[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   51.970634] kauditd_printk_skb: 4 callbacks suppressed
[   51.970664] audit: type=1800 audit(1545314884.026:29): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   51.995560] audit: type=1800 audit(1545314884.036:30): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts.
2018/12/20 14:08:17 fuzzer started
2018/12/20 14:08:22 dialing manager at 10.128.0.26:46613
2018/12/20 14:08:22 syscalls: 1
2018/12/20 14:08:22 code coverage: enabled
2018/12/20 14:08:22 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/20 14:08:22 setuid sandbox: enabled
2018/12/20 14:08:22 namespace sandbox: enabled
2018/12/20 14:08:22 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/20 14:08:22 fault injection: enabled
2018/12/20 14:08:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/20 14:08:22 net packet injection: enabled
2018/12/20 14:08:22 net device setup: enabled
14:08:41 executing program 0:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

syzkaller login: [   89.870192] IPVS: ftp: loaded support on port[0] = 21
[   91.200485] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.207176] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.215635] device bridge_slave_0 entered promiscuous mode
[   91.294690] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.301191] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.309374] device bridge_slave_1 entered promiscuous mode
[   91.389593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   91.468706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   91.722501] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   91.806900] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   91.888896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   91.895903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.978289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   91.985331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.240824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   92.249449] team0: Port device team_slave_0 added
[   92.330468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   92.339173] team0: Port device team_slave_1 added
[   92.419758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.506873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.589673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   92.597261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.606396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.705400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   92.713137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.722418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
14:08:45 executing program 1:
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)

[   93.725518] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.732144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.739308] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.745921] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.755186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   93.780510] IPVS: ftp: loaded support on port[0] = 21
[   93.863937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   96.066065] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.072660] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.080871] device bridge_slave_0 entered promiscuous mode
[   96.248262] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.254836] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.263204] device bridge_slave_1 entered promiscuous mode
[   96.425220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   96.570329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   96.992529] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   97.108933] bond0: Enslaving bond_slave_1 as an active interface with an up link
14:08:49 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

[   97.786260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   97.794926] team0: Port device team_slave_0 added
[   97.993079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   98.002456] team0: Port device team_slave_1 added
[   98.141107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.226975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.291278] IPVS: ftp: loaded support on port[0] = 21
[   98.408776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   98.416416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.425838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.618582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   98.626273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.635292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.342536] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.947805] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  100.392567] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.399115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.406282] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.412931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.421945] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  100.572310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  100.578700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.586828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.867940] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.874630] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.883930] device bridge_slave_0 entered promiscuous mode
[  101.002126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.039568] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.046701] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.054976] device bridge_slave_1 entered promiscuous mode
[  101.179841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  101.233622] 8021q: adding VLAN 0 to HW filter on device team0
[  101.359866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  101.816233] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  102.043413] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  102.203725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  102.210758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.372453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  102.379474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.894977] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  102.903599] team0: Port device team_slave_0 added
[  103.053892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  103.062508] team0: Port device team_slave_1 added
[  103.246543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  103.253638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.262675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.440556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  103.447748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.456738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.649106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  103.656855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.666010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.784471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  103.792197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.801151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
14:08:57 executing program 0:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

14:08:57 executing program 0:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

14:08:57 executing program 0:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

14:08:57 executing program 3:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

[  105.738856] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.745473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.752612] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.759166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.768120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  105.774663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
14:08:57 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

14:08:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

[  106.326449] IPVS: ftp: loaded support on port[0] = 21
14:08:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

14:08:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

[  107.008249] 8021q: adding VLAN 0 to HW filter on device bond0
14:08:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

