05", 0x95, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1423.457379][T26091] bridge886: port 1(syz_tun) entered blocking state [ 1423.471687][T26091] bridge886: port 1(syz_tun) entered disabled state [ 1423.481506][T26077] loop5: p1 p2 p3 < > p4 [ 1423.485950][T26077] loop5: partition table partially beyond EOD, truncated [ 1423.511738][T26077] loop5: p1 start 10 is beyond EOD, truncated [ 1423.524279][T26091] device syz_tun entered promiscuous mode [ 1423.547082][T26077] loop5: p2 start 25 is beyond EOD, truncated [ 1423.566158][T26085] device bridge886 entered promiscuous mode [ 1423.572776][T26096] bridge886: port 1(syz_tun) entered blocking state [ 1423.579411][T26096] bridge886: port 1(syz_tun) entered forwarding state [ 1423.595140][T26101] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1423.616957][T26077] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1423.637382][T26096] device bridge886 left promiscuous mode [ 1423.648369][T26101] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1423.666243][T26077] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1423.694895][T26091] bridge886: port 1(syz_tun) entered disabled state [ 1423.701647][T26091] device bridge886 entered promiscuous mode [ 1423.715129][T26101] F2FS-fs (loop3): invalid crc_offset: 0 03:17:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac5201ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1423.746835][T26101] F2FS-fs (loop3): invalid crc_offset: 0 [ 1423.771141][T26101] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100", 0xae, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000efffffff}, 0x0) [ 1423.852326][T26099] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1424.015983][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1424.085011][T26114] Dev loop5: unable to read RDB block 1 [ 1424.090828][T26119] device syz_tun left promiscuous mode [ 1424.096874][T26115] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1424.105309][T26119] bridge886: port 1(syz_tun) entered disabled state [ 1424.113493][T26114] loop5: unable to read partition table [ 1424.123435][T26115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1424.136193][T26114] loop5: partition table beyond EOD, truncated [ 1424.147528][T26119] bridge887: port 1(syz_tun) entered blocking state [ 1424.158732][T26115] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.168113][T26114] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1424.177418][T26119] bridge887: port 1(syz_tun) entered disabled state [ 1424.190968][T26115] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.193606][T26119] device syz_tun entered promiscuous mode [ 1424.212551][T26115] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1424.217833][T26113] device bridge887 entered promiscuous mode [ 1424.232462][T26125] bridge887: port 1(syz_tun) entered blocking state [ 1424.239156][T26125] bridge887: port 1(syz_tun) entered forwarding state [ 1424.265297][T26125] device bridge887 left promiscuous mode [ 1424.302935][T26119] bridge887: port 1(syz_tun) entered disabled state 03:17:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac6401ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1424.313264][T26119] device bridge887 entered promiscuous mode 03:17:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100", 0xae, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000f0ffffff}, 0x0) [ 1424.506899][T26135] Dev loop5: unable to read RDB block 1 [ 1424.512583][T26135] loop5: unable to read partition table [ 1424.528063][T26135] loop5: partition table beyond EOD, truncated [ 1424.530984][T26127] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1424.540724][T26136] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1424.551592][T26135] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1424.562478][T26136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1424.587215][T26136] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.609134][T26136] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.629590][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1424.650286][T26136] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1424.665834][T26138] Dev loop5: unable to read RDB block 1 [ 1424.671432][T26138] loop5: unable to read partition table [ 1424.700240][T26138] loop5: partition table beyond EOD, truncated 03:17:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100", 0xae, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1424.726751][T26147] device syz_tun left promiscuous mode [ 1424.732395][T26147] bridge887: port 1(syz_tun) entered disabled state [ 1424.739974][T26138] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1424.776387][T26147] bridge888: port 1(syz_tun) entered blocking state [ 1424.783011][T26147] bridge888: port 1(syz_tun) entered disabled state [ 1424.814866][T26147] device syz_tun entered promiscuous mode 03:17:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acbc01ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1424.837929][T26150] device bridge888 entered promiscuous mode [ 1424.850725][T26143] bridge888: port 1(syz_tun) entered blocking state [ 1424.854571][T26153] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1424.857389][T26143] bridge888: port 1(syz_tun) entered forwarding state [ 1424.877222][T26153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1424.904972][T26143] device bridge888 left promiscuous mode [ 1424.906391][T26153] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.916662][T26153] F2FS-fs (loop3): invalid crc_offset: 0 [ 1424.922543][T26153] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00", 0xba, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1424.947744][T26150] device syz_tun left promiscuous mode [ 1424.953581][T26150] bridge888: port 1(syz_tun) entered disabled state [ 1424.987112][T26147] device bridge888 entered promiscuous mode 03:17:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000fcffffff}, 0x0) [ 1425.054447][T26160] Dev loop5: unable to read RDB block 1 [ 1425.060358][T26160] loop5: unable to read partition table [ 1425.091500][T26160] loop5: partition table beyond EOD, truncated [ 1425.111774][T26160] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1425.131088][T26166] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.145343][T26166] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1425.164890][T26169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.166219][T26166] F2FS-fs (loop3): invalid crc_offset: 0 [ 1425.181559][T26166] F2FS-fs (loop3): invalid crc_offset: 0 [ 1425.187367][T26166] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00", 0xba, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0402ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1425.253584][T26172] bridge889: port 1(syz_tun) entered blocking state [ 1425.263054][T26163] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1425.276900][T26172] bridge889: port 1(syz_tun) entered disabled state [ 1425.299593][T26172] device syz_tun entered promiscuous mode [ 1425.315426][T26169] device bridge889 entered promiscuous mode [ 1425.338678][T26176] bridge889: port 1(syz_tun) entered blocking state [ 1425.345368][T26176] bridge889: port 1(syz_tun) entered forwarding state [ 1425.364047][T26176] device bridge889 left promiscuous mode [ 1425.393035][T26172] bridge889: port 1(syz_tun) entered disabled state [ 1425.400146][T26180] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.414398][T26172] device bridge889 entered promiscuous mode [ 1425.434804][T26180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1425.476078][T26180] F2FS-fs (loop3): invalid crc_offset: 0 [ 1425.502101][T26180] F2FS-fs (loop3): invalid crc_offset: 0 [ 1425.518591][T26184] Dev loop5: unable to read RDB block 1 [ 1425.548680][T26184] loop5: unable to read partition table 03:17:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000feffffff}, 0x0) [ 1425.613020][T26180] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1425.620851][T26184] loop5: partition table beyond EOD, truncated 03:17:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00", 0xba, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1425.670387][T26184] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1425.808290][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.814618][T26187] Dev loop5: unable to read RDB block 1 [ 1425.823084][T26187] loop5: unable to read partition table [ 1425.835410][T26187] loop5: partition table beyond EOD, truncated [ 1425.841711][T26187] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac5f02ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1425.881034][T26200] device syz_tun left promiscuous mode [ 1425.888570][T26200] bridge889: port 1(syz_tun) entered disabled state [ 1425.922347][T26200] bridge890: port 1(syz_tun) entered blocking state [ 1425.931582][T26200] bridge890: port 1(syz_tun) entered disabled state [ 1425.933545][T26192] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1425.940443][T26200] device syz_tun entered promiscuous mode [ 1425.952274][T26199] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.960502][T26199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1425.970883][T26197] device bridge890 entered promiscuous mode [ 1425.977248][T26199] F2FS-fs (loop3): invalid crc_offset: 0 [ 1425.977494][T26206] bridge890: port 1(syz_tun) entered blocking state [ 1425.989504][T26206] bridge890: port 1(syz_tun) entered forwarding state [ 1425.990644][T26199] F2FS-fs (loop3): invalid crc_offset: 0 [ 1426.005684][T26199] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1426.034463][T26206] device bridge890 left promiscuous mode [ 1426.047666][T26200] bridge890: port 1(syz_tun) entered disabled state [ 1426.074415][T26200] device bridge890 entered promiscuous mode 03:17:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffa888}, 0x0) 03:17:09 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000", 0xc0, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1426.159841][T26209] Dev loop5: unable to read RDB block 1 [ 1426.185479][T26209] loop5: unable to read partition table [ 1426.234552][T26216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1426.237713][T26209] loop5: partition table beyond EOD, truncated [ 1426.284388][T26216] device syz_tun left promiscuous mode [ 1426.290013][T26216] bridge890: port 1(syz_tun) entered disabled state [ 1426.290637][T26209] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1426.317227][T26216] bridge891: port 1(syz_tun) entered blocking state [ 1426.323860][T26216] bridge891: port 1(syz_tun) entered disabled state [ 1426.333541][T26221] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1426.355576][T26221] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1426.364879][T26216] device syz_tun entered promiscuous mode [ 1426.372248][T26221] F2FS-fs (loop3): invalid crc_offset: 0 [ 1426.377995][T26224] device bridge891 entered promiscuous mode 03:17:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:09 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000", 0xc0, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1426.380088][T26221] F2FS-fs (loop3): invalid crc_offset: 0 [ 1426.390121][T26221] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1426.392219][T26216] bridge891: port 1(syz_tun) entered blocking state [ 1426.403871][T26216] bridge891: port 1(syz_tun) entered forwarding state [ 1426.435886][T26216] device bridge891 left promiscuous mode [ 1426.471414][T26224] bridge891: port 1(syz_tun) entered disabled state [ 1426.484950][T26224] device bridge891 entered promiscuous mode [ 1426.524548][T26209] Dev loop5: unable to read RDB block 1 [ 1426.531018][T26209] loop5: unable to read partition table [ 1426.533084][T26232] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1426.553444][T26209] loop5: partition table beyond EOD, truncated [ 1426.561352][T26232] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1426.579374][T26216] bridge891: port 1(syz_tun) entered blocking state [ 1426.586022][T26216] bridge891: port 1(syz_tun) entered forwarding state [ 1426.593604][T26209] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1426.599619][T26232] F2FS-fs (loop3): invalid crc_offset: 0 [ 1426.619351][T26216] device bridge891 left promiscuous mode 03:17:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0003ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1426.639090][T26232] F2FS-fs (loop3): invalid crc_offset: 0 [ 1426.673431][T26232] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffff7f}, 0x0) 03:17:09 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000", 0xc0, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1426.858797][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1426.868836][T26238] Dev loop5: unable to read RDB block 1 [ 1426.870855][T26234] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1426.877599][T26238] loop5: unable to read partition table [ 1426.925539][T26238] loop5: partition table beyond EOD, truncated [ 1426.938925][T26248] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1426.959447][T26247] device syz_tun left promiscuous mode [ 1426.967435][T26248] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1426.981707][T26247] bridge891: port 1(syz_tun) entered disabled state [ 1427.008860][T26238] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1427.053641][T26247] bridge892: port 1(syz_tun) entered blocking state [ 1427.071544][T26248] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.100448][T26248] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.110852][T26247] bridge892: port 1(syz_tun) entered disabled state [ 1427.139723][T26248] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1427.155711][T26247] device syz_tun entered promiscuous mode [ 1427.174527][T26244] Dev loop5: unable to read RDB block 1 [ 1427.180133][T26244] loop5: unable to read partition table [ 1427.188848][T26243] device bridge892 entered promiscuous mode [ 1427.194279][T26244] loop5: partition table beyond EOD, truncated 03:17:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000400000", 0xc3, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1427.200034][T26251] bridge892: port 1(syz_tun) entered blocking state [ 1427.201096][T26244] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1427.215699][T26251] bridge892: port 1(syz_tun) entered forwarding state 03:17:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac3203ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffff81}, 0x0) [ 1427.295780][T26251] device bridge892 left promiscuous mode [ 1427.317527][T26247] bridge892: port 1(syz_tun) entered disabled state [ 1427.335479][T26247] device bridge892 entered promiscuous mode [ 1427.368148][T26260] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1427.386406][T26260] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1427.427120][T26260] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.455749][T26260] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.464757][T26264] Dev loop5: unable to read RDB block 1 [ 1427.470479][T26264] loop5: unable to read partition table [ 1427.489407][T26264] loop5: partition table beyond EOD, truncated [ 1427.491389][T26260] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1427.514889][T26264] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000400000", 0xc3, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1427.612137][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1427.634378][T26272] device syz_tun left promiscuous mode [ 1427.640354][T26272] bridge892: port 1(syz_tun) entered disabled state [ 1427.651944][T26267] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1427.676813][T26272] bridge893: port 1(syz_tun) entered blocking state [ 1427.683749][T26272] bridge893: port 1(syz_tun) entered disabled state [ 1427.693068][T26272] device syz_tun entered promiscuous mode [ 1427.699663][T26268] Dev loop5: unable to read RDB block 1 [ 1427.707250][T26268] loop5: unable to read partition table [ 1427.714948][T26280] device bridge893 entered promiscuous mode [ 1427.714960][T26268] loop5: partition table beyond EOD, truncated [ 1427.727717][T26272] bridge893: port 1(syz_tun) entered blocking state [ 1427.738709][T26272] bridge893: port 1(syz_tun) entered forwarding state [ 1427.754800][T26272] device bridge893 left promiscuous mode [ 1427.762382][T26279] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acc103ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1427.776025][T26280] bridge893: port 1(syz_tun) entered disabled state [ 1427.778259][T26268] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1427.783803][T26280] device bridge893 entered promiscuous mode [ 1427.807263][T26279] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffff9e}, 0x0) [ 1427.853208][T26279] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.894392][T26279] F2FS-fs (loop3): invalid crc_offset: 0 [ 1427.900057][T26279] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1427.954626][T26288] Dev loop5: unable to read RDB block 1 [ 1427.960673][T26288] loop5: unable to read partition table [ 1427.986887][T26288] loop5: partition table beyond EOD, truncated 03:17:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040000000400000", 0xc3, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1428.000460][T26291] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1428.016263][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1428.037141][T26288] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1428.037910][T26297] device syz_tun left promiscuous mode [ 1428.052804][T26297] bridge893: port 1(syz_tun) entered disabled state [ 1428.094399][T26297] bridge894: port 1(syz_tun) entered blocking state [ 1428.112350][T26297] bridge894: port 1(syz_tun) entered disabled state [ 1428.128580][T26297] device syz_tun entered promiscuous mode [ 1428.148763][T26303] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1428.163209][T26302] device bridge894 entered promiscuous mode [ 1428.171007][T26306] bridge894: port 1(syz_tun) entered blocking state [ 1428.177652][T26306] bridge894: port 1(syz_tun) entered forwarding state [ 1428.187468][T26303] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1428.197847][T26292] Dev loop5: unable to read RDB block 1 [ 1428.203546][T26292] loop5: unable to read partition table [ 1428.211120][T26303] F2FS-fs (loop3): invalid crc_offset: 0 [ 1428.216896][T26306] device bridge894 left promiscuous mode [ 1428.222932][T26292] loop5: partition table beyond EOD, truncated [ 1428.231219][T26303] F2FS-fs (loop3): invalid crc_offset: 0 [ 1428.237492][T26303] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="a981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1428.249435][T26302] bridge894: port 1(syz_tun) entered disabled state [ 1428.256880][T26302] device bridge894 entered promiscuous mode [ 1428.258230][T26292] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffffc3}, 0x0) 03:17:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xc5, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acdc03ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1428.425961][T26315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1428.468891][T26316] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1428.485806][T26316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1428.488475][T26320] device syz_tun left promiscuous mode [ 1428.495066][T26316] F2FS-fs (loop3): invalid crc value [ 1428.505610][T26316] F2FS-fs (loop3): invalid crc_offset: 0 [ 1428.512080][T26316] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1428.539420][T26320] bridge894: port 1(syz_tun) entered disabled state [ 1428.548178][T26320] bridge895: port 1(syz_tun) entered blocking state [ 1428.563622][T26320] bridge895: port 1(syz_tun) entered disabled state [ 1428.571374][T26320] device syz_tun entered promiscuous mode [ 1428.579500][T26315] device bridge895 entered promiscuous mode [ 1428.589852][T26327] bridge895: port 1(syz_tun) entered blocking state [ 1428.596750][T26327] bridge895: port 1(syz_tun) entered forwarding state [ 1428.613221][T26312] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1428.626338][T26327] device bridge895 left promiscuous mode [ 1428.647406][T26320] bridge895: port 1(syz_tun) entered disabled state [ 1428.657122][T26320] device bridge895 entered promiscuous mode [ 1428.674354][T26324] Dev loop5: unable to read RDB block 1 [ 1428.680007][T26324] loop5: unable to read partition table 03:17:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xc5, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1428.698319][T26324] loop5: partition table beyond EOD, truncated [ 1428.721356][T26324] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000ffffffef}, 0x0) 03:17:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="aa81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1428.831641][T26332] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1428.841700][T26332] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1428.856655][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1428.860705][T26326] Dev loop5: unable to read RDB block 1 [ 1428.874684][T26332] F2FS-fs (loop3): invalid crc value [ 1428.884415][T26326] loop5: unable to read partition table [ 1428.890607][T26332] F2FS-fs (loop3): invalid crc_offset: 0 [ 1428.902814][T26326] loop5: partition table beyond EOD, truncated [ 1428.907264][T26343] device syz_tun left promiscuous mode [ 1428.918933][T26332] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1428.923898][T26326] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1428.931623][T26343] bridge895: port 1(syz_tun) entered disabled state [ 1428.960755][T26343] bridge896: port 1(syz_tun) entered blocking state 03:17:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acfa03ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1428.988561][T26343] bridge896: port 1(syz_tun) entered disabled state [ 1429.023484][T26343] device syz_tun entered promiscuous mode 03:17:12 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xc5, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1429.072526][T26339] device bridge896 entered promiscuous mode [ 1429.089053][T26348] bridge896: port 1(syz_tun) entered blocking state [ 1429.095699][T26348] bridge896: port 1(syz_tun) entered forwarding state [ 1429.122259][T26348] device bridge896 left promiscuous mode [ 1429.154320][T26351] Dev loop5: unable to read RDB block 1 [ 1429.160362][T26351] loop5: unable to read partition table [ 1429.166160][T26343] bridge896: port 1(syz_tun) entered disabled state [ 1429.172966][T26343] device bridge896 entered promiscuous mode [ 1429.173017][T26351] loop5: partition table beyond EOD, truncated [ 1429.187732][T26354] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.202149][T26354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1429.218579][T26351] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1429.231142][T26354] F2FS-fs (loop3): invalid crc value [ 1429.241139][T26354] F2FS-fs (loop3): invalid crc_offset: 0 [ 1429.254549][T26354] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000fffffff0}, 0x0) 03:17:12 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1429.349971][T26345] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acfd03ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1429.418833][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1429.438062][T26364] device syz_tun left promiscuous mode [ 1429.444504][T26364] bridge896: port 1(syz_tun) entered disabled state [ 1429.462052][T26364] bridge897: port 1(syz_tun) entered blocking state [ 1429.470025][T26369] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.481064][T26364] bridge897: port 1(syz_tun) entered disabled state [ 1429.486234][T26369] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1429.489351][T26364] device syz_tun entered promiscuous mode [ 1429.508174][T26364] device bridge897 entered promiscuous mode [ 1429.514942][T26364] bridge897: port 1(syz_tun) entered blocking state [ 1429.521651][T26364] bridge897: port 1(syz_tun) entered forwarding state [ 1429.530347][T26364] device bridge897 left promiscuous mode [ 1429.539568][T26373] device syz_tun left promiscuous mode [ 1429.545548][T26373] bridge897: port 1(syz_tun) entered disabled state [ 1429.553903][T26369] F2FS-fs (loop3): invalid crc_offset: 0 [ 1429.568161][T26369] F2FS-fs (loop3): invalid crc_offset: 0 [ 1429.576860][T26372] Dev loop5: unable to read RDB block 1 [ 1429.582642][T26372] loop5: unable to read partition table [ 1429.594252][T26378] device bridge897 entered promiscuous mode [ 1429.600776][T26369] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1429.610084][T26372] loop5: partition table beyond EOD, truncated 03:17:12 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1429.634224][T26372] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ab81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1429.768516][T26377] Dev loop5: unable to read RDB block 1 [ 1429.774719][T26377] loop5: unable to read partition table [ 1429.787267][T26384] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.805587][T26377] loop5: partition table beyond EOD, truncated 03:17:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000fffffffc}, 0x0) [ 1429.821314][T26384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1429.831283][T26384] F2FS-fs (loop3): invalid crc_offset: 0 [ 1429.835723][T26377] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1429.837596][T26384] F2FS-fs (loop3): invalid crc_offset: 0 [ 1429.850863][T26384] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1429.865601][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1429.885906][T26390] bridge898: port 1(syz_tun) entered blocking state 03:17:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0204ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1429.921224][T26390] bridge898: port 1(syz_tun) entered disabled state [ 1429.958155][T26390] device syz_tun entered promiscuous mode [ 1429.976539][T26394] device bridge898 entered promiscuous mode [ 1429.986720][T26390] bridge898: port 1(syz_tun) entered blocking state [ 1429.993382][T26390] bridge898: port 1(syz_tun) entered forwarding state [ 1430.015911][T26396] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1430.035489][T26396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1430.047602][T26390] device bridge898 left promiscuous mode [ 1430.050144][T26387] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1430.067532][T26396] F2FS-fs (loop3): invalid crc_offset: 0 [ 1430.075895][T26394] device syz_tun left promiscuous mode [ 1430.081547][T26394] bridge898: port 1(syz_tun) entered disabled state [ 1430.095400][T26396] F2FS-fs (loop3): invalid crc_offset: 0 [ 1430.109941][T26404] device bridge898 entered promiscuous mode [ 1430.116126][T26401] Dev loop5: unable to read RDB block 1 [ 1430.119491][T26396] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1430.121957][T26401] loop5: unable to read partition table [ 1430.195978][T26401] loop5: partition table beyond EOD, truncated 03:17:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f000000fffffffe}, 0x0) [ 1430.248499][T26401] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ac81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1430.342279][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1430.376648][T26405] Dev loop5: unable to read RDB block 1 [ 1430.382542][T26412] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1430.396246][T26419] bridge899: port 1(syz_tun) entered blocking state [ 1430.398474][T26405] loop5: unable to read partition table [ 1430.403219][T26419] bridge899: port 1(syz_tun) entered disabled state [ 1430.416609][T26412] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1430.437267][T26419] device syz_tun entered promiscuous mode [ 1430.443701][T26405] loop5: partition table beyond EOD, truncated [ 1430.450236][T26412] F2FS-fs (loop3): invalid crc value [ 1430.461452][T26414] device bridge899 entered promiscuous mode [ 1430.471540][T26414] bridge899: port 1(syz_tun) entered blocking state [ 1430.478429][T26414] bridge899: port 1(syz_tun) entered forwarding state 03:17:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0604ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1430.494204][T26412] F2FS-fs (loop3): invalid crc_offset: 0 [ 1430.499914][T26412] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1430.508356][T26405] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1430.525315][T26414] device bridge899 left promiscuous mode 03:17:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1430.582659][T26419] device syz_tun left promiscuous mode [ 1430.589866][T26419] bridge899: port 1(syz_tun) entered disabled state [ 1430.640757][T26425] device bridge899 entered promiscuous mode 03:17:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2}, 0x0) [ 1430.706574][T26421] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1430.764231][T26429] Dev loop5: unable to read RDB block 1 [ 1430.771784][T26429] loop5: unable to read partition table [ 1430.788748][T26429] loop5: partition table beyond EOD, truncated [ 1430.795328][T26429] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1430.844396][T26431] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1430.859605][T26431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1430.879949][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1430.899312][T26431] F2FS-fs (loop3): invalid crc value [ 1430.920112][T26438] bridge900: port 1(syz_tun) entered blocking state [ 1430.924873][T26434] Dev loop5: unable to read RDB block 1 [ 1430.934481][T26434] loop5: unable to read partition table [ 1430.940156][T26434] loop5: partition table beyond EOD, truncated [ 1430.947992][T26434] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1430.948245][T26431] F2FS-fs (loop3): invalid crc_offset: 0 03:17:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0005ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1430.985145][T26431] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1430.993196][T26438] bridge900: port 1(syz_tun) entered disabled state [ 1431.022498][T26438] device syz_tun entered promiscuous mode 03:17:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ad81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1431.042497][T26444] device bridge900 entered promiscuous mode 03:17:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3}, 0x0) [ 1431.181389][T26457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1431.204224][T26453] Dev loop5: unable to read RDB block 1 [ 1431.210092][T26453] loop5: unable to read partition table [ 1431.221482][T26453] loop5: partition table beyond EOD, truncated [ 1431.231049][T26456] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1431.235345][T26453] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1431.251009][T26461] device syz_tun left promiscuous mode [ 1431.257002][T26461] bridge900: port 1(syz_tun) entered disabled state [ 1431.257157][T26456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1431.273611][T26461] bridge901: port 1(syz_tun) entered blocking state [ 1431.305297][T26461] bridge901: port 1(syz_tun) entered disabled state [ 1431.326192][T26456] F2FS-fs (loop3): invalid crc value [ 1431.340696][T26461] device syz_tun entered promiscuous mode [ 1431.358445][T26456] F2FS-fs (loop3): invalid crc_offset: 0 [ 1431.375374][T26457] device bridge901 entered promiscuous mode [ 1431.390076][T26456] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4}, 0x0) [ 1431.404239][T26459] Dev loop5: unable to read RDB block 1 [ 1431.410083][T26459] loop5: unable to read partition table [ 1431.419865][T26459] loop5: partition table beyond EOD, truncated [ 1431.425952][T26458] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1431.426702][T26459] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0006ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ae81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {0x0, 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1431.568823][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1431.593094][T26475] device syz_tun left promiscuous mode [ 1431.600072][T26475] bridge901: port 1(syz_tun) entered disabled state [ 1431.657791][T26475] bridge902: port 1(syz_tun) entered blocking state [ 1431.673966][T26475] bridge902: port 1(syz_tun) entered disabled state [ 1431.697326][T26475] device syz_tun entered promiscuous mode [ 1431.707236][T26482] Dev loop5: unable to read RDB block 1 [ 1431.712865][T26482] loop5: unable to read partition table [ 1431.738116][T26487] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1431.749321][T26482] loop5: partition table beyond EOD, truncated [ 1431.767021][T26481] device bridge902 entered promiscuous mode [ 1431.796300][T26487] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x5}, 0x0) [ 1431.819341][T26482] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1431.855398][T26487] F2FS-fs (loop3): invalid crc value [ 1431.882653][T26487] F2FS-fs (loop3): invalid crc_offset: 0 [ 1431.909998][T26487] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1431.973140][T26498] device syz_tun left promiscuous mode 03:17:15 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {0x0, 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1432.015603][T26498] bridge902: port 1(syz_tun) entered disabled state [ 1432.023322][T26489] Dev loop5: unable to read RDB block 1 [ 1432.037202][T26489] loop5: unable to read partition table [ 1432.046516][T26490] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1432.051037][T26489] loop5: partition table beyond EOD, truncated [ 1432.061086][T26498] bridge903: port 1(syz_tun) entered blocking state [ 1432.072678][T26498] bridge903: port 1(syz_tun) entered disabled state [ 1432.078878][T26489] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1432.090473][T26498] device syz_tun entered promiscuous mode 03:17:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6}, 0x0) 03:17:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0406ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1432.126356][T26502] device bridge903 entered promiscuous mode [ 1432.177338][T26507] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.191155][T26507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1432.218177][T26507] F2FS-fs (loop3): invalid crc value [ 1432.224488][T26507] F2FS-fs (loop3): invalid crc_offset: 0 [ 1432.229619][T26512] device syz_tun left promiscuous mode [ 1432.230116][T26507] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1432.243525][T26512] bridge903: port 1(syz_tun) entered disabled state [ 1432.252507][T26512] bridge904: port 1(syz_tun) entered blocking state [ 1432.260569][T26512] bridge904: port 1(syz_tun) entered disabled state [ 1432.269697][T26512] device syz_tun entered promiscuous mode [ 1432.290492][T26518] device bridge904 entered promiscuous mode 03:17:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="af81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7}, 0x0) 03:17:15 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {0x0, 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1432.374278][T26519] Dev loop5: unable to read RDB block 1 [ 1432.380040][T26519] loop5: unable to read partition table [ 1432.406744][T26519] loop5: partition table beyond EOD, truncated [ 1432.446009][T26519] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1432.466211][T26529] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.478445][T26529] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1432.486340][T26534] device syz_tun left promiscuous mode [ 1432.497023][T26529] F2FS-fs (loop3): invalid crc value [ 1432.508350][T26529] F2FS-fs (loop3): invalid crc_offset: 0 [ 1432.515410][T26534] bridge904: port 1(syz_tun) entered disabled state [ 1432.520615][T26529] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:15 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00), 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1432.558579][T26534] bridge905: port 1(syz_tun) entered blocking state [ 1432.591678][T26534] bridge905: port 1(syz_tun) entered disabled state 03:17:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8}, 0x0) [ 1432.606632][T26534] device syz_tun entered promiscuous mode [ 1432.614368][T26528] device bridge905 entered promiscuous mode [ 1432.623758][T26522] Dev loop5: unable to read RDB block 1 [ 1432.630740][T26522] loop5: unable to read partition table [ 