, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) 07:49:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0xfffffffffffffffc) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48014) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c00)=ANY=[@ANYBLOB="0000060000000000000000001000f5ff0200100100000000c2006b00000000001000000006000000ffffff7f00000000fe030000000000f9775d6f5e00000067e8b35d0001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) 07:49:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) [ 363.665703][T23626] loop5: detected capacity change from 0 to 512 [ 363.701933][T23626] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value 07:49:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0xfffffffffffffffc) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48014) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c00)=ANY=[@ANYBLOB="0000060000000000000000001000f5ff0200100100000000c2006b00000000001000000006000000ffffff7f00000000fe030000000000f9775d6f5e00000067e8b35d0001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 363.724652][T23626] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 363.739690][T23640] selinux_netlink_send: 10 callbacks suppressed [ 363.739703][T23640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23640 comm=syz-executor.0 [ 363.809963][T23651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23651 comm=syz-executor.1 07:49:29 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x26004080) [ 364.297012][T23657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23657 comm=syz-executor.3 07:49:29 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:29 executing program 2: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0xfffffffffffffffc) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0xfffffffffffffffc) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48014) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c00)=ANY=[@ANYBLOB="0000060000000000000000001000f5ff0200100100000000c2006b00000000001000000006000000ffffff7f00000000fe030000000000f9775d6f5e00000067e8b35d0001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:29 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) r2 = eventfd2(0x7, 0x801) fsetxattr$security_ima(r2, &(0x7f0000000140), 0xfffffffffffffffe, 0x0, 0x2) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000001c0)) ftruncate(r1, 0x2006fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async, rerun: 64) r3 = io_uring_setup(0x34b5, &(0x7f0000000080)={0x0, 0xfd50, 0x400, 0x0, 0x10b, 0x0, r1}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x21181a47b39bf63c, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noextend,version=9p2000.u,uname=,,fsname=ext4\x00,audit,fowner<', @ANYRESDEC=r4, @ANYBLOB=',audaise,\x00'/22]) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10010, r1, 0x8000000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f0000000940)=@IORING_OP_FILES_UPDATE={0x14, 0x6c, 0x0, 0x0, 0x7, &(0x7f0000000900)=[r6], 0x1, 0x0, 0x585ec66193648227}, 0x2) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:29 executing program 4: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x4f1df48ee4882b83) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd703f2500cbdbdf255e00000a043ab00ef10500ff00000ca0000400000001ff7f00000000006365c07037e57fe5ebf4051e7ab4838c79d14d5adbe5894befdd8b523e0a45e0afc5d8e1e9a5077371cbdcc344891b35f4fb092786cf84c75fa70bf375c63424bdfee209968830cc867e5e0c900af4fa6b32369017f0d10f", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00038000000050019010b000000fffffffffffffff90800a100040000000f0e2db42147c536afedb35922d0"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001093c9c31c7000e00010008e10b000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x38, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48080) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001d40)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x4f1df48ee4882b83) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd703f2500cbdbdf255e00000a043ab00ef10500ff00000ca0000400000001ff7f00000000006365c07037e57fe5ebf4051e7ab4838c79d14d5adbe5894befdd8b523e0a45e0afc5d8e1e9a5077371cbdcc344891b35f4fb092786cf84c75fa70bf375c63424bdfee209968830cc867e5e0c900af4fa6b32369017f0d10f", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00038000000050019010b000000fffffffffffffff90800a100040000000f0e2db42147c536afedb35922d0"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001093c9c31c7000e00010008e10b000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 