14:08:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

[  107.730162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  108.331179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  108.337571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.345521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.023785] 8021q: adding VLAN 0 to HW filter on device team0
[  109.260136] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.266741] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.274851] device bridge_slave_0 entered promiscuous mode
[  109.461803] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.468355] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.476587] device bridge_slave_1 entered promiscuous mode
[  109.698359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  109.927686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  110.412572] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  110.537909] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  110.641685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  110.648655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.781807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  110.788788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.276506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  111.285264] team0: Port device team_slave_0 added
[  111.415041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  111.423626] team0: Port device team_slave_1 added
[  111.545358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  111.552971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.562220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.664742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  111.671939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.680841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.855118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  111.862821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.872114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.970587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  111.978342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.987526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.994004] 8021q: adding VLAN 0 to HW filter on device bond0
14:09:05 executing program 1:
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)

[  113.589323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  113.838433] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.845066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.852256] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.858789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.868246] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  113.874848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  114.080968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.087623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.095645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.654117] 8021q: adding VLAN 0 to HW filter on device team0
14:09:09 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:09 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

14:09:09 executing program 1:
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)

14:09:09 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

[  118.335209] IPVS: ftp: loaded support on port[0] = 21
[  119.054693] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.414784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  119.704583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  119.710839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.718673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.991386] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.998052] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.006318] device bridge_slave_0 entered promiscuous mode
[  120.023031] 8021q: adding VLAN 0 to HW filter on device team0
[  120.082788] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.089341] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.097103] device bridge_slave_1 entered promiscuous mode
[  120.173323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  120.247396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  120.482369] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  120.570486] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  120.655052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  120.662204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  120.744392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  120.751371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.987979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  120.996762] team0: Port device team_slave_0 added
[  121.072452] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  121.080489] team0: Port device team_slave_1 added
[  121.158827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.244614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.331110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  121.340741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.350420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.430620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  121.438385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.447668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
14:09:14 executing program 3:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

14:09:14 executing program 1:
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)

14:09:14 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:14 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:14 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

14:09:14 executing program 3:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000000000001, 0x2)

14:09:14 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:14 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

14:09:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

[  122.785397] IPVS: ftp: loaded support on port[0] = 21
[  122.902528] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.909094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.916311] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.922917] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.931960] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  122.938431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  124.095304] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.101897] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.109895] device bridge_slave_0 entered promiscuous mode
[  124.188362] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.194948] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.202643] device bridge_slave_1 entered promiscuous mode
[  124.276192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  124.358869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  124.597901] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  124.678434] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  125.063653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  125.072361] team0: Port device team_slave_0 added
[  125.144418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  125.152964] team0: Port device team_slave_1 added
[  125.227624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  125.235539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  125.244612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  125.327282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  125.409259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  125.417133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.426278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.498078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.506495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.515700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.266622] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.369680] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.376312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.383519] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.390113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.400652] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  126.564888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  126.856745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  126.863062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.870945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.971799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.167459] 8021q: adding VLAN 0 to HW filter on device team0
14:09:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

14:09:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0)

14:09:21 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14})
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0)

14:09:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

14:09:21 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

[  129.810294] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.979857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  130.150088] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  130.156427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.164309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.337065] 8021q: adding VLAN 0 to HW filter on device team0
14:09:23 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

14:09:23 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0)

14:09:23 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240), 0xc, 0x0}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

14:09:23 executing program 1:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

14:09:23 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}])

[  131.418790] binder_alloc: 8161: binder_alloc_buf failed to map page at 20001000 in userspace
[  131.427614] binder: 8161:8163 transaction failed 29201/-12, size 0-0 line 2973
[  131.437387] binder_alloc: binder_alloc_mmap_handler: 8161 20001000-20004000 already mapped failed -16
[  131.447840] binder: BINDER_SET_CONTEXT_MGR already set
[  131.453269] binder: 8161:8163 ioctl 40046207 0 returned -16
[  131.453279] binder: undelivered TRANSACTION_ERROR: 29201
[  131.556861] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
[  131.591651] binder_alloc: 8177: binder_alloc_buf failed to map page at 20001000 in userspace
14:09:23 executing program 1:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

[  131.600428] binder: 8177:8178 transaction failed 29201/-12, size 0-0 line 2973
[  131.607933] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
14:09:23 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0)