1432.644345][T26527] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1432.650859][T26522] loop5: partition table beyond EOD, truncated 03:17:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0007ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1432.673377][T26522] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1432.714660][T26546] __nla_validate_parse: 3 callbacks suppressed [ 1432.714668][T26546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1432.743482][T26546] device syz_tun left promiscuous mode [ 1432.754443][T26542] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.762484][T26542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1432.776478][T26546] bridge905: port 1(syz_tun) entered disabled state [ 1432.799735][T26546] bridge906: port 1(syz_tun) entered blocking state [ 1432.824552][T26542] F2FS-fs (loop3): invalid crc value [ 1432.847759][T26546] bridge906: port 1(syz_tun) entered disabled state [ 1432.861585][T26542] F2FS-fs (loop3): invalid crc_offset: 0 [ 1432.883958][T26542] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1432.892002][T26546] device syz_tun entered promiscuous mode [ 1432.905676][T26553] Dev loop5: unable to read RDB block 1 [ 1432.911256][T26553] loop5: unable to read partition table [ 1432.934339][T26553] loop5: partition table beyond EOD, truncated [ 1432.940616][T26553] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1432.952065][T26549] device bridge906 entered promiscuous mode 03:17:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00), 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9}, 0x0) 03:17:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b081cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1433.064800][T26566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1433.094311][T26558] Dev loop5: unable to read RDB block 1 [ 1433.100151][T26558] loop5: unable to read partition table [ 1433.104153][T26565] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.114764][T26571] device syz_tun left promiscuous mode [ 1433.120515][T26565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1433.131353][T26558] loop5: partition table beyond EOD, truncated [ 1433.138801][T26565] F2FS-fs (loop3): invalid crc value [ 1433.143610][T26571] bridge906: port 1(syz_tun) entered disabled state [ 1433.149721][T26565] F2FS-fs (loop3): invalid crc_offset: 0 03:17:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00), 0x0, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1433.162208][T26558] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1433.166324][T26565] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1433.179054][T26571] bridge907: port 1(syz_tun) entered blocking state [ 1433.186529][T26571] bridge907: port 1(syz_tun) entered disabled state [ 1433.194060][T26571] device syz_tun entered promiscuous mode [ 1433.201830][T26566] device bridge907 entered promiscuous mode 03:17:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0009ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa}, 0x0) [ 1433.399024][T26578] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.410898][T26578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1433.416967][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1433.428623][T26578] F2FS-fs (loop3): invalid crc value [ 1433.436864][T26578] F2FS-fs (loop3): invalid crc_offset: 0 [ 1433.442726][T26578] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1433.459383][T26582] device syz_tun left promiscuous mode [ 1433.465422][T26582] bridge907: port 1(syz_tun) entered disabled state [ 1433.474205][T26582] bridge908: port 1(syz_tun) entered blocking state [ 1433.481424][T26582] bridge908: port 1(syz_tun) entered disabled state 03:17:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/16, 0x10, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1433.499603][T26582] device syz_tun entered promiscuous mode [ 1433.515301][T26582] device bridge908 entered promiscuous mode [ 1433.524406][T26591] device syz_tun left promiscuous mode [ 1433.530193][T26591] bridge908: port 1(syz_tun) entered disabled state [ 1433.545481][T26574] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xb}, 0x0) [ 1433.629615][T26584] Dev loop5: unable to read RDB block 1 [ 1433.637248][T26584] loop5: unable to read partition table [ 1433.664645][T26584] loop5: partition table beyond EOD, truncated 03:17:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b181cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1433.685206][T26597] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.693032][T26597] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1433.699469][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1433.701902][T26584] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1433.756152][T26602] bridge909: port 1(syz_tun) entered blocking state [ 1433.765059][T26602] bridge909: port 1(syz_tun) entered disabled state [ 1433.778633][T26597] F2FS-fs (loop3): invalid crc value [ 1433.802095][T26597] F2FS-fs (loop3): invalid crc_offset: 0 [ 1433.811926][T26602] device syz_tun entered promiscuous mode [ 1433.832012][T26597] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc}, 0x0) [ 1433.851680][T26600] device bridge909 entered promiscuous mode 03:17:17 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/16, 0x10, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1433.934116][T26590] Dev loop5: unable to read RDB block 1 [ 1433.939880][T26590] loop5: unable to read partition table [ 1433.954473][T26590] loop5: partition table beyond EOD, truncated [ 1433.970998][T26590] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000affffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1434.026666][T26606] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1434.044551][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1434.126495][T26617] device syz_tun left promiscuous mode [ 1434.132192][T26617] bridge909: port 1(syz_tun) entered disabled state [ 1434.166896][T26617] bridge910: port 1(syz_tun) entered blocking state [ 1434.209321][T26616] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1434.224594][T26617] bridge910: port 1(syz_tun) entered disabled state [ 1434.237910][T26616] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1434.270981][T26617] device syz_tun entered promiscuous mode [ 1434.292586][T26616] F2FS-fs (loop3): invalid crc value [ 1434.312699][T26613] device bridge910 entered promiscuous mode [ 1434.322302][T26626] Dev loop5: unable to read RDB block 1 [ 1434.328235][T26626] loop5: unable to read partition table [ 1434.329824][T26616] F2FS-fs (loop3): invalid crc_offset: 0 [ 1434.334944][T26626] loop5: partition table beyond EOD, truncated [ 1434.346747][T26626] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xd}, 0x0) [ 1434.401423][T26616] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b281cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1434.448321][T26628] Dev loop5: unable to read RDB block 1 [ 1434.454782][T26628] loop5: unable to read partition table [ 1434.461148][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1434.471303][T26628] loop5: partition table beyond EOD, truncated [ 1434.487574][T26634] device syz_tun left promiscuous mode 03:17:17 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/16, 0x10, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1434.493697][T26634] bridge910: port 1(syz_tun) entered disabled state [ 1434.498105][T26628] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1434.528053][T26634] bridge911: port 1(syz_tun) entered blocking state [ 1434.536355][T26634] bridge911: port 1(syz_tun) entered disabled state [ 1434.551632][T26634] device syz_tun entered promiscuous mode [ 1434.566968][T26639] device bridge911 entered promiscuous mode 03:17:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000bffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1434.594527][T26639] device syz_tun left promiscuous mode [ 1434.600077][T26639] bridge911: port 1(syz_tun) entered disabled state 03:17:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xe}, 0x0) [ 1434.637679][T26642] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1434.658024][T26642] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1434.673580][T26642] F2FS-fs (loop3): invalid crc value [ 1434.680086][T26642] F2FS-fs (loop3): invalid crc_offset: 0 [ 1434.685898][T26642] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:17 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/24, 0x18, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1434.799768][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1434.819794][T26649] Dev loop5: unable to read RDB block 1 [ 1434.825520][T26649] loop5: unable to read partition table [ 1434.844573][T26640] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1434.863021][T26658] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1434.873992][T26649] loop5: partition table beyond EOD, truncated [ 1434.905598][T26649] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1434.916910][T26660] bridge912: port 1(syz_tun) entered blocking state [ 1434.937257][T26658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf}, 0x0) [ 1434.961534][T26660] bridge912: port 1(syz_tun) entered disabled state [ 1434.989747][T26658] F2FS-fs (loop3): invalid crc value [ 1434.996430][T26660] device syz_tun entered promiscuous mode [ 1435.024604][T26658] F2FS-fs (loop3): invalid crc_offset: 0 [ 1435.044090][T26654] Dev loop5: unable to read RDB block 1 [ 1435.049196][T26658] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1435.049775][T26654] loop5: unable to read partition table [ 1435.069598][T26663] device bridge912 entered promiscuous mode 03:17:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/24, 0x18, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1435.146000][T26654] loop5: partition table beyond EOD, truncated [ 1435.152157][T26654] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1435.174409][T26676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1435.226397][T26679] device syz_tun left promiscuous mode [ 1435.240465][T26679] bridge912: port 1(syz_tun) entered disabled state [ 1435.276962][T26679] bridge913: port 1(syz_tun) entered blocking state [ 1435.297197][T26679] bridge913: port 1(syz_tun) entered disabled state [ 1435.312140][T26679] device syz_tun entered promiscuous mode 03:17:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x10}, 0x0) [ 1435.326355][T26682] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.336808][T26676] device bridge913 entered promiscuous mode [ 1435.346895][T26682] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1435.413821][T26682] F2FS-fs (loop3): invalid crc value [ 1435.430428][T26682] F2FS-fs (loop3): invalid crc_offset: 0 [ 1435.432650][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1435.447145][T26682] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1435.466683][T26692] Dev loop5: unable to read RDB block 1 [ 1435.472477][T26695] device syz_tun left promiscuous mode [ 1435.478209][T26692] loop5: unable to read partition table [ 1435.495518][T26695] bridge913: port 1(syz_tun) entered disabled state 03:17:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/24, 0x18, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1435.513299][T26692] loop5: partition table beyond EOD, truncated [ 1435.564371][T26692] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1435.569012][T26695] bridge914: port 1(syz_tun) entered blocking state [ 1435.620478][T26703] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.626858][T26695] bridge914: port 1(syz_tun) entered disabled state [ 1435.633226][T26703] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1435.657493][T26703] F2FS-fs (loop3): invalid crc value [ 1435.669146][T26703] F2FS-fs (loop3): invalid crc_offset: 0 [ 1435.669721][T26695] device syz_tun entered promiscuous mode [ 1435.681354][T26703] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1435.685289][T26696] Dev loop5: unable to read RDB block 1 [ 1435.702621][T26696] loop5: unable to read partition table 03:17:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/28, 0x1c, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1435.725812][T26699] device bridge914 entered promiscuous mode [ 1435.744632][T26701] device syz_tun left promiscuous mode [ 1435.748553][T26696] loop5: partition table beyond EOD, truncated [ 1435.751554][T26701] bridge914: port 1(syz_tun) entered disabled state [ 1435.757146][T26696] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1435.773152][T26690] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x11}, 0x0) 03:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000dffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1435.919982][T26712] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.942978][T26712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1435.960987][T26717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1435.986668][T26712] F2FS-fs (loop3): invalid crc value [ 1436.002004][T26712] F2FS-fs (loop3): invalid crc_offset: 0 [ 1436.026376][T26712] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1436.033885][T26721] bridge915: port 1(syz_tun) entered blocking state [ 1436.041824][T26721] bridge915: port 1(syz_tun) entered disabled state [ 1436.060295][T26721] device syz_tun entered promiscuous mode [ 1436.074467][T26720] Dev loop5: unable to read RDB block 1 [ 1436.080918][T26720] loop5: unable to read partition table [ 1436.088473][T26720] loop5: partition table beyond EOD, truncated [ 1436.094849][T26720] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1436.103387][T26717] device bridge915 entered promiscuous mode [ 1436.112600][T26721] device syz_tun left promiscuous mode [ 1436.130569][T26721] bridge915: port 1(syz_tun) entered disabled state 03:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x12}, 0x0) 03:17:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/28, 0x1c, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1436.213969][T26725] Dev loop5: unable to read RDB block 1 [ 1436.230138][T26725] loop5: unable to read partition table [ 1436.250373][T26725] loop5: partition table beyond EOD, truncated [ 1436.259161][T26725] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000effffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1436.287928][T26738] bridge916: port 1(syz_tun) entered blocking state [ 1436.294732][T26738] bridge916: port 1(syz_tun) entered disabled state [ 1436.302487][T26738] device syz_tun entered promiscuous mode [ 1436.321099][T26739] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1436.333916][T26738] device bridge916 entered promiscuous mode [ 1436.345298][T26739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1436.371834][T26743] device syz_tun left promiscuous mode [ 1436.379267][T26739] F2FS-fs (loop3): invalid crc value [ 1436.390902][T26734] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1436.414065][T26748] Dev loop5: unable to read RDB block 1 [ 1436.419994][T26743] bridge916: port 1(syz_tun) entered disabled state [ 1436.420220][T26748] loop5: unable to read partition table [ 1436.433922][T26739] F2FS-fs (loop3): invalid crc_offset: 0 03:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1c}, 0x0) [ 1436.439803][T26739] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1436.448235][T26748] loop5: partition table beyond EOD, truncated [ 1436.454945][T26748] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)='\x00'/28, 0x1c, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1436.623820][T26751] Dev loop5: unable to read RDB block 1 [ 1436.632664][T26751] loop5: unable to read partition table [ 1436.641943][T26758] bridge917: port 1(syz_tun) entered blocking state [ 1436.653006][T26751] loop5: partition table beyond EOD, truncated [ 1436.667245][T26758] bridge917: port 1(syz_tun) entered disabled state 03:17:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000fffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1436.672858][T26751] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1436.681712][T26764] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1436.690561][T26758] device syz_tun entered promiscuous mode [ 1436.699383][T26764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1436.707725][T26766] device bridge917 entered promiscuous mode 03:17:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x25}, 0x0) [ 1436.760865][T26764] F2FS-fs (loop3): invalid crc value [ 1436.792756][T26764] F2FS-fs (loop3): invalid crc_offset: 0 [ 1436.821113][T26763] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1436.822550][T26764] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1436.881756][T26772] device syz_tun left promiscuous mode [ 1436.902852][T26772] bridge917: port 1(syz_tun) entered disabled state [ 1436.915132][T26772] bridge918: port 1(syz_tun) entered blocking state [ 1436.924106][T26772] bridge918: port 1(syz_tun) entered disabled state 03:17:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:20 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8b", 0x1e, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1436.924166][T26773] Dev loop5: unable to read RDB block 1 [ 1436.931387][T26772] device syz_tun entered promiscuous mode [ 1436.965642][T26772] device bridge918 entered promiscuous mode 03:17:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x48}, 0x0) [ 1437.016407][T26773] loop5: unable to read partition table [ 1437.052212][T26773] loop5: partition table beyond EOD, truncated [ 1437.083614][T26788] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.095973][T26773] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1437.112805][T26788] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1437.147359][T26788] F2FS-fs (loop3): invalid crc value [ 1437.171804][T26791] device syz_tun left promiscuous mode [ 1437.181778][T26788] F2FS-fs (loop3): invalid crc_offset: 0 [ 1437.207525][T26791] bridge918: port 1(syz_tun) entered disabled state [ 1437.220017][T26788] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1437.252313][T26791] bridge919: port 1(syz_tun) entered blocking state [ 1437.253918][T26779] Dev loop5: unable to read RDB block 1 [ 1437.270018][T26779] loop5: unable to read partition table [ 1437.282400][T26779] loop5: partition table beyond EOD, truncated [ 1437.288892][T26791] bridge919: port 1(syz_tun) entered disabled state [ 1437.289765][T26779] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:20 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8b", 0x1e, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0011ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4c}, 0x0) [ 1437.344164][T26791] device syz_tun entered promiscuous mode [ 1437.382631][T26796] device bridge919 entered promiscuous mode [ 1437.411463][T26785] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1437.546136][T26803] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.562130][T26803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1437.612500][T26803] F2FS-fs (loop3): invalid crc value [ 1437.613634][T26809] device syz_tun left promiscuous mode [ 1437.623867][T26803] F2FS-fs (loop3): invalid crc_offset: 0 [ 1437.629616][T26803] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1437.633612][T26809] bridge919: port 1(syz_tun) entered disabled state [ 1437.657315][T26812] Dev loop5: unable to read RDB block 1 03:17:20 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8b", 0x1e, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1437.664253][T26812] loop5: unable to read partition table [ 1437.671579][T26809] bridge920: port 1(syz_tun) entered blocking state [ 1437.678678][T26809] bridge920: port 1(syz_tun) entered disabled state [ 1437.696922][T26812] loop5: partition table beyond EOD, truncated 03:17:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x60}, 0x0) [ 1437.715309][T26809] device syz_tun entered promiscuous mode [ 1437.721222][T26812] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1437.735654][T26817] device bridge920 entered promiscuous mode [ 1437.839189][T26816] Dev loop5: unable to read RDB block 1 [ 1437.849246][T26816] loop5: unable to read partition table [ 1437.861659][T26825] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.881845][T26825] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1437.894059][T26823] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1437.902011][T26830] __nla_validate_parse: 5 callbacks suppressed [ 1437.902018][T26830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1437.918887][T26816] loop5: partition table beyond EOD, truncated [ 1437.943222][T26816] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1437.958242][T26825] F2FS-fs (loop3): invalid crc value [ 1437.974126][T26825] F2FS-fs (loop3): invalid crc_offset: 0 [ 1437.988014][T26825] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1437.998349][T26832] device syz_tun left promiscuous mode [ 1438.005654][T26832] bridge920: port 1(syz_tun) entered disabled state [ 1438.018219][T26832] bridge921: port 1(syz_tun) entered blocking state [ 1438.027319][T26832] bridge921: port 1(syz_tun) entered disabled state [ 1438.035024][T26832] device syz_tun entered promiscuous mode 03:17:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0012ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1438.042777][T26830] device bridge921 entered promiscuous mode 03:17:21 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfe", 0x1f, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x68}, 0x0) [ 1438.178218][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1438.193809][T26842] Dev loop5: unable to read RDB block 1 [ 1438.199467][T26842] loop5: unable to read partition table [ 1438.210229][T26845] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1438.215274][T26842] loop5: partition table beyond EOD, truncated [ 1438.227476][T26845] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1438.242519][T26842] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1438.252844][T26853] device syz_tun left promiscuous mode [ 1438.255677][T26845] F2FS-fs (loop3): invalid crc value [ 1438.259340][T26853] bridge921: port 1(syz_tun) entered disabled state [ 1438.313706][T26845] F2FS-fs (loop3): invalid crc_offset: 0 [ 1438.319889][T26845] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1438.355706][T26853] bridge922: port 1(syz_tun) entered blocking state [ 1438.363546][T26853] bridge922: port 1(syz_tun) entered disabled state [ 1438.370784][T26853] device syz_tun entered promiscuous mode 03:17:21 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfe", 0x1f, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0013ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6c}, 0x0) [ 1438.404789][T26847] device bridge922 entered promiscuous mode [ 1438.415717][T26853] device syz_tun left promiscuous mode [ 1438.436372][T26853] bridge922: port 1(syz_tun) entered disabled state [ 1438.464426][T26856] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1438.591928][T26865] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1438.630491][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1438.647004][T26865] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1438.688003][T26865] F2FS-fs (loop3): invalid crc value [ 1438.694008][T26869] Dev loop5: unable to read RDB block 1 [ 1438.707840][T26869] loop5: unable to read partition table [ 1438.721022][T26876] bridge923: port 1(syz_tun) entered blocking state [ 1438.739074][T26865] F2FS-fs (loop3): invalid crc_offset: 0 [ 1438.750701][T26869] loop5: partition table beyond EOD, truncated [ 1438.768205][T26876] bridge923: port 1(syz_tun) entered disabled state [ 1438.781429][T26865] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1438.793665][T26869] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1438.812349][T26876] device syz_tun entered promiscuous mode 03:17:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="b981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfe", 0x1f, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1438.836660][T26872] device bridge923 entered promiscuous mode 03:17:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x74}, 0x0) [ 1438.961999][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1438.973677][T26871] Dev loop5: unable to read RDB block 1 [ 1438.983700][T26871] loop5: unable to read partition table [ 1438.999704][T26887] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1439.010798][T26871] loop5: partition table beyond EOD, truncated [ 1439.012036][T26887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1439.040341][T26871] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1439.063852][T26889] device syz_tun left promiscuous mode [ 1439.069509][T26889] bridge923: port 1(syz_tun) entered disabled state [ 1439.080866][T26887] F2FS-fs (loop3): invalid crc value [ 1439.100072][T26887] F2FS-fs (loop3): invalid crc_offset: 0 03:17:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0020ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1439.107904][T26889] bridge924: port 1(syz_tun) entered blocking state [ 1439.127487][T26885] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1439.144831][T26887] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1439.155569][T26889] bridge924: port 1(syz_tun) entered disabled state 03:17:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7a}, 0x0) [ 1439.173488][T26889] device syz_tun entered promiscuous mode [ 1439.206002][T26890] device bridge924 entered promiscuous mode [ 1439.214223][T26889] device syz_tun left promiscuous mode [ 1439.219733][T26889] bridge924: port 1(syz_tun) entered disabled state 03:17:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ba81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1439.385392][T26901] Dev loop5: unable to read RDB block 1 [ 1439.390996][T26901] loop5: unable to read partition table [ 1439.405910][T26906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1439.420661][T26901] loop5: partition table beyond EOD, truncated [ 1439.440001][T26908] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1439.465998][T26901] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1439.468641][T26906] bridge925: port 1(syz_tun) entered blocking state [ 1439.485878][T26908] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1439.487267][T26906] bridge925: port 1(syz_tun) entered disabled state [ 1439.501158][T26906] device syz_tun entered promiscuous mode [ 1439.527765][T26906] device bridge925 entered promiscuous mode 03:17:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1439.551061][T26908] F2FS-fs (loop3): invalid crc value [ 1439.556737][T26908] F2FS-fs (loop3): invalid crc_offset: 0 [ 1439.562856][T26908] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1439.562962][T26914] device syz_tun left promiscuous mode 03:17:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0025ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x190}, 0x0) [ 1439.603607][T26914] bridge925: port 1(syz_tun) entered disabled state [ 1439.710214][T26924] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1439.728726][T26924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1439.749012][T26924] F2FS-fs (loop3): invalid crc value [ 1439.752847][T26930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1439.761988][T26924] F2FS-fs (loop3): invalid crc_offset: 0 [ 1439.773631][T26928] Dev loop5: unable to read RDB block 1 [ 1439.779255][T26924] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1439.779609][T26928] loop5: unable to read partition table [ 1439.792032][T26928] loop5: partition table beyond EOD, truncated [ 1439.798699][T26928] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1439.857295][T26932] bridge926: port 1(syz_tun) entered blocking state [ 1439.869063][T26932] bridge926: port 1(syz_tun) entered disabled state 03:17:23 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1dc}, 0x0) [ 1439.902714][T26916] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1439.919339][T26932] device syz_tun entered promiscuous mode [ 1439.933682][T26931] Dev loop5: unable to read RDB block 1 [ 1439.939320][T26931] loop5: unable to read partition table [ 1439.951543][T26931] loop5: partition table beyond EOD, truncated [ 1439.954693][T26933] device bridge926 entered promiscuous mode [ 1439.967641][T26931] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="bb81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0026ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1440.115118][T26945] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.122867][T26945] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1440.136275][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1440.154663][T26945] F2FS-fs (loop3): invalid crc value [ 1440.162452][T26947] device syz_tun left promiscuous mode [ 1440.168991][T26947] bridge926: port 1(syz_tun) entered disabled state [ 1440.178153][T26947] bridge927: port 1(syz_tun) entered blocking state [ 1440.186129][T26945] F2FS-fs (loop3): invalid crc_offset: 0 [ 1440.186143][T26947] bridge927: port 1(syz_tun) entered disabled state [ 1440.199805][T26947] device syz_tun entered promiscuous mode [ 1440.199811][T26945] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:23 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1440.204942][T26947] device bridge927 entered promiscuous mode 03:17:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1de}, 0x0) [ 1440.323750][T26956] Dev loop5: unable to read RDB block 1 [ 1440.329455][T26956] loop5: unable to read partition table [ 1440.335837][T26956] loop5: partition table beyond EOD, truncated [ 1440.342151][T26956] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1440.356316][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1440.375643][T26963] device syz_tun left promiscuous mode [ 1440.381973][T26963] bridge927: port 1(syz_tun) entered disabled state [ 1440.391173][T26963] bridge928: port 1(syz_tun) entered blocking state [ 1440.401223][T26966] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.414514][T26963] bridge928: port 1(syz_tun) entered disabled state 03:17:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x26e}, 0x0) [ 1440.421542][T26966] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1440.431559][T26963] device syz_tun entered promiscuous mode [ 1440.437902][T26966] F2FS-fs (loop3): invalid crc_offset: 0 [ 1440.445862][T26970] device bridge928 entered promiscuous mode [ 1440.445924][T26966] F2FS-fs (loop3): invalid crc_offset: 0 [ 1440.457971][T26966] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1440.465619][T26960] Dev loop5: unable to read RDB block 1 03:17:23 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1440.471675][T26960] loop5: unable to read partition table [ 1440.492122][T26960] loop5: partition table beyond EOD, truncated [ 1440.498906][T26960] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45acfc26ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1440.548232][T26955] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1440.583626][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1440.638752][T26980] device syz_tun left promiscuous mode [ 1440.646085][T26980] bridge928: port 1(syz_tun) entered disabled state [ 1440.656789][T26980] bridge929: port 1(syz_tun) entered blocking state [ 1440.663609][T26980] bridge929: port 1(syz_tun) entered disabled state [ 1440.670829][T26980] device syz_tun entered promiscuous mode 03:17:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x300}, 0x0) [ 1440.690769][T26975] device bridge929 entered promiscuous mode [ 1440.705808][T26977] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.723972][T26977] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1440.781530][T26977] F2FS-fs (loop3): invalid crc_offset: 0 [ 1440.795663][T26987] Dev loop5: unable to read RDB block 1 [ 1440.801466][T26987] loop5: unable to read partition table 03:17:24 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1440.838401][T26977] F2FS-fs (loop3): invalid crc_offset: 0 [ 1440.846293][T26977] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1440.849708][T26987] loop5: partition table beyond EOD, truncated [ 1440.873426][T26990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1440.898005][T26990] device syz_tun left promiscuous mode [ 1440.903388][T26987] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1440.912330][T26990] bridge929: port 1(syz_tun) entered disabled state [ 1440.923184][T26990] bridge930: port 1(syz_tun) entered blocking state [ 1440.936983][T26990] bridge930: port 1(syz_tun) entered disabled state 03:17:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x500}, 0x0) 03:17:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="bc81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1440.947003][T26990] device syz_tun entered promiscuous mode [ 1440.955915][T26996] device bridge930 entered promiscuous mode [ 1441.020528][T26987] Dev loop5: unable to read RDB block 1 [ 1441.030980][T26987] loop5: unable to read partition table [ 1441.042648][T27000] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1441.077231][T27000] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1441.088377][T26987] loop5: partition table beyond EOD, truncated [ 1441.113068][T27005] device syz_tun left promiscuous mode [ 1441.125070][T26987] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1441.158587][T27005] bridge930: port 1(syz_tun) entered disabled state [ 1441.166984][T27000] F2FS-fs (loop3): invalid crc_offset: 0 03:17:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0332ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1441.186177][T27000] F2FS-fs (loop3): invalid crc_offset: 0 [ 1441.196031][T27005] bridge931: port 1(syz_tun) entered blocking state [ 1441.212257][T27000] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1441.230108][T27005] bridge931: port 1(syz_tun) entered disabled state 03:17:24 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {0x0, 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x600}, 0x0) [ 1441.256629][T27005] device syz_tun entered promiscuous mode [ 1441.279720][T27009] device bridge931 entered promiscuous mode [ 1441.343784][T27004] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1441.433139][T27024] device syz_tun left promiscuous mode [ 1441.447778][T27024] bridge931: port 1(syz_tun) entered disabled state [ 1441.463418][T27018] Dev loop5: unable to read RDB block 1 [ 1441.469198][T27019] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1441.477070][T27018] loop5: unable to read partition table [ 1441.479152][T27024] bridge932: port 1(syz_tun) entered blocking state [ 1441.488622][T27019] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1441.499662][T27024] bridge932: port 1(syz_tun) entered disabled state [ 1441.505156][T27018] loop5: partition table beyond EOD, truncated [ 1441.516819][T27024] device syz_tun entered promiscuous mode [ 1441.526781][T27019] F2FS-fs (loop3): invalid crc_offset: 0 03:17:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="bd81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1441.534932][T27028] device bridge932 entered promiscuous mode [ 1441.538705][T27018] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1441.547647][T27028] device syz_tun left promiscuous mode [ 1441.562271][T27019] F2FS-fs (loop3): invalid crc_offset: 0 [ 1441.562914][T27028] bridge932: port 1(syz_tun) entered disabled state 03:17:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x700}, 0x0) [ 1441.579906][T27019] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:24 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {0x0, 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0038ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1441.754910][T27039] bridge933: port 1(syz_tun) entered blocking state [ 1441.761681][T27039] bridge933: port 1(syz_tun) entered disabled state [ 1441.795411][T27039] device syz_tun entered promiscuous mode [ 1441.814979][T27045] device bridge933 entered promiscuous mode 03:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x900}, 0x0) [ 1441.838056][T27043] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1441.865128][T27043] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1441.887389][T27043] F2FS-fs (loop3): invalid crc_offset: 0 [ 1441.893173][T27043] F2FS-fs (loop3): invalid crc_offset: 0 [ 1441.900871][T27043] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1441.914546][T27049] Dev loop5: unable to read RDB block 1 [ 1441.920668][T27049] loop5: unable to read partition table [ 