32) epoll_create(0x6) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x38, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48080) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 32) r7 = syz_io_uring_complete(0x0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001d40)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:29 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$incfs(r0, &(0x7f0000000400)='.pending_reads\x00', 0x102040, 0x2) sendto$inet6(r3, &(0x7f0000000440)="e875664ae34abc8d8ad4936ba616cbb3e11f56a65630", 0x16, 0x20044084, &(0x7f0000000900)={0xa, 0x4e22, 0x800, @loopback, 0x7f}, 0x1c) ftruncate(r2, 0x2006fff) close(r1) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r5, 0x1) r6 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r6, 0x8, r5, 0x0) r7 = getpgrp(0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r8, 0x1) r9 = syz_clone3(0x0, 0x0) r10 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000940)=0x200) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r9, 0x8, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './bus\x00'}) syz_clone3(&(0x7f0000000240)={0x8a0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/95, 0x5f, &(0x7f0000000340)=""/149, &(0x7f0000000140)=[0x0, r6, 0x0, 0xffffffffffffffff, r7, r9], 0x6, {r11}}, 0x58) sendfile(r1, r1, 0x0, 0x205000) 07:49:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x4f1df48ee4882b83) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd703f2500cbdbdf255e00000a043ab00ef10500ff00000ca0000400000001ff7f00000000006365c07037e57fe5ebf4051e7ab4838c79d14d5adbe5894befdd8b523e0a45e0afc5d8e1e9a5077371cbdcc344891b35f4fb092786cf84c75fa70bf375c63424bdfee209968830cc867e5e0c900af4fa6b32369017f0d10f", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00038000000050019010b000000fffffffffffffff90800a100040000000f0e2db42147c536afedb35922d0"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001093c9c31c7000e00010008e10b000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x38, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48080) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001d40)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001d40)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 364.612544][T23681] loop5: detected capacity change from 0 to 512 [ 364.620216][T23686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23686 comm=syz-executor.0 [ 364.636850][T23681] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 364.651579][T23691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23691 comm=syz-executor.1 [ 364.651785][T23681] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 364.703118][T23693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23693 comm=syz-executor.4 07:49:30 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40047602, &(0x7f0000000000)=0xe93) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="8d0c0000a228e990afaf851b02b3eb44517e0f7eed4bd28e579e943e1115c388a60a86057c728b9cf300000000a3b561e200000414005ae6809fcb46610885ae77df56f76582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb554a4c6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r6, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa05580100010000000500010000001a0000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES8=r4, @ANYRES16=0x0, @ANYBLOB="010026bd70a8180501000000000000000a043ab00efc51e84c470c753e000bcc00e80180000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r5, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r8 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r9 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r10 = dup(r9) pread64(r10, 0x0, 0x2, 0x0) mq_timedreceive(r10, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 365.143119][T23699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23699 comm=syz-executor.3 07:49:30 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:30 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r3 = openat$incfs(r0, &(0x7f0000000400)='.pending_reads\x00', 0x102040, 0x2) sendto$inet6(r3, &(0x7f0000000440)="e875664ae34abc8d8ad4936ba616cbb3e11f56a65630", 0x16, 0x20044084, &(0x7f0000000900)={0xa, 0x4e22, 0x800, @loopback, 0x7f}, 0x1c) ftruncate(r2, 