14:09:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7)

[  131.691787] binder: undelivered TRANSACTION_ERROR: 29201
14:09:23 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240), 0xc, 0x0}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

[  131.748880] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
14:09:23 executing program 4:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

14:09:23 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:23 executing program 1:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

14:09:24 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  132.003062] binder_alloc: 8198: binder_alloc_buf failed to map page at 20001000 in userspace
[  132.011903] binder: 8198:8202 transaction failed 29201/-12, size 0-0 line 2973
[  132.012671] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
14:09:24 executing program 4:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

14:09:24 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0)

[  132.067255] binder: undelivered TRANSACTION_ERROR: 29201
14:09:24 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240), 0xc, 0x0}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

[  132.181202] binder: BINDER_SET_CONTEXT_MGR already set
[  132.186741] binder: 8211:8215 ioctl 40046207 0 returned -16
14:09:24 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:24 executing program 1:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

[  132.264932] binder: 8211:8215 transaction failed 29189/-22, size 0-0 line 2834
[  132.284828] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
[  132.310817] binder: undelivered TRANSACTION_ERROR: 29189
14:09:24 executing program 4:
sysfs$1(0x1, &(0x7f0000000180)='\x00')
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000006c0)={r0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x0, 0x0, 0x0, 0xd0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x100]}, &(0x7f00000007c0)=0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x0, &(0x7f00000004c0)=[{}]})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x806)
setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x3}, 0xfff}})

14:09:24 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240), 0xc, 0x0}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

14:09:24 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  132.413571] binder_alloc: 8227: binder_alloc_buf failed to map page at 20001000 in userspace
[  132.422444] binder: 8227:8231 transaction failed 29201/-12, size 0-0 line 2973
[  132.437684] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
[  132.465797] binder: undelivered TRANSACTION_ERROR: 29201
14:09:24 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  132.561699] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma?
14:09:24 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:24 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="b801008ed0f33ec0c5000f45bc0088f3a566b9380900000f32baf80c66b80cea2c8d66efbafc0cec0f090f287f03f30f1ba20600bad004b8bee2ef", 0x3b}], 0x1, 0x5c, 0x0, 0xffffffffffffff84)
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  132.683845] binder_alloc: 8241: binder_alloc_buf failed to map page at 20001000 in userspace
[  132.692817] binder: 8241:8243 transaction failed 29201/-12, size 0-0 line 2973
14:09:24 executing program 4:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[  132.727681] binder: BINDER_SET_CONTEXT_MGR already set
[  132.733238] binder: 8244:8245 ioctl 40046207 0 returned -16
[  132.766262] binder: undelivered TRANSACTION_ERROR: 29201
14:09:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x8)

[  132.781088] binder_alloc: 8241: binder_alloc_buf failed to map pages in userspace, no vma
[  132.789624] binder: 8244:8245 transaction failed 29189/-3, size 0-0 line 2973
[  132.829738] binder: BINDER_SET_CONTEXT_MGR already set
[  132.835299] binder: 8250:8251 ioctl 40046207 0 returned -16
[  132.863088] binder_alloc: 8241: binder_alloc_buf failed to map pages in userspace, no vma
[  132.871750] binder: 8250:8251 transaction failed 29189/-3, size 0-0 line 2973
14:09:25 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  132.884544] binder: undelivered TRANSACTION_ERROR: 29189
[  132.903248] binder: undelivered TRANSACTION_ERROR: 29189
[  132.904149] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
14:09:25 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:25 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x8)

