Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts.
2019/10/16 05:21:22 fuzzer started
2019/10/16 05:21:23 dialing manager at 10.128.0.105:34737
2019/10/16 05:21:24 syscalls: 2524
2019/10/16 05:21:24 code coverage: enabled
2019/10/16 05:21:24 comparison tracing: enabled
2019/10/16 05:21:24 extra coverage: extra coverage is not supported by the kernel
2019/10/16 05:21:24 setuid sandbox: enabled
2019/10/16 05:21:24 namespace sandbox: enabled
2019/10/16 05:21:24 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/16 05:21:24 fault injection: enabled
2019/10/16 05:21:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/16 05:21:24 net packet injection: enabled
2019/10/16 05:21:24 net device setup: enabled
2019/10/16 05:21:24 concurrency sanitizer: enabled
05:21:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

syzkaller login: [   50.227914][ T7185] IPVS: ftp: loaded support on port[0] = 21
05:21:27 executing program 1:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

[   50.353088][ T7185] chnl_net:caif_netlink_parms(): no params data found
[   50.406616][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.413785][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.436411][ T7185] device bridge_slave_0 entered promiscuous mode
[   50.456139][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.463272][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.472538][ T7185] device bridge_slave_1 entered promiscuous mode
[   50.487614][ T7188] IPVS: ftp: loaded support on port[0] = 21
[   50.517457][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.540967][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
05:21:28 executing program 2:
syslog(0x2, &(0x7f0000000000)=""/3, 0x0)

[   50.584638][ T7185] team0: Port device team_slave_0 added
[   50.592517][ T7185] team0: Port device team_slave_1 added
[   50.729334][ T7185] device hsr_slave_0 entered promiscuous mode
05:21:28 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="d3abc7990c535c9e70bc111c8eff30000070d294e2bbd16c8ed5681a25a0eb03", 0x20)

[   50.785653][ T7185] device hsr_slave_1 entered promiscuous mode
[   50.902957][ T7190] IPVS: ftp: loaded support on port[0] = 21
[   50.911289][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.918645][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.925984][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.933051][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.983402][ T7188] chnl_net:caif_netlink_parms(): no params data found
[   51.071034][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.099205][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.108408][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.117093][ T7188] device bridge_slave_0 entered promiscuous mode
[   51.131924][ T7185] 8021q: adding VLAN 0 to HW filter on device team0
[   51.143718][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.154370][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.162688][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
05:21:28 executing program 4:
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@dmask={'dmask', 0x2c}}]})