0x2006fff) (async) close(r1) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r5, 0x1) r6 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r6, 0x8, r5, 0x0) r7 = getpgrp(0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r8, 0x1) r9 = syz_clone3(0x0, 0x0) (async) r10 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000940)=0x200) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r9, 0x8, r8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './bus\x00'}) syz_clone3(&(0x7f0000000240)={0x8a0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/95, 0x5f, &(0x7f0000000340)=""/149, &(0x7f0000000140)=[0x0, r6, 0x0, 0xffffffffffffffff, r7, r9], 0x6, {r11}}, 0x58) (async) sendfile(r1, r1, 0x0, 0x205000) 07:49:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40047602, &(0x7f0000000000)=0xe93) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="8d0c0000a228e990afaf851b02b3eb44517e0f7eed4bd28e579e943e1115c388a60a86057c728b9cf300000000a3b561e200000414005ae6809fcb46610885ae77df56f76582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb554a4c6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r6, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa05580100010000000500010000001a0000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES8=r4, @ANYRES16=0x0, @ANYBLOB="010026bd70a8180501000000000000000a043ab00efc51e84c470c753e000bcc00e80180000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r5, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r8 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r9 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r10 = dup(r9) pread64(r10, 0x0, 0x2, 0x0) mq_timedreceive(r10, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r5, 0x40047602, &(0x7f0000000000)=0xe93) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="8d0c0000a228e990afaf851b02b3eb44517e0f7eed4bd28e579e943e1115c388a60a86057c728b9cf300000000a3b561e200000414005ae6809fcb46610885ae77df56f76582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb554a4c6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r6, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa05580100010000000500010000001a0000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES8=r4, @ANYRES16=0x0, @ANYBLOB="010026bd70a8180501000000000000000a043ab00efc51e84c470c753e000bcc00e80180000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r5, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r8 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r9 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r10 = dup(r9) pread64(r10, 0x0, 0x2, 0x0) (async) mq_timedreceive(r10, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="d50938198c63464b82c2bce1bf765dc86df523f33ed02f2d91b75484d2f6833467d81e8f51c89fb9b1d1778b55135f1839f8806d42a312cc7ed4dc4fabb64345f517196fc204", 0x46}, {&(0x7f00000000c0)="7ee528d2e139a5e7b8aa11e0b8a7e4cf9793d1848adfdad8817530f2fbb619959baeea2689d4511fa1e203555b637de3e5fc63d6afdeeb9a862ce29a8b429c2b602c432f787e2fdfd22726ed79bf71e6e5f03a2766a28863f4f80bd2af04930de492ad83c1091ea8474007368c79f3ef04b65b8cdde34805641ef6a68e5a989e7be7d6e9dc7219aef07633ddfc0a59c06f929064feeaeafb0281dfc433ad72fa7370f7b47003ac73ab0a2c8e", 0xac}, {&(0x7f0000000340)="763f04045cdea11b1086ace0910c2aefa7fcd7107fdf5334c76f2d73221e0d25fc944334a8e1f99c1c1114e1dea5c240abfd7f4ee5697392406ea9d0e462802af7ac918c6dadcc37d3ff448d9e42a078f411cdbebe6aca983769543a6e03530bc0fcf3d1602b06d2d0f528a38247c69bc03809959056432eba06e28989db0773db931bd1b4d16b7bf5c5accec613ef5fe35951fc38ede6eee5e00b55400a79a26445017b73395e45", 0xa8}, {&(0x7f0000000900)="ecba91b0981c0cb347d698ccf330acb9f803d7f6bd4cf02f5d7f27af1f538cad6dbf9bdd94a830e776583c838ae54a6a22f6a69ae90ead5eaa32f301c75a4b5cfa8ecb9afbb4238513a1a3e38ef2662340ac2dac11bdcf7d91f131a0be726046e774d37155f78606d9db0844cd737a2b0feb3c7faf14434ba596bf255bb5f5cafe119cd33c4bc7e01607ccb7ae0800fb715e", 0x92}], 0x4, 0xffff, 0xe3c, 0x8) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x6, 