[  133.123654] binder_alloc: 8269: binder_alloc_buf failed to map page at 20001000 in userspace
[  133.132719] binder: 8269:8270 transaction failed 29201/-12, size 0-0 line 2973
14:09:25 executing program 4:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[  133.173148] binder: BINDER_SET_CONTEXT_MGR already set
[  133.178596] binder: 8271:8272 ioctl 40046207 0 returned -16
[  133.202490] binder: BINDER_SET_CONTEXT_MGR already set
[  133.207896] binder: 8273:8274 ioctl 40046207 0 returned -16
[  133.225546] binder_alloc: 8269: binder_alloc_buf failed to map page at 20001000 in userspace
[  133.234385] binder: 8271:8280 transaction failed 29201/-12, size 0-0 line 2973
[  133.247063] binder_alloc: 8269: binder_alloc_buf failed to map page at 20001000 in userspace
[  133.256745] binder: undelivered TRANSACTION_ERROR: 29201
[  133.276436] binder: undelivered TRANSACTION_ERROR: 29201
14:09:25 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:25 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0xa000)=nil, 0xa000, 0xb)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14:09:25 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="b801008ed0f33ec0c5000f45bc0088f3a566b9380900000f32baf80c66b80cea2c8d66efbafc0cec0f090f287f03f30f1ba20600bad004b8bee2ef", 0x3b}], 0x1, 0x5c, 0x0, 0xffffffffffffff84)
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14:09:25 executing program 2:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

14:09:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x8)

14:09:25 executing program 4:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[  133.539622] binder_alloc: 8291: binder_alloc_buf failed to map page at 20001000 in userspace
14:09:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x8)

[  133.621737] binder_alloc: 8291: binder_alloc_buf failed to map pages in userspace, no vma
14:09:25 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

14:09:25 executing program 0:
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = syz_open_pts(0xffffffffffffff9c, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000010})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000100)=0xc)
sched_getaffinity(r3, 0x8, &(0x7f0000000140))
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x100)
ftruncate(r6, 0x10099b7)
sendfile(r5, r6, 0x0, 0x8000fffffffd)
connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

14:09:25 executing program 2:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

14:09:25 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180), 0x8)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001480)=""/4096, &(0x7f0000000000)=0x1000)

14:09:26 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="b801008ed0f33ec0c5000f45bc0088f3a566b9380900000f32baf80c66b80cea2c8d66efbafc0cec0f090f287f03f30f1ba20600bad004b8bee2ef", 0x3b}], 0x1, 0x5c, 0x0, 0xffffffffffffff84)
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14:09:26 executing program 4:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[  134.015377] ==================================================================
[  134.022828] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0
[  134.029441] CPU: 1 PID: 8325 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #8
[  134.036561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  134.045938] Call Trace:
[  134.048560]  dump_stack+0x173/0x1d0
[  134.052239]  kmsan_report+0x120/0x290
[  134.056094]  kmsan_internal_check_memory+0x9a7/0xa20
[  134.061242]  ? __local_bh_enable_ip+0xb3/0x1a0
14:09:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  134.065902]  __msan_instrument_asm_load+0x8a/0x90
[  134.070812]  __siphash_aligned+0x512/0xae0
[  134.075130]  secure_tcpv6_seq+0x143/0x2b0
[  134.079329]  ? inet6_hash_connect+0x176/0x1a0
[  134.083900]  tcp_v6_connect+0x242b/0x2890
[  134.088122]  ? __msan_poison_alloca+0x1e0/0x270
[  134.092856]  ? tcp_v6_pre_connect+0x130/0x130
[  134.097403]  __inet_stream_connect+0x2f9/0x1340
[  134.102107]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  134.106988]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  134.111715]  tcp_sendmsg_locked+0x65d5/0x6be0
[  134.116251]  ? aa_label_sk_perm+0xda/0x940
[  134.120538]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  134.125965]  ? aa_label_sk_perm+0x6d6/0x940
[  134.130350]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  134.135741]  ? futex_wait+0x912/0xc40
[  134.139648]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  134.145070]  tcp_sendmsg+0xb2/0x100
[  134.148736]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  134.153456]  inet_sendmsg+0x54a/0x720
[  134.157331]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
14:09:26 executing program 2:
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[  134.162722]  ? security_socket_sendmsg+0x1bd/0x200
[  134.167697]  ? inet_getname+0x490/0x490
[  134.171724]  __sys_sendto+0x8c4/0xac0
[  134.175603]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  134.181639]  ? prepare_exit_to_usermode+0x114/0x420
[  134.186692]  ? syscall_return_slowpath+0x50/0x650
[  134.191577]  __se_sys_sendto+0x107/0x130
[  134.195692]  __x64_sys_sendto+0x6e/0x90
[  134.199700]  do_syscall_64+0xbc/0xf0
[  134.203471]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  134.208697] RIP: 0033:0x457669
[  134.211928] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  134.230854] RSP: 002b:00007f2d27575c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  134.238584] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  134.245881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  134.253178] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c
14:09:26 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