1441.927852][T27038] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1441.944852][T27054] device syz_tun left promiscuous mode [ 1441.946206][T27049] loop5: partition table beyond EOD, truncated [ 1441.950712][T27054] bridge933: port 1(syz_tun) entered disabled state [ 1441.967639][T27054] bridge934: port 1(syz_tun) entered blocking state [ 1441.974541][T27054] bridge934: port 1(syz_tun) entered disabled state [ 1441.981841][T27054] device syz_tun entered promiscuous mode 03:17:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {0x0, 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa00}, 0x0) [ 1441.992982][T27054] device bridge934 entered promiscuous mode [ 1441.997047][T27049] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1442.000641][T27058] device syz_tun left promiscuous mode [ 1442.012974][T27058] bridge934: port 1(syz_tun) entered disabled state 03:17:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="be81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1442.129075][T27051] Dev loop5: unable to read RDB block 1 [ 1442.135117][T27051] loop5: unable to read partition table [ 1442.149756][T27066] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.155566][T27069] bridge935: port 1(syz_tun) entered blocking state [ 1442.164044][T27051] loop5: partition table beyond EOD, truncated [ 1442.170298][T27066] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1442.170762][T27069] bridge935: port 1(syz_tun) entered disabled state [ 1442.194193][T27069] device syz_tun entered promiscuous mode [ 1442.209476][T27051] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1442.216111][T27069] device bridge935 entered promiscuous mode [ 1442.224456][T27066] F2FS-fs (loop3): invalid crc_offset: 0 [ 1442.238846][T27074] device syz_tun left promiscuous mode [ 1442.246080][T27074] bridge935: port 1(syz_tun) entered disabled state [ 1442.260235][T27066] F2FS-fs (loop3): invalid crc_offset: 0 03:17:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac003fffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xb00}, 0x0) [ 1442.284471][T27066] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00), 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1442.474239][T27081] Dev loop5: unable to read RDB block 1 [ 1442.479520][T27085] bridge936: port 1(syz_tun) entered blocking state [ 1442.480217][T27081] loop5: unable to read partition table [ 1442.489117][T27086] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.507510][T27081] loop5: partition table beyond EOD, truncated [ 1442.507569][T27073] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1442.521623][T27081] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1442.534808][T27085] bridge936: port 1(syz_tun) entered disabled state [ 1442.543335][T27086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1442.563266][T27085] device syz_tun entered promiscuous mode [ 1442.569966][T27086] F2FS-fs (loop3): invalid crc_offset: 0 [ 1442.596256][T27092] device bridge936 entered promiscuous mode [ 1442.619127][T27086] F2FS-fs (loop3): invalid crc_offset: 0 03:17:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc00}, 0x0) [ 1442.643336][T27086] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00), 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="bf81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1442.683750][T27089] Dev loop5: unable to read RDB block 1 [ 1442.689469][T27089] loop5: unable to read partition table [ 1442.696058][T27089] loop5: partition table beyond EOD, truncated [ 1442.704763][T27089] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0040ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1442.778418][T27100] device syz_tun left promiscuous mode [ 1442.805809][T27100] bridge936: port 1(syz_tun) entered disabled state [ 1442.818357][T27104] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.841076][T27104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1442.874465][T27100] bridge937: port 1(syz_tun) entered blocking state [ 1442.892887][T27104] F2FS-fs (loop3): invalid crc_offset: 0 [ 1442.911286][T27100] bridge937: port 1(syz_tun) entered disabled state [ 1442.934796][T27104] F2FS-fs (loop3): invalid crc_offset: 0 [ 1442.956905][T27100] device syz_tun entered promiscuous mode [ 1442.968314][T27104] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:26 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00), 0x0, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xd00}, 0x0) [ 1442.995594][T27107] device bridge937 entered promiscuous mode [ 1443.015356][T27114] Dev loop5: unable to read RDB block 1 [ 1443.036547][T27114] loop5: unable to read partition table [ 1443.069264][T27114] loop5: partition table beyond EOD, truncated [ 1443.122151][T27114] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1443.152919][T27123] __nla_validate_parse: 7 callbacks suppressed [ 1443.152926][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.173007][T27121] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1443.207051][T27121] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1443.221850][T27127] device syz_tun left promiscuous mode [ 1443.248564][T27127] bridge937: port 1(syz_tun) entered disabled state [ 1443.258654][T27121] F2FS-fs (loop3): invalid crc_offset: 0 [ 1443.266153][T27117] Dev loop5: unable to read RDB block 1 [ 1443.272259][T27117] loop5: unable to read partition table [ 1443.282464][T27113] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1443.302792][T27117] loop5: partition table beyond EOD, truncated [ 1443.311452][T27121] F2FS-fs (loop3): invalid crc_offset: 0 [ 1443.318041][T27121] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1443.319195][T27127] bridge938: port 1(syz_tun) entered blocking state [ 1443.327395][T27117] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1443.357435][T27127] bridge938: port 1(syz_tun) entered disabled state [ 1443.378920][T27127] device syz_tun entered promiscuous mode [ 1443.399417][T27123] device bridge938 entered promiscuous mode 03:17:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0048ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:26 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff03000600"/83, 0x53, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c081cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1443.410713][T27127] device syz_tun left promiscuous mode [ 1443.421379][T27127] bridge938: port 1(syz_tun) entered disabled state 03:17:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xe00}, 0x0) [ 1443.570737][T27144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.588149][T27142] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1443.601501][T27142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1443.625519][T27142] F2FS-fs (loop3): invalid crc_offset: 0 [ 1443.633980][T27143] Dev loop5: unable to read RDB block 1 [ 1443.639787][T27143] loop5: unable to read partition table [ 1443.651686][T27148] bridge939: port 1(syz_tun) entered blocking state [ 1443.654573][T27142] F2FS-fs (loop3): invalid crc_offset: 0 [ 1443.661767][T27148] bridge939: port 1(syz_tun) entered disabled state [ 1443.672359][T27143] loop5: partition table beyond EOD, truncated [ 1443.679393][T27143] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1443.687621][T27148] device syz_tun entered promiscuous mode [ 1443.693260][T27142] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1443.721298][T27144] device bridge939 entered promiscuous mode [ 1443.731036][T27148] device syz_tun left promiscuous mode 03:17:26 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff03000600"/83, 0x53, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf00}, 0x0) [ 1443.771044][T27148] bridge939: port 1(syz_tun) entered disabled state [ 1443.786220][T27139] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1443.834548][T27147] Dev loop5: unable to read RDB block 1 [ 1443.840312][T27147] loop5: unable to read partition table [ 1443.853155][T27147] loop5: partition table beyond EOD, truncated [ 1443.859332][T27147] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac004cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1443.950810][T27160] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1443.962618][T27160] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1443.972318][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.991642][T27160] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.014198][T27160] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.032067][T27167] bridge940: port 1(syz_tun) entered blocking state [ 1444.049122][T27160] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1444.070956][T27167] bridge940: port 1(syz_tun) entered disabled state [ 1444.098328][T27167] device syz_tun entered promiscuous mode [ 1444.103498][T27166] Dev loop5: unable to read RDB block 1 [ 1444.110201][T27166] loop5: unable to read partition table 03:17:27 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff03000600"/83, 0x53, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c181cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1444.122887][T27163] device bridge940 entered promiscuous mode [ 1444.129989][T27166] loop5: partition table beyond EOD, truncated [ 1444.143073][T27166] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1444.146894][T27174] device syz_tun left promiscuous mode 03:17:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1100}, 0x0) 03:17:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0152ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1444.197240][T27174] bridge940: port 1(syz_tun) entered disabled state [ 1444.222860][T27172] Dev loop5: unable to read RDB block 1 [ 1444.228912][T27172] loop5: unable to read partition table [ 1444.241852][T27172] loop5: partition table beyond EOD, truncated [ 1444.254821][T27172] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1444.335497][T27183] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1444.357082][T27183] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1444.390880][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1444.402464][T27183] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.421694][T27183] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.435915][T27182] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1444.444181][T27183] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1444.474708][T27190] bridge941: port 1(syz_tun) entered blocking state 03:17:27 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff050000000000000000", 0x7d, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1200}, 0x0) 03:17:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c281cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1444.507454][T27190] bridge941: port 1(syz_tun) entered disabled state [ 1444.532959][T27190] device syz_tun entered promiscuous mode [ 1444.555261][T27186] device bridge941 entered promiscuous mode [ 1444.615519][T27194] Dev loop5: unable to read RDB block 1 [ 1444.621193][T27194] loop5: unable to read partition table [ 1444.650771][T27202] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1444.658077][T27194] loop5: partition table beyond EOD, truncated [ 1444.658682][T27202] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1444.673732][T27202] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.697346][T27194] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1444.697699][T27202] F2FS-fs (loop3): invalid crc_offset: 0 [ 1444.720125][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1444.742450][T27202] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:27 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff050000000000000000", 0x7d, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1444.798836][T27207] device syz_tun left promiscuous mode [ 1444.807897][T27207] bridge941: port 1(syz_tun) entered disabled state [ 1444.838411][T27207] bridge942: port 1(syz_tun) entered blocking state [ 1444.873332][T27199] Dev loop5: unable to read RDB block 1 [ 1444.884786][T27199] loop5: unable to read partition table [ 1444.892627][T27207] bridge942: port 1(syz_tun) entered disabled state [ 1444.907994][T27207] device syz_tun entered promiscuous mode [ 1444.912969][T27199] loop5: partition table beyond EOD, truncated 03:17:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1c00}, 0x0) [ 1444.924575][T27205] device bridge942 entered promiscuous mode [ 1444.957481][T27199] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac005cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1444.967495][T27218] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1444.994194][T27218] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1445.048505][T27218] F2FS-fs (loop3): invalid crc_offset: 0 [ 1445.079219][T27216] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1445.085767][T27218] F2FS-fs (loop3): invalid crc_offset: 0 [ 1445.115402][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1445.129426][T27218] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1445.177497][T27231] device syz_tun left promiscuous mode [ 1445.183717][T27227] Dev loop5: unable to read RDB block 1 [ 1445.187820][T27231] bridge942: port 1(syz_tun) entered disabled state [ 1445.189409][T27227] loop5: unable to read partition table [ 1445.205830][T27231] bridge943: port 1(syz_tun) entered blocking state [ 1445.214492][T27231] bridge943: port 1(syz_tun) entered disabled state [ 1445.221488][T27231] device syz_tun entered promiscuous mode 03:17:28 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff050000000000000000", 0x7d, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2000}, 0x0) 03:17:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1445.233145][T27224] device bridge943 entered promiscuous mode [ 1445.240708][T27227] loop5: partition table beyond EOD, truncated [ 1445.303082][T27227] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1445.396848][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1445.415957][T27233] Dev loop5: unable to read RDB block 1 [ 1445.421631][T27233] loop5: unable to read partition table [ 1445.430423][T27243] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.448313][T27243] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1445.458909][T27246] device syz_tun left promiscuous mode [ 1445.471069][T27233] loop5: partition table beyond EOD, truncated [ 1445.486232][T27246] bridge943: port 1(syz_tun) entered disabled state [ 1445.499564][T27233] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1445.511980][T27243] F2FS-fs (loop3): invalid crc_offset: 0 [ 1445.532366][T27242] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1445.540195][T27246] bridge944: port 1(syz_tun) entered blocking state [ 1445.548955][T27243] F2FS-fs (loop3): invalid crc_offset: 0 03:17:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac025fffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1445.583467][T27243] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1445.590883][T27246] bridge944: port 1(syz_tun) entered disabled state [ 1445.613552][T27246] device syz_tun entered promiscuous mode 03:17:28 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c501000006000000010000000700", 0x92, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1445.635333][T27244] device bridge944 entered promiscuous mode [ 1445.655487][T27251] device syz_tun left promiscuous mode [ 1445.661241][T27251] bridge944: port 1(syz_tun) entered disabled state 03:17:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2500}, 0x0) [ 1445.803281][T27258] Dev loop5: unable to read RDB block 1 [ 1445.808924][T27258] loop5: unable to read partition table [ 1445.822133][T27263] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.833063][T27258] loop5: partition table beyond EOD, truncated [ 1445.839226][T27258] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1445.849697][T27263] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1445.858656][T27267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1445.881582][T27263] F2FS-fs (loop3): invalid crc_offset: 0 [ 1445.913037][T27263] F2FS-fs (loop3): invalid crc_offset: 0 [ 1445.918721][T27263] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1445.930064][T27268] bridge945: port 1(syz_tun) entered blocking state [ 1445.947619][T27268] bridge945: port 1(syz_tun) entered disabled state 03:17:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c501000006000000010000000700", 0x92, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1445.973309][T27264] Dev loop5: unable to read RDB block 1 [ 1445.978900][T27264] loop5: unable to read partition table [ 1445.981794][T27268] device syz_tun entered promiscuous mode [ 1445.993033][T27264] loop5: partition table beyond EOD, truncated [ 1446.022717][T27264] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1446.051143][T27267] device bridge945 entered promiscuous mode [ 1446.059436][T27262] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3f00}, 0x0) 03:17:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0060ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1446.205455][T27278] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1446.221245][T27278] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1446.240429][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1446.250276][T27278] F2FS-fs (loop3): invalid crc_offset: 0 [ 1446.267611][T27278] F2FS-fs (loop3): invalid crc_offset: 0 [ 1446.295445][T27288] device syz_tun left promiscuous mode [ 1446.311466][T27278] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1446.337241][T27288] bridge945: port 1(syz_tun) entered disabled state [ 1446.394618][T27291] Dev loop5: unable to read RDB block 1 [ 1446.400228][T27291] loop5: unable to read partition table [ 1446.410438][T27288] bridge946: port 1(syz_tun) entered blocking state [ 1446.429410][T27291] loop5: partition table beyond EOD, truncated [ 1446.443806][T27288] bridge946: port 1(syz_tun) entered disabled state 03:17:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c501000006000000010000000700", 0x92, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1446.488767][T27291] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1446.498034][T27288] device syz_tun entered promiscuous mode [ 1446.506390][T27284] device bridge946 entered promiscuous mode [ 1446.535334][T27288] device syz_tun left promiscuous mode [ 1446.542093][T27288] bridge946: port 1(syz_tun) entered disabled state 03:17:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4000}, 0x0) [ 1446.603273][T27295] Dev loop5: unable to read RDB block 1 [ 1446.608959][T27295] loop5: unable to read partition table [ 1446.626500][T27295] loop5: partition table beyond EOD, truncated [ 1446.632697][T27295] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1446.664719][T27303] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1446.672463][T27303] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1446.703537][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0164ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1446.717832][T27303] F2FS-fs (loop3): invalid crc_offset: 0 [ 1446.734975][T27296] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1446.742514][T27306] bridge947: port 1(syz_tun) entered blocking state [ 1446.744976][T27303] F2FS-fs (loop3): invalid crc_offset: 0 [ 1446.756915][T27306] bridge947: port 1(syz_tun) entered disabled state [ 1446.774260][T27306] device syz_tun entered promiscuous mode [ 1446.785352][T27303] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1446.807322][T27306] device bridge947 entered promiscuous mode 03:17:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4788}, 0x0) 03:17:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a000000", 0x9c, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4800}, 0x0) 03:17:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0068ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1446.985065][T27316] Dev loop5: unable to read RDB block 1 [ 1446.990743][T27316] loop5: unable to read partition table [ 1447.015211][T27316] loop5: partition table beyond EOD, truncated [ 1447.042108][T27323] device syz_tun left promiscuous mode [ 1447.061571][T27316] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1447.090945][T27323] bridge947: port 1(syz_tun) entered disabled state [ 1447.107824][T27329] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1447.131489][T27329] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1447.151656][T27323] bridge948: port 1(syz_tun) entered blocking state [ 1447.166480][T27324] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1447.192974][T27323] bridge948: port 1(syz_tun) entered disabled state [ 1447.194695][T27329] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.200163][T27323] device syz_tun entered promiscuous mode [ 1447.206697][T27329] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.220082][T27329] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1447.247681][T27331] device bridge948 entered promiscuous mode 03:17:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a000000", 0x9c, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1447.436183][T27342] device syz_tun left promiscuous mode [ 1447.441859][T27342] bridge948: port 1(syz_tun) entered disabled state [ 1447.453125][T27343] Dev loop5: unable to read RDB block 1 [ 1447.458747][T27343] loop5: unable to read partition table [ 1447.494169][T27343] loop5: partition table beyond EOD, truncated [ 1447.500452][T27343] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1447.516265][T27351] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1447.530052][T27342] bridge949: port 1(syz_tun) entered blocking state [ 1447.553607][T27351] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1447.565043][T27342] bridge949: port 1(syz_tun) entered disabled state [ 1447.589651][T27342] device syz_tun entered promiscuous mode 03:17:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1447.599801][T27351] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.617801][T27351] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.625781][T27350] device bridge949 entered promiscuous mode 03:17:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4888}, 0x0) [ 1447.654077][T27354] device syz_tun left promiscuous mode [ 1447.659830][T27354] bridge949: port 1(syz_tun) entered disabled state [ 1447.662972][T27351] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1447.703423][T27349] Dev loop5: unable to read RDB block 1 [ 1447.709113][T27349] loop5: unable to read partition table [ 1447.716528][T27349] loop5: partition table beyond EOD, truncated [ 1447.727844][T27349] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a000000", 0x9c, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac006cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1447.786931][T27363] bridge950: port 1(syz_tun) entered blocking state [ 1447.834508][T27363] bridge950: port 1(syz_tun) entered disabled state [ 1447.874272][T27363] device syz_tun entered promiscuous mode 03:17:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4c00}, 0x0) [ 1447.886848][T27366] device bridge950 entered promiscuous mode [ 1447.908516][T27370] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1447.922012][T27370] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1447.942607][T27370] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.953313][T27371] Dev loop5: unable to read RDB block 1 [ 1447.965199][T27371] loop5: unable to read partition table [ 1447.975271][T27370] F2FS-fs (loop3): invalid crc_offset: 0 [ 1447.998943][T27371] loop5: partition table beyond EOD, truncated [ 1448.010707][T27370] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1448.040806][T27371] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1448.062818][T27378] device syz_tun left promiscuous mode 03:17:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040", 0xa1, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0074ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1448.087772][T27378] bridge950: port 1(syz_tun) entered disabled state [ 1448.102063][T27362] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1448.153917][T27378] bridge951: port 1(syz_tun) entered blocking state [ 1448.169921][T27378] bridge951: port 1(syz_tun) entered disabled state [ 1448.187288][T27378] device syz_tun entered promiscuous mode [ 1448.218857][T27383] device bridge951 entered promiscuous mode [ 1448.231308][T27385] device syz_tun left promiscuous mode [ 1448.237698][T27385] bridge951: port 1(syz_tun) entered disabled state 03:17:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x5865}, 0x0) 03:17:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1448.283402][T27390] Dev loop5: unable to read RDB block 1 [ 1448.290266][T27393] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1448.292891][T27390] loop5: unable to read partition table [ 1448.315551][T27393] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1448.326112][T27390] loop5: partition table beyond EOD, truncated [ 1448.350249][T27390] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1448.359216][T27398] __nla_validate_parse: 4 callbacks suppressed [ 1448.359223][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.379971][T27393] F2FS-fs (loop3): invalid crc_offset: 0 [ 1448.389691][T27398] bridge952: port 1(syz_tun) entered blocking state 03:17:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6000}, 0x0) [ 1448.396711][T27398] bridge952: port 1(syz_tun) entered disabled state [ 1448.405043][T27393] F2FS-fs (loop3): invalid crc_offset: 0 [ 1448.405092][T27398] device syz_tun entered promiscuous mode [ 1448.419401][T27398] device bridge952 entered promiscuous mode [ 1448.438040][T27393] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040", 0xa1, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac007affffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1448.535758][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.560408][T27403] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1448.655240][T27411] device syz_tun left promiscuous mode [ 1448.662898][T27411] bridge952: port 1(syz_tun) entered disabled state [ 1448.675648][T27417] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1448.687447][T27417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1448.699066][T27411] bridge953: port 1(syz_tun) entered blocking state [ 1448.703108][T27417] F2FS-fs (loop3): invalid crc_offset: 0 [ 1448.712136][T27417] F2FS-fs (loop3): invalid crc_offset: 0 [ 1448.719805][T27417] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1448.727153][T27411] bridge953: port 1(syz_tun) entered disabled state [ 1448.736960][T27411] device syz_tun entered promiscuous mode 03:17:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="c981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040", 0xa1, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1448.751376][T27415] device bridge953 entered promiscuous mode 03:17:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6558}, 0x0) [ 1448.823865][T27422] Dev loop5: unable to read RDB block 1 [ 1448.842766][T27422] loop5: unable to read partition table [ 1448.866132][T27422] loop5: partition table beyond EOD, truncated [ 1448.892187][T27422] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1448.918681][T27432] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1448.947091][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.970642][T27432] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1449.014710][T27432] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.040342][T27436] device syz_tun left promiscuous mode [ 1449.047263][T27432] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.047269][T27436] bridge953: port 1(syz_tun) entered disabled state [ 1449.061449][T27436] bridge954: port 1(syz_tun) entered blocking state [ 1449.063038][T27426] Dev loop5: unable to read RDB block 1 [ 1449.071645][T27436] bridge954: port 1(syz_tun) entered disabled state [ 1449.086022][T27436] device syz_tun entered promiscuous mode [ 1449.098186][T27432] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1449.109584][T27426] loop5: unable to read partition table 03:17:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000", 0xa4, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6800}, 0x0) [ 1449.127199][T27435] device bridge954 entered promiscuous mode [ 1449.143013][T27429] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1449.143863][T27426] loop5: partition table beyond EOD, truncated [ 1449.202834][T27426] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0090ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1449.284070][T27450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1449.321105][T27449] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1449.343379][T27454] device syz_tun left promiscuous mode [ 1449.350175][T27449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1449.385936][T27454] bridge954: port 1(syz_tun) entered disabled state [ 1449.405100][T27449] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.430584][T27454] bridge955: port 1(syz_tun) entered blocking state [ 1449.442223][T27449] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.467358][T27449] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1449.479256][T27454] bridge955: port 1(syz_tun) entered disabled state 03:17:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000", 0xa4, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ca81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1449.505624][T27454] device syz_tun entered promiscuous mode [ 1449.531005][T27450] device bridge955 entered promiscuous mode [ 1449.549119][T27457] device syz_tun left promiscuous mode [ 1449.556301][T27457] bridge955: port 1(syz_tun) entered disabled state 03:17:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6c00}, 0x0) [ 1449.608164][T27459] Dev loop5: unable to read RDB block 1 [ 1449.613862][T27459] loop5: unable to read partition table [ 1449.626075][T27459] loop5: partition table beyond EOD, truncated [ 1449.638912][T27459] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1449.699998][T27467] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1449.719330][T27467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1449.741065][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1449.755993][T27464] Dev loop5: unable to read RDB block 1 [ 1449.766008][T27464] loop5: unable to read partition table [ 1449.774935][T27473] bridge956: port 1(syz_tun) entered blocking state [ 1449.783364][T27467] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.789439][T27473] bridge956: port 1(syz_tun) entered disabled state [ 1449.801782][T27464] loop5: partition table beyond EOD, truncated [ 1449.810708][T27467] F2FS-fs (loop3): invalid crc_offset: 0 [ 1449.829079][T27473] device syz_tun entered promiscuous mode [ 1449.841523][T27464] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6e02}, 0x0) 03:17:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00a8ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1449.849995][T27467] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1449.876280][T27476] device bridge956 entered promiscuous mode 03:17:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000", 0xa4, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1449.981323][T27468] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1450.008097][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="cb81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1450.122819][T27487] device syz_tun left promiscuous mode [ 1450.128377][T27487] bridge956: port 1(syz_tun) entered disabled state [ 1450.163526][T27488] Dev loop5: unable to read RDB block 1 [ 1450.170748][T27487] bridge957: port 1(syz_tun) entered blocking state [ 1450.172842][T27488] loop5: unable to read partition table [ 1450.183679][T27488] loop5: partition table beyond EOD, truncated [ 1450.189831][T27488] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1450.192008][T27487] bridge957: port 1(syz_tun) entered disabled state [ 1450.234573][T27487] device syz_tun entered promiscuous mode [ 1450.261325][T27491] device bridge957 entered promiscuous mode 03:17:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7400}, 0x0) [ 1450.318334][T27496] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1450.341646][T27496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1450.362976][T27495] Dev loop5: unable to read RDB block 1 [ 1450.368722][T27495] loop5: unable to read partition table [ 1450.408619][T27496] F2FS-fs (loop3): invalid crc_offset: 0 [ 1450.428478][T27495] loop5: partition table beyond EOD, truncated [ 1450.449265][T27496] F2FS-fs (loop3): invalid crc_offset: 0 [ 1450.460815][T27495] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1450.469953][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1450.477792][T27496] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac01bcffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1450.531497][T27508] device syz_tun left promiscuous mode [ 1450.537372][T27508] bridge957: port 1(syz_tun) entered disabled state 03:17:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xa5, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1450.574012][T27508] bridge958: port 1(syz_tun) entered blocking state [ 1450.588683][T27508] bridge958: port 1(syz_tun) entered disabled state [ 1450.617775][T27508] device syz_tun entered promiscuous mode [ 1450.647889][T27503] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1450.660809][T27507] device bridge958 entered promiscuous mode [ 1450.671051][T27513] device syz_tun left promiscuous mode [ 1450.676911][T27513] bridge958: port 1(syz_tun) entered disabled state 03:17:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7a00}, 0x0) 03:17:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="cc81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1450.743927][T27518] Dev loop5: unable to read RDB block 1 [ 1450.750291][T27518] loop5: unable to read partition table [ 1450.769722][T27518] loop5: partition table beyond EOD, truncated [ 1450.774306][T27521] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1450.777157][T27518] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1450.812702][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1450.819587][T27521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1450.832623][T27526] bridge959: port 1(syz_tun) entered blocking state [ 1450.847101][T27526] bridge959: port 1(syz_tun) entered disabled state [ 1450.863466][T27521] F2FS-fs (loop3): invalid crc value [ 1450.877774][T27521] F2FS-fs (loop3): invalid crc_offset: 0 [ 1450.886921][T27526] device syz_tun entered promiscuous mode [ 1450.902695][T27521] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1450.911433][T27533] device bridge959 entered promiscuous mode [ 1450.913704][T27522] Dev loop5: unable to read RDB block 1 [ 1450.937263][T27522] loop5: unable to read partition table 03:17:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xa5, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8100}, 0x0) [ 1450.985110][T27522] loop5: partition table beyond EOD, truncated [ 1451.049224][T27522] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac03c1ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1451.102989][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1451.145828][T27538] device syz_tun left promiscuous mode [ 1451.153202][T27539] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1451.167526][T27539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1451.178241][T27538] bridge959: port 1(syz_tun) entered disabled state [ 1451.202850][T27539] F2FS-fs (loop3): invalid crc value [ 1451.210844][T27538] bridge960: port 1(syz_tun) entered blocking state [ 1451.231395][T27539] F2FS-fs (loop3): invalid crc_offset: 0 [ 1451.243214][T27534] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8847}, 0x0) 03:17:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc", 0xa5, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="cd81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1451.254641][T27538] bridge960: port 1(syz_tun) entered disabled state [ 1451.267894][T27539] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1451.281902][T27538] device syz_tun entered promiscuous mode [ 1451.295231][T27547] Dev loop5: unable to read RDB block 1 [ 1451.301138][T27547] loop5: unable to read partition table [ 1451.314236][T27544] device bridge960 entered promiscuous mode [ 1451.330183][T27547] loop5: partition table beyond EOD, truncated [ 