0xc7, &(0x7f0000001b80)=""/199, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="6cfd0ea252943d9449cc0200001000010400"/29, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x26c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f037865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001f00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000511dc81878f25e01000000000000806cda6125be7194477c7b75fb895ca621486936fb5b1acb1968b9a9695ee2a37a7bc73b390725cb1b774cb5cd1372d2f097bad7fabd8865be13068531d3fa07c990d6f8d4d349f394369b55fb35772a342f3f0b096e55ed4f1dc09d31bf2bdb8425f34972858044dc68f3a89039aff05bd2c51978b492fc83fc25b78c1d42c64511761c84b761d9653b7cf5fecb9b75b6493435feffbdfeee5c59c75b42b26130b3abb0ac6465144fbca604f13aa2d601cc9ac9aa25a88970a3a841483513"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 365.391028][T23705] loop5: detected capacity change from 0 to 512 [ 365.404453][T23705] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 365.419312][T23705] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x6, 0xc7, &(0x7f0000001b80)=""/199, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="6cfd0ea252943d9449cc0200001000010400"/29, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x26c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (rerun: 32) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 64) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f037865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001f00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000511dc81878f25e01000000000000806cda6125be7194477c7b75fb895ca621486936fb5b1acb1968b9a9695ee2a37a7bc73b390725cb1b774cb5cd1372d2f097bad7fabd8865be13068531d3fa07c990d6f8d4d349f394369b55fb35772a342f3f0b096e55ed4f1dc09d31bf2bdb8425f34972858044dc68f3a89039aff05bd2c51978b492fc83fc25b78c1d42c64511761c84b761d9653b7cf5fecb9b75b6493435feffbdfeee5c59c75b42b26130b3abb0ac6465144fbca604f13aa2d601cc9ac9aa25a88970a3a841483513"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 64) syz_io_uring_complete(0x0) (async, rerun: 64) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async, rerun: 32) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (rerun: 32) 07:49:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$incfs(r0, &(0x7f0000000400)='.pending_reads\x00', 0x102040, 0x2) sendto$inet6(r3, &(0x7f0000000440)="e875664ae34abc8d8ad4936ba616cbb3e11f56a65630", 0x16, 0x20044084, &(0x7f0000000900)={0xa, 0x4e22, 0x800, @loopback, 0x7f}, 0x1c) (async) ftruncate(r2, 0x2006fff) (async) close(r1) (async) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r5, 0x1) r6 = syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r6, 0x8, r5, 0x0) r7 = getpgrp(0xffffffffffffffff) (async) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x9, 0x5, 0x1f, 0x8, 0x0, 0x8, 0x20008, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x1}, 0x80800, 0x2d6, 0x5, 0x1, 0xf8, 0x2, 0x200, 0x0, 0x4, 0x0, 0x4de}, 0x0, 0x3, r8, 0x1) r9 = syz_clone3(0x0, 0x0) (async) r10 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000940)=0x200) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x1, 0x0, 0x64, 0x0, 0x3, 0x40080, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x5, 0x2}, 0x80000, 0x4e97, 0x8, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3}, r9, 0x8, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './bus\x00'}) syz_clone3(&(0x7f0000000240)={0x8a0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/95, 0x5f, &(0x7f0000000340)=""/149, &(0x7f0000000140)=[0x0, r6, 0x0, 0xffffffffffffffff, r7, r9], 0x6, {r11}}, 0x58) sendfile(r1, r1, 0x0, 0x205000) 07:49:30 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 365.444694][T23725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23725 comm=syz-executor.0 [ 365.468128][T23728] loop4: detected capacity change from 0 to 512 [ 365.485026][T23728] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 365.499775][T23735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23735 comm=syz-executor.1 [ 365.514579][T23728] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 365.525249][T23739] loop5: detected capacity change from 0 to 512 [ 365.535994][T23739] EXT4-fs: failed to create workqueue [ 365.541402][T23739] EXT4-fs (loop5): mount failed [ 365.569925][T23746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23746 comm=syz-executor.0 07:49:30 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x6, 0xc7, &(0x7f0000001b80)=""/199, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x6, 