14:09:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  134.260471] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f2d275766d4
[  134.267767] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  134.275073] 
[  134.276707] Local variable description: ----combined@secure_tcpv6_seq
[  134.283286] Variable was created at:
[  134.287020]  secure_tcpv6_seq+0x7d/0x2b0
[  134.291098]  tcp_v6_connect+0x242b/0x2890
[  134.295268] 
[  134.296909] Bytes 4-7 of 8 are uninitialized
[  134.301336] Memory access of size 8 starts at ffff88815395f658
[  134.307311] ==================================================================
[  134.314674] Disabling lock debugging due to kernel taint
[  134.320153] Kernel panic - not syncing: panic_on_warn set ...
[  134.326073] CPU: 1 PID: 8325 Comm: syz-executor0 Tainted: G    B             4.20.0-rc7+ #8
[  134.334572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  134.343961] Call Trace:
[  134.346575]  dump_stack+0x173/0x1d0
[  134.350241]  panic+0x3ce/0x961
[  134.353504]  kmsan_report+0x285/0x290
[  134.357343]  kmsan_internal_check_memory+0x9a7/0xa20
[  134.362514]  ? __local_bh_enable_ip+0xb3/0x1a0
[  134.367143]  __msan_instrument_asm_load+0x8a/0x90
[  134.372028]  __siphash_aligned+0x512/0xae0
[  134.376319]  secure_tcpv6_seq+0x143/0x2b0
[  134.380509]  ? inet6_hash_connect+0x176/0x1a0
[  134.385035]  tcp_v6_connect+0x242b/0x2890
[  134.389246]  ? __msan_poison_alloca+0x1e0/0x270
[  134.393978]  ? tcp_v6_pre_connect+0x130/0x130
[  134.398524]  __inet_stream_connect+0x2f9/0x1340
[  134.403224]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  134.408116]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  134.412854]  tcp_sendmsg_locked+0x65d5/0x6be0
14:09:26 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90)

[  134.417383]  ? aa_label_sk_perm+0xda/0x940
[  134.421648]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  134.427034]  ? aa_label_sk_perm+0x6d6/0x940
[  134.431414]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  134.436798]  ? futex_wait+0x912/0xc40
[  134.440698]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  134.446113]  tcp_sendmsg+0xb2/0x100
[  134.449799]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  134.454491]  inet_sendmsg+0x54a/0x720
[  134.458328]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  134.463717]  ? security_socket_sendmsg+0x1bd/0x200
[  134.468690]  ? inet_getname+0x490/0x490
[  134.472690]  __sys_sendto+0x8c4/0xac0
[  134.476624]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  134.482104]  ? prepare_exit_to_usermode+0x114/0x420
[  134.487154]  ? syscall_return_slowpath+0x50/0x650
[  134.492053]  __se_sys_sendto+0x107/0x130
[  134.496189]  __x64_sys_sendto+0x6e/0x90
[  134.500195]  do_syscall_64+0xbc/0xf0
[  134.503942]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  134.509151] RIP: 0033:0x457669
14:09:26 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

14:09:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  134.512384] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  134.531307] RSP: 002b:00007f2d27575c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  134.539049] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  134.546338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  134.553625] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c
[  134.560913] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f2d275766d4
[  134.568205] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  134.576442] Kernel Offset: disabled
[  134.580073] Rebooting in 86400 seconds..