[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   56.916088] audit: type=1800 audit(1539972053.972:25): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   56.935442] audit: type=1800 audit(1539972053.982:26): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   56.955074] audit: type=1800 audit(1539972054.002:27): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts.
2018/10/19 18:01:08 fuzzer started
2018/10/19 18:01:12 dialing manager at 10.128.0.26:36973
2018/10/19 18:01:12 syscalls: 1
2018/10/19 18:01:12 code coverage: enabled
2018/10/19 18:01:12 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/10/19 18:01:12 setuid sandbox: enabled
2018/10/19 18:01:12 namespace sandbox: enabled
2018/10/19 18:01:12 Android sandbox: /sys/fs/selinux/policy does not exist
2018/10/19 18:01:12 fault injection: enabled
2018/10/19 18:01:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/10/19 18:01:12 net packed injection: enabled
2018/10/19 18:01:12 net device setup: enabled
18:03:47 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x38)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

syzkaller login: [  231.626890] IPVS: ftp: loaded support on port[0] = 21
[  234.013542] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.020016] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.028721] device bridge_slave_0 entered promiscuous mode
[  234.170095] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.176832] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.185361] device bridge_slave_1 entered promiscuous mode
[  234.326338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  234.467174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
18:03:51 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$setmm(0x23, 0x0, &(0x7f0000fff000/0x1000)=nil)
prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil)

[  234.958987] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  235.187617] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  235.466748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  235.474039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.634847] IPVS: ftp: loaded support on port[0] = 21
[  235.710745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  235.718002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  236.363307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  236.371337] team0: Port device team_slave_0 added
[  236.619687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  236.627849] team0: Port device team_slave_1 added
[  236.816808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  236.823955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  236.832997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.032631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  237.039902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.048928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.242265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  237.250046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.259281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  237.546167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  237.553989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.563252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.626649] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.633382] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.641806] device bridge_slave_0 entered promiscuous mode
[  239.914716] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.921203] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.929691] device bridge_slave_1 entered promiscuous mode
18:03:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[], &(0x7f00000002c0))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000300)={<r1=>0x0, 0x0, 0x20, 0x8, 0x400}, &(0x7f0000000340)=0x18)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x200}, &(0x7f0000000240)=0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x0, 0x0, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080))
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000015c0)={r5})
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback, @rand_addr}, &(0x7f0000000640)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={0x0, @rand_addr, @remote}, &(0x7f00000008c0)=0xfd86)
recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001980)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/160, 0xa0}, {&(0x7f0000001d80)=""/123, 0x7b}], 0x3, &(0x7f0000001f40)=""/37, 0x25, 0x40}}, {{&(0x7f00000056c0)=@ipx, 0x80, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)=""/136, 0x88}}], 0x2, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000061c0)={@remote}, &(0x7f0000006200)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006240)={{{@in=@dev, @in6}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000006340)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000063c0)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006940)={&(0x7f0000000100), 0xc, &(0x7f0000006900)={&(0x7f0000000680)=ANY=[]}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r5})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140), 0x10)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540))
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90)

[  240.141662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  240.289292] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.295873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.302969] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.309437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.318332] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  240.376344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  240.493855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  241.080458] IPVS: ftp: loaded support on port[0] = 21
[  241.299275] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  241.545544] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  241.792749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  241.801668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  242.148499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  242.155841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  243.079980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  243.088197] team0: Port device team_slave_0 added
[  243.416922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  243.425093] team0: Port device team_slave_1 added
[  243.702519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  243.709727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  243.719153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.028613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  244.035826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  244.044731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  244.297822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  244.305572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  244.314713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  244.681703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  244.689393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.698403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  245.699329] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.706144] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.714887] device bridge_slave_0 entered promiscuous mode
[  245.935358] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.941871] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.950543] device bridge_slave_1 entered promiscuous mode
[  246.228143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  246.541986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  247.481275] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  247.755056] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  247.768876] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.775449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.782382] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.789052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.798126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  247.823992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  248.099167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  248.106386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
18:04:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)})

