[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   36.209349][   T26] audit: type=1800 audit(1570965652.676:25): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   36.236722][   T26] audit: type=1800 audit(1570965652.676:26): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   36.264351][   T26] audit: type=1800 audit(1570965652.676:27): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts.
2019/10/13 11:21:04 fuzzer started
2019/10/13 11:21:05 dialing manager at 10.128.0.105:40973
2019/10/13 11:21:05 syscalls: 2523
2019/10/13 11:21:05 code coverage: enabled
2019/10/13 11:21:05 comparison tracing: enabled
2019/10/13 11:21:05 extra coverage: extra coverage is not supported by the kernel
2019/10/13 11:21:05 setuid sandbox: enabled
2019/10/13 11:21:05 namespace sandbox: enabled
2019/10/13 11:21:05 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/13 11:21:05 fault injection: enabled
2019/10/13 11:21:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/13 11:21:05 net packet injection: enabled
2019/10/13 11:21:05 net device setup: enabled
2019/10/13 11:21:05 concurrency sanitizer: enabled
11:21:09 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

syzkaller login: [   53.066634][ T7171] IPVS: ftp: loaded support on port[0] = 21
11:21:09 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[   53.171369][ T7171] chnl_net:caif_netlink_parms(): no params data found
[   53.243198][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.250419][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.260677][ T7171] device bridge_slave_0 entered promiscuous mode
[   53.269117][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.276389][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.285885][ T7171] device bridge_slave_1 entered promiscuous mode
[   53.310919][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.323044][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.348822][ T7171] team0: Port device team_slave_0 added
[   53.355995][ T7171] team0: Port device team_slave_1 added
[   53.481123][ T7171] device hsr_slave_0 entered promiscuous mode
11:21:10 executing program 2:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x400000000080803, 0x0)
r2 = socket(0x10, 0x400000000080803, 0x0)
write(r2, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24)
r3 = socket(0x10, 0x400000000080803, 0x0)
write(r3, &(0x7f0000000080), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x800)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, 0x0, 0x0)
socket(0x0, 0x0, 0x8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)

[   53.549500][ T7171] device hsr_slave_1 entered promiscuous mode
[   53.625891][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.633123][ T7171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.640723][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.648088][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.715880][ T7174] IPVS: ftp: loaded support on port[0] = 21
[   53.777508][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.821907][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.822433][ T7177] IPVS: ftp: loaded support on port[0] = 21
[   53.844643][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.864389][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.875171][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   53.888616][ T7171] 8021q: adding VLAN 0 to HW filter on device team0
[   53.908243][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
11:21:10 executing program 3:
set_mempolicy(0x3, &(0x7f0000000240)=0x3ff, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[   53.920879][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.927988][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.011849][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.023140][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.030285][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.049924][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.069268][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.089300][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.111622][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.193469][ T7174] chnl_net:caif_netlink_parms(): no params data found
[   54.206053][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.220030][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.245231][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.325887][ T7184] IPVS: ftp: loaded support on port[0] = 21
11:21:10 executing program 4:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

[   54.384765][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.399891][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.408165][ T7174] device bridge_slave_0 entered promiscuous mode
[   54.416121][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.424864][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.444224][ T7174] device bridge_slave_1 entered promiscuous mode
[   54.487962][ T7177] chnl_net:caif_netlink_parms(): no params data found
[   54.521740][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.564330][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.632407][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.671789][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.687978][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.696469][ T7177] device bridge_slave_0 entered promiscuous mode
[   54.727905][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.747859][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.755944][ T7177] device bridge_slave_1 entered promiscuous mode
[   54.802905][ T7174] team0: Port device team_slave_0 added
[   54.835156][ T7174] team0: Port device team_slave_1 added
[   54.874234][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
11:21:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$inet(0x2, 0xa15caa8d75fd1f17, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f00000000c0)="bb79c28bfbba9d00cb5dc89aea48547d1e195582fcdabc2879ae0faa742a4c6ae4ad3b204d747e60ff69261af604e622903168bb0022e904646e30d88000265993555e870ed29c385f3d68976b2716a0b40d04196cb7382a741cb6461893c6740ce467753e61e516c61b7930c32076b4752a6cfe904203fca3a161bf175f4284ea1a77857f09147e42492d0165b0193a591f812a85f7f8c190968cc00ef83794e9b33b83a4b73950fb3c41711f163d88adac447eb201a73e2ef9877b8a7bb80f50963352794b53c9d391171ab733ebdb9175d0573a23db5b6601e880ea7b57a825b27f82f4fd344bddcf99b09ef30b91aeff760d", 0xf4, 0x4000084, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x32, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="023eb834f4a6741f5a1fb52fa13ff4000000", @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={r2, 0x9b}, 0x8)