[   51.173874][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   51.188232][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.195552][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.210569][ T7188] device bridge_slave_1 entered promiscuous mode
[   51.236175][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.247437][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.254495][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.270192][ T7193] IPVS: ftp: loaded support on port[0] = 21
[   51.329920][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.359002][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.366145][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.379151][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.408451][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.438690][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.463594][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.474213][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.498274][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.516682][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.540142][ T7190] chnl_net:caif_netlink_parms(): no params data found
[   51.559511][ T7188] team0: Port device team_slave_0 added
[   51.573011][ T7188] team0: Port device team_slave_1 added
[   51.574471][ T7198] IPVS: ftp: loaded support on port[0] = 21
05:21:29 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[   51.600418][ T7185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.622433][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.632943][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.644239][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.695157][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.717063][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.724132][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.733298][ T7190] device bridge_slave_0 entered promiscuous mode
[   51.807901][ T7188] device hsr_slave_0 entered promiscuous mode
[   51.865727][ T7188] device hsr_slave_1 entered promiscuous mode
[   51.925466][ T7188] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.942481][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.949612][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.957875][ T7190] device bridge_slave_1 entered promiscuous mode
[   51.977836][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.988510][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.025976][ T7190] team0: Port device team_slave_0 added
[   52.042092][ T7201] IPVS: ftp: loaded support on port[0] = 21
[   52.054111][ T7190] team0: Port device team_slave_1 added
[   52.129160][ T7190] device hsr_slave_0 entered promiscuous mode
[   52.175766][ T7190] device hsr_slave_1 entered promiscuous mode
[   52.235436][ T7190] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.353301][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.360771][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.368122][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.375162][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.400348][ T7193] chnl_net:caif_netlink_parms(): no params data found
[   52.443255][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.451492][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
05:21:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   52.575227][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.584156][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.598379][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.609777][ T7193] device bridge_slave_0 entered promiscuous mode
[   52.620152][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.627691][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.635733][ T7193] device bridge_slave_1 entered promiscuous mode
[   52.642745][ T7198] chnl_net:caif_netlink_parms(): no params data found
[   52.653848][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.668615][ T7190] 8021q: adding VLAN 0 to HW filter on device team0
05:21:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   52.702119][ T7201] chnl_net:caif_netlink_parms(): no params data found
[   52.712423][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.724405][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.734750][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.755757][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.764332][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.773235][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.780374][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.803553][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.812390][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.821380][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.828523][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.837158][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.856072][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.872509][ T7188] 8021q: adding VLAN 0 to HW filter on device team0
[   52.891658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.899658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.907902][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.917813][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.926750][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.936373][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.945495][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
05:21:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   52.954611][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.976035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.041907][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.050278][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.058288][ T7201] device bridge_slave_0 entered promiscuous mode
[   53.065838][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.090805][ T7193] team0: Port device team_slave_0 added
[   53.111982][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.119276][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.127373][ T7201] device bridge_slave_1 entered promiscuous mode
[   53.134161][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state
05:21:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   53.146465][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.154658][ T7198] device bridge_slave_0 entered promiscuous mode
[   53.163597][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.177146][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.189797][ T7198] device bridge_slave_1 entered promiscuous mode
[   53.224041][ T7193] team0: Port device team_slave_1 added
[   53.236172][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.244798][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.253291][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.260344][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.269094][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.286239][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.294771][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.301862][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.309777][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.318937][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.328202][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.337016][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.346336][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.354894][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.363774][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.372125][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.380913][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.388951][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
05:21:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   53.437564][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.446610][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.458537][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.467495][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.483795][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.494146][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.512149][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.568565][ T7193] device hsr_slave_0 entered promiscuous mode
[   53.605866][ T7193] device hsr_slave_1 entered promiscuous mode
[   53.645524][ T7193] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.654723][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.665788][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.682045][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.706529][ T7198] team0: Port device team_slave_0 added
[   53.718451][ T7198] team0: Port device team_slave_1 added
[   53.727558][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0
05:21:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   53.784598][ T7201] team0: Port device team_slave_0 added
[   53.794584][ T7201] team0: Port device team_slave_1 added
[   53.858550][ T7198] device hsr_slave_0 entered promiscuous mode
[   53.895851][ T7198] device hsr_slave_1 entered promiscuous mode
[   53.925425][ T7198] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.948369][ T7190] 8021q: adding VLAN 0 to HW filter on device batadv0
05:21:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   54.010472][ T7201] device hsr_slave_0 entered promiscuous mode
[   54.075834][ T7201] device hsr_slave_1 entered promiscuous mode
[   54.125398][ T7201] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.172026][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.244605][ T7193] 8021q: adding VLAN 0 to HW filter on device team0
[   54.265082][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.273335][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.282091][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.291271][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.299984][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.307162][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.339271][ T7198] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.353581][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   54.366932][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.375049][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.384524][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.385372][    C0] hrtimer: interrupt took 27242 ns
[   54.393902][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.404730][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.423560][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.449473][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.478551][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.499127][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.512079][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.530609][ T7193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.546155][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.566935][ T7198] 8021q: adding VLAN 0 to HW filter on device team0
[   54.578799][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.595975][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.605998][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.625582][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.640582][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.674394][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.683734][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.709926][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.740675][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.775151][ T7201] 8021q: adding VLAN 0 to HW filter on device team0
[   54.792006][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.806827][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.815934][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.824736][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.831920][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.846870][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.860587][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.869485][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.876555][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.890232][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.900882][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.914856][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.924957][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.939326][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.950682][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.963176][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.972855][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.985964][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.997898][ T7198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.014510][ T7198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.044443][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.059599][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.073315][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.082084][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.091537][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.100314][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.120691][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.132222][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.143184][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.150298][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.174793][ T7201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
05:21:32 executing program 1:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:32 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