[  248.472421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  248.479686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.449120] IPVS: ftp: loaded support on port[0] = 21
[  249.595218] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  249.603326] team0: Port device team_slave_0 added
[  249.943309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  249.951285] team0: Port device team_slave_1 added
[  250.273324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  250.280369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.289085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.669958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  250.677096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  250.685794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  250.995570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  251.003301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  251.012371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  251.443216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  251.450957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  251.459766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.919218] ip (6560) used greatest stack depth: 53264 bytes left
[  253.880789] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.329587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  255.560055] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.566650] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.575220] device bridge_slave_0 entered promiscuous mode
[  255.846665] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.853362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.860299] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.866966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.875890] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  255.933152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  255.979104] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.985796] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.994404] device bridge_slave_1 entered promiscuous mode
[  256.396171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  256.609584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  256.616088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.624218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.696705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  257.751662] bond0: Enslaving bond_slave_0 as an active interface with an up link
18:04:15 executing program 4:
socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00')
write(r1, &(0x7f00000001c0), 0xffffffea)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500), 0x4)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  258.137340] 8021q: adding VLAN 0 to HW filter on device team0
[  258.209413] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  258.701595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  258.708830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.145774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  259.173042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.510376] IPVS: ftp: loaded support on port[0] = 21
[  260.403391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  260.411408] team0: Port device team_slave_0 added
[  260.829918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  260.838253] team0: Port device team_slave_1 added
[  261.278081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  261.285340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  261.294738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  261.769898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  261.778738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.787674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  262.194856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  262.202458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.211693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.610464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  262.618286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.627319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  262.997589] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.578052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  266.389658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  266.396143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  266.404179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  266.591745] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.598407] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.606962] device bridge_slave_0 entered promiscuous mode
[  267.047581] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.054367] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.063045] device bridge_slave_1 entered promiscuous mode
[  267.500226] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.506835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.513922] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.520499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.529841] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  267.543342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  267.564251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  268.078494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  268.205685] 8021q: adding VLAN 0 to HW filter on device team0
18:04:25 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x38)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

18:04:26 executing program 0:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)

[  269.434190] bond0: Enslaving bond_slave_0 as an active interface with an up link
18:04:26 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x81, 0x82)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r1, 0x100000000)
sendmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000007ea600c279e340f578ac11c88a0fadc06ebba1"], 0x20}}], 0x1, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x0, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18)

[  269.902957] bond0: Enslaving bond_slave_1 as an active interface with an up link
18:04:27 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f00000100000000020000001861dc4cff1d0ba72f9046468609fca28fd7aaf3eca293ff00000000000000"], 0xfe60)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100))
fcntl$setpipe(r0, 0x407, 0x1)

[  270.347456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  270.354713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
18:04:27 executing program 5:
r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={<r1=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={<r2=>r1, @in={{0x2, 0x4e23, @rand_addr}}, 0x8, 0x1, 0xcf, 0x8, 0x2}, &(0x7f0000000180)=0x98)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x111}}, 0x20)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={<r4=>r2, 0x8, 0xf75, 0xffffffff}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x100000001}}, 0x5, 0x80000001, 0x4, 0x20, 0x1}, &(0x7f00000003c0)=0x98)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[0xfffffffffffffff7, 0x3ff, 0x400], 0x3, 0x9, 0x7, 0x9, 0x0, 0xf000000000000000, {0x0, 0x0, 0x0, 0x1f4, 0x5d, 0x9, 0x4, 0x340f3892, 0x2, 0x1, 0x1, 0xffff, 0x48, 0xf5, "1a2b14356d239a259b6331a1af83655b59de0c876ece6afa6cb36fae04ffcd2e"}})
ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000004c0)={0x8, 0x8000, 0x95c})
getsockopt$inet6_buf(r3, 0x29, 0x2d, &(0x7f0000000500)=""/254, &(0x7f0000000600)=0xfe)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000640)=0x100000000, 0x2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xe, 0x0, 0x2, 0x2, 0x401, 0x5, 0x4}, {0x0, 0x9, 0x6, 0x400, 0xff, 0x101, 0xf7}]})
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000740)=@assoc_id=r4, &(0x7f0000000780)=0x4)
socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$9p(r3, &(0x7f0000000800)="34f5363493afe3f6b7532c40a43956e5c6bf1b81ac3fe0", 0x17)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000840)=0x2040000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000880)={r1, 0x8, 0x2}, 0x8)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000008c0)={0x20000, 0x0, [0x5, 0x7a79, 0x200, 0x2, 0xffffffffffffff7f, 0x1, 0x8000, 0x9]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000940)={{0x3f2ca8df, 0x200}, 'port1\x00', 0x2, 0x22, 0x3, 0x100000000, 0x2, 0x5, 0x800, 0x0, 0x1, 0x3})
ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000a00)=0x1)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000a40)=0x3)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/ashmem\x00', 0x200100, 0x0)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000b00)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000d40)=0xe8)
getsockname$packet(r3, &(0x7f0000000d80)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000dc0)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'team_slave_1\x00', <r10=>0x0})
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000003140)={@local, <r11=>0x0}, &(0x7f0000003180)=0x14)
getpeername$packet(r3, &(0x7f00000031c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003200)=0x14)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000003240)={@ipv4={[], [], @loopback}, <r13=>0x0}, &(0x7f0000003280)=0x14)
accept4(r0, &(0x7f0000003380)=@can={0x1d, <r14=>0x0}, &(0x7f0000003400)=0x80, 0x80800)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000003680)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003640)={&(0x7f0000003440)={0x1d0, r7, 0x2, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x1b4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)