[   54.949780][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.949997][ T7191] IPVS: ftp: loaded support on port[0] = 21
[   55.038457][    C0] hrtimer: interrupt took 54334 ns
11:21:11 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

[   55.091642][ T7174] device hsr_slave_0 entered promiscuous mode
[   55.149246][ T7174] device hsr_slave_1 entered promiscuous mode
[   55.188284][ T7174] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.227513][ T7177] team0: Port device team_slave_0 added
11:21:11 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

[   55.306822][ T7177] team0: Port device team_slave_1 added
11:21:11 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

[   55.379932][ T7200] IPVS: ftp: loaded support on port[0] = 21
[   55.397629][ T7184] chnl_net:caif_netlink_parms(): no params data found
11:21:11 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

[   55.451092][ T7177] device hsr_slave_0 entered promiscuous mode
[   55.488288][ T7177] device hsr_slave_1 entered promiscuous mode
[   55.528010][ T7177] debugfs: Directory 'hsr0' with parent '/' already present!
11:21:12 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

11:21:12 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0f00100000000000", @ANYPTR, @ANYBLOB="ffff070000000000", @ANYPTR, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB], @ANYBLOB='M', @ANYBLOB, @ANYPTR], @ANYBLOB='\a\x00'/24], 0x48}, 0x0)

[   55.713445][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.720902][ T7191] chnl_net:caif_netlink_parms(): no params data found
[   55.739056][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.746472][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.755122][ T7184] device bridge_slave_0 entered promiscuous mode
[   55.778588][ T7174] 8021q: adding VLAN 0 to HW filter on device team0
[   55.801412][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.812945][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.821797][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.834490][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.842526][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.859010][ T7184] device bridge_slave_1 entered promiscuous mode
11:21:12 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
flistxattr(r3, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x4000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5})
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0)
sendfile(r1, r4, 0x0, 0x102002700)

[   55.877973][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.886708][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.896511][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.903637][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.912331][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.921332][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.930409][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.937511][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.951586][ T7177] 8021q: adding VLAN 0 to HW filter on device team0
[   55.987529][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.995791][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.005506][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.013779][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.023317][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.032696][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.041844][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.051107][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.060277][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.069146][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.076167][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.117046][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.125415][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.134219][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.142953][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.155586][ T7174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.166351][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.180871][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.194202][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.201536][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.209762][ T7191] device bridge_slave_0 entered promiscuous mode
[   56.217196][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.224323][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.232457][ T7191] device bridge_slave_1 entered promiscuous mode
[   56.240025][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.248738][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.257163][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.265619][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.275600][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.306536][ T7177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.317261][ T7177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.354192][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.363109][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.372410][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.381708][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.388796][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.396841][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.406947][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.416411][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.425265][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.434495][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.443504][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.452779][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.462008][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.477025][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.485718][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.509121][ T7200] chnl_net:caif_netlink_parms(): no params data found
[   56.521933][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.535862][ T7184] team0: Port device team_slave_0 added
[   56.555032][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.571306][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.588018][ T7184] team0: Port device team_slave_1 added
[   56.595127][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.685528][ T7191] team0: Port device team_slave_0 added
[   56.714589][ T7191] team0: Port device team_slave_1 added
[   56.791280][ T7184] device hsr_slave_0 entered promiscuous mode
[   56.818403][ T7184] device hsr_slave_1 entered promiscuous mode
[   56.868005][ T7184] debugfs: Directory 'hsr0' with parent '/' already present!
[   56.879962][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.887139][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.895477][ T7200] device bridge_slave_0 entered promiscuous mode
[   56.903914][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.911749][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.920314][ T7200] device bridge_slave_1 entered promiscuous mode
[   56.944414][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.974218][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.114972][ T7239] binder: 7234:7239 unknown command 0
[   57.120235][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.128638][ T7239] binder: 7234:7239 ioctl c0306201 20000000 returned -22
[   57.150737][ T7191] device hsr_slave_0 entered promiscuous mode
11:21:13 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[   57.160690][ T7191] device hsr_slave_1 entered promiscuous mode
[   57.167501][ T7191] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.176962][ T7200] team0: Port device team_slave_0 added
[   57.193889][ T7200] team0: Port device team_slave_1 added
11:21:13 executing program 2:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x400000000080803, 0x0)
r2 = socket(0x10, 0x400000000080803, 0x0)
write(r2, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24)
r3 = socket(0x10, 0x400000000080803, 0x0)
write(r3, &(0x7f0000000080), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x800)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, 0x0, 0x0)
socket(0x0, 0x0, 0x8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)