[   55.191544][ T7201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.241937][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.251928][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.284974][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.295823][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.305092][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.312202][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.321504][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.331461][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.341671][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.351172][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.362811][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.372158][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.381662][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.390410][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.400046][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.408945][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.419615][ T7198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.468428][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.481110][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.506086][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.850126][ T7301] __ntfs_error: 3 callbacks suppressed
[   55.850149][ T7301] ntfs: (device loop4): parse_options(): The dmask option requires an argument.
05:21:33 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="d3abc7990c535c9e70bc111c8eff30000070d294e2bbd16c8ed5681a25a0eb03", 0x20)

[   55.958070][ T7301] ntfs: (device loop4): parse_options(): The dmask option requires an argument.
05:21:33 executing program 4:
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@dmask={'dmask', 0x2c}}]})

05:21:33 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x424, 0x0, 0x0, 0x0, 0x8b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf80)

05:21:33 executing program 2:
syslog(0x2, &(0x7f0000000000)=""/3, 0x0)

05:21:33 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:33 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="d3abc7990c535c9e70bc111c8eff30000070d294e2bbd16c8ed5681a25a0eb03", 0x20)

[   56.254677][ T7319] ntfs: (device loop4): parse_options(): The dmask option requires an argument.
05:21:33 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="d3abc7990c535c9e70bc111c8eff30000070d294e2bbd16c8ed5681a25a0eb03", 0x20)

05:21:33 executing program 1:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:34 executing program 2:
syslog(0x2, &(0x7f0000000000)=""/3, 0x0)

05:21:34 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:34 executing program 4:
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@dmask={'dmask', 0x2c}}]})

05:21:34 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:34 executing program 2:
syslog(0x2, &(0x7f0000000000)=""/3, 0x0)

05:21:34 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:34 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[   56.883522][ T7346] ntfs: (device loop4): parse_options(): The dmask option requires an argument.
05:21:34 executing program 4:
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@dmask={'dmask', 0x2c}}]})

05:21:34 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:34 executing program 2:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:34 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[   57.368778][ T7366] ntfs: (device loop4): parse_options(): The dmask option requires an argument.
05:21:35 executing program 1:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:35 executing program 5:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:35 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:35 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffefffffffff40, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

05:21:35 executing program 4:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:35 executing program 3:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

05:21:35 executing program 0:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
shutdown(r0, 0x2)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040085)