18:04:27 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={"626f6e6430000000000400", @ifru_names='team_slave_1\x00'})

[  270.761141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  270.768352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.908210] bond0: Error: Device is in use and cannot be enslaved
18:04:28 executing program 0:
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0x10)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000002c0)=0xfffffffffffffc2d)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18)

[  271.429591] hrtimer: interrupt took 49083 ns
[  271.907737] IPVS: ftp: loaded support on port[0] = 21
18:04:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f00000001c0), 0x0, r2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]})

[  272.101626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  272.109816] team0: Port device team_slave_0 added
[  272.297689] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[  272.624392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  272.632453] team0: Port device team_slave_1 added
[  273.029116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  273.036280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  273.045086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  273.415336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  273.422407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  273.431259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  273.814902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  273.822472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.831767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  274.114281] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.217916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  274.226426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  274.235434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  275.412689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  276.706990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  276.713584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  276.721369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
18:04:35 executing program 1:
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x40096101, &(0x7f0000000300)={0x2})
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x40045731, &(0x7f0000000540)={0x0, &(0x7f0000000500)})
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000))
setns(0xffffffffffffffff, 0x22000000)

[  278.073669] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.080146] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.088936] device bridge_slave_0 entered promiscuous mode
[  278.179623] 8021q: adding VLAN 0 to HW filter on device team0
[  278.407354] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.413931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.420848] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.427463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.436252] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  278.458973] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.465628] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.474083] device bridge_slave_1 entered promiscuous mode
[  278.762987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  279.025160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  279.373130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.803234] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  280.008664] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  280.301816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  280.310064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  280.626826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  280.634082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  281.428095] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  281.436301] team0: Port device team_slave_0 added
[  281.761748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  281.770116] team0: Port device team_slave_1 added
[  282.102059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  282.109342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  282.118847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.369838] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.435516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  282.442612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.451395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.731085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  282.738874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.748136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  283.093169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  283.100800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  283.109896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  283.588071] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  284.722424] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  284.729006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.737058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.434000] irq bypass consumer (token 0000000073ae614c) registration fails: -16
[  285.523047] irq bypass consumer (token 00000000850becb4) registration fails: -16
18:04:42 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[], &(0x7f00000002c0))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000300)={<r1=>0x0, 0x0, 0x20, 0x8, 0x400}, &(0x7f0000000340)=0x18)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x200}, &(0x7f0000000240)=0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x0, 0x0, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080))
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000015c0)={r5})
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback, @rand_addr}, &(0x7f0000000640)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={0x0, @rand_addr, @remote}, &(0x7f00000008c0)=0xfd86)
recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001980)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/160, 0xa0}, {&(0x7f0000001d80)=""/123, 0x7b}], 0x3, &(0x7f0000001f40)=""/37, 0x25, 0x40}}, {{&(0x7f00000056c0)=@ipx, 0x80, &(0x7f0000005b00), 0x0, &(0x7f0000005b80)=""/136, 0x88}}], 0x2, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000061c0)={@remote}, &(0x7f0000006200)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006240)={{{@in=@dev, @in6}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000006340)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000006380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000063c0)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006940)={&(0x7f0000000100), 0xc, &(0x7f0000006900)={&(0x7f0000000680)=ANY=[]}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r5})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140), 0x10)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540))
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90)