[   57.253345][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.294883][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.326690][ T7184] 8021q: adding VLAN 0 to HW filter on device team0
[   57.399997][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.411115][ T7247] binder: 7245:7247 unknown command 0
[   57.416546][ T7247] binder: 7245:7247 ioctl c0306201 20000000 returned -22
[   57.424437][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.433690][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.440815][ T7176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.476319][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.489863][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.508003][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.515143][ T7176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.523730][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.533021][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.544109][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.554984][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.564322][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.579534][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.588841][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.597404][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.650685][ T7200] device hsr_slave_0 entered promiscuous mode
[   57.688145][ T7200] device hsr_slave_1 entered promiscuous mode
[   57.767898][ T7200] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.783119][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.796563][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.804742][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.813368][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.823809][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.833316][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.858450][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.866234][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.880981][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.890410][ T7191] 8021q: adding VLAN 0 to HW filter on device team0
[   57.909674][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.918600][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.927084][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.934158][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.957225][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.973793][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.982636][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.992059][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.004409][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.011548][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.025239][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.034759][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.048387][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.057353][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.071001][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.082319][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.094369][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.104419][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.115906][ T7191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.127589][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.138645][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.147059][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.160468][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.190041][ T7200] 8021q: adding VLAN 0 to HW filter on device team0
[   58.202858][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.211495][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.232295][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.247900][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.256973][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.282939][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.290068][ T7178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.303759][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.312995][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
11:21:14 executing program 3:
set_mempolicy(0x3, &(0x7f0000000240)=0x3ff, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[   58.327058][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.334154][ T7178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.342793][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.364149][ T7200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.375641][ T7200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.411634][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.424139][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.439956][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.450537][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.460379][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.469621][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.479153][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.488796][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.504365][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.518832][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.527300][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:21:15 executing program 4:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:15 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
flistxattr(r3, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x4000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5})
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0)
sendfile(r1, r4, 0x0, 0x102002700)

11:21:16 executing program 2:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x400000000080803, 0x0)
r2 = socket(0x10, 0x400000000080803, 0x0)
write(r2, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24)
r3 = socket(0x10, 0x400000000080803, 0x0)
write(r3, &(0x7f0000000080), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x800)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, 0x0, 0x0)
socket(0x0, 0x0, 0x8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)

11:21:16 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

11:21:16 executing program 3:
set_mempolicy(0x3, &(0x7f0000000240)=0x3ff, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

11:21:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$inet(0x2, 0xa15caa8d75fd1f17, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f00000000c0)="bb79c28bfbba9d00cb5dc89aea48547d1e195582fcdabc2879ae0faa742a4c6ae4ad3b204d747e60ff69261af604e622903168bb0022e904646e30d88000265993555e870ed29c385f3d68976b2716a0b40d04196cb7382a741cb6461893c6740ce467753e61e516c61b7930c32076b4752a6cfe904203fca3a161bf175f4284ea1a77857f09147e42492d0165b0193a591f812a85f7f8c190968cc00ef83794e9b33b83a4b73950fb3c41711f163d88adac447eb201a73e2ef9877b8a7bb80f50963352794b53c9d391171ab733ebdb9175d0573a23db5b6601e880ea7b57a825b27f82f4fd344bddcf99b09ef30b91aeff760d", 0xf4, 0x4000084, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x32, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="023eb834f4a6741f5a1fb52fa13ff4000000", @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={r2, 0x9b}, 0x8)

11:21:16 executing program 3:
set_mempolicy(0x3, &(0x7f0000000240)=0x3ff, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
open(0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

