096, 0xfee0, 0x0, 0x0, 0xbf)

[  189.492404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  189.511978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.519180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
19:12:49 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000658000/0x3000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xa7f, 0x4263c0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000400))
socket(0x1e, 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0)
getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)

[  189.554109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.579621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.587660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.601227] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.607619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.621909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.631361] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  189.642158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  189.661437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  189.687440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.704407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.723734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.745072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.758501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  189.767631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.782631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.800825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  189.819046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  189.843402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.859852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.888154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.902310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  189.944768] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  189.957332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.981078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.997378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.019530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  190.045393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.066835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.079629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.102088] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  190.114550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  190.134945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.147241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.172921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  190.182836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.201930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.212145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.243453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  190.263882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.278274] ==================================================================
[  190.285754] BUG: KASAN: use-after-free in refcount_inc_not_zero+0xd3/0xe0
[  190.292681] Read of size 4 at addr ffff888099a56900 by task kworker/u4:2/29
[  190.299813] 
[  190.300301] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  190.301444] CPU: 1 PID: 29 Comm: kworker/u4:2 Not tainted 4.14.114 #4
[  190.301453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  190.301468] Workqueue: tipc_rcv tipc_recv_work
[  190.313301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.314185] Call Trace:
[  190.314204]  dump_stack+0x138/0x19c
[  190.314219]  ? refcount_inc_not_zero+0xd3/0xe0
[  190.328166]  print_address_description.cold+0x7c/0x1dc
[  190.328179]  ? refcount_inc_not_zero+0xd3/0xe0
[  190.328189]  kasan_report.cold+0xaf/0x2b5
[  190.345036]  __asan_report_load4_noabort+0x14/0x20
[  190.345046]  refcount_inc_not_zero+0xd3/0xe0
[  190.345053]  refcount_inc+0x16/0x40
[  190.345074]  tipc_subscrb_rcv_cb+0x61d/0xa80
[  190.345085]  tipc_receive_from_sock+0x28a/0x4e0
[  190.345109]  ? trace_hardirqs_on+0x10/0x10
[  190.345116]  ? tipc_send_work+0x5a0/0x5a0
[  190.345139]  ? process_one_work+0x787/0x1610
[  190.355164]  ? __lock_is_held+0xb6/0x140
[  190.355174]  ? check_preemption_disabled+0x3c/0x250
[  190.355187]  tipc_recv_work+0x8b/0xf0
[  190.381325]  process_one_work+0x868/0x1610
[  190.389690]  ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[  190.415834]  worker_thread+0x5d9/0x1050
[  190.419822]  kthread+0x31c/0x430
[  190.423181]  ? process_one_work+0x1610/0x1610
[  190.427664]  ? kthread_create_on_node+0xd0/0xd0
[  190.432386]  ret_from_fork+0x3a/0x50
[  190.436094] 
[  190.437707] Allocated by task 2238:
[  190.441325]  save_stack_trace+0x16/0x20
[  190.445297]  save_stack+0x45/0xd0
[  190.448737]  kasan_kmalloc+0xce/0xf0
[  190.452443]  kmem_cache_alloc_trace+0x152/0x790
[  190.457111]  tipc_subscrb_connect_cb+0x46/0x160
[  190.461770]  tipc_accept_from_sock+0x280/0x470
[  190.466362]  tipc_recv_work+0x8b/0xf0
[  190.470157]  process_one_work+0x868/0x1610
[  190.474384]  worker_thread+0x5d9/0x1050
[  190.478354]  kthread+0x31c/0x430
[  190.481708]  ret_from_fork+0x3a/0x50
[  190.485407] 
[  190.487023] Freed by task 2238:
[  190.490293]  save_stack_trace+0x16/0x20
[  190.494258]  save_stack+0x45/0xd0
[  190.497700]  kasan_slab_free+0x75/0xc0
[  190.501582]  kfree+0xcc/0x270
[  190.504687]  tipc_subscrb_put+0x27/0x30
[  190.508665]  tipc_subscrb_release_cb+0x20/0x30
[  190.513259]  tipc_close_conn+0x179/0x210
[  190.517311]  tipc_send_work+0x470/0x5a0
[  190.521274]  process_one_work+0x868/0x1610
[  190.525498]  worker_thread+0x5d9/0x1050
[  190.529462]  kthread+0x31c/0x430
[  190.532819]  ret_from_fork+0x3a/0x50
[  190.536517] 
[  190.538136] The buggy address belongs to the object at ffff888099a56900
[  190.538136]  which belongs to the cache kmalloc-96 of size 96
[  190.550621] The buggy address is located 0 bytes inside of
[  190.550621]  96-byte region [ffff888099a56900, ffff888099a56960)
[  190.562252] The buggy address belongs to the page:
[  190.567183] page:ffffea0002669580 count:1 mapcount:0 mapping:ffff888099a56000 index:0x0
[  190.575335] flags: 0x1fffc0000000100(slab)
[  190.579562] raw: 01fffc0000000100 ffff888099a56000 0000000000000000 0000000100000020
[  190.587460] raw: ffffea0002a027a0 ffffea00025d9ba0 ffff8880aa8004c0 0000000000000000
[  190.595328] page dumped because: kasan: bad access detected
[  190.601023] 
[  190.602638] Memory state around the buggy address:
[  190.607556]  ffff888099a56800: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[  190.614904]  ffff888099a56880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  190.622260] >ffff888099a56900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  190.629695]                    ^
[  190.633069]  ffff888099a56980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  190.640420]  ffff888099a56a00: 00 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc
[  190.647767] ==================================================================
[  190.655117] Disabling lock debugging due to kernel taint
[  190.660644] Kernel panic - not syncing: panic_on_warn set ...
[  190.660644] 
[  190.668008] CPU: 1 PID: 29 Comm: kworker/u4:2 Tainted: G    B           4.14.114 #4
[  190.675795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  190.685148] Workqueue: tipc_rcv tipc_recv_work
[  190.689716] Call Trace:
[  190.692301]  dump_stack+0x138/0x19c
[  190.695927]  ? refcount_inc_not_zero+0xd3/0xe0
[  190.700497]  panic+0x1f2/0x438
[  190.703676]  ? add_taint.cold+0x16/0x16
[  190.707643]  kasan_end_report+0x47/0x4f
[  190.711609]  kasan_report.cold+0x136/0x2b5
[  190.715832]  __asan_report_load4_noabort+0x14/0x20
[  190.720769]  refcount_inc_not_zero+0xd3/0xe0
[  190.725164]  refcount_inc+0x16/0x40
[  190.728779]  tipc_subscrb_rcv_cb+0x61d/0xa80
[  190.733184]  tipc_receive_from_sock+0x28a/0x4e0
[  190.737843]  ? trace_hardirqs_on+0x10/0x10
[  190.742085]  ? tipc_send_work+0x5a0/0x5a0
[  190.746224]  ? process_one_work+0x787/0x1610
[  190.750625]  ? __lock_is_held+0xb6/0x140
[  190.754675]  ? check_preemption_disabled+0x3c/0x250
[  190.759678]  tipc_recv_work+0x8b/0xf0
[  190.763471]  process_one_work+0x868/0x1610
[  190.767720]  ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[  190.772398]  worker_thread+0x5d9/0x1050
[  190.776377]  kthread+0x31c/0x430
[  190.779731]  ? process_one_work+0x1610/0x1610
[  190.784211]  ? kthread_create_on_node+0xd0/0xd0
[  190.788868]  ret_from_fork+0x3a/0x50
[  190.793508] Kernel Offset: disabled
[  190.797221] Rebooting in 86400 seconds..