[  285.889750] 8021q: adding VLAN 0 to HW filter on device team0
[  286.034722] irq bypass consumer (token 000000007613899e) registration fails: -16
[  286.426593] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.433134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.440046] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.446635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.455086] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  286.461735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  289.051951] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.983316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  290.748355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  290.754929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  290.763165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  291.586403] binder: 7597:7598 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  291.681384] 8021q: adding VLAN 0 to HW filter on device team0
18:04:48 executing program 3:
syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60093a0600080000000000e6d8c85064df8f9a00000000000890780000000000000000c6b2d4ed00000000000000b90000000000"], &(0x7f0000000040))

[  293.939166] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.497962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  295.052157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  295.058724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.066687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  295.537666] 8021q: adding VLAN 0 to HW filter on device team0
18:04:53 executing program 4:
socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00')
write(r1, &(0x7f00000001c0), 0xffffffea)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500), 0x4)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

18:04:53 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x9010000000000088)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}, 0x1c)

18:04:53 executing program 1:
socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xffffffea)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

18:04:53 executing program 2:
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000efd000))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000fddfff)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x3, 0x0, 0x200})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x251210b2d6076f01)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0xd8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

18:04:53 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

18:04:55 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x10080, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x3, [@remote, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xa}]}, 0x1c)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='system.advise\x00')
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000))
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000300))
creat(&(0x7f00000000c0)='./bus\x00', 0xfffffffffffffffe)
sendmmsg(0xffffffffffffffff, &(0x7f00000069c0), 0x0, 0x8004)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
llistxattr(&(0x7f0000000400)='./bus\x00', &(0x7f0000000480)=""/150, 0x96)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x5}, 0x28, 0x3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
socketpair(0xa, 0x6, 0xffffffff, &(0x7f0000003940))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)

18:04:55 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54)

18:04:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x32f00}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x32, 0x829, 0x0, 0x0, {0x2802}}, 0x14}}, 0x0)

18:04:55 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="0bd2430f000319", 0x7}], 0x1)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340))

18:04:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7}, 0x7)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'})

18:04:55 executing program 4:
socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00')
write(r1, &(0x7f00000001c0), 0xffffffea)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500), 0x4)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  298.699290] IPVS: ftp: loaded support on port[0] = 21
18:04:56 executing program 1:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x40046104, &(0x7f0000000300))

18:04:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000))

18:04:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2})
r3 = socket$inet6(0xa, 0x3, 0x800000000002)
ioctl(r3, 0x8912, &(0x7f0000000040)="153f62344885d25d766070")
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x3})

18:04:56 executing program 1:
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)
getpgid(0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2000, 0x0)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x7ff, &(0x7f00000001c0))
socket$inet(0x2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000002c0)=0xfffffffffffffc2d)

18:04:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7d}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

18:04:57 executing program 4:
socket$inet6(0xa, 0x5, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00')
write(r1, &(0x7f00000001c0), 0xffffffea)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500), 0x4)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

18:04:57 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x10080, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x3, [@remote, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xa}]}, 0x1c)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='system.advise\x00')
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000))
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000300))
creat(&(0x7f00000000c0)='./bus\x00', 0xfffffffffffffffe)
sendmmsg(0xffffffffffffffff, &(0x7f00000069c0), 0x0, 0x8004)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
llistxattr(&(0x7f0000000400)='./bus\x00', &(0x7f0000000480)=""/150, 0x96)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x5}, 0x28, 0x3)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
socketpair(0xa, 0x6, 0xffffffff, &(0x7f0000003940))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)

18:04:58 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x18)

18:04:58 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7")
sendfile(r0, r0, &(0x7f00000000c0)=0x202, 0x7f)

18:04:58 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000004c0)=@broute={"62726f6425650a056400", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400)

18:04:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00')
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+', 0x1}], 0x1)

18:04:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[]}}, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000200)={0xfffffffffffffffb, {0x2, 0x4e23, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ip6gre0\x00'})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

18:04:58 executing program 5:
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0x10)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
r1 = socket$inet(0x2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000002c0)=0xfffffffffffffc2d)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18)

[  301.595305] xt_bpf: check failed: parse error
18:04:58 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000003c0)="153f6234488dd25d766070")
r1 = gettid()
setpriority(0x0, r1, 0x0)