11:21:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$inet(0x2, 0xa15caa8d75fd1f17, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f00000000c0)="bb79c28bfbba9d00cb5dc89aea48547d1e195582fcdabc2879ae0faa742a4c6ae4ad3b204d747e60ff69261af604e622903168bb0022e904646e30d88000265993555e870ed29c385f3d68976b2716a0b40d04196cb7382a741cb6461893c6740ce467753e61e516c61b7930c32076b4752a6cfe904203fca3a161bf175f4284ea1a77857f09147e42492d0165b0193a591f812a85f7f8c190968cc00ef83794e9b33b83a4b73950fb3c41711f163d88adac447eb201a73e2ef9877b8a7bb80f50963352794b53c9d391171ab733ebdb9175d0573a23db5b6601e880ea7b57a825b27f82f4fd344bddcf99b09ef30b91aeff760d", 0xf4, 0x4000084, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x32, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="023eb834f4a6741f5a1fb52fa13ff4000000", @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={r2, 0x9b}, 0x8)

11:21:16 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

11:21:16 executing program 2:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x400000000080803, 0x0)
r2 = socket(0x10, 0x400000000080803, 0x0)
write(r2, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24)
r3 = socket(0x10, 0x400000000080803, 0x0)
write(r3, &(0x7f0000000080), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x800)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, 0x0, 0x0)
socket(0x0, 0x0, 0x8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)

[   60.243078][ T7322] binder: 7319:7322 unknown command 0
[   60.274954][ T7322] binder: 7319:7322 ioctl c0306201 20000000 returned -22
11:21:16 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
flistxattr(r3, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x4000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5})
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0)
sendfile(r1, r4, 0x0, 0x102002700)

11:21:16 executing program 3:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:17 executing program 4:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$inet(0x2, 0xa15caa8d75fd1f17, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f00000000c0)="bb79c28bfbba9d00cb5dc89aea48547d1e195582fcdabc2879ae0faa742a4c6ae4ad3b204d747e60ff69261af604e622903168bb0022e904646e30d88000265993555e870ed29c385f3d68976b2716a0b40d04196cb7382a741cb6461893c6740ce467753e61e516c61b7930c32076b4752a6cfe904203fca3a161bf175f4284ea1a77857f09147e42492d0165b0193a591f812a85f7f8c190968cc00ef83794e9b33b83a4b73950fb3c41711f163d88adac447eb201a73e2ef9877b8a7bb80f50963352794b53c9d391171ab733ebdb9175d0573a23db5b6601e880ea7b57a825b27f82f4fd344bddcf99b09ef30b91aeff760d", 0xf4, 0x4000084, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x32, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="023eb834f4a6741f5a1fb52fa13ff4000000", @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={r2, 0x9b}, 0x8)

11:21:17 executing program 1:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:17 executing program 2:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:17 executing program 5:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:18 executing program 1:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

11:21:18 executing program 3:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$tun(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e917000000000000000000", 0x1d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

[   61.687856][ T6809] ==================================================================
[   61.695993][ T6809] BUG: KCSAN: data-race in ktime_get_real_seconds / timekeeping_advance
[   61.704300][ T6809] 
[   61.707149][ T6809] write to 0xffffffff8603db08 of 280 bytes by interrupt on cpu 1:
[   61.714979][ T6809]  timekeeping_advance+0x893/0xd80
[   61.720873][ T6809]  update_wall_time+0x19/0x20
[   61.725556][ T6809]  tick_do_update_jiffies64+0x1ae/0x260
[   61.731094][ T6809]  tick_sched_do_timer+0xd4/0xe0
11:21:18 executing program 0:
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
flistxattr(r3, 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x4000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5})
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0)
sendfile(r1, r4, 0x0, 0x102002700)