[   58.055872][ T7405] ==================================================================
[   58.064386][ T7405] BUG: KCSAN: data-race in __splice_from_pipe / pipe_poll
[   58.071493][ T7405] 
[   58.073831][ T7405] write to 0xffff888104b6de78 of 4 bytes by task 7407 on cpu 1:
[   58.081470][ T7405]  __splice_from_pipe+0x3ce/0x480
[   58.086496][ T7405]  do_vmsplice.part.0+0x1c5/0x210
[   58.091512][ T7405]  __do_sys_vmsplice+0x15f/0x1c0
[   58.096440][ T7405]  __x64_sys_vmsplice+0x5e/0x80
[   58.101283][ T7405]  do_syscall_64+0xcc/0x370
[   58.105777][ T7405]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   58.111646][ T7405] 
[   58.113961][ T7405] read to 0xffff888104b6de78 of 4 bytes by task 7405 on cpu 0:
[   58.121492][ T7405]  pipe_poll+0x84/0x1d0
[   58.125634][ T7405]  do_select+0x7d0/0x1020
[   58.129958][ T7405]  core_sys_select+0x381/0x550
[   58.134718][ T7405]  do_pselect.constprop.0+0x11d/0x160
[   58.140081][ T7405]  __x64_sys_pselect6+0x12e/0x170
[   58.145090][ T7405]  do_syscall_64+0xcc/0x370
[   58.149581][ T7405]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   58.155448][ T7405] 
[   58.157765][ T7405] Reported by Kernel Concurrency Sanitizer on:
[   58.163926][ T7405] CPU: 0 PID: 7405 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0
[   58.171716][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   58.181758][ T7405] ==================================================================
[   58.189807][ T7405] Kernel panic - not syncing: panic_on_warn set ...
[   58.196382][ T7405] CPU: 0 PID: 7405 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0
[   58.204163][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   58.214199][ T7405] Call Trace:
[   58.217485][ T7405]  dump_stack+0xf5/0x159
[   58.221718][ T7405]  panic+0x210/0x640
[   58.225609][ T7405]  ? vprintk_func+0x8d/0x140
[   58.230193][ T7405]  kcsan_report.cold+0xc/0x1b
[   58.234861][ T7405]  __kcsan_setup_watchpoint+0x3ee/0x510
[   58.240398][ T7405]  ? generic_pipe_buf_confirm+0x20/0x20
[   58.245927][ T7405]  __tsan_read4+0x2c/0x30
[   58.250242][ T7405]  pipe_poll+0x84/0x1d0
[   58.254404][ T7405]  ? generic_pipe_buf_confirm+0x20/0x20
[   58.259937][ T7405]  do_select+0x7d0/0x1020
[   58.264269][ T7405]  ? __kcsan_setup_watchpoint+0x96/0x510
[   58.269890][ T7405]  ? poll_select_finish+0x440/0x440
[   58.275078][ T7405]  ? poll_select_finish+0x440/0x440
[   58.280265][ T7405]  ? poll_select_finish+0x440/0x440
[   58.285462][ T7405]  ? poll_select_finish+0x440/0x440
[   58.290650][ T7405]  ? poll_select_finish+0x440/0x440
[   58.295847][ T7405]  ? poll_select_finish+0x440/0x440
[   58.301034][ T7405]  ? check_stack_object+0x4c/0x110
[   58.306131][ T7405]  ? __tsan_read8+0x2c/0x30
[   58.310620][ T7405]  ? apic_timer_interrupt+0xa/0x20
[   58.315726][ T7405]  core_sys_select+0x381/0x550
[   58.320486][ T7405]  ? __kcsan_setup_watchpoint+0x96/0x510
[   58.326105][ T7405]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   58.331986][ T7405]  ? __tsan_write8+0x32/0x40
[   58.336564][ T7405]  ? ktime_get_ts64+0x286/0x2c0
[   58.341401][ T7405]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[   58.347106][ T7405]  ? timespec64_add_safe+0xae/0xd0
[   58.352208][ T7405]  do_pselect.constprop.0+0x11d/0x160
[   58.357569][ T7405]  __x64_sys_pselect6+0x12e/0x170
[   58.362589][ T7405]  do_syscall_64+0xcc/0x370
[   58.367081][ T7405]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   58.372974][ T7405] RIP: 0033:0x459a59
[   58.376860][ T7405] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   58.396447][ T7405] RSP: 002b:00007fc7a8a67c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   58.405627][ T7405] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59
[   58.413581][ T7405] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000040
[   58.421538][ T7405] RBP: 000000000075bfc8 R08: 0000000020000200 R09: 0000000000000000
[   58.429495][ T7405] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fc7a8a686d4
[   58.437452][ T7405] R13: 00000000004c6fff R14: 00000000004dc878 R15: 00000000ffffffff
[   58.446916][ T7405] Kernel Offset: disabled
[   58.451281][ T7405] Rebooting in 86400 seconds..