18:04:58 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000006ec0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)='c', 0x1}], 0x1, &(0x7f00000002c0), 0x0, 0x8000}], 0x1, 0x4000010)

18:04:59 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0xaa7})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x2)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000040)}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0)

18:04:59 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a")
sendfile(r0, r1, &(0x7f0000000180), 0x8402)

18:04:59 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00')
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/162, 0xa2}], 0x1, 0x0)

18:04:59 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x5}], 0x10000047, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000)

18:04:59 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd)

18:04:59 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0x6, 0x0, 'client1\x00', 0x2, "a8c9875be356c8a6", "d85f5fb71fc4f4f52ee74eb039ef11b83a317e2d9d57e110c46e9aace8c6fdd1", 0xffffffff})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f00000000c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f0000000180), 0x8402)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080))

18:04:59 executing program 1:
rmdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet6(0xa, 0x812, 0x32d9073a)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d")
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')
fallocate(r1, 0x28, 0x1, 0x8)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000180))
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000440))
clock_gettime(0x6, &(0x7f0000000680)={<r2=>0x0})
r3 = socket$inet6(0xa, 0x3, 0x8)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1008000, 0x1010, r1, 0x20)
setsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f0000000840), 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@local, 0x200000000, 0x2, 0xfe, 0x6}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3, 0x100}, 0x20)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f00000004c0))
clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140))
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x40f7, @local, 0x7ff}, 0x1c)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x201, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x200, 0x3, 0x2, 0x6, 0xeed3, 0xa57, 0xfffffffffffffffb}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ipx\x00')
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'bond_slave_1\x00', 0x6bd1})
pipe2(&(0x7f0000000580)={<r5=>0xffffffffffffffff}, 0x801)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7")
r7 = eventfd2(0xff, 0x1)
write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="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"], @ANYRESOCT=r4, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7], @ANYRES16=r1, @ANYRESHEX=r6, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESOCT=0x0], @ANYRES16=r7, @ANYRESOCT, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYPTR]]], 0x29)
sendfile(r6, r6, &(0x7f00000000c0)=0x202, 0x7f)

18:04:59 executing program 5:
connect$inet(0xffffffffffffffff, &(0x7f0000000180), 0x10)
r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0))

18:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002480), 0x120, 0x0, &(0x7f00000001c0)={0x77359400})

18:05:00 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000380)=""/12, 0xc, &(0x7f00000003c0)=""/176, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003002000000000]}, 0x68)

18:05:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={"626f6e6430000000000400", @ifru_names='team_slave_1\x00'})

18:05:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2})
r3 = eventfd(0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r2})
dup2(r3, r2)

18:05:01 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
futex(&(0x7f00000000c0), 0x400000085, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x3fffffff)

18:05:01 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r2 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

[  304.346207] irq bypass consumer (token 00000000c95bf29c) registration fails: -16
18:05:01 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000380)=""/12, 0xc, &(0x7f00000003c0)=""/176, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003002000000000]}, 0x68)

18:05:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:04 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd)

18:05:04 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r3 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

18:05:04 executing program 4:

18:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:04 executing program 3:

18:05:04 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r2 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

18:05:04 executing program 4:

18:05:04 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)=""/178, 0xb2}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000000100), 0x2a2, 0x10400003)

18:05:04 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xdd}, &(0x7f0000000200)=0xfffffffffffffd7c)
ioctl$FS_IOC_FSSETXATTR(r0, 0xc0c0583b, &(0x7f0000000140))

18:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:04 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

18:05:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000540)="c4c140161666b833000f00d80fc79d04000000440f20c03505000000440f22c00f01c9c4e27913ccb9800000c00f3235000400000f3066b86e000f00d066b8e4008ee80fc7ab42430000", 0x4a}], 0x1, 0x0, &(0x7f0000000280), 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0x800080, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x2000000000002)
bind(0xffffffffffffffff, &(0x7f0000000640)=@in={0x2, 0x0, @multicast2}, 0x80)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000840)={'ip6gretap0\x00'})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x8, 0x30}, &(0x7f00000006c0)=0xc)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740), 0xc, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x96100, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x42, 0x0)

18:05:07 executing program 5:
r0 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)

18:05:07 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd)