1451.373573][T27547] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1451.449459][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1451.482950][T27552] Dev loop5: unable to read RDB block 1 [ 1451.488521][T27552] loop5: unable to read partition table [ 1451.498441][T27561] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1451.510746][T27561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1451.514139][T27552] loop5: partition table beyond EOD, truncated [ 1451.528177][T27561] F2FS-fs (loop3): invalid crc value [ 1451.540321][T27561] F2FS-fs (loop3): invalid crc_offset: 0 [ 1451.540929][T27564] device syz_tun left promiscuous mode [ 1451.553032][T27561] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1451.597749][T27552] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1451.606466][T27564] bridge960: port 1(syz_tun) entered disabled state [ 1451.637557][T27564] bridge961: port 1(syz_tun) entered blocking state 03:17:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00ceffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1451.661754][T27564] bridge961: port 1(syz_tun) entered disabled state [ 1451.698890][T27564] device syz_tun entered promiscuous mode [ 1451.718821][T27573] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1451.745563][T27573] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1451.758405][T27559] device bridge961 entered promiscuous mode [ 1451.776021][T27567] device syz_tun left promiscuous mode [ 1451.781662][T27567] bridge961: port 1(syz_tun) entered disabled state [ 1451.823553][T27573] F2FS-fs (loop3): invalid crc_offset: 0 [ 1451.860584][T27573] F2FS-fs (loop3): invalid crc_offset: 0 [ 1451.867607][T27579] Dev loop5: unable to read RDB block 1 03:17:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8848}, 0x0) [ 1451.874923][T27579] loop5: unable to read partition table [ 1451.886060][T27573] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1451.909028][T27579] loop5: partition table beyond EOD, truncated 03:17:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1451.935369][T27579] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1451.991675][T27584] bridge962: port 1(syz_tun) entered blocking state [ 1452.013527][T27584] bridge962: port 1(syz_tun) entered disabled state [ 1452.035729][T27584] device syz_tun entered promiscuous mode [ 1452.043193][T27581] Dev loop5: unable to read RDB block 1 [ 1452.048821][T27581] loop5: unable to read partition table [ 1452.057234][T27572] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1452.068985][T27584] device bridge962 entered promiscuous mode [ 1452.081898][T27581] loop5: partition table beyond EOD, truncated 03:17:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac03dcffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1452.095982][T27592] device syz_tun left promiscuous mode [ 1452.097072][T27581] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1452.101719][T27592] bridge962: port 1(syz_tun) entered disabled state [ 1452.123680][T27590] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.131405][T27590] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ce81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9001}, 0x0) [ 1452.180465][T27590] F2FS-fs (loop3): invalid crc_offset: 0 [ 1452.222782][T27590] F2FS-fs (loop3): invalid crc_offset: 0 [ 1452.228539][T27590] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 03:17:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1452.338372][T27602] Dev loop5: unable to read RDB block 1 [ 1452.345396][T27602] loop5: unable to read partition table [ 1452.365213][T27607] bridge963: port 1(syz_tun) entered blocking state [ 1452.365478][T27602] loop5: partition table beyond EOD, truncated 03:17:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xdc01}, 0x0) [ 1452.396706][T27607] bridge963: port 1(syz_tun) entered disabled state [ 1452.406130][T27602] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1452.415571][T27607] device syz_tun entered promiscuous mode [ 1452.424809][T27607] device bridge963 entered promiscuous mode [ 1452.432163][T27613] device syz_tun left promiscuous mode [ 1452.438543][T27613] bridge963: port 1(syz_tun) entered disabled state [ 1452.465596][T27612] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.478274][T27612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1452.488837][T27612] F2FS-fs (loop3): invalid crc_offset: 0 [ 1452.500657][T27612] F2FS-fs (loop3): invalid crc_offset: 0 [ 1452.509742][T27612] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1452.522867][T27608] Dev loop5: unable to read RDB block 1 [ 1452.528488][T27608] loop5: unable to read partition table [ 1452.542926][T27620] bridge964: port 1(syz_tun) entered blocking state [ 1452.549585][T27608] loop5: partition table beyond EOD, truncated 03:17:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1452.558973][T27608] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1452.561111][T27620] bridge964: port 1(syz_tun) entered disabled state [ 1452.604369][T27603] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac03faffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1452.624833][T27620] device syz_tun entered promiscuous mode [ 1452.637291][T27623] device bridge964 entered promiscuous mode [ 1452.650631][T27623] device syz_tun left promiscuous mode 03:17:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xde01}, 0x0) [ 1452.670754][T27623] bridge964: port 1(syz_tun) entered disabled state [ 1452.774920][T27631] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.789613][T27631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="cf81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1452.827562][T27631] F2FS-fs (loop3): invalid crc_offset: 0 [ 1452.836151][T27636] bridge965: port 1(syz_tun) entered blocking state [ 1452.848546][T27636] bridge965: port 1(syz_tun) entered disabled state [ 1452.862856][T27637] Dev loop5: unable to read RDB block 1 [ 1452.871820][T27637] loop5: unable to read partition table [ 1452.878154][T27631] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1452.893822][T27631] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1452.904134][T27636] device syz_tun entered promiscuous mode [ 1452.916550][T27637] loop5: partition table beyond EOD, truncated 03:17:36 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1000000}, 0x0) 03:17:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac26fcffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1452.930531][T27646] device bridge965 entered promiscuous mode [ 1452.944588][T27646] device syz_tun left promiscuous mode [ 1452.960824][T27646] bridge965: port 1(syz_tun) entered disabled state [ 1452.968737][T27637] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1453.136428][T27657] bridge966: port 1(syz_tun) entered blocking state [ 1453.142915][T27658] Dev loop5: unable to read RDB block 1 [ 1453.148848][T27658] loop5: unable to read partition table [ 1453.157545][T27660] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1453.169403][T27657] bridge966: port 1(syz_tun) entered disabled state [ 1453.170575][T27658] loop5: partition table beyond EOD, truncated [ 1453.187153][T27660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1453.207189][T27657] device syz_tun entered promiscuous mode [ 1453.210785][T27658] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1453.223726][T27660] F2FS-fs (loop3): invalid crc_offset: 0 03:17:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2000000}, 0x0) [ 1453.239801][T27665] device bridge966 entered promiscuous mode [ 1453.276553][T27660] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1453.296316][T27660] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1453.362878][T27664] Dev loop5: unable to read RDB block 1 [ 1453.374048][T27664] loop5: unable to read partition table [ 1453.385021][T27650] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1453.399698][T27664] loop5: partition table beyond EOD, truncated 03:17:36 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac03fdffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1453.411899][T27674] __nla_validate_parse: 5 callbacks suppressed [ 1453.411906][T27674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1453.432540][T27664] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1453.500465][T27676] device syz_tun left promiscuous mode [ 1453.512613][T27676] bridge966: port 1(syz_tun) entered disabled state [ 1453.518890][T27682] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1453.541444][T27682] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1453.554674][T27676] bridge967: port 1(syz_tun) entered blocking state [ 1453.562729][T27682] F2FS-fs (loop3): invalid crc_offset: 0 [ 1453.577704][T27676] bridge967: port 1(syz_tun) entered disabled state [ 1453.594784][T27682] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 03:17:36 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3000000}, 0x0) 03:17:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d081cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1453.602434][T27682] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1453.615240][T27676] device syz_tun entered promiscuous mode [ 1453.645049][T27683] device bridge967 entered promiscuous mode [ 1453.718058][T27689] Dev loop5: unable to read RDB block 1 [ 1453.729189][T27689] loop5: unable to read partition table [ 1453.759426][T27689] loop5: partition table beyond EOD, truncated [ 1453.786242][T27698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1453.804191][T27697] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1453.811960][T27697] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1453.831480][T27689] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1453.874602][T27702] device syz_tun left promiscuous mode [ 1453.888603][T27702] bridge967: port 1(syz_tun) entered disabled state [ 1453.905436][T27697] F2FS-fs (loop3): invalid crc_offset: 0 [ 1453.931892][T27702] bridge968: port 1(syz_tun) entered blocking state [ 1453.946774][T27697] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1453.955304][T27693] Dev loop5: unable to read RDB block 1 [ 1453.962066][T27693] loop5: unable to read partition table 03:17:37 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4000000}, 0x0) [ 1453.989111][T27697] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1453.994662][T27702] bridge968: port 1(syz_tun) entered disabled state [ 1453.999700][T27693] loop5: partition table beyond EOD, truncated [ 1454.010359][T27693] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1454.021474][T27702] device syz_tun entered promiscuous mode [ 1454.029326][T27705] device bridge968 entered promiscuous mode 03:17:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00ffffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1454.153421][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.163827][T27701] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1454.172266][T27714] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1454.181279][T27714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1454.189188][T27715] device syz_tun left promiscuous mode [ 1454.196830][T27714] F2FS-fs (loop3): invalid crc_offset: 0 [ 1454.203168][T27715] bridge968: port 1(syz_tun) entered disabled state [ 1454.210742][T27714] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1454.221673][T27714] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1454.222854][T27720] Dev loop5: unable to read RDB block 1 [ 1454.239848][T27715] bridge969: port 1(syz_tun) entered blocking state [ 1454.252486][T27720] loop5: unable to read partition table [ 1454.257032][T27715] bridge969: port 1(syz_tun) entered disabled state [ 1454.258230][T27720] loop5: partition table beyond EOD, truncated [ 1454.258243][T27720] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:37 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x5000000}, 0x0) [ 1454.345177][T27715] device syz_tun entered promiscuous mode [ 1454.359232][T27727] device bridge969 entered promiscuous mode [ 1454.434096][T27726] Dev loop5: unable to read RDB block 1 [ 1454.439681][T27726] loop5: unable to read partition table [ 1454.453503][T27726] loop5: partition table beyond EOD, truncated 03:17:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d181cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1454.490003][T27726] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1454.505488][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.517418][T27737] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0fffffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1454.533736][T27737] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1454.554106][T27737] F2FS-fs (loop3): invalid crc_offset: 0 [ 1454.568524][T27737] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1454.574981][T27740] device syz_tun left promiscuous mode [ 1454.580510][T27740] bridge969: port 1(syz_tun) entered disabled state [ 1454.599226][T27737] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1454.634128][T27740] bridge970: port 1(syz_tun) entered blocking state [ 1454.641590][T27740] bridge970: port 1(syz_tun) entered disabled state 03:17:37 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040), 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1454.660051][T27740] device syz_tun entered promiscuous mode [ 1454.693964][T27739] device bridge970 entered promiscuous mode [ 1454.712279][T27748] device syz_tun left promiscuous mode [ 1454.718299][T27748] bridge970: port 1(syz_tun) entered disabled state [ 1454.748245][T27751] Dev loop5: unable to read RDB block 1 [ 1454.754070][T27751] loop5: unable to read partition table 03:17:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6000000}, 0x0) [ 1454.767403][T27751] loop5: partition table beyond EOD, truncated [ 1454.781561][T27751] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1454.787955][T27758] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1454.798903][T27758] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1454.807741][T27758] F2FS-fs (loop3): invalid crc_offset: 0 [ 1454.816461][T27758] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1454.823370][T27758] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 03:17:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040), 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1454.865526][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.932724][T27755] Dev loop5: unable to read RDB block 1 [ 1454.941217][T27755] loop5: unable to read partition table [ 1454.947366][T27770] bridge971: port 1(syz_tun) entered blocking state [ 1454.957404][T27755] loop5: partition table beyond EOD, truncated [ 1454.980418][T27772] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1454.988584][T27772] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1454.992435][T27770] bridge971: port 1(syz_tun) entered disabled state [ 1454.999673][T27772] F2FS-fs (loop3): invalid crc_offset: 0 [ 1455.009351][T27755] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1455.018969][T27772] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1455.019968][T27753] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7000000}, 0x0) [ 1455.025738][T27772] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1455.046360][T27770] device syz_tun entered promiscuous mode [ 1455.084194][T27765] device bridge971 entered promiscuous mode [ 1455.095104][T27775] device syz_tun left promiscuous mode [ 1455.100734][T27775] bridge971: port 1(syz_tun) entered disabled state 03:17:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040), 0x0, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0002ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1455.262144][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d281cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1455.312464][T27783] bridge972: port 1(syz_tun) entered blocking state [ 1455.322571][T27783] bridge972: port 1(syz_tun) entered disabled state [ 1455.322855][T27789] Dev loop5: unable to read RDB block 1 [ 1455.333806][T27783] device syz_tun entered promiscuous mode [ 1455.344760][T27785] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1455.360910][T27785] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1455.391412][T27794] device bridge972 entered promiscuous mode [ 1455.399929][T27789] loop5: unable to read partition table 03:17:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8000000}, 0x0) [ 1455.419333][T27785] F2FS-fs (loop3): invalid crc_offset: 0 [ 1455.437987][T27789] loop5: partition table beyond EOD, truncated [ 1455.463882][T27789] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1455.495616][T27785] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1455.504097][T27785] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 03:17:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1455.574243][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1455.634111][T27807] device syz_tun left promiscuous mode [ 1455.639760][T27807] bridge972: port 1(syz_tun) entered disabled state [ 1455.646747][T27793] Dev loop5: unable to read RDB block 1 [ 1455.654524][T27793] loop5: unable to read partition table [ 1455.666860][T27793] loop5: partition table beyond EOD, truncated 03:17:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0003ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1455.681289][T27793] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1455.694802][T27810] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1455.715871][T27807] bridge973: port 1(syz_tun) entered blocking state [ 1455.722529][T27807] bridge973: port 1(syz_tun) entered disabled state 03:17:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9000000}, 0x0) [ 1455.730026][T27807] device syz_tun entered promiscuous mode [ 1455.733747][T27810] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1455.738745][T27803] device bridge973 entered promiscuous mode [ 1455.754745][T27797] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1455.812420][T27810] F2FS-fs (loop3): invalid crc_offset: 0 [ 1455.828402][T27810] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1455.852390][T27810] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 03:17:39 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1455.886769][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1455.966365][T27828] device syz_tun left promiscuous mode [ 1455.977813][T27822] Dev loop5: unable to read RDB block 1 [ 1455.986573][T27822] loop5: unable to read partition table [ 1455.996869][T27828] bridge973: port 1(syz_tun) entered disabled state [ 1456.007071][T27822] loop5: partition table beyond EOD, truncated [ 1456.018780][T27831] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.028174][T27822] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1456.031998][T27831] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1456.046387][T27828] bridge974: port 1(syz_tun) entered blocking state [ 1456.066125][T27831] F2FS-fs (loop3): invalid crc_offset: 0 [ 1456.074166][T27828] bridge974: port 1(syz_tun) entered disabled state [ 1456.107169][T27828] device syz_tun entered promiscuous mode [ 1456.115725][T27831] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 1456.133799][T27831] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1456.147082][T27821] device bridge974 entered promiscuous mode [ 1456.152551][T27829] Dev loop5: unable to read RDB block 1 [ 1456.158923][T27829] loop5: unable to read partition table 03:17:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa000000}, 0x0) 03:17:39 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1456.173172][T27829] loop5: partition table beyond EOD, truncated [ 1456.187199][T27829] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0004ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1456.320333][T27845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1456.357150][T27848] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.385495][T27853] device syz_tun left promiscuous mode [ 1456.388771][T27848] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1456.394332][T27853] bridge974: port 1(syz_tun) entered disabled state [ 1456.426561][T27853] bridge975: port 1(syz_tun) entered blocking state [ 1456.432205][T27848] F2FS-fs (loop3): invalid crc_offset: 0 [ 1456.433784][T27852] Dev loop5: unable to read RDB block 1 [ 1456.446354][T27852] loop5: unable to read partition table [ 1456.452071][T27852] loop5: partition table beyond EOD, truncated [ 1456.459022][T27852] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1456.459524][T27848] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 03:17:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xb000000}, 0x0) [ 1456.502328][T27853] bridge975: port 1(syz_tun) entered disabled state [ 1456.510072][T27853] device syz_tun entered promiscuous mode [ 1456.520635][T27842] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1456.537460][T27848] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1456.549431][T27845] device bridge975 entered promiscuous mode 03:17:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0005ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:39 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1456.684064][T27867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1456.742606][T27872] device syz_tun left promiscuous mode [ 1456.748205][T27872] bridge975: port 1(syz_tun) entered disabled state [ 1456.776913][T27872] bridge976: port 1(syz_tun) entered blocking state [ 1456.788877][T27873] Dev loop5: unable to read RDB block 1 [ 1456.796996][T27876] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.807854][T27873] loop5: unable to read partition table [ 1456.815640][T27872] bridge976: port 1(syz_tun) entered disabled state [ 1456.826252][T27876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1456.838955][T27873] loop5: partition table beyond EOD, truncated [ 1456.848418][T27872] device syz_tun entered promiscuous mode [ 1456.873856][T27873] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1456.890479][T27867] device bridge976 entered promiscuous mode [ 1456.896965][T27876] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.905954][T27876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1456.914855][T27867] device syz_tun left promiscuous mode [ 1456.920516][T27867] bridge976: port 1(syz_tun) entered disabled state 03:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc000000}, 0x0) 03:17:40 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1457.047807][T27878] Dev loop5: unable to read RDB block 1 [ 1457.053565][T27878] loop5: unable to read partition table [ 1457.070082][T27878] loop5: partition table beyond EOD, truncated [ 1457.087012][T27878] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1457.119610][T27890] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.131506][T27888] bridge977: port 1(syz_tun) entered blocking state [ 1457.136555][T27890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1457.141509][T27881] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1457.159018][T27890] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0006ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1457.174014][T27888] bridge977: port 1(syz_tun) entered disabled state [ 1457.175961][T27890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1457.198758][T27888] device syz_tun entered promiscuous mode 03:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xd000000}, 0x0) 03:17:40 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1457.225443][T27895] device bridge977 entered promiscuous mode [ 1457.372007][T27903] device syz_tun left promiscuous mode [ 1457.392840][T27903] bridge977: port 1(syz_tun) entered disabled state [ 1457.415194][T27899] Dev loop5: unable to read RDB block 1 [ 1457.425650][T27899] loop5: unable to read partition table [ 1457.444279][T27903] bridge978: port 1(syz_tun) entered blocking state [ 1457.454342][T27899] loop5: partition table beyond EOD, truncated [ 1457.478758][T27903] bridge978: port 1(syz_tun) entered disabled state [ 1457.490826][T27899] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1457.499943][T27912] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.499952][T27912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1457.500116][T27912] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1457.528434][T27903] device syz_tun entered promiscuous mode 03:17:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xe000000}, 0x0) [ 1457.562319][T27908] device bridge978 entered promiscuous mode [ 1457.643735][T27912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:40 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1457.693650][T27906] Dev loop5: unable to read RDB block 1 [ 1457.699355][T27906] loop5: unable to read partition table [ 1457.713685][T27906] loop5: partition table beyond EOD, truncated [ 1457.717378][T27923] device syz_tun left promiscuous mode [ 1457.727511][T27906] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0007ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1457.766292][T27923] bridge978: port 1(syz_tun) entered disabled state 03:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf000000}, 0x0) [ 1457.830596][T27923] bridge979: port 1(syz_tun) entered blocking state [ 1457.869825][T27923] bridge979: port 1(syz_tun) entered disabled state [ 1457.885940][T27923] device syz_tun entered promiscuous mode [ 1457.906235][T27931] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.917226][T27928] device bridge979 entered promiscuous mode [ 1457.931024][T27931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1457.953393][T27922] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1457.975671][T27931] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.005492][T27936] Dev loop5: unable to read RDB block 1 [ 1458.011356][T27936] loop5: unable to read partition table [ 1458.028073][T27931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1458.045024][T27936] loop5: partition table beyond EOD, truncated 03:17:41 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1458.067155][T27936] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1458.130143][T27943] device syz_tun left promiscuous mode [ 1458.153939][T27943] bridge979: port 1(syz_tun) entered disabled state [ 1458.179789][T27943] bridge980: port 1(syz_tun) entered blocking state [ 1458.196587][T27943] bridge980: port 1(syz_tun) entered disabled state [ 1458.212448][T27939] Dev loop5: unable to read RDB block 1 [ 1458.218089][T27939] loop5: unable to read partition table 03:17:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1458.249237][T27939] loop5: partition table beyond EOD, truncated [ 1458.266295][T27943] device syz_tun entered promiscuous mode [ 1458.287742][T27939] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0008ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x10000000}, 0x0) [ 1458.287870][T27954] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.303860][T27949] device bridge980 entered promiscuous mode [ 1458.339543][T27954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1458.368334][T27954] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.384896][T27954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:41 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1458.490064][T27962] __nla_validate_parse: 4 callbacks suppressed [ 1458.490071][T27962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1458.568273][T27968] device syz_tun left promiscuous mode [ 1458.576361][T27968] bridge980: port 1(syz_tun) entered disabled state [ 1458.594460][T27966] Dev loop5: unable to read RDB block 1 [ 1458.600067][T27966] loop5: unable to read partition table [ 1458.614710][T27969] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.628709][T27966] loop5: partition table beyond EOD, truncated [ 1458.639725][T27968] bridge981: port 1(syz_tun) entered blocking state [ 1458.648683][T27969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1458.659482][T27969] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:41 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x11000000}, 0x0) [ 1458.667712][T27969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1458.673156][T27966] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1458.678234][T27968] bridge981: port 1(syz_tun) entered disabled state [ 1458.691854][T27968] device syz_tun entered promiscuous mode [ 1458.701683][T27962] device bridge981 entered promiscuous mode [ 1458.716077][T27958] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0009ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1458.862690][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1458.881505][T27980] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.900428][T27980] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1458.950764][T27980] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.975595][T27988] device syz_tun left promiscuous mode [ 1458.981556][T27988] bridge981: port 1(syz_tun) entered disabled state [ 1459.006625][T27980] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1459.018729][T27988] bridge982: port 1(syz_tun) entered blocking state [ 1459.044022][T27991] Dev loop5: unable to read RDB block 1 [ 1459.049685][T27991] loop5: unable to read partition table [ 1459.058786][T27988] bridge982: port 1(syz_tun) entered disabled state [ 1459.067716][T27991] loop5: partition table beyond EOD, truncated [ 1459.082055][T27991] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1459.094030][T27988] device syz_tun entered promiscuous mode 03:17:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:42 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1459.131070][T27992] device bridge982 entered promiscuous mode 03:17:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x12000000}, 0x0) [ 1459.242410][T27997] Dev loop5: unable to read RDB block 1 [ 1459.248220][T27997] loop5: unable to read partition table [ 1459.262082][T28004] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.262235][T27997] loop5: partition table beyond EOD, truncated [ 1459.294951][T27997] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1459.302142][T28004] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1459.312179][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1459.346531][T28004] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000affffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1459.395591][T28009] device syz_tun left promiscuous mode [ 1459.401295][T28009] bridge982: port 1(syz_tun) entered disabled state [ 1459.403118][T28004] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1459.418331][T28009] bridge983: port 1(syz_tun) entered blocking state [ 1459.428955][T28005] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1c000000}, 0x0) [ 1459.441334][T28009] bridge983: port 1(syz_tun) entered disabled state [ 1459.449849][T28009] device syz_tun entered promiscuous mode [ 1459.460096][T28008] device bridge983 entered promiscuous mode 03:17:42 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1459.594091][T28016] Dev loop5: unable to read RDB block 1 [ 1459.599980][T28016] loop5: unable to read partition table [ 1459.624798][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1459.664201][T28016] loop5: partition table beyond EOD, truncated [ 1459.682631][T28016] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000bffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1459.709119][T28025] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.717074][T28025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1459.727669][T28025] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.735581][T28025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:42 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1459.779973][T28023] device syz_tun left promiscuous mode [ 1459.786203][T28023] bridge983: port 1(syz_tun) entered disabled state [ 1459.825597][T28023] bridge984: port 1(syz_tun) entered blocking state [ 1459.853728][T28023] bridge984: port 1(syz_tun) entered disabled state 03:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x20000000}, 0x0) 03:17:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1459.871648][T28023] device syz_tun entered promiscuous mode [ 1459.887378][T28027] device bridge984 entered promiscuous mode [ 1459.924618][T28034] Dev loop5: unable to read RDB block 1 [ 1459.930197][T28034] loop5: unable to read partition table [ 1459.942102][T28037] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1459.947301][T28034] loop5: partition table beyond EOD, truncated [ 1459.949751][T28037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1459.970391][T28037] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.970409][T28034] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1460.008553][T28037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1460.082402][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1460.157477][T28049] device syz_tun left promiscuous mode [ 1460.173701][T28049] bridge984: port 1(syz_tun) entered disabled state [ 1460.182855][T28049] bridge985: port 1(syz_tun) entered blocking state [ 1460.189467][T28049] bridge985: port 1(syz_tun) entered disabled state 03:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x25000000}, 0x0) [ 1460.214294][T28049] device syz_tun entered promiscuous mode [ 1460.223959][T28045] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1460.239540][T28046] device bridge985 entered promiscuous mode [ 1460.331874][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1460.352517][T28057] Dev loop5: unable to read RDB block 1 [ 1460.358278][T28057] loop5: unable to read partition table [ 1460.362105][T28058] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1460.371741][T28058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1460.379972][T28057] loop5: partition table beyond EOD, truncated [ 1460.386143][T28058] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.392788][T28068] device syz_tun left promiscuous mode [ 1460.403857][T28068] bridge985: port 1(syz_tun) entered disabled state [ 1460.406696][T28058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1460.435245][T28057] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1460.455498][T28068] bridge986: port 1(syz_tun) entered blocking state 03:17:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="d981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3ece2b84}, 0x0) [ 1460.482544][T28068] bridge986: port 1(syz_tun) entered disabled state [ 1460.489540][T28068] device syz_tun entered promiscuous mode [ 1460.523872][T28065] device bridge986 entered promiscuous mode [ 1460.602545][T28063] Dev loop5: unable to read RDB block 1 [ 1460.608156][T28063] loop5: unable to read partition table [ 1460.620030][T28076] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1460.639921][T28076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1460.648522][T28063] loop5: partition table beyond EOD, truncated [ 1460.664146][T28080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1460.682052][T28063] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1460.690770][T28076] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000dffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1460.713308][T28076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1460.756797][T28084] device syz_tun left promiscuous mode [ 1460.778314][T28084] bridge986: port 1(syz_tun) entered disabled state [ 1460.803537][T28084] bridge987: port 1(syz_tun) entered blocking state [ 1460.817566][T28084] bridge987: port 1(syz_tun) entered disabled state [ 1460.842096][T28084] device syz_tun entered promiscuous mode 03:17:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3f000000}, 0x0) [ 1460.867334][T28087] device bridge987 entered promiscuous mode [ 1460.912695][T28090] Dev loop5: unable to read RDB block 1 [ 1460.919885][T28085] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1460.934294][T28090] loop5: unable to read partition table [ 1460.950842][T28090] loop5: partition table beyond EOD, truncated [ 1460.976097][T28090] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1461.010507][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.022053][T28098] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1461.038701][T28098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1461.074240][T28098] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1461.107474][T28103] device syz_tun left promiscuous mode [ 1461.113751][T28103] bridge987: port 1(syz_tun) entered