[   61.737002][ T6809]  tick_sched_timer+0x43/0xe0
[   61.741670][ T6809]  __hrtimer_run_queues+0x288/0x600
[   61.746864][ T6809]  hrtimer_interrupt+0x22a/0x480
[   61.751801][ T6809]  smp_apic_timer_interrupt+0xdc/0x280
[   61.757260][ T6809]  apic_timer_interrupt+0xf/0x20
[   61.762195][ T6809]  __kcsan_check_watchpoint+0x95/0x180
[   61.767666][ T6809]  __tsan_write8+0x18/0x40
[   61.772076][ T6809]  unmap_page_range+0x7c9/0x1720
[   61.777026][ T6809]  unmap_single_vma+0x144/0x200
[   61.781878][ T6809]  unmap_vmas+0xda/0x1a0
[   61.786103][ T6809] 
[   61.788429][ T6809] read to 0xffffffff8603db78 of 8 bytes by task 6809 on cpu 0:
[   61.795967][ T6809]  ktime_get_real_seconds+0x20/0x40
[   61.801167][ T6809]  tomoyo_supervisor+0x1da/0xd20
[   61.806099][ T6809]  tomoyo_path_permission+0x121/0x160
[   61.811477][ T6809]  tomoyo_path_perm+0x23e/0x390
[   61.816319][ T6809]  tomoyo_inode_getattr+0x26/0x40
[   61.821334][ T6809]  security_inode_getattr+0x9b/0xd0
[   61.826525][ T6809]  vfs_getattr+0x2e/0x70
[   61.830759][ T6809]  vfs_statx+0x102/0x190
[   61.835000][ T6809]  __do_sys_newstat+0x51/0xb0
[   61.839678][ T6809]  __x64_sys_newstat+0x3a/0x50
[   61.844447][ T6809]  do_syscall_64+0xcf/0x2f0
[   61.848959][ T6809]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   61.854831][ T6809] 
[   61.857133][ T6809] Reported by Kernel Concurrency Sanitizer on:
[   61.863328][ T6809] CPU: 0 PID: 6809 Comm: udevd Not tainted 5.3.0+ #0
[   61.869978][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   61.880112][ T6809] ==================================================================
[   61.888163][ T6809] Kernel panic - not syncing: panic_on_warn set ...
[   61.894835][ T6809] CPU: 0 PID: 6809 Comm: udevd Not tainted 5.3.0+ #0
[   61.901688][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   61.911741][ T6809] Call Trace:
[   61.915042][ T6809]  dump_stack+0xf5/0x159
[   61.919291][ T6809]  panic+0x209/0x639
[   61.923183][ T6809]  ? __do_sys_newstat+0x51/0xb0
[   61.928029][ T6809]  ? vprintk_func+0x8d/0x140
[   61.932622][ T6809]  kcsan_report.cold+0xc/0x1b
[   61.937305][ T6809]  __kcsan_setup_watchpoint+0x3ee/0x510
[   61.942863][ T6809]  __tsan_read8+0x2c/0x30
[   61.947202][ T6809]  ktime_get_real_seconds+0x20/0x40
[   61.952401][ T6809]  tomoyo_supervisor+0x1da/0xd20
[   61.957600][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   61.963240][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   61.968878][ T6809]  ? __tsan_write1+0x32/0x40
[   61.973474][ T6809]  ? tomoyo_compare_name_union+0xa0/0xa0
[   61.979113][ T6809]  tomoyo_path_permission+0x121/0x160
[   61.984489][ T6809]  tomoyo_path_perm+0x23e/0x390
[   61.989355][ T6809]  tomoyo_inode_getattr+0x26/0x40
[   61.994406][ T6809]  security_inode_getattr+0x9b/0xd0
[   61.999601][ T6809]  vfs_getattr+0x2e/0x70
[   62.003834][ T6809]  vfs_statx+0x102/0x190
[   62.008080][ T6809]  __do_sys_newstat+0x51/0xb0
[   62.012756][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   62.018392][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   62.024022][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   62.029644][ T6809]  ? __kcsan_setup_watchpoint+0x96/0x510
[   62.035274][ T6809]  ? __tsan_read8+0x2c/0x30
[   62.039782][ T6809]  __x64_sys_newstat+0x3a/0x50
[   62.044546][ T6809]  do_syscall_64+0xcf/0x2f0
[   62.049062][ T6809]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.054955][ T6809] RIP: 0033:0x7fb5d08a0c65
[   62.059370][ T6809] Code: 00 00 00 e8 5d 01 00 00 48 83 c4 18 c3 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 a1 51 2b 00 64 c7 00 16
[   62.078976][ T6809] RSP: 002b:00007ffc711a4b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[   62.087385][ T6809] RAX: ffffffffffffffda RBX: 0000000000000701 RCX: 00007fb5d08a0c65
[   62.095352][ T6809] RDX: 00007ffc711a4ba0 RSI: 00007ffc711a4ba0 RDI: 00007ffc711a5430
[   62.103325][ T6809] RBP: 00000000000003e9 R08: 0000000001ecc440 R09: 00007fb5d08f73d0
[   62.111292][ T6809] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000001ecc440
[   62.119260][ T6809] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000001ee6c99
[   62.128823][ T6809] Kernel Offset: disabled
[   62.133141][ T6809] Rebooting in 86400 seconds..