18:05:07 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x9, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

18:05:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:07 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r3 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

18:05:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x0, &(0x7f0000000240)="ce"})
clone(0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000080))

18:05:07 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x4, 0x1, 0x5, 0xfffffffffffffc60})
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = socket(0x15, 0x80005, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0x2, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b3210e89aefc9eb6dc2649bdf2b6ab524effc499e822cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)

18:05:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  310.872758] RDS: rds_bind could not find a transport for ::ffff:130.44.50.230, load rds_tcp or rds_rdma?
[  310.896160] binder: BINDER_SET_CONTEXT_MGR already set
[  310.901743] binder: 8022:8026 ioctl 40046207 0 returned -16
18:05:08 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={"62726f6425650a05640000002000", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400)

[  310.924993] RDS: rds_bind could not find a transport for ::ffff:130.44.50.230, load rds_tcp or rds_rdma?
18:05:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:08 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="0bd2430f000319", 0x7}], 0x1)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)

[  311.231981] xt_bpf: check failed: parse error
18:05:08 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0xff72, 0xfa00, {r1}}, 0x637a97ba)

18:05:08 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r3 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

[  311.437855] binder: undelivered death notification, 0000000000000000
[  311.468848] binder: undelivered death notification, 0000000000000000
18:05:10 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd)

18:05:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:10 executing program 4:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040))
shmctl$SHM_UNLOCK(r0, 0xc)

18:05:10 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000001fc, 0x0)

18:05:10 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x9, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

18:05:10 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r3 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

[  313.757864] kauditd_printk_skb: 3 callbacks suppressed
[  313.757900] audit: type=1326 audit(1539972310.812:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8086 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
18:05:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:05:11 executing program 5:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x9, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

18:05:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000400)})

18:05:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  314.518801] audit: type=1326 audit(1539972311.572:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8086 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
[  314.535507] binder: 8105:8106 got transaction with invalid handle, 0
[  314.546870] binder: 8105:8106 transaction failed 29201/-22, size 24-8 line 3062
[  314.573017] psmouse serio5: Failed to reset mouse on : -5
[  314.626668] binder_alloc: binder_alloc_mmap_handler: 8105 20001000-20004000 already mapped failed -16
18:05:11 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
r3 = dup(r1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000800))

18:05:11 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46000000000000000009000000030003"], 0x13)
execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000)

[  314.688264] binder: BINDER_SET_CONTEXT_MGR already set
[  314.693959] binder: 8105:8106 ioctl 40046207 0 returned -16
[  314.710499] binder_alloc: 8105: binder_alloc_buf, no vma
[  314.716396] binder: 8105:8110 transaction failed 29189/-3, size 24-8 line 2970
[  314.734111] binder: undelivered TRANSACTION_ERROR: 29189
[  314.739892] binder: undelivered TRANSACTION_ERROR: 29201
18:05:13 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0x10000000000062)
read(r1, &(0x7f0000000080)=""/11, 0xb)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)

18:05:13 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd)

18:05:13 executing program 4:
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'exz'}, &(0x7f0000000200)='nfs\x00', 0xfffffffffffffffe)
getpgrp(0x0)
tgkill(0x0, 0x0, 0x2b)

18:05:13 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x4ea)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000008000), 0x139f)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000800))
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50)

18:05:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:05:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001500197f09004b01011f00590188ffffcf5d3474bc9240e10520ff0757ffd77e6dec88b2477adce079dc005b56c2706b33c4a5651240ef00e0fe5f0028213ee20600d461", 0x48}], 0x1)
socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f"})