disabled state [ 1461.130302][T28098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1461.149499][T28103] bridge988: port 1(syz_tun) entered blocking state [ 1461.157246][T28103] bridge988: port 1(syz_tun) entered disabled state [ 1461.157328][T28094] Dev loop5: unable to read RDB block 1 [ 1461.165733][T28103] device syz_tun entered promiscuous mode 03:17:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="da81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x40000000}, 0x0) 03:17:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000effffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1461.177826][T28108] device bridge988 entered promiscuous mode [ 1461.185314][T28094] loop5: unable to read partition table [ 1461.189465][T28103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.201139][T28094] loop5: partition table beyond EOD, truncated [ 1461.208108][T28094] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1461.351881][T28114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.403465][T28114] device syz_tun left promiscuous mode [ 1461.409011][T28114] bridge988: port 1(syz_tun) entered disabled state [ 1461.449600][T28114] bridge989: port 1(syz_tun) entered blocking state [ 1461.452278][T28118] Dev loop5: unable to read RDB block 1 [ 1461.460019][T28119] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1461.467926][T28118] loop5: unable to read partition table [ 1461.484706][T28119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1461.493378][T28114] bridge989: port 1(syz_tun) entered disabled state [ 1461.493648][T28118] loop5: partition table beyond EOD, truncated [ 1461.515170][T28114] device syz_tun entered promiscuous mode [ 1461.524681][T28119] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1461.542318][T28118] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x48000000}, 0x0) [ 1461.561863][T28124] device bridge989 entered promiscuous mode [ 1461.575602][T28119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1461.618590][T28112] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac000fffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1461.785813][T28132] device syz_tun left promiscuous mode [ 1461.803415][T28132] bridge989: port 1(syz_tun) entered disabled state [ 1461.831187][T28132] bridge990: port 1(syz_tun) entered blocking state [ 1461.866320][T28132] bridge990: port 1(syz_tun) entered disabled state [ 1461.882599][T28138] Dev loop5: unable to read RDB block 1 [ 1461.888345][T28138] loop5: unable to read partition table [ 1461.895216][T28132] device syz_tun entered promiscuous mode [ 1461.908705][T28141] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1461.923562][T28138] loop5: partition table beyond EOD, truncated 03:17:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="db81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1461.934604][T28141] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1461.947962][T28140] device bridge990 entered promiscuous mode [ 1461.958288][T28138] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1461.981091][T28141] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:17:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4c000000}, 0x0) [ 1462.021227][T28141] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1462.104218][T28144] Dev loop5: unable to read RDB block 1 [ 1462.109864][T28144] loop5: unable to read partition table [ 1462.130276][T28144] loop5: partition table beyond EOD, truncated [ 1462.148018][T28153] device syz_tun left promiscuous mode [ 1462.160545][T28144] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1462.174974][T28149] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1462.196114][T28153] bridge990: port 1(syz_tun) entered disabled state 03:17:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x60000000}, 0x0) [ 1462.206387][T28153] bridge991: port 1(syz_tun) entered blocking state [ 1462.213734][T28153] bridge991: port 1(syz_tun) entered disabled state [ 1462.221036][T28153] device syz_tun entered promiscuous mode [ 1462.234076][T28159] device bridge991 entered promiscuous mode 03:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0010ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="dc81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1462.331730][T28162] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1462.349169][T28162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1462.358416][T28162] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1462.366796][T28162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1462.403128][T28166] device syz_tun left promiscuous mode [ 1462.408869][T28166] bridge991: port 1(syz_tun) entered disabled state [ 1462.433939][T28166] bridge992: port 1(syz_tun) entered blocking state [ 1462.452072][T28166] bridge992: port 1(syz_tun) entered disabled state [ 1462.458995][T28166] device syz_tun entered promiscuous mode [ 1462.482955][T28175] device bridge992 entered promiscuous mode [ 1462.497430][T28172] Dev loop5: unable to read RDB block 1 [ 1462.505025][T28172] loop5: unable to read partition table [ 1462.513398][T28172] loop5: partition table beyond EOD, truncated [ 1462.519772][T28172] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1462.531319][T28181] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1462.540297][T28181] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 03:17:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x65580000}, 0x0) 03:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0011ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1462.548972][T28181] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1462.557174][T28181] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1462.684146][T28187] device syz_tun left promiscuous mode [ 1462.696565][T28187] bridge992: port 1(syz_tun) entered disabled state [ 1462.717518][T28187] bridge993: port 1(syz_tun) entered blocking state [ 1462.732213][T28187] bridge993: port 1(syz_tun) entered disabled state [ 1462.753361][T28191] Dev loop5: unable to read RDB block 1 [ 1462.759077][T28191] loop5: unable to read partition table [ 1462.762775][T28187] device syz_tun entered promiscuous mode [ 1462.771506][T28191] loop5: partition table beyond EOD, truncated 03:17:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x68000000}, 0x0) [ 1462.785839][T28191] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1462.798181][T28193] device bridge993 entered promiscuous mode [ 1462.859580][T28182] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1462.926571][T28204] device syz_tun left promiscuous mode [ 1462.932187][T28196] Dev loop5: unable to read RDB block 1 [ 1462.936670][T28204] bridge993: port 1(syz_tun) entered disabled state [ 1462.939207][T28196] loop5: unable to read partition table [ 1462.959061][T28196] loop5: partition table beyond EOD, truncated [ 1462.967800][T28204] bridge994: port 1(syz_tun) entered blocking state [ 1462.982128][T28198] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1463.000960][T28198] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1463.016999][T28196] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1463.029767][T28204] bridge994: port 1(syz_tun) entered disabled state [ 1463.056022][T28198] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1463.073121][T28204] device syz_tun entered promiscuous mode 03:17:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0012ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6c000000}, 0x0) 03:17:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="dd81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1463.099123][T28198] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1463.126315][T28207] device bridge994 entered promiscuous mode [ 1463.273930][T28217] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 1463.281621][T28217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1463.290372][T28220] device syz_tun left promiscuous mode [ 1463.307013][T28220] bridge994: port 1(syz_tun) entered disabled state [ 1463.322567][T28217] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1463.332276][T28220] bridge995: port 1(syz_tun) entered blocking state [ 1463.341725][T28220] bridge995: port 1(syz_tun) entered disabled state [ 1463.342135][T28219] Dev loop5: unable to read RDB block 1 [ 1463.354761][T28217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6e020000}, 0x0) [ 1463.371553][T28220] device syz_tun entered promiscuous mode [ 1463.373406][T28219] loop5: unable to read partition table [ 1463.399189][T28228] device bridge995 entered promiscuous mode [ 1463.420725][T28219] loop5: partition table beyond EOD, truncated [ 1463.463096][T28219] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1463.523239][T28234] __nla_validate_parse: 6 callbacks suppressed [ 1463.523246][T28234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1463.571256][T28235] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 1463.587183][T28235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1463.603975][T28239] device syz_tun left promiscuous mode [ 1463.610521][T28239] bridge995: port 1(syz_tun) entered disabled state [ 1463.618210][T28226] Dev loop5: unable to read RDB block 1 [ 1463.626116][T28226] loop5: unable to read partition table [ 1463.641474][T28229] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1463.644371][T28226] loop5: partition table beyond EOD, truncated [ 1463.657820][T28235] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1463.673361][T28239] bridge996: port 1(syz_tun) entered blocking state [ 1463.694616][T28235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1463.704073][T28239] bridge996: port 1(syz_tun) entered disabled state [ 1463.715482][T28226] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x74000000}, 0x0) 03:17:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="de81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0013ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1463.736657][T28239] device syz_tun entered promiscuous mode [ 1463.765501][T28243] device bridge996 entered promiscuous mode [ 1463.880269][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1463.913043][T28252] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 1463.927071][T28251] device syz_tun left promiscuous mode [ 1463.936285][T28252] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1463.940897][T28251] bridge996: port 1(syz_tun) entered disabled state [ 1463.967838][T28251] bridge997: port 1(syz_tun) entered blocking state [ 1463.977556][T28252] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1464.002076][T28259] Dev loop5: unable to read RDB block 1 [ 1464.004416][T28251] bridge997: port 1(syz_tun) entered disabled state [ 1464.007989][T28259] loop5: unable to read partition table [ 1464.018926][T28252] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:47 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1464.048980][T28259] loop5: partition table beyond EOD, truncated [ 1464.062511][T28251] device syz_tun entered promiscuous mode [ 1464.079719][T28259] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7a000000}, 0x0) [ 1464.097976][T28261] device bridge997 entered promiscuous mode [ 1464.207425][T28262] Dev loop5: unable to read RDB block 1 [ 1464.208345][T28253] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1464.213338][T28262] loop5: unable to read partition table [ 1464.229832][T28270] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1464.244441][T28270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 03:17:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0025ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1464.253636][T28262] loop5: partition table beyond EOD, truncated [ 1464.257164][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1464.272080][T28262] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1464.280297][T28270] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1464.317995][T28270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1464.340987][T28277] device syz_tun left promiscuous mode [ 1464.350476][T28277] bridge997: port 1(syz_tun) entered disabled state [ 1464.385103][T28277] bridge998: port 1(syz_tun) entered blocking state [ 1464.407671][T28277] bridge998: port 1(syz_tun) entered disabled state [ 1464.424503][T28277] device syz_tun entered promiscuous mode 03:17:47 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="df81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1464.446609][T28275] device bridge998 entered promiscuous mode [ 1464.460070][T28280] device syz_tun left promiscuous mode [ 1464.467110][T28280] bridge998: port 1(syz_tun) entered disabled state 03:17:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x81000000}, 0x0) [ 1464.541984][T28284] Dev loop5: unable to read RDB block 1 [ 1464.557424][T28284] loop5: unable to read partition table [ 1464.605169][T28284] loop5: partition table beyond EOD, truncated [ 1464.616655][T28291] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1464.634573][T28291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1464.639376][T28284] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1464.667408][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1464.684409][T28291] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1464.723047][T28291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1464.752138][T28289] Dev loop5: unable to read RDB block 1 [ 1464.757974][T28289] loop5: unable to read partition table 03:17:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0026ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1464.770267][T28300] bridge999: port 1(syz_tun) entered blocking state [ 1464.771314][T28289] loop5: partition table beyond EOD, truncated [ 1464.782833][T28300] bridge999: port 1(syz_tun) entered disabled state [ 1464.801730][T28289] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:48 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x81ffffff}, 0x0) [ 1464.838565][T28300] device syz_tun entered promiscuous mode [ 1464.859205][T28295] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1464.863340][T28297] device bridge999 entered promiscuous mode [ 1464.986866][T28309] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1465.004917][T28309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1465.006738][T28316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1465.031984][T28314] Dev loop5: unable to read RDB block 1 [ 1465.033695][T28309] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1465.038156][T28314] loop5: unable to read partition table [ 1465.072443][T28314] loop5: partition table beyond EOD, truncated [ 1465.078340][T28309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1465.091841][T28314] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1465.117680][T28319] device syz_tun left promiscuous mode [ 1465.123409][T28319] bridge999: port 1(syz_tun) entered disabled state [ 1465.150010][T28319] bridge1000: port 1(syz_tun) entered blocking state [ 1465.167731][T28319] bridge1000: port 1(syz_tun) entered disabled state [ 1465.183673][T28319] device syz_tun entered promiscuous mode 03:17:48 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x842bce3e}, 0x0) 03:17:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e081cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1465.200800][T28320] device bridge1000 entered promiscuous mode [ 1465.242068][T28318] Dev loop5: unable to read RDB block 1 [ 1465.249648][T28318] loop5: unable to read partition table [ 1465.261919][T28318] loop5: partition table beyond EOD, truncated [ 1465.275748][T28318] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1465.297208][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0038ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1465.361334][T28333] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1465.388919][T28334] device syz_tun left promiscuous mode [ 1465.389013][T28333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1465.395315][T28334] bridge1000: port 1(syz_tun) entered disabled state [ 1465.441260][T28333] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1465.451115][T28334] bridge1001: port 1(syz_tun) entered blocking state [ 1465.479430][T28334] bridge1001: port 1(syz_tun) entered disabled state [ 1465.487893][T28333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1465.508192][T28334] device syz_tun entered promiscuous mode 03:17:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x88470000}, 0x0) 03:17:48 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1465.543450][T28329] device bridge1001 entered promiscuous mode [ 1465.562114][T28342] Dev loop5: unable to read RDB block 1 [ 1465.567834][T28342] loop5: unable to read partition table [ 1465.586938][T28342] loop5: partition table beyond EOD, truncated [ 1465.607503][T28342] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1465.645684][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1465.668486][T28349] device syz_tun left promiscuous mode [ 1465.682363][T28349] bridge1001: port 1(syz_tun) entered disabled state [ 1465.699203][T28336] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1465.711428][T28349] bridge1002: port 1(syz_tun) entered blocking state [ 1465.722363][T28344] Dev loop5: unable to read RDB block 1 [ 1465.728559][T28349] bridge1002: port 1(syz_tun) entered disabled state [ 1465.730469][T28344] loop5: unable to read partition table [ 1465.747426][T28349] device syz_tun entered promiscuous mode [ 1465.763088][T28357] device bridge1002 entered promiscuous mode [ 1465.769781][T28356] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1465.788962][T28356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1465.803071][T28344] loop5: partition table beyond EOD, truncated 03:17:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x88480000}, 0x0) [ 1465.839937][T28344] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1465.860752][T28356] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1465.901174][T28356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1465.935584][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0048ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e181cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:49 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1465.993877][T28368] device syz_tun left promiscuous mode [ 1465.999471][T28368] bridge1002: port 1(syz_tun) entered disabled state [ 1466.028565][T28368] bridge1003: port 1(syz_tun) entered blocking state [ 1466.057150][T28368] bridge1003: port 1(syz_tun) entered disabled state [ 1466.083389][T28368] device syz_tun entered promiscuous mode [ 1466.116806][T28365] device bridge1003 entered promiscuous mode [ 1466.137472][T28376] device syz_tun left promiscuous mode [ 1466.144226][T28376] bridge1003: port 1(syz_tun) entered disabled state [ 1466.173325][T28375] Dev loop5: unable to read RDB block 1 [ 1466.189173][T28375] loop5: unable to read partition table [ 1466.196409][T28379] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1466.208556][T28379] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1466.226246][T28375] loop5: partition table beyond EOD, truncated 03:17:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x88a8ffff}, 0x0) [ 1466.269738][T28375] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1466.281472][T28379] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.345823][T28379] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1466.354618][T28385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:49 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) 03:17:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac004cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1466.391845][T28385] bridge1004: port 1(syz_tun) entered blocking state [ 1466.413454][T28385] bridge1004: port 1(syz_tun) entered disabled state [ 1466.440879][T28385] device syz_tun entered promiscuous mode [ 1466.454787][T28377] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x90010000}, 0x0) [ 1466.482400][T28393] device bridge1004 entered promiscuous mode [ 1466.502162][T28395] device syz_tun left promiscuous mode [ 1466.521793][T28395] bridge1004: port 1(syz_tun) entered disabled state [ 1466.557300][T28398] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.574159][T28401] Dev loop5: unable to read RDB block 1 [ 1466.580357][T28398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1466.590429][T28401] loop5: unable to read partition table 03:17:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e281cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1466.601854][T28398] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.617817][T28401] loop5: partition table beyond EOD, truncated [ 1466.632445][T28398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:49 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1466.661689][T28401] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1466.674117][T28406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1466.729674][T28409] bridge1005: port 1(syz_tun) entered blocking state [ 1466.738260][T28409] bridge1005: port 1(syz_tun) entered disabled state [ 1466.757904][T28409] device syz_tun entered promiscuous mode [ 1466.773695][T28406] device bridge1005 entered promiscuous mode 03:17:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9effffff}, 0x0) [ 1466.821951][T28403] Dev loop5: unable to read RDB block 1 [ 1466.827600][T28403] loop5: unable to read partition table [ 1466.839321][T28403] loop5: partition table beyond EOD, truncated [ 1466.847651][T28417] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.861708][T28403] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1466.881009][T28417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1466.895705][T28417] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.905104][T28417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 03:17:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac005cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) [ 1466.926363][T28422] device syz_tun left promiscuous mode [ 1466.932193][T28422] bridge1005: port 1(syz_tun) entered disabled state [ 1466.941029][T28422] bridge1006: port 1(syz_tun) entered blocking state [ 1466.989714][T28422] bridge1006: port 1(syz_tun) entered disabled state [ 1467.010546][T28416] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1467.024024][T28422] device syz_tun entered promiscuous mode 03:17:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa36438c9}, 0x0) [ 1467.034890][T28434] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.042795][T28434] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1467.051454][T28434] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.060936][T28434] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1467.070169][T28427] device bridge1006 entered promiscuous mode 03:17:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, 0x0) [ 1467.113017][T28433] Dev loop5: unable to read RDB block 1 [ 1467.118763][T28433] loop5: unable to read partition table [ 1467.146246][T28433] loop5: partition table beyond EOD, truncated [ 1467.160838][T28433] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1467.226315][T28442] device syz_tun left promiscuous mode [ 1467.240465][T28442] bridge1006: port 1(syz_tun) entered disabled state [ 1467.250147][T28439] Dev loop5: unable to read RDB block 1 [ 1467.256517][T28439] loop5: unable to read partition table [ 1467.267250][T28439] loop5: partition table beyond EOD, truncated 03:17:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, 0x0) [ 1467.275527][T28442] bridge1007: port 1(syz_tun) entered blocking state [ 1467.275811][T28439] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1467.298622][T28442] bridge1007: port 1(syz_tun) entered disabled state 03:17:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc3ffffff}, 0x0) 03:17:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0060ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1467.342006][T28442] device syz_tun entered promiscuous mode [ 1467.366580][T28452] device bridge1007 entered promiscuous mode 03:17:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)='!', 0x1, 0xa80}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, 0x0) [ 1467.605967][T28464] device syz_tun left promiscuous mode [ 1467.613246][T28465] Dev loop5: unable to read RDB block 1 [ 1467.619070][T28465] loop5: unable to read partition table [ 1467.623109][T28458] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1467.639469][T28464] bridge1007: port 1(syz_tun) entered disabled state [ 1467.649218][T28465] loop5: partition table beyond EOD, truncated 03:17:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc93864a3}, 0x0) [ 1467.678900][T28465] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1467.693575][T28464] bridge1008: port 1(syz_tun) entered blocking state [ 1467.725452][T28464] bridge1008: port 1(syz_tun) entered disabled state [ 1467.750998][T28464] device syz_tun entered promiscuous mode [ 1467.799396][T28471] device bridge1008 entered promiscuous mode [ 1467.906757][T28469] Dev loop5: unable to read RDB block 1 [ 1467.919550][T28469] loop5: unable to read partition table 03:17:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@size={'size', 0x3d, [0x0]}}]}) 03:17:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xdc010000}, 0x0) 03:17:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0068ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1467.946972][T28469] loop5: partition table beyond EOD, truncated [ 1467.972562][T28486] device syz_tun left promiscuous mode [ 1467.978127][T28486] bridge1008: port 1(syz_tun) entered disabled state [ 1467.983319][T28469] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1467.994563][T28486] bridge1009: port 1(syz_tun) entered blocking state [ 1468.001265][T28486] bridge1009: port 1(syz_tun) entered disabled state [ 1468.019257][T28486] device syz_tun entered promiscuous mode [ 1468.041101][T28490] device bridge1009 entered promiscuous mode [ 1468.085370][T28492] tmpfs: Bad value for 'size' [ 1468.108814][T28484] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1468.161075][T28497] device syz_tun left promiscuous mode [ 1468.181205][T28497] bridge1009: port 1(syz_tun) entered disabled state [ 1468.210641][T28497] bridge1010: port 1(syz_tun) entered blocking state [ 1468.249376][T28497] bridge1010: port 1(syz_tun) entered disabled state 03:17:51 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x0, "fdde96143c005b286a1bc29ef8b3ab837a08ebd1fd74b9fe7a5c4118a34bc73f0ae381d6a415a2d811c76fb0d440a0438fd75a0541f77db22b4b76aac36d0eaa"}) [ 1468.280979][T28497] device syz_tun entered promiscuous mode 03:17:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xde010000}, 0x0) 03:17:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f00000000c0)) ioctl$USBDEVFS_CLAIM_PORT(r0, 0xc0105500, 0x0) 03:17:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xefffffff}, 0x0) 03:17:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac006cffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1468.331624][T28503] device bridge1010 entered promiscuous mode [ 1468.338753][T28507] Dev loop5: unable to read RDB block 1 [ 1468.354383][T28507] loop5: unable to read partition table [ 1468.398235][T28507] loop5: partition table beyond EOD, truncated [ 1468.431229][T28507] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1468.534903][T28518] device syz_tun left promiscuous mode [ 1468.540546][T28518] bridge1010: port 1(syz_tun) entered disabled state [ 1468.561853][T28510] Dev loop5: unable to read RDB block 1 [ 1468.567551][T28510] loop5: unable to read partition table [ 1468.579942][T28510] loop5: partition table beyond EOD, truncated [ 1468.592249][T28518] bridge1011: port 1(syz_tun) entered blocking state [ 1468.606557][T28510] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1468.615617][T28518] bridge1011: port 1(syz_tun) entered disabled state [ 1468.623143][T28518] device syz_tun entered promiscuous mode [ 1468.631133][T28525] device bridge1011 entered promiscuous mode [ 1468.745688][T28516] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1468.757717][T28531] __nla_validate_parse: 6 callbacks suppressed [ 1468.757726][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.864120][T28536] device syz_tun left promiscuous mode [ 1468.869666][T28536] bridge1011: port 1(syz_tun) entered disabled state [ 1468.882321][T28534] Dev loop5: unable to read RDB block 1 [ 1468.887940][T28534] loop5: unable to read partition table [ 1468.906953][T28534] loop5: partition table beyond EOD, truncated 03:17:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', 0x0, r2) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/104, 0x68}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x3, &(0x7f0000000380)=""/207, 0xcf}, 0x5}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000240)=""/45, 0x2d}], 0x2, &(0x7f0000000640)=""/68, 0x44}, 0xee}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/134, 0x86}, {&(0x7f00000008c0)=""/85, 0x55}], 0x3, &(0x7f0000000980)=""/120, 0x78}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/169, 0xa9}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/89, 0x59}], 0x5, &(0x7f0000000c80)=""/116, 0x74}, 0x1}, {{&(0x7f0000000d00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/130, 0x82}, {&(0x7f0000001e40)=""/220, 0xdc}, {&(0x7f0000001f40)=""/249, 0xf9}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003100)=""/3, 0x3}, {&(0x7f0000003140)=""/177, 0xb1}, {&(0x7f00000054c0)=""/130, 0x82}, {&(0x7f00000032c0)=""/159, 0x9f}], 0xa, &(0x7f0000003440)=""/4096, 0x1000}, 0x7b3e}, {{&(0x7f0000004440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000044c0)=""/67, 0x43}], 0x1, &(0x7f0000004580)=""/35, 0x23}, 0x6}, {{&(0x7f00000045c0)=@qipcrtr, 0x80, &(0x7f00000047c0), 0x0, &(0x7f0000004800)=""/43, 0x2b}, 0xffff8000}, {{&(0x7f0000004840)=@l2, 0x80, &(0x7f0000004ec0)=[{&(0x7f00000048c0)=""/211, 0xd3}, {&(0x7f00000049c0)=""/222, 0xde}, {&(0x7f0000004ac0)=""/179, 0xb3}, {&(0x7f0000004b80)=""/110, 0x6e}, {&(0x7f0000004c00)=""/114, 0x72}, {&(0x7f0000004c80)=""/181, 0xb5}, {0x0}, {&(0x7f0000004e00)=""/132, 0x84}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {0x0}, {&(0x7f00000050c0)}], 0x3, &(0x7f0000005140)=""/61, 0x3d}, 0xffff7fff}, {{0x0, 0x0, &(0x7f0000005200)}}], 0xa, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1468.920335][T28536] bridge1012: port 1(syz_tun) entered blocking state [ 1468.946887][T28534] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1468.965397][T28536] bridge1012: port 1(syz_tun) entered disabled state 03:17:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf0ffffff}, 0x0) [ 1469.007830][T28536] device syz_tun entered promiscuous mode [ 1469.034998][T28541] device bridge1012 entered promiscuous mode [ 1469.089908][T28539] Dev loop5: unable to read RDB block 1 [ 1469.103896][T28539] loop5: unable to read partition table [ 1469.131518][T28539] loop5: partition table beyond EOD, truncated [ 1469.137710][T28539] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1469.172630][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0074ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1469.244407][T28559] device syz_tun left promiscuous mode [ 1469.285732][T28559] bridge1012: port 1(syz_tun) entered disabled state [ 1469.305482][T28559] bridge1013: port 1(syz_tun) entered blocking state [ 1469.321029][T28559] bridge1013: port 1(syz_tun) entered disabled state [ 1469.348105][T28559] device syz_tun entered promiscuous mode [ 1469.366950][T28556] device bridge1013 entered promiscuous mode 03:17:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfcffffff}, 0x0) [ 1469.411747][T28565] Dev loop5: unable to read RDB block 1 [ 1469.417544][T28565] loop5: unable to read partition table [ 1469.454557][T28565] loop5: partition table beyond EOD, truncated [ 1469.494163][T28565] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1469.509591][T28555] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1469.530271][T28572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1469.569449][T28572] device syz_tun left promiscuous mode [ 1469.603919][T28572] bridge1013: port 1(syz_tun) entered disabled state [ 1469.623834][T28572] bridge1014: port 1(syz_tun) entered blocking state [ 1469.637538][T28572] bridge1014: port 1(syz_tun) entered disabled state [ 1469.655845][T28572] device syz_tun entered promiscuous mode [ 1469.661703][T28568] Dev loop5: unable to read RDB block 1 [ 1469.661718][T28568] loop5: unable to read partition table 03:17:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac007affffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1469.661729][T28568] loop5: partition table beyond EOD, truncated [ 1469.661738][T28568] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1469.806899][T28579] device bridge1014 entered promiscuous mode [ 1469.825899][T28579] device syz_tun left promiscuous mode [ 1469.831831][T28585] Dev loop5: unable to read RDB block 1 [ 1469.837665][T28585] loop5: unable to read partition table [ 1469.842305][T28579] bridge1014: port 1(syz_tun) entered disabled state 03:17:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000300)=0xc) accept$packet(r2, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002580)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast2, @in6=@private0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x8001}}, 0x18) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c1116480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) recvfrom(r0, &(0x7f0000000180)=""/81, 0x51, 0x0, 0x0, 0x0) 03:17:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfeffffff}, 0x0) [ 1469.851834][T28585] loop5: partition table beyond EOD, truncated [ 1469.865188][T28585] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1469.977345][T28590] Dev loop5: unable to read RDB block 1 [ 1469.983242][T28590] loop5: unable to read partition table [ 1469.990900][T28588] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1470.004689][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.016728][T28590] loop5: partition table beyond EOD, truncated [ 1470.041313][T28590] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1470.079849][T28601] bridge1015: port 1(syz_tun) entered blocking state [ 1470.087200][T28601] bridge1015: port 1(syz_tun) entered disabled state 03:17:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00a8ffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffa888}, 0x0) [ 1470.113976][T28601] device syz_tun entered promiscuous mode [ 1470.136828][T28598] device bridge1015 entered promiscuous mode 03:17:53 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x641) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) [ 1470.252131][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.284891][T28613] Dev loop5: unable to read RDB block 1 [ 1470.294032][T28613] loop5: unable to read partition table [ 1470.311030][T28613] loop5: partition table beyond EOD, truncated [ 1470.334217][T28613] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1470.343522][T28617] device syz_tun left promiscuous mode [ 1470.349330][T28617] bridge1015: port 1(syz_tun) entered disabled state [ 1470.396108][T28617] bridge1016: port 1(syz_tun) entered blocking state [ 1470.421739][T28617] bridge1016: port 1(syz_tun) entered disabled state [ 1470.429161][T28617] device syz_tun entered promiscuous mode [ 1470.435310][T28616] Dev loop5: unable to read RDB block 1 03:17:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffff7f}, 0x0) 03:17:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00ceffffffa600e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1470.441730][T28616] loop5: unable to read partition table [ 1470.448963][T28616] loop5: partition table beyond EOD, truncated [ 1470.449000][T28611] device bridge1016 entered promiscuous mode [ 1470.455359][T28616] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1470.472695][T28621] device syz_tun left promiscuous mode [ 1470.478432][T28621] bridge1016: port 1(syz_tun) entered disabled state [ 1470.581706][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.608531][T28626] bridge1017: port 1(syz_tun) entered blocking state [ 1470.623277][T28612] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1470.642181][T28626] bridge1017: port 1(syz_tun) entered disabled state [ 1470.653523][T28626] device syz_tun entered promiscuous mode [ 1470.676087][T28635] device bridge1017 entered promiscuous mode 