[  317.105301] misc userio: Buffer overflowed, userio client isn't keeping up
18:05:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="701d86"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  318.153006] ==================================================================
[  318.160404] BUG: KMSAN: uninit-value in synaptics_detect+0x207/0x2c0
[  318.166886] CPU: 1 PID: 18 Comm: kworker/1:0 Not tainted 4.19.0-rc8+ #70
[  318.173712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  318.183074] Workqueue: events_long serio_handle_event
[  318.188251] Call Trace:
[  318.190833]  dump_stack+0x306/0x460
[  318.194458]  ? synaptics_detect+0x207/0x2c0
[  318.198807]  kmsan_report+0x1a2/0x2e0
[  318.202610]  __msan_warning+0x7c/0xe0
[  318.206414]  synaptics_detect+0x207/0x2c0
[  318.210567]  psmouse_extensions+0x1110/0x3850
[  318.215072]  psmouse_switch_protocol+0x184/0xd90
[  318.219835]  psmouse_connect+0x13ce/0x2300
[  318.224172]  serio_driver_probe+0xe3/0x150
[  318.228402]  ? psmouse_interrupt+0x1950/0x1950
[  318.232980]  ? serio_uevent+0x6e0/0x6e0
[  318.236947]  really_probe+0x95f/0x13d0
[  318.240849]  driver_probe_device+0x1b4/0x4f0
[  318.245278]  __device_attach_driver+0x632/0x750
[  318.249978]  bus_for_each_drv+0x28e/0x3b0
[  318.254117]  ? driver_deferred_probe_add_trigger+0x3c0/0x3c0
[  318.259916]  __device_attach+0x447/0x6e0
[  318.263985]  device_initial_probe+0x4a/0x60
[  318.268303]  bus_probe_device+0x137/0x390
[  318.272449]  device_add+0x2715/0x2d20
[  318.276269]  serio_handle_event+0x1d90/0x2700
[  318.280778]  ? serio_resume+0x2b0/0x2b0
[  318.284752]  process_one_work+0x19c4/0x24f0
[  318.289093]  worker_thread+0x206d/0x2b30
[  318.293187]  kthread+0x59c/0x5d0
[  318.296544]  ? process_one_work+0x24f0/0x24f0
[  318.301039]  ? INIT_BOOL+0x30/0x30
[  318.304573]  ret_from_fork+0x35/0x40
[  318.308282] 
[  318.309894] Local variable description: ----param@synaptics_detect
[  318.316208] Variable was created at:
[  318.319911]  synaptics_detect+0x5d/0x2c0
[  318.323967]  psmouse_extensions+0x1110/0x3850
[  318.328447] ==================================================================
[  318.335794] Disabling lock debugging due to kernel taint
[  318.341231] Kernel panic - not syncing: panic_on_warn set ...
[  318.341231] 
[  318.348591] CPU: 1 PID: 18 Comm: kworker/1:0 Tainted: G    B             4.19.0-rc8+ #70
[  318.356831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  318.366183] Workqueue: events_long serio_handle_event
[  318.371361] Call Trace:
[  318.373946]  dump_stack+0x306/0x460
[  318.377599]  panic+0x54c/0xafa
[  318.380832]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  318.386282]  kmsan_report+0x2d3/0x2e0
[  318.390081]  __msan_warning+0x7c/0xe0
[  318.393881]  synaptics_detect+0x207/0x2c0
[  318.398067]  psmouse_extensions+0x1110/0x3850
[  318.402590]  psmouse_switch_protocol+0x184/0xd90
[  318.407351]  psmouse_connect+0x13ce/0x2300
[  318.411603]  serio_driver_probe+0xe3/0x150
[  318.415842]  ? psmouse_interrupt+0x1950/0x1950
[  318.420475]  ? serio_uevent+0x6e0/0x6e0
[  318.424441]  really_probe+0x95f/0x13d0
[  318.428335]  driver_probe_device+0x1b4/0x4f0
[  318.432744]  __device_attach_driver+0x632/0x750
[  318.437416]  bus_for_each_drv+0x28e/0x3b0
[  318.441556]  ? driver_deferred_probe_add_trigger+0x3c0/0x3c0
[  318.447354]  __device_attach+0x447/0x6e0
[  318.451418]  device_initial_probe+0x4a/0x60
[  318.456060]  bus_probe_device+0x137/0x390
[  318.460633]  device_add+0x2715/0x2d20
[  318.464604]  serio_handle_event+0x1d90/0x2700
[  318.469512]  ? serio_resume+0x2b0/0x2b0
[  318.474019]  process_one_work+0x19c4/0x24f0
[  318.478889]  worker_thread+0x206d/0x2b30
[  318.483663]  kthread+0x59c/0x5d0
[  318.487365]  ? process_one_work+0x24f0/0x24f0
[  318.492270]  ? INIT_BOOL+0x30/0x30
[  318.496184]  ret_from_fork+0x35/0x40
[  318.501179] Kernel Offset: disabled
[  318.504815] Rebooting in 86400 seconds..