03:17:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffff81}, 0x0) [ 1470.692534][T28633] Dev loop5: unable to read RDB block 1 [ 1470.698554][T28633] loop5: unable to read partition table [ 1470.713744][T28633] loop5: partition table beyond EOD, truncated 03:17:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1470.755024][T28633] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1470.792596][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.813582][T28640] device syz_tun left promiscuous mode [ 1470.823208][T28640] bridge1017: port 1(syz_tun) entered disabled state [ 1470.834503][T28640] bridge1018: port 1(syz_tun) entered blocking state [ 1470.841920][T28640] bridge1018: port 1(syz_tun) entered disabled state [ 1470.849930][T28640] device syz_tun entered promiscuous mode 03:17:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1470.868277][T28640] device bridge1018 entered promiscuous mode [ 1470.877713][T28648] device syz_tun left promiscuous mode [ 1470.891606][T28636] Dev loop5: unable to read RDB block 1 [ 1470.897185][T28636] loop5: unable to read partition table 03:17:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="e981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1470.912081][T28648] bridge1018: port 1(syz_tun) entered disabled state [ 1470.923112][T28636] loop5: partition table beyond EOD, truncated 03:17:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffff9e}, 0x0) [ 1470.961371][T28636] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:17:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000000500e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 03:17:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.148687][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:17:54 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.203866][T28664] bridge1019: port 1(syz_tun) entered blocking state [ 1471.211622][T28662] loop5: p1 p2 < > p3 < > p4 [ 1471.220668][T28662] loop5: partition table partially beyond EOD, truncated [ 1471.239441][T28664] bridge1019: port 1(syz_tun) entered disabled state [ 1471.242390][T28662] loop5: p1 start 10 is beyond EOD, truncated [ 1471.271735][T28662] loop5: p2 start 25 is beyond EOD, truncated [ 1471.274595][T28664] device syz_tun entered promiscuous mode [ 1471.280679][T28655] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1471.297552][T28662] loop5: p3 start 4293001441 is beyond EOD, truncated 03:17:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffffc3}, 0x0) [ 1471.318789][T28662] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1471.326405][T28661] device bridge1019 entered promiscuous mode 03:17:54 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.441805][T28667] loop5: p1 p2 < > p3 < > p4 [ 1471.446727][T28667] loop5: partition table partially beyond EOD, truncated [ 1471.470691][T28683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.499558][T28667] loop5: p1 start 10 is beyond EOD, truncated [ 1471.526991][T28667] loop5: p2 start 25 is beyond EOD, truncated 03:17:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ea81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:54 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.577606][T28688] device syz_tun left promiscuous mode [ 1471.589937][T28688] bridge1019: port 1(syz_tun) entered disabled state [ 1471.598993][T28667] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1471.639572][T28667] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1471.657891][T28688] bridge1020: port 1(syz_tun) entered blocking state 03:17:54 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 03:17:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000000f00e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1471.689314][T28688] bridge1020: port 1(syz_tun) entered disabled state [ 1471.710204][T28688] device syz_tun entered promiscuous mode 03:17:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffffef}, 0x0) [ 1471.735705][T28683] device bridge1020 entered promiscuous mode 03:17:55 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.879346][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.891667][T28705] loop5: p1 p2 < > p3 < > p4 [ 1471.896412][T28705] loop5: partition table partially beyond EOD, truncated [ 1471.911626][T28705] loop5: p1 start 10 is beyond EOD, truncated [ 1471.929212][T28705] loop5: p2 start 25 is beyond EOD, truncated [ 1471.948520][T28712] device syz_tun left promiscuous mode [ 1471.949618][T28705] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1471.960117][T28712] bridge1020: port 1(syz_tun) entered disabled state 03:17:55 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1471.988121][T28705] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1472.019013][T28712] bridge1021: port 1(syz_tun) entered blocking state [ 1472.055299][T28712] bridge1021: port 1(syz_tun) entered disabled state [ 1472.078442][T28712] device syz_tun entered promiscuous mode [ 1472.098712][T28708] device bridge1021 entered promiscuous mode 03:17:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:17:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfffffff0}, 0x0) [ 1472.107141][T28698] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000004200e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:17:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="eb81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:17:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1472.347705][T28732] device syz_tun left promiscuous mode [ 1472.361581][T28736] ldm_validate_privheads(): Disk read failed. [ 1472.367778][T28736] loop5: p1 p2 p3 < > p4 [ 1472.381309][T28736] loop5: partition table partially beyond EOD, truncated [ 1472.401408][T28736] loop5: p1 start 10 is beyond EOD, truncated [ 1472.410773][T28732] bridge1021: port 1(syz_tun) entered disabled state [ 1472.447982][T28736] loop5: p2 start 25 is beyond EOD, truncated [ 1472.464609][T28732] bridge1022: port 1(syz_tun) entered blocking state [ 1472.499506][T28736] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1472.528199][T28732] bridge1022: port 1(syz_tun) entered disabled state [ 1472.548278][T28736] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1472.563684][T28732] device syz_tun entered promiscuous mode 03:17:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfffffffc}, 0x0) [ 1472.593784][T28743] device bridge1022 entered promiscuous mode 03:17:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000005400e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1472.716039][T28750] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1472.752970][T28761] device syz_tun left promiscuous mode [ 1472.768781][T28761] bridge1022: port 1(syz_tun) entered disabled state [ 1472.816914][T28761] bridge1023: port 1(syz_tun) entered blocking state [ 1472.827742][T28766] loop5: p1 p2[DM] p3 < > p4 [ 1472.833147][T28766] loop5: partition table partially beyond EOD, truncated 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1472.866963][T28766] loop5: p1 start 10 is beyond EOD, truncated [ 1472.888728][T28761] bridge1023: port 1(syz_tun) entered disabled state 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1472.925980][T28766] loop5: p2 start 25 is beyond EOD, truncated [ 1472.938046][T28761] device syz_tun entered promiscuous mode 03:17:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ec81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1472.969240][T28770] device bridge1023 entered promiscuous mode [ 1472.987692][T28766] loop5: p3 start 4293001441 is beyond EOD, truncated 03:17:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfffffffe}, 0x0) 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1473.034177][T28766] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1473.154327][T28772] loop5: p1 p2[DM] p3 < > p4 [ 1473.159232][T28772] loop5: partition table partially beyond EOD, truncated [ 1473.199056][T28792] device syz_tun left promiscuous mode [ 1473.211488][T28772] loop5: p1 start 10 is beyond EOD, truncated [ 1473.217816][T28772] loop5: p2 start 25 is beyond EOD, truncated [ 1473.243729][T28792] bridge1023: port 1(syz_tun) entered disabled state [ 1473.287507][T28792] bridge1024: port 1(syz_tun) entered blocking state [ 1473.295474][T28772] loop5: p3 start 4293001441 is beyond EOD, truncated 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1473.329360][T28792] bridge1024: port 1(syz_tun) entered disabled state [ 1473.331776][T28772] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1473.362986][T28792] device syz_tun entered promiscuous mode 03:17:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000005500e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x10000fe82}, 0x0) 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1473.393937][T28788] device bridge1024 entered promiscuous mode [ 1473.512539][T28787] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x2}, 0x10}}, 0x0) [ 1473.604335][T28807] device syz_tun left promiscuous mode [ 1473.636088][T28807] bridge1024: port 1(syz_tun) entered disabled state [ 1473.657331][T28808] loop5: p1 p2[EZD] p3 < > p4 [ 1473.663125][T28808] loop5: partition table partially beyond EOD, truncated [ 1473.688849][T28807] bridge1025: port 1(syz_tun) entered blocking state [ 1473.706264][T28808] loop5: p1 start 10 is beyond EOD, truncated [ 1473.734840][T28807] bridge1025: port 1(syz_tun) entered disabled state [ 1473.750073][T28808] loop5: p2 start 25 is beyond EOD, truncated 03:17:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:17:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ed81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1473.777430][T28808] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1473.790619][T28807] device syz_tun entered promiscuous mode [ 1473.814130][T28816] device bridge1025 entered promiscuous mode 03:17:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x80000000000000}, 0x0) [ 1473.820710][T28808] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:17:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1473.931454][T28815] loop5: p1 p2[EZD] p3 < > p4 [ 1473.938457][T28815] loop5: partition table partially beyond EOD, truncated [ 1473.983344][T28815] loop5: p1 start 10 is beyond EOD, truncated [ 1473.990326][T28815] loop5: p2 start 25 is beyond EOD, truncated [ 1474.000455][T28833] __nla_validate_parse: 4 callbacks suppressed [ 1474.000464][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1474.045558][T28815] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1474.062741][T28815] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:17:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000006300e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1474.184415][T28838] device syz_tun left promiscuous mode [ 1474.190095][T28838] bridge1025: port 1(syz_tun) entered disabled state 03:17:57 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x59, 0xd5, 0x34, 0x10, 0xdf6, 0x21, 0x2910, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x25, 0x3d, 0xa4}}]}}]}}, 0x0) [ 1474.246590][T28830] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1474.250740][T28838] bridge1026: port 1(syz_tun) entered blocking state [ 1474.289884][T28838] bridge1026: port 1(syz_tun) entered disabled state [ 1474.315371][T28838] device syz_tun entered promiscuous mode [ 1474.346234][T28840] device bridge1026 entered promiscuous mode [ 1474.361535][T28851] loop5: p1 p2 p3 < > p4 [ 1474.365887][T28851] loop5: partition table partially beyond EOD, truncated [ 1474.373140][T28851] loop5: p1 start 10 is beyond EOD, truncated [ 1474.379207][T28851] loop5: p2 start 25 is beyond EOD, truncated 03:17:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x100000000000000}, 0x0) 03:17:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ee81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1474.397872][T28851] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1474.405370][T28851] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1474.544221][T28854] loop5: p1 p2 p3 < > p4 [ 1474.549037][T28854] loop5: partition table partially beyond EOD, truncated [ 1474.564494][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1474.598384][T28854] loop5: p1 start 10 is beyond EOD, truncated [ 1474.642913][T28870] device syz_tun left promiscuous mode [ 1474.648590][T28870] bridge1026: port 1(syz_tun) entered disabled state [ 1474.651547][T28854] loop5: p2 start 25 is beyond EOD, truncated [ 1474.673990][T28854] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1474.681693][T21755] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1474.692059][T28870] bridge1027: port 1(syz_tun) entered blocking state [ 1474.699215][T28854] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1474.715018][T28870] bridge1027: port 1(syz_tun) entered disabled state [ 1474.733453][T28870] device syz_tun entered promiscuous mode 03:17:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffff8100e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:17:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x200000000000000}, 0x0) [ 1474.751154][T28866] device bridge1027 entered promiscuous mode [ 1474.762209][T28870] device syz_tun left promiscuous mode [ 1474.785390][T28870] bridge1027: port 1(syz_tun) entered disabled state [ 1474.860379][T28868] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:17:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ef81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x300000000000000}, 0x0) [ 1474.906409][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1474.931185][T21755] usb 4-1: Using ep0 maxpacket: 16 [ 1474.970935][T28888] bridge1028: port 1(syz_tun) entered blocking state [ 1474.978705][T28881] loop5: p1 p2 p3 < > p4 [ 1474.986022][T28881] loop5: partition table partially beyond EOD, truncated [ 1475.010497][T28888] bridge1028: port 1(syz_tun) entered disabled state [ 1475.023668][T28881] loop5: p1 start 10 is beyond EOD, truncated [ 1475.043631][T28888] device syz_tun entered promiscuous mode [ 1475.050512][T28881] loop5: p2 start 25 is beyond EOD, truncated [ 1475.073137][T28883] device bridge1028 entered promiscuous mode [ 1475.080986][T28881] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1475.104219][T28881] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:17:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f081cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:17:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x400000000000000}, 0x0) [ 1475.205210][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1475.215714][T28887] loop5: p1 p2 p3 < > p4 [ 1475.218364][T28896] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1475.220090][T28887] loop5: partition table partially beyond EOD, truncated [ 1475.241585][T21755] usb 4-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=29.10 [ 1475.256620][T21755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.265748][T21755] usb 4-1: Product: syz [ 1475.270164][T21755] usb 4-1: Manufacturer: syz [ 1475.277816][T21755] usb 4-1: SerialNumber: syz [ 1475.284603][T21755] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1475.296401][T28887] loop5: p1 start 10 is beyond EOD, truncated [ 1475.326187][T28904] device syz_tun left promiscuous mode [ 1475.342747][T28904] bridge1028: port 1(syz_tun) entered disabled state [ 1475.350034][T28887] loop5: p2 start 25 is beyond EOD, truncated [ 1475.362774][T28904] bridge1029: port 1(syz_tun) entered blocking state [ 1475.385911][T28904] bridge1029: port 1(syz_tun) entered disabled state [ 1475.396153][T28887] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1475.413764][T28904] device syz_tun entered promiscuous mode [ 1475.423778][T28887] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1475.438489][T28908] device bridge1029 entered promiscuous mode 03:17:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffff8200e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1475.571754][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1475.637182][T28921] device syz_tun left promiscuous mode [ 1475.651764][T28921] bridge1029: port 1(syz_tun) entered disabled state [ 1475.660560][T28921] bridge1030: port 1(syz_tun) entered blocking state 03:17:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x500000000000000}, 0x0) [ 1475.691110][T28921] bridge1030: port 1(syz_tun) entered disabled state [ 1475.692081][T28924] loop5: p1 p2 p3 < > p4 [ 1475.711138][T28921] device syz_tun entered promiscuous mode [ 1475.712353][T28924] loop5: partition table partially beyond EOD, truncated [ 1475.718851][T28915] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1475.734895][T28917] device bridge1030 entered promiscuous mode [ 1475.758186][T28924] loop5: p1 start 10 is beyond EOD, truncated [ 1475.784834][T28924] loop5: p2 start 25 is beyond EOD, truncated [ 1475.818846][T28924] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1475.846534][T28924] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:17:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f181cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1475.864473][T28934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1475.923103][T28940] device syz_tun left promiscuous mode [ 1475.933561][T28940] bridge1030: port 1(syz_tun) entered disabled state [ 1475.946124][T28940] bridge1031: port 1(syz_tun) entered blocking state [ 1475.953014][T28940] bridge1031: port 1(syz_tun) entered disabled state [ 1475.966012][T28940] device syz_tun entered promiscuous mode [ 1475.978797][T28934] device bridge1031 entered promiscuous mode [ 1475.989656][T28927] loop5: p1 p2 p3 < > p4 [ 1475.994826][T28927] loop5: partition table partially beyond EOD, truncated [ 1476.004159][T28927] loop5: p1 start 10 is beyond EOD, truncated [ 1476.010683][T28927] loop5: p2 start 25 is beyond EOD, truncated [ 1476.017369][T28927] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1476.024600][T28927] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1476.244215][T28945] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:00 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000315ad8084c052b000d01000000010902240003000000000904000002de4f2c0009058f02000100000009050212"], 0x0) 03:18:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x600000000000000}, 0x0) 03:18:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffff8500e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f281cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1477.394845][T26610] usb 4-1: USB disconnect, device number 2 [ 1477.492423][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1477.568941][T28979] loop5: p1 p2 < > p3 < > p4 [ 1477.573838][T28979] loop5: partition table partially beyond EOD, truncated [ 1477.591100][T28983] device syz_tun left promiscuous mode [ 1477.597043][T28983] bridge1031: port 1(syz_tun) entered disabled state [ 1477.604241][T28979] loop5: p1 start 10 is beyond EOD, truncated 03:18:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x700000000000000}, 0x0) [ 1477.614766][T28983] bridge1032: port 1(syz_tun) entered blocking state [ 1477.630277][T28983] bridge1032: port 1(syz_tun) entered disabled state [ 1477.636125][T28979] loop5: p2 start 25 is beyond EOD, truncated [ 1477.645866][T28983] device syz_tun entered promiscuous mode [ 1477.662406][T28978] device bridge1032 entered promiscuous mode [ 1477.685781][T28979] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1477.716681][T28979] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1477.724673][T28994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1477.736822][T28987] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1477.756101][T28994] device syz_tun left promiscuous mode [ 1477.762109][T28994] bridge1032: port 1(syz_tun) entered disabled state [ 1477.771630][T28994] bridge1033: port 1(syz_tun) entered blocking state [ 1477.778489][T28994] bridge1033: port 1(syz_tun) entered disabled state [ 1477.786099][T28994] device syz_tun entered promiscuous mode 03:18:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x800000000000000}, 0x0) [ 1477.810186][T28994] device bridge1033 entered promiscuous mode [ 1477.822587][T26610] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1477.830523][T29000] device syz_tun left promiscuous mode [ 1477.836585][T29000] bridge1033: port 1(syz_tun) entered disabled state 03:18:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f381cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1477.911212][T28986] loop5: p1 p2 < > p3 < > p4 [ 1477.916058][T28986] loop5: partition table partially beyond EOD, truncated [ 1477.940494][T28986] loop5: p1 start 10 is beyond EOD, truncated 03:18:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa500e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1477.955594][T28986] loop5: p2 start 25 is beyond EOD, truncated [ 1477.962168][T29008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1477.970052][T28986] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1477.983646][T28986] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1478.031047][T29013] bridge1034: port 1(syz_tun) entered blocking state [ 1478.063029][T29013] bridge1034: port 1(syz_tun) entered disabled state [ 1478.090755][T29013] device syz_tun entered promiscuous mode [ 1478.100946][T26610] usb 4-1: Using ep0 maxpacket: 8 [ 1478.116981][T29008] device bridge1034 entered promiscuous mode [ 1478.133928][T29016] device syz_tun left promiscuous mode 03:18:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x900000000000000}, 0x0) [ 1478.139839][T29016] bridge1034: port 1(syz_tun) entered disabled state [ 1478.224668][T29021] loop5: p1 p2 p3 < > p4 [ 1478.230461][T29021] loop5: partition table partially beyond EOD, truncated [ 1478.242727][T26610] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1478.254840][T29011] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1478.259123][T29021] loop5: p1 start 10 is beyond EOD, truncated [ 1478.264850][T26610] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 1478.275471][T29021] loop5: p2 start 25 is beyond EOD, truncated [ 1478.278542][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1478.294323][T26610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1478.311597][T29021] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1478.317600][T26610] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1478.342947][T29032] bridge1035: port 1(syz_tun) entered blocking state [ 1478.349010][T26610] usb 4-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0d [ 1478.352444][T29021] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f481cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1478.377808][T26610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.384528][T29032] bridge1035: port 1(syz_tun) entered disabled state [ 1478.394316][T26610] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1478.409260][T29032] device syz_tun entered promiscuous mode [ 1478.417434][T29028] device bridge1035 entered promiscuous mode [ 1478.440537][T29032] device syz_tun left promiscuous mode [ 1478.447883][T29032] bridge1035: port 1(syz_tun) entered disabled state 03:18:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa00000000000000}, 0x0) [ 1478.501201][T29023] loop5: p1 p2 p3 < > p4 [ 1478.506561][T29023] loop5: partition table partially beyond EOD, truncated [ 1478.523372][T29023] loop5: p1 start 10 is beyond EOD, truncated [ 1478.536245][T29023] loop5: p2 start 25 is beyond EOD, truncated 03:18:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa900e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1478.550210][T29023] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1478.561779][T29023] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1478.655877][T29046] bridge1036: port 1(syz_tun) entered blocking state [ 1478.687597][T29046] bridge1036: port 1(syz_tun) entered disabled state [ 1478.706157][T29046] device syz_tun entered promiscuous mode [ 1478.723645][T29055] device bridge1036 entered promiscuous mode [ 1478.731330][T29053] loop5: p1 p2 p3 < > p4 [ 1478.736869][T29053] loop5: partition table partially beyond EOD, truncated [ 1478.753458][T29053] loop5: p1 start 10 is beyond EOD, truncated [ 1478.759623][T29053] loop5: p2 start 25 is beyond EOD, truncated [ 1478.773015][T29041] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1478.787211][T29053] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1478.795135][T29053] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1478.921251][T29056] loop5: p1 p2 p3 < > p4 [ 1478.925617][T29056] loop5: partition table partially beyond EOD, truncated [ 1478.951386][T29056] loop5: p1 start 10 is beyond EOD, truncated [ 1478.957625][T29056] loop5: p2 start 25 is beyond EOD, truncated [ 1478.992276][T29056] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1478.999174][T29056] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:03 executing program 3: clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x10000015, 0x5, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0xc, 0x0, 0x0, @ipv6=@private0}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(0x0, 0x1800000000000000, 0x0, 0x0, 0xc0ffffff00000000) 03:18:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xb00000000000000}, 0x0) 03:18:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f581cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffbf00e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1480.443989][T17467] usb 4-1: USB disconnect, device number 3 [ 1480.526611][T29094] __nla_validate_parse: 1 callbacks suppressed [ 1480.526658][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1480.602633][T29095] loop5: p1 p2 p3 < > p4 [ 1480.607647][T29095] loop5: partition table partially beyond EOD, truncated [ 1480.625741][T29098] device syz_tun left promiscuous mode [ 1480.631624][T29098] bridge1036: port 1(syz_tun) entered disabled state [ 1480.652190][T29095] loop5: p1 start 10 is beyond EOD, truncated [ 1480.666842][T29095] loop5: p2 start 25 is beyond EOD, truncated [ 1480.669210][T29098] bridge1037: port 1(syz_tun) entered blocking state [ 1480.673581][T29095] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1480.689146][T29096] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1480.690893][T29098] bridge1037: port 1(syz_tun) entered disabled state [ 1480.706103][T29098] device syz_tun entered promiscuous mode [ 1480.715006][T29094] device bridge1037 entered promiscuous mode [ 1480.726155][T29095] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1480.726799][T29102] device syz_tun left promiscuous mode 03:18:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc00000000000000}, 0x0) [ 1480.767017][T29102] bridge1037: port 1(syz_tun) entered disabled state 03:18:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f681cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1480.834876][T29099] loop5: p1 p2 p3 < > p4 [ 1480.840575][T29099] loop5: partition table partially beyond EOD, truncated [ 1480.865639][T29099] loop5: p1 start 10 is beyond EOD, truncated [ 1480.876281][T29099] loop5: p2 start 25 is beyond EOD, truncated [ 1480.891080][T29099] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1480.925522][T29099] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1480.943058][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffee00e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1480.993625][T29123] bridge1038: port 1(syz_tun) entered blocking state [ 1481.026908][T29123] bridge1038: port 1(syz_tun) entered disabled state 03:18:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xd00000000000000}, 0x0) [ 1481.054492][T29123] device syz_tun entered promiscuous mode [ 1481.076908][T29117] device bridge1038 entered promiscuous mode [ 1481.170981][T29129] Dev loop5: unable to read RDB block 1 [ 1481.180579][T29129] loop5: unable to read partition table [ 1481.185283][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.193220][T29129] loop5: partition table beyond EOD, truncated [ 1481.198186][T29119] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1481.219985][T29134] device syz_tun left promiscuous mode [ 1481.226539][T29134] bridge1038: port 1(syz_tun) entered disabled state [ 1481.236145][T29134] bridge1039: port 1(syz_tun) entered blocking state [ 1481.236335][T29129] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1481.245279][T29134] bridge1039: port 1(syz_tun) entered disabled state [ 1481.259129][T29134] device syz_tun entered promiscuous mode 03:18:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xe00000000000000}, 0x0) [ 1481.313240][T29134] device bridge1039 entered promiscuous mode 03:18:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f781cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1481.413157][T29150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.431087][T29133] Dev loop5: unable to read RDB block 1 [ 1481.447321][T29133] loop5: unable to read partition table [ 1481.453882][T29150] device syz_tun left promiscuous mode [ 1481.465443][T29133] loop5: partition table beyond EOD, truncated [ 1481.478890][T29150] bridge1039: port 1(syz_tun) entered disabled state [ 1481.492061][T29150] bridge1040: port 1(syz_tun) entered blocking state [ 1481.499328][T29150] bridge1040: port 1(syz_tun) entered disabled state [ 1481.502135][T29133] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:18:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000fffffffd00e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1481.507233][T29150] device syz_tun entered promiscuous mode [ 1481.522187][T29155] device bridge1040 entered promiscuous mode [ 1481.548255][T29155] device syz_tun left promiscuous mode 03:18:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf00000000000000}, 0x0) [ 1481.570506][T29155] bridge1040: port 1(syz_tun) entered disabled state [ 1481.662906][T29157] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f881cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1481.713001][T29167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.740987][T29164] loop5: p1 p2 p3 < > p4 [ 1481.745694][T29164] loop5: partition table partially beyond EOD, truncated [ 1481.756078][T29167] bridge1041: port 1(syz_tun) entered blocking state [ 1481.764968][T29167] bridge1041: port 1(syz_tun) entered disabled state [ 1481.773222][T29167] device syz_tun entered promiscuous mode [ 1481.775542][T29164] loop5: p1 start 10 is beyond EOD, truncated [ 1481.792433][T29167] device bridge1041 entered promiscuous mode 03:18:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1000000000000000}, 0x0) [ 1481.817068][T29164] loop5: p2 start 25 is beyond EOD, truncated [ 1481.852074][T29164] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1481.886118][T29164] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1481.920562][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.933315][T29176] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1481.954381][T29178] device syz_tun left promiscuous mode [ 1481.960594][T29178] bridge1041: port 1(syz_tun) entered disabled state [ 1481.970180][T29178] bridge1042: port 1(syz_tun) entered blocking state [ 1481.979854][T29178] bridge1042: port 1(syz_tun) entered disabled state 03:18:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1100000000000000}, 0x0) [ 1481.988102][T29178] device syz_tun entered promiscuous mode [ 1482.006863][T29185] device bridge1042 entered promiscuous mode 03:18:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1482.070967][T29168] loop5: p1 p2 p3 < > p4 [ 1482.075372][T29168] loop5: partition table partially beyond EOD, truncated [ 1482.110410][T29168] loop5: p1 start 10 is beyond EOD, truncated [ 1482.157955][T29168] loop5: p2 start 25 is beyond EOD, truncated [ 1482.167990][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f981cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1482.200666][T29168] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1482.207466][T29168] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa602e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1482.263217][T29193] device syz_tun left promiscuous mode [ 1482.268959][T29193] bridge1042: port 1(syz_tun) entered disabled state [ 1482.309884][T29193] bridge1043: port 1(syz_tun) entered blocking state [ 1482.335447][T29193] bridge1043: port 1(syz_tun) entered disabled state 03:18:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1200000000000000}, 0x0) [ 1482.365772][T29193] device syz_tun entered promiscuous mode [ 1482.401739][T29199] device bridge1043 entered promiscuous mode [ 1482.451139][T29209] loop5: p1 p2 p3 < > p4 [ 1482.455597][T29209] loop5: partition table partially beyond EOD, truncated [ 1482.482209][T29209] loop5: p1 start 10 is beyond EOD, truncated [ 1482.515972][T29209] loop5: p2 start 25 is beyond EOD, truncated [ 1482.539013][T29209] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1482.553112][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1482.579025][T29209] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1482.584405][T29207] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x1c00000000000000}, 0x0) [ 1482.625298][T29217] device syz_tun left promiscuous mode [ 1482.631116][T29217] bridge1043: port 1(syz_tun) entered disabled state [ 1482.640124][T29217] bridge1044: port 1(syz_tun) entered blocking state [ 1482.650405][T29217] bridge1044: port 1(syz_tun) entered disabled state [ 1482.658494][T29217] device syz_tun entered promiscuous mode [ 1482.667578][T29214] device bridge1044 entered promiscuous mode [ 1482.741334][T29211] loop5: p1 p2 p3 < > p4 [ 1482.747135][T29211] loop5: partition table partially beyond EOD, truncated [ 1482.781407][T29211] loop5: p1 start 10 is beyond EOD, truncated [ 1482.784683][T29226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1482.810090][T29226] device syz_tun left promiscuous mode [ 1482.815893][T29226] bridge1044: port 1(syz_tun) entered disabled state [ 1482.823786][T29211] loop5: p2 start 25 is beyond EOD, truncated 03:18:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="fa81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2000000000000000}, 0x0) [ 1482.832715][T29226] bridge1045: port 1(syz_tun) entered blocking state [ 1482.844851][T29226] bridge1045: port 1(syz_tun) entered disabled state [ 1482.852630][T29226] device syz_tun entered promiscuous mode [ 1482.858460][T29211] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1482.858481][T29211] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1482.882073][T29226] device bridge1045 entered promiscuous mode [ 1482.889848][T29231] device syz_tun left promiscuous mode [ 1482.896099][T29231] bridge1045: port 1(syz_tun) entered disabled state 03:18:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa603e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1482.998459][T29237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.057258][T29243] bridge1046: port 1(syz_tun) entered blocking state [ 1483.086799][T29243] bridge1046: port 1(syz_tun) entered disabled state [ 1483.110789][T29244] loop5: p1 p2 p3 < > p4 [ 1483.115196][T29244] loop5: partition table partially beyond EOD, truncated [ 1483.118063][T29243] device syz_tun entered promiscuous mode [ 1483.126058][T29244] loop5: p1 start 10 is beyond EOD, truncated [ 1483.138416][T29244] loop5: p2 start 25 is beyond EOD, truncated [ 1483.144873][T29244] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1483.153363][T29244] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1483.203680][T29235] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1483.239944][T29237] device bridge1046 entered promiscuous mode [ 1483.250452][T29237] device syz_tun left promiscuous mode [ 1483.257084][T29237] bridge1046: port 1(syz_tun) entered disabled state 03:18:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x2500000000000000}, 0x0) 03:18:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="fb81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1483.311747][T29249] loop5: p1 p2 p3 < > p4 [ 1483.316408][T29249] loop5: partition table partially beyond EOD, truncated [ 1483.330393][T29249] loop5: p1 start 10 is beyond EOD, truncated [ 1483.344884][T29249] loop5: p2 start 25 is beyond EOD, truncated [ 1483.353003][T29249] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa604e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1483.362274][T29249] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1483.462470][T29266] bridge1047: port 1(syz_tun) entered blocking state [ 1483.469696][T29266] bridge1047: port 1(syz_tun) entered disabled state [ 1483.567026][T29266] device syz_tun entered promiscuous mode [ 1483.590802][T29275] loop5: p1 p2 p3 < > p4 [ 1483.595418][T29275] loop5: partition table partially beyond EOD, truncated [ 1483.603857][T29274] device bridge1047 entered promiscuous mode 03:18:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3ece2b8400000000}, 0x0) [ 1483.648456][T29275] loop5: p1 start 10 is beyond EOD, truncated [ 1483.688796][T29275] loop5: p2 start 25 is beyond EOD, truncated [ 1483.717706][T29275] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1483.750423][T29283] device syz_tun left promiscuous mode [ 1483.761735][T29283] bridge1047: port 1(syz_tun) entered disabled state [ 1483.770260][T29275] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1483.783436][T29283] bridge1048: port 1(syz_tun) entered blocking state 03:18:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x3f00000000000000}, 0x0) [ 1483.797093][T29283] bridge1048: port 1(syz_tun) entered disabled state [ 1483.813865][T29283] device syz_tun entered promiscuous mode [ 1483.832335][T29287] device bridge1048 entered promiscuous mode [ 1483.876661][T29276] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1483.940008][T29294] device syz_tun left promiscuous mode [ 1483.950882][T29280] loop5: p1 p2 p3 < > p4 [ 1483.959625][T29280] loop5: partition table partially beyond EOD, truncated 03:18:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1483.989687][T29294] bridge1048: port 1(syz_tun) entered disabled state [ 1484.022374][T29280] loop5: p1 start 10 is beyond EOD, truncated [ 1484.053077][T29294] bridge1049: port 1(syz_tun) entered blocking state [ 1484.066795][T29280] loop5: p2 start 25 is beyond EOD, truncated [ 1484.099507][T29294] bridge1049: port 1(syz_tun) entered disabled state [ 1484.105882][T29280] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1484.120901][T29294] device syz_tun entered promiscuous mode [ 1484.140127][T29280] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:07 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x38) 03:18:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4000000000000000}, 0x0) 03:18:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="fc81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1484.147777][T29298] device bridge1049 entered promiscuous mode [ 1484.161416][T29294] device syz_tun left promiscuous mode [ 1484.170845][T29294] bridge1049: port 1(syz_tun) entered disabled state 03:18:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa605e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="c25d66209789"}]}]}}}]}, 0x44}}, 0x0) [ 1484.336634][T29310] bridge1050: port 1(syz_tun) entered blocking state [ 1484.361255][T29310] bridge1050: port 1(syz_tun) entered disabled state 03:18:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/722], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={0x0, r0}, 0x10) [ 1484.385333][T29310] device syz_tun entered promiscuous mode [ 1484.408826][T29321] device bridge1050 entered promiscuous mode [ 1484.420836][T29319] loop5: p1 p2 p3 < > p4 [ 1484.426093][T29319] loop5: partition table partially beyond EOD, truncated 03:18:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4800000000000000}, 0x0) [ 1484.476012][T29319] loop5: p1 start 10 is beyond EOD, truncated [ 1484.520635][T29319] loop5: p2 start 25 is beyond EOD, truncated [ 1484.534722][T29319] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1484.549602][T29319] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:07 executing program 3: perf_event_open(&(0x7f0000001ac0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') [ 1484.610752][T29331] device syz_tun left promiscuous mode [ 1484.616699][T29331] bridge1050: port 1(syz_tun) entered disabled state [ 1484.640623][T29311] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1484.675528][T29331] bridge1051: port 1(syz_tun) entered blocking state [ 1484.692995][T29331] bridge1051: port 1(syz_tun) entered disabled state [ 1484.710972][T29331] device syz_tun entered promiscuous mode 03:18:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa606e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1484.728616][T29338] device bridge1051 entered promiscuous mode 03:18:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x4c00000000000000}, 0x0) 03:18:08 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000009f40)=ANY=[], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) 03:18:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="fd81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x200, 0x0, &(0x7f00000000c0)="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"}) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) 03:18:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa607e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6000000000000000}, 0x0) 03:18:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x133}) [ 1484.918162][T29348] loop5: p1 p2 p3 < > p4 [ 1484.923034][T29348] loop5: partition table partially beyond EOD, truncated [ 1484.938063][T29348] loop5: p1 start 10 is beyond EOD, truncated [ 1484.944979][T29348] loop5: p2 start 25 is beyond EOD, truncated [ 1484.951630][T29348] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1484.959463][T29348] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1484.995823][T29355] device syz_tun left promiscuous mode [ 1485.015519][T29355] bridge1051: port 1(syz_tun) entered disabled state [ 1485.030366][T29355] bridge1052: port 1(syz_tun) entered blocking state [ 1485.039152][T29355] bridge1052: port 1(syz_tun) entered disabled state [ 1485.046913][T29355] device syz_tun entered promiscuous mode [ 1485.070716][T29353] loop5: p1 p2 p3 < > p4 [ 1485.076415][T29353] loop5: partition table partially beyond EOD, truncated [ 1485.084760][T29353] loop5: p1 start 10 is beyond EOD, truncated [ 1485.092828][T29364] device bridge1052 entered promiscuous mode [ 1485.095796][T29353] loop5: p2 start 25 is beyond EOD, truncated [ 1485.105910][T29353] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1485.113651][T29353] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1485.276758][T29367] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1485.293339][T29379] device syz_tun left promiscuous mode [ 1485.299217][T29379] bridge1052: port 1(syz_tun) entered disabled state [ 1485.308087][T29379] bridge1053: port 1(syz_tun) entered blocking state [ 1485.319375][T29379] bridge1053: port 1(syz_tun) entered disabled state [ 1485.327616][T29379] device syz_tun entered promiscuous mode [ 1485.337254][T29379] device bridge1053 entered promiscuous mode [ 1485.342785][T29382] loop5: p1 p2 p3 < > p4 [ 1485.347605][T29382] loop5: partition table partially beyond EOD, truncated [ 1485.357108][T29382] loop5: p1 start 10 is beyond EOD, truncated [ 1485.363460][T29382] loop5: p2 start 25 is beyond EOD, truncated [ 1485.370288][T29382] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6558000000000000}, 0x0) [ 1485.378894][T29382] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:08 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)) [ 1485.472557][T29388] loop5: p1 p2 p3 < > p4 [ 1485.476982][T29388] loop5: partition table partially beyond EOD, truncated [ 1485.492572][T29388] loop5: p1 start 10 is beyond EOD, truncated [ 1485.539520][T29388] loop5: p2 start 25 is beyond EOD, truncated [ 1485.559139][T29406] __nla_validate_parse: 7 callbacks suppressed [ 1485.559147][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa608e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1485.593029][T29388] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1485.612865][T29388] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1485.649689][T29409] device syz_tun left promiscuous mode [ 1485.656239][T29409] bridge1053: port 1(syz_tun) entered disabled state [ 1485.677281][T29409] bridge1054: port 1(syz_tun) entered blocking state 03:18:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="fe81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6800000000000000}, 0x0) [ 1485.716838][T29409] bridge1054: port 1(syz_tun) entered disabled state [ 1485.749685][T29409] device syz_tun entered promiscuous mode [ 1485.770455][T29413] device bridge1054 entered promiscuous mode [ 1485.850622][T29418] loop5: p1 p2 p3 < > p4 [ 1485.855029][T29418] loop5: partition table partially beyond EOD, truncated [ 1485.885091][T29418] loop5: p1 start 10 is beyond EOD, truncated [ 1485.907204][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1485.927945][T29418] loop5: p2 start 25 is beyond EOD, truncated [ 1485.947401][T29418] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1485.962138][T29418] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1485.978649][T29429] device syz_tun left promiscuous mode [ 1485.988802][T29429] bridge1054: port 1(syz_tun) entered disabled state [ 1486.008320][T29429] bridge1055: port 1(syz_tun) entered blocking state [ 1486.020327][T29429] bridge1055: port 1(syz_tun) entered disabled state [ 1486.028491][T29429] device syz_tun entered promiscuous mode [ 1486.037067][T29427] device bridge1055 entered promiscuous mode 03:18:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6c00000000000000}, 0x0) [ 1486.100804][T29421] loop5: p1 p2 p3 < > p4 [ 1486.105205][T29421] loop5: partition table partially beyond EOD, truncated 03:18:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x6e02000000000000}, 0x0) 03:18:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa609e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0828ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1486.146748][T29421] loop5: p1 start 10 is beyond EOD, truncated [ 1486.184595][T29421] loop5: p2 start 25 is beyond EOD, truncated [ 1486.205250][T29442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1486.227742][T29421] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1486.258203][T29424] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1486.275116][T29421] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1486.288534][T29445] device syz_tun left promiscuous mode [ 1486.295648][T29445] bridge1055: port 1(syz_tun) entered disabled state [ 1486.327018][T29445] bridge1056: port 1(syz_tun) entered blocking state [ 1486.354592][T29445] bridge1056: port 1(syz_tun) entered disabled state [ 1486.371063][T29445] device syz_tun entered promiscuous mode [ 1486.388084][T29449] device bridge1056 entered promiscuous mode [ 1486.512428][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1486.560434][T29460] device syz_tun left promiscuous mode [ 1486.566158][T29460] bridge1056: port 1(syz_tun) entered disabled state [ 1486.580703][T29461] loop5: p1 p2 p3 < > p4 [ 1486.585059][T29461] loop5: partition table partially beyond EOD, truncated [ 1486.594776][T29460] bridge1057: port 1(syz_tun) entered blocking state [ 1486.601323][T29461] loop5: p1 start 10 is beyond EOD, truncated 03:18:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) semget(0x2, 0x0, 0x704) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x20000800) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 03:18:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7400000000000000}, 0x0) [ 1486.601732][T29460] bridge1057: port 1(syz_tun) entered disabled state [ 1486.616041][T29460] device syz_tun entered promiscuous mode [ 1486.632542][T29460] device bridge1057 entered promiscuous mode [ 1486.663750][T29461] loop5: p2 start 25 is beyond EOD, truncated [ 1486.677161][T29461] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1486.684930][T29461] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)={[{@errors_remount='errors=remount-ro'}]}) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) [ 1486.718164][T29477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1486.747891][T29477] device syz_tun left promiscuous mode [ 1486.763666][T29477] bridge1057: port 1(syz_tun) entered disabled state [ 1486.780836][T29468] loop5: p1 p2 p3 < > p4 [ 1486.785406][T29468] loop5: partition table partially beyond EOD, truncated [ 1486.805698][T29477] bridge1058: port 1(syz_tun) entered blocking state [ 1486.819066][T29468] loop5: p1 start 10 is beyond EOD, truncated [ 1486.835551][T29477] bridge1058: port 1(syz_tun) entered disabled state [ 1486.855055][T29464] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1486.862906][T29468] loop5: p2 start 25 is beyond EOD, truncated [ 1486.883547][T29477] device syz_tun entered promiscuous mode [ 1486.900536][T29491] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 1486.910216][T29491] ext4 filesystem being mounted at /root/syzkaller-testdir124754141/syzkaller.tOS04L/3365/file0 supports timestamps until 2038 (0x7fffffff) 03:18:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x7a00000000000000}, 0x0) [ 1486.930598][T29468] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1486.937751][T29468] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1486.944201][T29485] device bridge1058 entered promiscuous mode 03:18:10 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x78, &(0x7f00000005c0)={&(0x7f0000000500)=""/147, 0x93}}, 0x10) 03:18:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60ae9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0c28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1487.095346][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/206, 0x52, 0xce, 0x8}, 0x20) [ 1487.179125][T29505] device syz_tun left promiscuous mode [ 1487.187835][T29505] bridge1058: port 1(syz_tun) entered disabled state [ 1487.212203][T29505] bridge1059: port 1(syz_tun) entered blocking state [ 1487.229161][T29505] bridge1059: port 1(syz_tun) entered disabled state [ 1487.248059][T29505] device syz_tun entered promiscuous mode [ 1487.264167][T29502] device bridge1059 entered promiscuous mode 03:18:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8000000000000000}, 0x0) [ 1487.285084][T29515] loop5: p1 p2 p3 < > p4 [ 1487.289457][T29515] loop5: partition table partially beyond EOD, truncated [ 1487.321488][T29522] BPF: (anon) type_id=2 bits_offset=0 [ 1487.334654][T29515] loop5: p1 start 10 is beyond EOD, truncated [ 1487.361330][T29522] BPF: [ 1487.373704][T29515] loop5: p2 start 25 is beyond EOD, truncated [ 1487.384379][T29522] BPF:Invalid member [ 1487.403210][T29522] BPF: [ 1487.403210][T29522] [ 1487.419461][T29515] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1487.448110][T29525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1487.456149][T29515] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1487.465498][T29522] BPF: (anon) type_id=2 bits_offset=0 [ 1487.487063][T29525] device syz_tun left promiscuous mode [ 1487.489471][T29522] BPF: [ 1487.503036][T29525] bridge1059: port 1(syz_tun) entered disabled state [ 1487.508036][T29522] BPF:Invalid member [ 1487.525822][T29525] bridge1060: port 1(syz_tun) entered blocking state [ 1487.534874][T29522] BPF: [ 1487.534874][T29522] [ 1487.545171][T29525] bridge1060: port 1(syz_tun) entered disabled state 03:18:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)) [ 1487.562790][T29525] device syz_tun entered promiscuous mode [ 1487.580883][T29530] device bridge1060 entered promiscuous mode [ 1487.600616][T29520] loop5: p1 p2 p3 < > p4 [ 1487.605062][T29520] loop5: partition table partially beyond EOD, truncated 03:18:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8100000000000000}, 0x0) [ 1487.672527][T29520] loop5: p1 start 10 is beyond EOD, truncated [ 1487.678833][T29520] loop5: p2 start 25 is beyond EOD, truncated [ 1487.703197][T29518] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1487.723356][T29537] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1487.739372][T29520] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1487.760756][T29537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1487.774500][T29520] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1487.790384][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0e28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60be9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x146}) [ 1487.863278][T29545] device syz_tun left promiscuous mode [ 1487.890749][T29545] bridge1060: port 1(syz_tun) entered disabled state [ 1487.923398][T29545] bridge1061: port 1(syz_tun) entered blocking state [ 1487.963266][T29545] bridge1061: port 1(syz_tun) entered disabled state [ 1487.990598][T29545] device syz_tun entered promiscuous mode [ 1488.029115][T29542] device bridge1061 entered promiscuous mode 03:18:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x81ffffff00000000}, 0x0) [ 1488.080793][T29556] loop5: p1 p2 p3 < > p4 [ 1488.085433][T29556] loop5: partition table partially beyond EOD, truncated [ 1488.100851][T29556] loop5: p1 start 10 is beyond EOD, truncated [ 1488.115083][T29556] loop5: p2 start 25 is beyond EOD, truncated 03:18:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x30007, 0x0) [ 1488.127893][T29556] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1488.152640][T29556] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1488.164306][T29553] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1488.195181][T29574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.216847][T29574] device syz_tun left promiscuous mode [ 1488.225954][T29574] bridge1061: port 1(syz_tun) entered disabled state [ 1488.235773][T29574] bridge1062: port 1(syz_tun) entered blocking state [ 1488.244539][T29574] bridge1062: port 1(syz_tun) entered disabled state [ 1488.252655][T29574] device syz_tun entered promiscuous mode [ 1488.271867][T29574] device bridge1062 entered promiscuous mode 03:18:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x82fe000001000000}, 0x0) 03:18:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0f28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1488.293937][T29579] device syz_tun left promiscuous mode [ 1488.303611][T29579] bridge1062: port 1(syz_tun) entered disabled state [ 1488.330533][T29564] loop5: p1 p2 p3 < > p4 [ 1488.335156][T29564] loop5: partition table partially beyond EOD, truncated [ 1488.362658][T29564] loop5: p1 start 10 is beyond EOD, truncated [ 1488.392880][T29564] loop5: p2 start 25 is beyond EOD, truncated [ 1488.424880][T29564] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1488.441470][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.474095][T29564] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60ce9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1488.525236][T29599] bridge1063: port 1(syz_tun) entered blocking state [ 1488.551213][T29599] bridge1063: port 1(syz_tun) entered disabled state [ 1488.598747][T29599] device syz_tun entered promiscuous mode [ 1488.627891][T29592] device bridge1063 entered promiscuous mode [ 1488.636847][T29603] device syz_tun left promiscuous mode 03:18:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8847000000000000}, 0x0) [ 1488.642984][T29603] bridge1063: port 1(syz_tun) entered disabled state [ 1488.724542][T29606] loop5: p1 p2 p3 < > p4 [ 1488.729454][T29606] loop5: partition table partially beyond EOD, truncated [ 1488.740293][T29598] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1488.758577][T29606] loop5: p1 start 10 is beyond EOD, truncated [ 1488.779167][T29606] loop5: p2 start 25 is beyond EOD, truncated [ 1488.812822][T29606] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1488.840091][T29615] bridge1064: port 1(syz_tun) entered blocking state [ 1488.852386][T29606] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1488.871919][T29615] bridge1064: port 1(syz_tun) entered disabled state 03:18:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb5e28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1488.899893][T29615] device syz_tun entered promiscuous mode [ 1488.926574][T29619] device bridge1064 entered promiscuous mode 03:18:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x8848000000000000}, 0x0) [ 1488.946986][T29619] device syz_tun left promiscuous mode [ 1488.952704][T29619] bridge1064: port 1(syz_tun) entered disabled state [ 1489.015851][T29610] loop5: p1 p2 p3 < > p4 [ 1489.020289][T29610] loop5: partition table partially beyond EOD, truncated [ 1489.042225][T29610] loop5: p1 start 10 is beyond EOD, truncated 03:18:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x30007, 0x0) [ 1489.079316][T29610] loop5: p2 start 25 is beyond EOD, truncated [ 1489.116374][T29610] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1489.131898][T29635] bridge1065: port 1(syz_tun) entered blocking state [ 1489.148230][T29610] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1489.149745][T29635] bridge1065: port 1(syz_tun) entered disabled state 03:18:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60de9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x88a8ffff00000000}, 0x0) [ 1489.184814][T29635] device syz_tun entered promiscuous mode [ 1489.199166][T29632] device bridge1065 entered promiscuous mode [ 1489.316025][T29631] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1489.357080][T29647] device syz_tun left promiscuous mode [ 1489.380294][T29647] bridge1065: port 1(syz_tun) entered disabled state [ 1489.389548][T29647] bridge1066: port 1(syz_tun) entered blocking state [ 1489.412726][T29647] bridge1066: port 1(syz_tun) entered disabled state [ 1489.430428][T29650] loop5: p1 p2 p3 < > p4 [ 1489.434789][T29650] loop5: partition table partially beyond EOD, truncated [ 1489.449481][T29650] loop5: p1 start 10 is beyond EOD, truncated [ 1489.456062][T29647] device syz_tun entered promiscuous mode 03:18:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d27ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9001000000000000}, 0x0) [ 1489.476132][T29650] loop5: p2 start 25 is beyond EOD, truncated [ 1489.487719][T29655] device bridge1066 entered promiscuous mode [ 1489.522748][T29650] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1489.537566][T29650] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1489.640419][T29654] loop5: p1 p2 p3 < > p4 [ 1489.645001][T29654] loop5: partition table partially beyond EOD, truncated [ 1489.652916][T29667] device syz_tun left promiscuous mode [ 1489.659221][T29654] loop5: p1 start 10 is beyond EOD, truncated [ 1489.665818][T29654] loop5: p2 start 25 is beyond EOD, truncated [ 1489.667971][T29663] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1489.672313][T29654] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60ee9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1489.685510][T29654] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1489.694259][T29667] bridge1066: port 1(syz_tun) entered disabled state [ 1489.726134][T29667] bridge1067: port 1(syz_tun) entered blocking state [ 1489.741213][T29667] bridge1067: port 1(syz_tun) entered disabled state [ 1489.748579][T29667] device syz_tun entered promiscuous mode [ 1489.756416][T29674] device bridge1067 entered promiscuous mode 03:18:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x9effffff00000000}, 0x0) 03:18:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d29ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1489.902257][T29680] loop5: p1 p2 p3 < > p4 [ 1489.906808][T29680] loop5: partition table partially beyond EOD, truncated 03:18:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30}, 0x30) [ 1489.972756][T29680] loop5: p1 start 10 is beyond EOD, truncated [ 1489.986668][T29687] device syz_tun left promiscuous mode [ 1489.992385][T29687] bridge1067: port 1(syz_tun) entered disabled state [ 1490.009493][T29687] bridge1068: port 1(syz_tun) entered blocking state [ 1490.019833][T29680] loop5: p2 start 25 is beyond EOD, truncated [ 1490.022821][T29687] bridge1068: port 1(syz_tun) entered disabled state [ 1490.049940][T29687] device syz_tun entered promiscuous mode [ 1490.051765][T29680] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1490.071252][T29685] device bridge1068 entered promiscuous mode 03:18:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xa36438c900000000}, 0x0) 03:18:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x170) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2={0x2000000, [{0x401}]}, 0x14, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 03:18:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa60fe9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1490.103796][T29680] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1490.238594][T29701] device syz_tun left promiscuous mode [ 1490.249956][T29701] bridge1068: port 1(syz_tun) entered disabled state [ 1490.276095][T29702] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1490.278318][T29701] bridge1069: port 1(syz_tun) entered blocking state [ 1490.321048][T29701] bridge1069: port 1(syz_tun) entered disabled state [ 1490.336751][T29709] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1490.339873][T29701] device syz_tun entered promiscuous mode [ 1490.376754][T29708] device bridge1069 entered promiscuous mode [ 1490.383910][T29710] loop5: p1 p2 p3 < > p4 [ 1490.385682][T29709] overlayfs: overlapping lowerdir path [ 1490.388646][T29710] loop5: partition table partially beyond EOD, truncated 03:18:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xc3ffffff00000000}, 0x0) [ 1490.419013][T29710] loop5: p1 start 10 is beyond EOD, truncated [ 1490.427182][T29710] loop5: p2 start 25 is beyond EOD, truncated [ 1490.433743][T29710] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1490.434405][T29715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1490.443257][T29710] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1490.466722][T29695] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1490.501165][T29715] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1490.536337][T29715] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1490.587939][T29723] __nla_validate_parse: 6 callbacks suppressed [ 1490.587946][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:13 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000180)="ff100006214d56d0bf", 0x9, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 1490.630448][T29710] loop5: p1 p2 p3 < > p4 [ 1490.634998][T29710] loop5: partition table partially beyond EOD, truncated [ 1490.668801][T29726] device syz_tun left promiscuous mode [ 1490.668913][T29710] loop5: p1 start 10 is beyond EOD, truncated 03:18:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa610e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1490.675640][T29726] bridge1069: port 1(syz_tun) entered disabled state [ 1490.681240][T29710] loop5: p2 start 25 is beyond EOD, truncated [ 1490.694220][T29710] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1490.701336][T29710] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1490.762352][T29726] bridge1070: port 1(syz_tun) entered blocking state [ 1490.773748][T29726] bridge1070: port 1(syz_tun) entered disabled state 03:18:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba0ad11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1490.806283][T29726] device syz_tun entered promiscuous mode [ 1490.834582][T29723] device bridge1070 entered promiscuous mode 03:18:14 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="240000001a0003041dfffd946f6105000200000a1f000003001108000800100040000000", 0x24}], 0x1}, 0x0) [ 1490.852878][T29726] device syz_tun left promiscuous mode [ 1490.867430][T29726] bridge1070: port 1(syz_tun) entered disabled state [ 1490.900395][T29738] loop5: p1 p2 p3 < > p4 [ 1490.904941][T29738] loop5: partition table partially beyond EOD, truncated [ 1490.919113][T29738] loop5: p1 start 10 is beyond EOD, truncated [ 1490.933582][T29738] loop5: p2 start 25 is beyond EOD, truncated 03:18:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xdc01000000000000}, 0x0) [ 1490.946486][T29738] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1490.961905][T29738] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:14 executing program 3: r0 = gettid() tkill(r0, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1a) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3544f712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4", 0x4e}], 0x1) [ 1491.045210][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1491.075984][T29751] bridge1071: port 1(syz_tun) entered blocking state [ 1491.083586][T29751] bridge1071: port 1(syz_tun) entered disabled state [ 1491.091286][T29751] device syz_tun entered promiscuous mode [ 1491.100389][T29751] device bridge1071 entered promiscuous mode [ 1491.111880][T29743] loop5: p1 p2 p3 < > p4 [ 1491.116455][T29743] loop5: partition table partially beyond EOD, truncated [ 1491.127325][T29743] loop5: p1 start 10 is beyond EOD, truncated [ 1491.134184][T29743] loop5: p2 start 25 is beyond EOD, truncated 03:18:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xde01000000000000}, 0x0) 03:18:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa611e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x13e}) [ 1491.140653][T29743] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1491.148216][T29743] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1491.278933][T29745] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1491.285456][T29765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:14 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000009c0)={{}, "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"}) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x30007, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) [ 1491.361320][T29779] device syz_tun left promiscuous mode [ 1491.367308][T29779] bridge1071: port 1(syz_tun) entered disabled state [ 1491.400318][T29772] loop5: p1 p2 p3 < > p4 [ 1491.404905][T29772] loop5: partition table partially beyond EOD, truncated [ 1491.430358][T29779] bridge1072: port 1(syz_tun) entered blocking state [ 1491.449345][T29772] loop5: p1 start 10 is beyond EOD, truncated [ 1491.490080][T29779] bridge1072: port 1(syz_tun) entered disabled state [ 1491.498159][T29779] device syz_tun entered promiscuous mode [ 1491.510117][T29772] loop5: p2 start 25 is beyond EOD, truncated [ 1491.516206][T29772] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba25d11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xefffffff00000000}, 0x0) [ 1491.549988][T29765] device bridge1072 entered promiscuous mode [ 1491.552538][T29772] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa612e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xf0ffffff00000000}, 0x0) [ 1491.667738][T29802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1491.690266][T29785] loop5: p1 p2 p3 < > p4 [ 1491.694838][T29785] loop5: partition table partially beyond EOD, truncated [ 1491.716649][T29785] loop5: p1 start 10 is beyond EOD, truncated [ 1491.728880][T29803] device syz_tun left promiscuous mode [ 1491.738399][T29785] loop5: p2 start 25 is beyond EOD, truncated [ 1491.743598][T29803] bridge1072: port 1(syz_tun) entered disabled state [ 1491.766770][T29785] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1491.799305][T29803] bridge1073: port 1(syz_tun) entered blocking state [ 1491.809390][T29785] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1491.841269][T29803] bridge1073: port 1(syz_tun) entered disabled state [ 1491.878904][T29803] device syz_tun entered promiscuous mode [ 1491.914162][T29802] device bridge1073 entered promiscuous mode [ 1491.942711][T29797] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1492.042432][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1492.087395][T29816] device syz_tun left promiscuous mode [ 1492.099462][T29816] bridge1073: port 1(syz_tun) entered disabled state [ 1492.117007][T29816] bridge1074: port 1(syz_tun) entered blocking state [ 1492.124074][T29818] loop5: p1 p2 p3 < > p4 [ 1492.128551][T29818] loop5: partition table partially beyond EOD, truncated 03:18:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba5cd11c4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1492.136295][T29818] loop5: p1 start 10 is beyond EOD, truncated [ 1492.142663][T29816] bridge1074: port 1(syz_tun) entered disabled state [ 1492.149375][T29818] loop5: p2 start 25 is beyond EOD, truncated [ 1492.158468][T29816] device syz_tun entered promiscuous mode [ 1492.164933][T29818] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1492.173882][T29818] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1492.174164][T29823] device bridge1074 entered promiscuous mode 03:18:15 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000180)="ff100006214d56d0bf", 0x9, 0x900, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 03:18:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfcffffff00000000}, 0x0) [ 1492.300278][T29822] loop5: p1 p2 p3 < > p4 [ 1492.304639][T29822] loop5: partition table partially beyond EOD, truncated [ 1492.323110][T29822] loop5: p1 start 10 is beyond EOD, truncated [ 1492.329401][T29822] loop5: p2 start 25 is beyond EOD, truncated 03:18:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_UNLOCK(0x0, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 1492.356087][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1492.380023][T29822] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1492.386987][T29822] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa613e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1492.461143][T29838] device syz_tun left promiscuous mode [ 1492.466880][T29838] bridge1074: port 1(syz_tun) entered disabled state [ 1492.491402][T29838] bridge1075: port 1(syz_tun) entered blocking state 03:18:15 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0xfff) r2 = inotify_init1(0x0) r3 = dup2(r2, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r3, 0x0) [ 1492.522545][T29837] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1492.523725][T29838] bridge1075: port 1(syz_tun) entered disabled state [ 1492.559462][T29838] device syz_tun entered promiscuous mode [ 1492.578145][T29836] device bridge1075 entered promiscuous mode 03:18:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xfeffffff00000000}, 0x0) 03:18:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11b4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1492.625852][T29843] device syz_tun left promiscuous mode [ 1492.631997][T29843] bridge1075: port 1(syz_tun) entered disabled state 03:18:15 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x1000002047ff) [ 1492.703074][T29852] loop5: p1 p2 p3 < > p4 [ 1492.708508][T29852] loop5: partition table partially beyond EOD, truncated [ 1492.745579][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1492.754918][T29852] loop5: p1 start 10 is beyond EOD, truncated [ 1492.788974][T29859] bridge1076: port 1(syz_tun) entered blocking state [ 1492.799147][T29852] loop5: p2 start 25 is beyond EOD, truncated [ 1492.803621][T29859] bridge1076: port 1(syz_tun) entered disabled state [ 1492.821187][T29859] device syz_tun entered promiscuous mode [ 1492.832988][T29852] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1492.839383][T29859] device bridge1076 entered promiscuous mode [ 1492.868429][T29868] device syz_tun left promiscuous mode [ 1492.873897][T29852] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1492.874199][T29868] bridge1076: port 1(syz_tun) entered disabled state 03:18:16 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$getenv(0x4204, r1, 0x2, &(0x7f0000000100)) 03:18:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffff7f00000000}, 0x0) [ 1493.020230][T29856] loop5: p1 p2 p3 < > p4 [ 1493.024587][T29856] loop5: partition table partially beyond EOD, truncated [ 1493.031780][T29856] loop5: p1 start 10 is beyond EOD, truncated [ 1493.038285][T29856] loop5: p2 start 25 is beyond EOD, truncated [ 1493.044803][T29856] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1493.051602][T29856] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa625e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0xffffffff00000000}, 0x0) [ 1493.075319][T29884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.094055][T29884] bridge1077: port 1(syz_tun) entered blocking state [ 1493.101403][T29884] bridge1077: port 1(syz_tun) entered disabled state [ 1493.108700][T29884] device syz_tun entered promiscuous mode [ 1493.129344][T29884] device bridge1077 entered promiscuous mode [ 1493.143478][T29869] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11d4c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000}, 0x0) [ 1493.289749][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.333169][T29897] device syz_tun left promiscuous mode [ 1493.340283][T29896] loop5: p1 p2 p3 < > p4 [ 1493.344760][T29896] loop5: partition table partially beyond EOD, truncated [ 1493.350440][T29897] bridge1077: port 1(syz_tun) entered disabled state [ 1493.365804][T29897] bridge1078: port 1(syz_tun) entered blocking state [ 1493.366903][T29896] loop5: p1 start 10 is beyond EOD, truncated [ 1493.381039][T29897] bridge1078: port 1(syz_tun) entered disabled state [ 1493.401463][T29896] loop5: p2 start 25 is beyond EOD, truncated [ 1493.415703][T29897] device syz_tun entered promiscuous mode [ 1493.433327][T29896] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1493.460323][T29903] device bridge1078 entered promiscuous mode [ 1493.484773][T29896] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1493.604733][T29913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.630219][T29901] loop5: p1 p2 p3 < > p4 [ 1493.635167][T29901] loop5: partition table partially beyond EOD, truncated [ 1493.652772][T29901] loop5: p1 start 10 is beyond EOD, truncated [ 1493.669284][T29914] device syz_tun left promiscuous mode [ 1493.674238][T29901] loop5: p2 start 25 is beyond EOD, truncated [ 1493.682106][T29901] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1493.688988][T29901] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1493.695078][T29914] bridge1078: port 1(syz_tun) entered disabled state [ 1493.711506][T29914] bridge1079: port 1(syz_tun) entered blocking state [ 1493.718984][T29914] bridge1079: port 1(syz_tun) entered disabled state [ 1493.727245][T29914] device syz_tun entered promiscuous mode [ 1493.735081][T29913] device bridge1079 entered promiscuous mode 03:18:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa626e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:16 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x247ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) getdents64(r0, 0x0, 0x0) [ 1493.762339][T29914] bridge1079: port 1(syz_tun) entered blocking state [ 1493.769290][T29914] bridge1079: port 1(syz_tun) entered forwarding state [ 1493.782561][T29914] device bridge1079 left promiscuous mode [ 1493.797213][T29914] device syz_tun left promiscuous mode [ 1493.803209][T29914] bridge1079: port 1(syz_tun) entered disabled state 03:18:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x2}, 0x0) [ 1493.823092][T29914] device bridge1079 entered promiscuous mode [ 1493.830382][T29908] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1493.854305][T29924] ptrace attach of "/root/syz-executor.3"[29878] was attempted by "/root/syz-executor.3"[29924] [ 1493.954542][T29932] bridge1080: port 1(syz_tun) entered blocking state [ 1493.970230][T29930] loop5: p1 p2 p3 < > p4 [ 1493.972506][T29932] bridge1080: port 1(syz_tun) entered disabled state [ 1493.974816][T29930] loop5: partition table partially beyond EOD, truncated [ 1493.982093][T29932] device syz_tun entered promiscuous mode [ 1493.998950][T29930] loop5: p1 start 10 is beyond EOD, truncated 03:18:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c488bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1494.005646][T29930] loop5: p2 start 25 is beyond EOD, truncated [ 1494.013053][T29930] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1494.016791][T29932] device bridge1080 entered promiscuous mode [ 1494.020690][T29930] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1494.052624][T29932] bridge1080: port 1(syz_tun) entered blocking state [ 1494.059459][T29932] bridge1080: port 1(syz_tun) entered forwarding state [ 1494.101983][T29932] device bridge1080 left promiscuous mode [ 1494.120353][T29930] loop5: p1 p2 p3 < > p4 [ 1494.125463][T29930] loop5: partition table partially beyond EOD, truncated [ 1494.141672][T29930] loop5: p1 start 10 is beyond EOD, truncated [ 1494.154645][T29930] loop5: p2 start 25 is beyond EOD, truncated [ 1494.160309][T29939] device syz_tun left promiscuous mode [ 1494.166291][T29939] bridge1080: port 1(syz_tun) entered disabled state [ 1494.167743][T29930] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1494.186605][T29930] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1494.196184][T29949] device bridge1080 entered promiscuous mode 03:18:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa638e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x3}, 0x0) [ 1494.386001][T29960] bridge1081: port 1(syz_tun) entered blocking state [ 1494.396761][T29960] bridge1081: port 1(syz_tun) entered disabled state [ 1494.405171][T29960] device syz_tun entered promiscuous mode [ 1494.414129][T29957] loop5: p1 p2 p3 < > p4 [ 1494.418920][T29957] loop5: partition table partially beyond EOD, truncated [ 1494.430174][T29948] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1494.440867][T29957] loop5: p1 start 10 is beyond EOD, truncated [ 1494.447475][T29960] device bridge1081 entered promiscuous mode [ 1494.459316][T29960] bridge1081: port 1(syz_tun) entered blocking state [ 1494.466154][T29960] bridge1081: port 1(syz_tun) entered forwarding state [ 1494.478471][T29957] loop5: p2 start 25 is beyond EOD, truncated [ 1494.493014][T29957] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1494.506938][T29960] device bridge1081 left promiscuous mode [ 1494.514172][T29957] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1494.540643][T29965] bridge1081: port 1(syz_tun) entered disabled state [ 1494.550380][T29965] device bridge1081 entered promiscuous mode [ 1494.630228][T29963] loop5: p1 p2 p3 < > p4 [ 1494.635542][T29963] loop5: partition table partially beyond EOD, truncated [ 1494.649977][T29963] loop5: p1 start 10 is beyond EOD, truncated 03:18:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c5c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x4}, 0x0) 03:18:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa648e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1494.684360][T29963] loop5: p2 start 25 is beyond EOD, truncated [ 1494.692652][T29963] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1494.700659][T29963] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1494.810784][T29982] device syz_tun left promiscuous mode [ 1494.824203][T29982] bridge1081: port 1(syz_tun) entered disabled state 03:18:18 executing program 3: [ 1494.855539][T29982] bridge1082: port 1(syz_tun) entered blocking state [ 1494.884926][T29982] bridge1082: port 1(syz_tun) entered disabled state [ 1494.916391][T29982] device syz_tun entered promiscuous mode [ 1494.939279][T29989] device bridge1082 entered promiscuous mode [ 1494.945710][T29990] loop5: p1 p2 p3 < > p4 [ 1494.950514][T29990] loop5: partition table partially beyond EOD, truncated [ 1494.952638][T29980] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:18 executing program 3: [ 1494.966940][T29994] bridge1082: port 1(syz_tun) entered blocking state [ 1494.970400][T29990] loop5: p1 start 10 is beyond EOD, truncated [ 1494.974388][T29994] bridge1082: port 1(syz_tun) entered forwarding state [ 1494.984294][T29990] loop5: p2 start 25 is beyond EOD, truncated [ 1494.997514][T29990] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:18 executing program 3: [ 1495.022318][T29990] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1495.049144][T29994] device bridge1082 left promiscuous mode [ 1495.067966][T29989] bridge1082: port 1(syz_tun) entered disabled state [ 1495.085825][T29989] device bridge1082 entered promiscuous mode [ 1495.111560][T29996] loop5: p1 p2 p3 < > p4 [ 1495.117088][T29996] loop5: partition table partially beyond EOD, truncated [ 1495.142705][T29996] loop5: p1 start 10 is beyond EOD, truncated [ 1495.159065][T29996] loop5: p2 start 25 is beyond EOD, truncated 03:18:18 executing program 3: [ 1495.186118][T29996] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c6c8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x5}, 0x0) 03:18:18 executing program 3: [ 1495.246843][T29996] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa64ce9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:18 executing program 3: [ 1495.403501][T30015] device syz_tun left promiscuous mode [ 1495.423069][T30015] bridge1082: port 1(syz_tun) entered disabled state 03:18:18 executing program 3: [ 1495.458662][T30015] bridge1083: port 1(syz_tun) entered blocking state [ 1495.487237][T30015] bridge1083: port 1(syz_tun) entered disabled state [ 1495.500765][T30023] loop5: p1 p2 p3 < > p4 [ 1495.507925][T30023] loop5: partition table partially beyond EOD, truncated [ 1495.528721][T30015] device syz_tun entered promiscuous mode [ 1495.532173][T30023] loop5: p1 start 10 is beyond EOD, truncated [ 1495.561962][T30023] loop5: p2 start 25 is beyond EOD, truncated [ 1495.576391][T30024] device bridge1083 entered promiscuous mode [ 1495.578345][T30023] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1495.593265][T30027] bridge1083: port 1(syz_tun) entered blocking state [ 1495.601417][T30027] bridge1083: port 1(syz_tun) entered forwarding state 03:18:18 executing program 3: [ 1495.602322][T30023] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1495.631187][T30027] device bridge1083 left promiscuous mode [ 1495.659287][T30024] bridge1083: port 1(syz_tun) entered disabled state [ 1495.678154][T30024] device bridge1083 entered promiscuous mode [ 1495.697771][T30016] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:18 executing program 3: [ 1495.760146][T30026] loop5: p1 p2 p3 < > p4 [ 1495.766379][T30026] loop5: partition table partially beyond EOD, truncated 03:18:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c748bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1495.826056][T30026] loop5: p1 start 10 is beyond EOD, truncated 03:18:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x6}, 0x0) 03:18:19 executing program 3: [ 1495.887437][T30026] loop5: p2 start 25 is beyond EOD, truncated [ 1495.949785][T30026] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1495.957052][T30026] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:19 executing program 3: 03:18:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa65ce9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1496.010127][T30046] __nla_validate_parse: 4 callbacks suppressed [ 1496.010135][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1496.105948][T30050] device syz_tun left promiscuous mode [ 1496.114695][T30050] bridge1083: port 1(syz_tun) entered disabled state 03:18:19 executing program 3: [ 1496.159964][T30050] bridge1084: port 1(syz_tun) entered blocking state [ 1496.191510][T30050] bridge1084: port 1(syz_tun) entered disabled state [ 1496.212533][T30058] loop5: p1 p2 p3 < > p4 [ 1496.218747][T30044] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1496.227975][T30058] loop5: partition table partially beyond EOD, truncated [ 1496.262059][T30050] device syz_tun entered promiscuous mode [ 1496.283260][T30058] loop5: p1 start 10 is beyond EOD, truncated 03:18:19 executing program 3: [ 1496.314744][T30058] loop5: p2 start 25 is beyond EOD, truncated [ 1496.324421][T30046] device bridge1084 entered promiscuous mode [ 1496.329807][T30058] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1496.348395][T30053] bridge1084: port 1(syz_tun) entered blocking state [ 1496.352565][T30058] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1496.355567][T30053] bridge1084: port 1(syz_tun) entered forwarding state 03:18:19 executing program 3: [ 1496.414542][T30053] device bridge1084 left promiscuous mode [ 1496.450644][T30050] bridge1084: port 1(syz_tun) entered disabled state 03:18:19 executing program 3: 03:18:19 executing program 3: 03:18:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x7}, 0x0) 03:18:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c7a8bfb", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa660e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1496.466289][T30050] device bridge1084 entered promiscuous mode [ 1496.500284][T30060] loop5: p1 p2 p3 < > p4 [ 1496.504801][T30060] loop5: partition table partially beyond EOD, truncated [ 1496.533082][T30060] loop5: p1 start 10 is beyond EOD, truncated [ 1496.575004][T30060] loop5: p2 start 25 is beyond EOD, truncated [ 1496.659773][T30060] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1496.666810][T30060] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:19 executing program 3: [ 1496.812482][T30081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:20 executing program 3: [ 1496.876091][T30091] device syz_tun left promiscuous mode [ 1496.890344][T30084] loop5: p1 p2 p3 < > p4 [ 1496.894887][T30084] loop5: partition table partially beyond EOD, truncated [ 1496.896164][T30091] bridge1084: port 1(syz_tun) entered disabled state [ 1496.926289][T30084] loop5: p1 start 10 is beyond EOD, truncated [ 1496.958993][T30091] bridge1085: port 1(syz_tun) entered blocking state [ 1496.964293][T30084] loop5: p2 start 25 is beyond EOD, truncated 03:18:20 executing program 3: 03:18:20 executing program 3: 03:18:20 executing program 3: [ 1496.967741][T30091] bridge1085: port 1(syz_tun) entered disabled state [ 1496.982311][T30091] device syz_tun entered promiscuous mode [ 1496.991598][T30081] device bridge1085 entered promiscuous mode [ 1496.994586][T30084] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1497.007414][T30084] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1497.014851][T30095] bridge1085: port 1(syz_tun) entered blocking state [ 1497.026319][T30095] bridge1085: port 1(syz_tun) entered forwarding state [ 1497.104118][T30095] device bridge1085 left promiscuous mode [ 1497.140033][T30091] bridge1085: port 1(syz_tun) entered disabled state [ 1497.150628][T30092] loop5: p1 p2 p3 < > p4 [ 1497.156873][T30092] loop5: partition table partially beyond EOD, truncated [ 1497.158404][T30091] device bridge1085 entered promiscuous mode [ 1497.166108][T30092] loop5: p1 start 10 is beyond EOD, truncated [ 1497.180202][T30083] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1497.209718][T30092] loop5: p2 start 25 is beyond EOD, truncated [ 1497.216256][T30092] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x8}, 0x0) 03:18:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa668e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1497.260052][T30092] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:20 executing program 3: 03:18:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bff", 0xfffffffffffffec4, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1497.390456][T30110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:20 executing program 3: [ 1497.453467][T30117] device syz_tun left promiscuous mode [ 1497.461640][T30117] bridge1085: port 1(syz_tun) entered disabled state [ 1497.480106][T30117] bridge1086: port 1(syz_tun) entered blocking state [ 1497.489220][T30117] bridge1086: port 1(syz_tun) entered disabled state [ 1497.500201][T30116] loop5: p1 p2 p3 < > p4 [ 1497.504935][T30116] loop5: partition table partially beyond EOD, truncated [ 1497.520029][T30117] device syz_tun entered promiscuous mode [ 1497.530026][T30116] loop5: p1 start 10 is beyond EOD, truncated [ 1497.541128][T30110] device bridge1086 entered promiscuous mode 03:18:20 executing program 3: [ 1497.557564][T30126] bridge1086: port 1(syz_tun) entered blocking state [ 1497.564736][T30126] bridge1086: port 1(syz_tun) entered forwarding state [ 1497.575515][T30116] loop5: p2 start 25 is beyond EOD, truncated [ 1497.612979][T30126] device bridge1086 left promiscuous mode [ 1497.623033][T30116] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1497.630869][T30117] bridge1086: port 1(syz_tun) entered disabled state [ 1497.642630][T30117] device bridge1086 entered promiscuous mode 03:18:20 executing program 3: 03:18:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0x9}, 0x0) [ 1497.669186][T30116] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:20 executing program 3: [ 1497.816321][T30122] loop5: p1 p2 p3 < > p4 [ 1497.824773][T30122] loop5: partition table partially beyond EOD, truncated [ 1497.834420][T30136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:21 executing program 3: [ 1497.861420][T30122] loop5: p1 start 10 is beyond EOD, truncated [ 1497.871862][T30123] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1497.903868][T30122] loop5: p2 start 25 is beyond EOD, truncated 03:18:21 executing program 3: [ 1497.940669][T30122] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1497.964391][T30140] device syz_tun left promiscuous mode [ 1497.972979][T30140] bridge1086: port 1(syz_tun) entered disabled state 03:18:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa66ce9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1497.989101][T30122] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:21 executing program 3: [ 1498.024911][T30140] bridge1087: port 1(syz_tun) entered blocking state [ 1498.063832][T30140] bridge1087: port 1(syz_tun) entered disabled state 03:18:21 executing program 3: [ 1498.090632][T30140] device syz_tun entered promiscuous mode [ 1498.107350][T30141] device bridge1087 entered promiscuous mode [ 1498.118241][T30136] bridge1087: port 1(syz_tun) entered blocking state [ 1498.125700][T30136] bridge1087: port 1(syz_tun) entered forwarding state 03:18:21 executing program 3: [ 1498.157665][T30136] device bridge1087 left promiscuous mode [ 1498.193789][T30141] device syz_tun left promiscuous mode [ 1498.199517][T30141] bridge1087: port 1(syz_tun) entered disabled state 03:18:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xf, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:21 executing program 3: [ 1498.215634][T30154] loop5: p1 p2 p3 < > p4 [ 1498.225386][T30154] loop5: partition table partially beyond EOD, truncated [ 1498.289032][T30158] device bridge1087 entered promiscuous mode [ 1498.299943][T30154] loop5: p1 start 10 is beyond EOD, truncated [ 1498.351958][T30154] loop5: p2 start 25 is beyond EOD, truncated [ 1498.359309][T30154] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:21 executing program 3: 03:18:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xffffffff0000000f, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xa}, 0x0) [ 1498.395261][T30154] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1498.421496][T30162] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa674e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:21 executing program 3: 03:18:21 executing program 3: [ 1498.585032][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:21 executing program 3: [ 1498.657866][T30180] bridge1088: port 1(syz_tun) entered blocking state [ 1498.671197][T30177] loop5: p1 p2 p3 < > p4 [ 1498.675834][T30177] loop5: partition table partially beyond EOD, truncated [ 1498.702526][T30180] bridge1088: port 1(syz_tun) entered disabled state [ 1498.721247][T30176] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1498.724532][T30177] loop5: p1 start 10 is beyond EOD, truncated 03:18:21 executing program 3: [ 1498.752634][T30180] device syz_tun entered promiscuous mode [ 1498.759773][T30177] loop5: p2 start 25 is beyond EOD, truncated [ 1498.766591][T30177] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1498.775334][T30177] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1498.796606][T30175] device bridge1088 entered promiscuous mode [ 1498.805115][T30184] bridge1088: port 1(syz_tun) entered blocking state [ 1498.813177][T30184] bridge1088: port 1(syz_tun) entered forwarding state 03:18:22 executing program 3: [ 1498.852158][T30184] device bridge1088 left promiscuous mode [ 1498.891584][T30180] bridge1088: port 1(syz_tun) entered disabled state 03:18:22 executing program 3: 03:18:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa67ae9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1498.899827][T30183] loop5: p1 p2 p3 < > p4 [ 1498.904307][T30183] loop5: partition table partially beyond EOD, truncated [ 1498.912691][T30183] loop5: p1 start 10 is beyond EOD, truncated [ 1498.920480][T30183] loop5: p2 start 25 is beyond EOD, truncated [ 1498.927076][T30183] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1498.927440][T30180] device bridge1088 entered promiscuous mode [ 1498.934334][T30183] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:22 executing program 3: 03:18:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xffffffffffff000f, 0x8}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1499.091438][T30175] bridge1088: port 1(syz_tun) entered blocking state [ 1499.098883][T30175] bridge1088: port 1(syz_tun) entered forwarding state [ 1499.117827][T30175] device bridge1088 left promiscuous mode [ 1499.126302][T30203] loop5: p1 p2 p3 < > p4 [ 1499.138236][T30203] loop5: partition table partially beyond EOD, truncated [ 1499.159345][T30203] loop5: p1 start 10 is beyond EOD, truncated 03:18:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xb}, 0x0) 03:18:22 executing program 3: [ 1499.185312][T30203] loop5: p2 start 25 is beyond EOD, truncated [ 1499.234180][T30203] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:22 executing program 3: [ 1499.287389][T30203] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1499.293797][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.354390][T30215] device syz_tun left promiscuous mode [ 1499.365394][T30215] bridge1088: port 1(syz_tun) entered disabled state [ 1499.390125][T30215] bridge1089: port 1(syz_tun) entered blocking state 03:18:22 executing program 3: r0 = socket(0x1c, 0x10000001, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f00000000c0), &(0x7f0000000100)=0x18) [ 1499.413322][T30215] bridge1089: port 1(syz_tun) entered disabled state [ 1499.437043][T30215] device syz_tun entered promiscuous mode [ 1499.443772][T30207] loop5: p1 p2 p3 < > p4 [ 1499.449004][T30207] loop5: partition table partially beyond EOD, truncated [ 1499.454058][T30213] device bridge1089 entered promiscuous mode [ 1499.463667][T30222] bridge1089: port 1(syz_tun) entered blocking state [ 1499.471500][T30222] bridge1089: port 1(syz_tun) entered forwarding state [ 1499.481063][T30222] device bridge1089 left promiscuous mode [ 1499.488907][T30207] loop5: p1 start 10 is beyond EOD, truncated [ 1499.496484][T30207] loop5: p2 start 25 is beyond EOD, truncated [ 1499.503239][T30207] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa6a8e9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1499.507395][T30215] bridge1089: port 1(syz_tun) entered disabled state [ 1499.513832][T30207] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1499.549472][T30215] device bridge1089 entered promiscuous mode 03:18:22 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 1499.589487][T30210] nfs4: Unknown parameter 'net/ip6_mr_cache' 03:18:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xc}, 0x0) 03:18:22 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 1499.670845][T30213] bridge1089: port 1(syz_tun) entered blocking state [ 1499.678369][T30213] bridge1089: port 1(syz_tun) entered forwarding state [ 1499.700534][T30213] device bridge1089 left promiscuous mode 03:18:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x2}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1499.829820][T30242] loop5: p1 p2 p3 < > p4 [ 1499.834508][T30242] loop5: partition table partially beyond EOD, truncated [ 1499.836500][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.852550][T30242] loop5: p1 start 10 is beyond EOD, truncated [ 1499.866368][T30242] loop5: p2 start 25 is beyond EOD, truncated 03:18:23 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) [ 1499.882796][T30242] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1499.897717][T30242] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1499.947429][T30255] device syz_tun left promiscuous mode [ 1499.953717][T30255] bridge1089: port 1(syz_tun) entered disabled state [ 1499.999804][T30249] loop5: p1 p2 p3 < > p4 [ 1499.999809][T30249] loop5: partition table partially beyond EOD, truncated [ 1499.999943][T30249] loop5: p1 start 10 is beyond EOD, truncated [ 1500.022452][T30255] bridge1090: port 1(syz_tun) entered blocking state 03:18:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) [ 1500.056269][T30255] bridge1090: port 1(syz_tun) entered disabled state [ 1500.075195][T30249] loop5: p2 start 25 is beyond EOD, truncated [ 1500.094518][T30255] device syz_tun entered promiscuous mode [ 1500.107240][T30249] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1500.143286][T30249] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1500.153892][T30258] device bridge1090 entered promiscuous mode [ 1500.161711][T30250] bridge1090: port 1(syz_tun) entered blocking state [ 1500.169252][T30250] bridge1090: port 1(syz_tun) entered forwarding state 03:18:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:18:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa6cee9311900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1500.201557][T30267] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1500.212862][T30250] device bridge1090 left promiscuous mode [ 1500.224640][T30255] bridge1090: port 1(syz_tun) entered disabled state [ 1500.250184][T30255] device bridge1090 entered promiscuous mode 03:18:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 03:18:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xd}, 0x0) [ 1500.379794][T30287] loop5: p1 p2 p3 < > p4 [ 1500.384354][T30287] loop5: partition table partially beyond EOD, truncated [ 1500.400526][T30287] loop5: p1 start 10 is beyond EOD, truncated [ 1500.413188][T30287] loop5: p2 start 25 is beyond EOD, truncated 03:18:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x3}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) 03:18:23 executing program 3: r0 = socket(0x1c, 0x1, 0x0) r1 = dup(r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 1500.427165][T30287] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1500.441981][T30287] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1500.493029][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1500.523907][T30297] device syz_tun left promiscuous mode [ 1500.529780][T30297] bridge1090: port 1(syz_tun) entered disabled state [ 1500.541794][T30297] bridge1091: port 1(syz_tun) entered blocking state [ 1500.551685][T30297] bridge1091: port 1(syz_tun) entered disabled state [ 1500.554583][T30290] loop5: p1 p2 p3 < > p4 [ 1500.560232][T30297] device syz_tun entered promiscuous mode [ 1500.600901][T30290] loop5: partition table partially beyond EOD, truncated [ 1500.608218][T30290] loop5: p1 start 10 is beyond EOD, truncated [ 1500.621010][T30297] device bridge1091 entered promiscuous mode [ 1500.627391][T30290] loop5: p2 start 25 is beyond EOD, truncated [ 1500.634340][T30297] bridge1091: port 1(syz_tun) entered blocking state [ 1500.641077][T30297] bridge1091: port 1(syz_tun) entered forwarding state 03:18:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) [ 1500.653261][T30297] device bridge1091 left promiscuous mode [ 1500.668220][T30290] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1500.681937][T30307] bridge1091: port 1(syz_tun) entered disabled state [ 1500.688717][T30307] device bridge1091 entered promiscuous mode [ 1500.711137][T30290] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:23 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 03:18:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa600e90a1900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1500.821796][T30297] bridge1091: port 1(syz_tun) entered blocking state [ 1500.828539][T30297] bridge1091: port 1(syz_tun) entered forwarding state 03:18:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xe}, 0x0) [ 1500.862393][T30297] device bridge1091 left promiscuous mode [ 1500.916464][T30303] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1500.959181][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:18:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10}, 0x0) [ 1501.020676][T30326] loop5: p1 p2 p3 < > p4 [ 1501.025094][T30326] loop5: partition table partially beyond EOD, truncated [ 1501.055789][T30334] device syz_tun left promiscuous mode [ 1501.064751][T30334] bridge1091: port 1(syz_tun) entered disabled state [ 1501.071722][T30326] loop5: p1 start 10 is beyond EOD, truncated [ 1501.084478][T30326] loop5: p2 start 25 is beyond EOD, truncated [ 1501.091394][T30326] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1501.098357][T30326] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1501.109304][T30334] bridge1092: port 1(syz_tun) entered blocking state 03:18:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x80000001}, 0xa0) [ 1501.116646][T30334] bridge1092: port 1(syz_tun) entered disabled state [ 1501.127791][T30334] device syz_tun entered promiscuous mode [ 1501.136219][T30336] device bridge1092 entered promiscuous mode [ 1501.144130][T30328] bridge1092: port 1(syz_tun) entered blocking state [ 1501.150896][T30328] bridge1092: port 1(syz_tun) entered forwarding state 03:18:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="ff81cddb0d28ba6fd11c4c8bfb", 0xfffffffffffffec4, 0x4}, {&(0x7f0000000200)="49a1e8fe00755b4cc5f3348b7087517647f1aa55f4ceb6d9e9667b2750b33db1cc4a", 0x22, 0x81}, {&(0x7f0000000240)="471664c03297ca5ee905ab06ec6b53e3eadd71bcc3ce1a662aef6c9288d8be31aca5001e48e0a51540d5e933e3469385724a76f081f10cbe86d2170bb33b05270ab94f3ab50077f09d4e331c3b3bc460aa69131e94f1cc1b81a77fcf6ba8d2f1eafb7a7504b5d331aaed551e30118609ff2eeb9e634c0f6f81145c972b3e34e10da766482290b23af8c3efab23a11b9b33dced09385f9a78b1ec66d872380f58e197ddf3d162a04abac39a17054e73fd429e2c19c5cafad0093c53b758eede343ff50a144d82c5d6a41b43feb46d70ca1b33592110113060649ae839439f3a71d2bc03af36", 0xe5, 0x6c86ca4d}, {&(0x7f00000003c0)="35b311f820f619949f1d2859fda00a5c130f31fd7ad8b4d46d2db8c25e67145147fdab977bf5636d9670a7ae6c8eac2b565824f7c863941a659952df9839c8282b7e777657f303185e6a326aabf1f2d70a3cc142f7ad76afb7f896bb83d8e518", 0x60, 0x1}, {&(0x7f0000000340)="f0eccef6aaf9794a42ace3c066c49d1375deae614da76d5484503de08ed6cc9682adf64ea78c475a3667ad613012d8d8abeced43c84ca5", 0x37, 0x1}], 0x1200410, &(0x7f00000004c0)={[{'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {',){%%^%!{.+,'}, {'-'}, {']-P{g8}}'}, {'net/ip6_mr_cache\x00'}], [{@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}, {@subj_user={'subj_user', 0x3d, 'net/ip6_mr_cache\x00'}}, {@fsname={'fsname', 0x3d, 'net/ip6_mr_cache\x00'}}]}) [ 1501.176174][T30328] device bridge1092 left promiscuous mode [ 1501.212179][T30334] bridge1092: port 1(syz_tun) entered disabled state [ 1501.221483][T30333] loop5: p1 p2 p3 < > p4 [ 1501.225842][T30333] loop5: partition table partially beyond EOD, truncated [ 1501.251912][T30334] device bridge1092 entered promiscuous mode 03:18:24 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) [ 1501.274631][T30333] loop5: p1 start 10 is beyond EOD, truncated [ 1501.308383][T30333] loop5: p2 start 25 is beyond EOD, truncated [ 1501.344378][T30333] loop5: p3 start 4293001441 is beyond EOD, truncated 03:18:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050801000000080001"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x3f00000000000000, 0x0, 0xf}, 0x0) [ 1501.376694][T30333] loop5: p4 size 3657465856 extends beyond EOD, truncated 03:18:24 executing program 3: r0 = socket(0x2, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 03:18:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa600e95c1900000000000006800000000f000000e100e2ff8773007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:18:24 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0xe0}, 0x0) [ 1501.523794][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1501.548042][T30363] device syz_tun left promiscuous mode [ 1501.554108][T30363] bridge1092: port 1(syz_tun) entered disabled state [ 1501.576878][T30363] bridge1093: port 1(syz_tun) entered blocking state [ 1501.600758][T30355] nfs4: Unknown parameter 'net/ip6_mr_cache' [ 1501.607897][T30363] bridge1093: port 1(syz_tun) entered disabled state 03:18:24 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000240)='`', 0x1, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 1501.637277][T30363] device syz_tun entered promiscuous mode [ 1501.659736][T30374] loop5: p1 p2 p3 < > p4 [ 1501.663867][T30372] device bridge1093 entered promiscuous mode [ 1501.664277][T30374] loop5: partition table partially beyond EOD, truncated [ 1501.679130][T30380] bridge1093: port 1(syz_tun) entered blocking state [ 1501.685985][T30380] bridge1093: port 1(syz_tun) entered forwarding state [ 1501.726945][T30374] loop5: p1 start 10 is beyond EOD, truncated 03:18:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom(r0, 0x0, 0x0, 0x40081, 0x0, 0x0) [ 1501.768882][T30374] loop5: p2 start 25 is beyond EOD, truncated [ 1501.783319][T30380] device bridge1093 left promiscuous mode [ 1501.804268][T30374] loop5: p3 start 4293001441 is beyond EOD, truncated [ 1501.836035][T30372] ================================================================== [ 1501.844583][T30372] BUG: KCSAN: data-race in netlink_getname / netlink_insert [ 1501.851862][T30372] [ 1501.851869][T30374] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1501.854212][T30372] write to 0xffff88804dea32f8 of 4 bytes by task 30363 on cpu 0: [ 1501.854229][T30372] netlink_insert+0xe8/0x8f0 [ 1501.854247][T30372] netlink_autobind+0xa9/0x150 [ 1501.878387][T30372] netlink_sendmsg+0x46f/0x7a0 [ 1501.883268][T30372] ____sys_sendmsg+0x360/0x4d0 [ 1501.888057][T30372] __sys_sendmsg+0x1df/0x260 [ 1501.892650][T30372] __x64_sys_sendmsg+0x42/0x50 [ 1501.897413][T30372] do_syscall_64+0x39/0x80 [ 1501.901837][T30372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1501.907710][T30372] [ 1501.910034][T30372] read to 0xffff88804dea32f8 of 4 bytes by task 30372 on cpu 1: [ 1501.917666][T30372] netlink_getname+0xbb/0x180 [ 1501.922342][T30372] __sys_getsockname+0x10a/0x1b0 [ 1501.927521][T30372] __x64_sys_getsockname+0x3e/0x50 [ 1501.932729][T30372] do_syscall_64+0x39/0x80 [ 1501.937146][T30372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1501.943022][T30372] [ 1501.945339][T30372] Reported by Kernel Concurrency Sanitizer on: [ 1501.951758][T30372] CPU: 1 PID: 30372 Comm: syz-executor.0 Not tainted 5.9.0-rc6-syzkaller #0 [ 1501.960513][T30372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.970558][T30372] ================================================================== [ 1501.978788][T30372] Kernel panic - not syncing: panic_on_warn set ... [ 1501.985375][T30372] CPU: 1 PID: 30372 Comm: syz-executor.0 Not tainted 5.9.0-rc6-syzkaller #0 [ 1501.994050][T30372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.004102][T30372] Call Trace: [ 1502.007512][T30372] dump_stack+0x10f/0x19d [ 1502.011848][T30372] panic+0x207/0x64a [ 1502.015754][T30372] ? vprintk_emit+0x44a/0x4f0 [ 1502.020438][T30372] kcsan_report+0x684/0x690 [ 1502.024950][T30372] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 1502.030502][T30372] ? netlink_getname+0xbb/0x180 [ 1502.035360][T30372] ? __sys_getsockname+0x10a/0x1b0 [ 1502.040806][T30372] ? __x64_sys_getsockname+0x3e/0x50 [ 1502.046273][T30372] ? do_syscall_64+0x39/0x80 [ 1502.051482][T30372] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1502.057573][T30372] ? security_file_alloc+0x30/0x190 [ 1502.062786][T30372] kcsan_setup_watchpoint+0x41e/0x4a0 [ 1502.068169][T30372] netlink_getname+0xbb/0x180 [ 1502.072850][T30372] __sys_getsockname+0x10a/0x1b0 [ 1502.077793][T30372] ? set_normalized_timespec64+0x104/0x130 [ 1502.083611][T30372] ? check_preemption_disabled+0x51/0x140 [ 1502.089334][T30372] ? debug_smp_processor_id+0x18/0x20 [ 1502.094874][T30372] ? fpregs_assert_state_consistent+0x7e/0x90 [ 1502.100952][T30372] __x64_sys_getsockname+0x3e/0x50 [ 1502.107294][T30372] do_syscall_64+0x39/0x80 [ 1502.111716][T30372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1502.117996][T30372] RIP: 0033:0x45e179 [ 1502.121916][T30372] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1502.141520][T30372] RSP: 002b:00007f0281b15c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 1502.149930][T30372] RAX: ffffffffffffffda RBX: 0000000000004980 RCX: 000000000045e179 [ 1502.157905][T30372] RDX: 0000000020000200 RSI: 0000000020000100 RDI: 0000000000000007 [ 1502.165878][T30372] RBP: 000000000118d028 R08: 0000000000000000 R09: 0000000000000000 [ 1502.174004][T30372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cff4 [ 1502.181976][T30372] R13: 00007fff78058c8f R14: 00007f0281b169c0 R15: 000000000118cff4 [ 1502.191642][T30372] Kernel Offset: disabled [ 1502.195964][T30372] Rebooting in 86400 seconds..