0xc7, &(0x7f0000001b80)=""/199, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="6cfd0ea252943d9449cc0200001000010400"/29, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000ec011680100001800c000900080000003f0000007c0001800c00030004000000e0ffffff0c000700eb050000f8ffffff0c000400010000007f00000014000b00290e000000000000ffffffff000000000c000500060000000000008018000c8014000100040000008f0b00000900000081000000100006000400000007000000010000000c00090000feffff050000006c00018068000c801400010000000000720000006317000088a800001400010000000010a00000003004000088a800001400010000020000fa0d0000018000000000000014000100040000007c0400000100010088a8000025000100000000001d0500000400000088a800006c00018054000c80140001003f000000d20a0000060000008100000014000100010000805d0f0000d886000088a800001400010001000000060e00000500000088a800001400010001000000980f0000060000008100000014000a000bc800000000000007000000000000003400018014000a000000000000000000090000000000000010000600ffffffff01000000010000000c0003004e0e0000000001005000018010000200010000005e0e0000090000002800010006000000ffffffffffff000000000000000000000000000000000000000000000000000014000b000500000000000000feffffffffffffff2c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x26c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f037865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001f00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000511dc81878f25e01000000000000806cda6125be7194477c7b75fb895ca621486936fb5b1acb1968b9a9695ee2a37a7bc73b390725cb1b774cb5cd1372d2f097bad7fabd8865be13068531d3fa07c990d6f8d4d349f394369b55fb35772a342f3f0b096e55ed4f1dc09d31bf2bdb8425f34972858044dc68f3a89039aff05bd2c51978b492fc83fc25b78c1d42c64511761c84b761d9653b7cf5fecb9b75b6493435feffbdfeee5c59c75b42b26130b3abb0ac6465144fbca604f13aa2d601cc9ac9aa25a88970a3a841483513"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r7) (async) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:31 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x4, 0xfffffffd) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dvb_usb_nova_t_usb2', 0x8000, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x1, 0x3, 0x2, 0x3}}, 0x2e) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:31 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001c80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6853567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000116b7376e5670c37e3af9e21c40c04269c52472272bc9df51e10f89eeb078c3666d8472892f6", @ANYRESOCT=r1, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="d50938198c63464b82c2bce1bf765dc86df523f33ed02f2d91b75484d2f6833467d81e8f51c89fb9b1d1778b55135f1839f8806d42a312cc7ed4dc4fabb64345f517196fc204", 0x46}, {&(0x7f00000000c0)="7ee528d2e139a5e7b8aa11e0b8a7e4cf9793d1848adfdad8817530f2fbb619959baeea2689d4511fa1e203555b637de3e5fc63d6afdeeb9a862ce29a8b429c2b602c432f787e2fdfd22726ed79bf71e6e5f03a2766a28863f4f80bd2af04930de492ad83c1091ea8474007368c79f3ef04b65b8cdde34805641ef6a68e5a989e7be7d6e9dc7219aef07633ddfc0a59c06f929064feeaeafb0281dfc433ad72fa7370f7b47003ac73ab0a2c8e", 0xac}, {&(0x7f0000000340)="763f04045cdea11b1086ace0910c2aefa7fcd7107fdf5334c76f2d73221e0d25fc944334a8e1f99c1c1114e1dea5c240abfd7f4ee5697392406ea9d0e462802af7ac918c6dadcc37d3ff448d9e42a078f411cdbebe6aca983769543a6e03530bc0fcf3d1602b06d2d0f528a38247c69bc03809959056432eba06e28989db0773db931bd1b4d16b7bf5c5accec613ef5fe35951fc38ede6eee5e00b55400a79a26445017b73395e45", 0xa8}, {&(0x7f0000000900)="ecba91b0981c0cb347d698ccf330acb9f803d7f6bd4cf02f5d7f27af1f538cad6dbf9bdd94a830e776583c838ae54a6a22f6a69ae90ead5eaa32f301c75a4b5cfa8ecb9afbb4238513a1a3e38ef2662340ac2dac11bdcf7d91f131a0be726046e774d37155f78606d9db0844cd737a2b0feb3c7faf14434ba596bf255bb5f5cafe119cd33c4bc7e01607ccb7ae0800fb715e", 0x92}], 0x4, 0xffff, 0xe3c, 0x8) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001c80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6853567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000116b7376e5670c37e3af9e21c40c04269c52472272bc9df51e10f89eeb078c3666d8472892f6", @ANYRESOCT=r1, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001c80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6853567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000116b7376e5670c37e3af9e21c40c04269c52472272bc9df51e10f89eeb078c3666d8472892f6", @ANYRESOCT=r1, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 366.236045][T23760] loop4: detected capacity change from 0 to 512 [ 366.250097][T23761] loop5: detected capacity change from 0 to 512 [ 366.267865][T23760] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value 07:49:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_CHAIN={0x0, 0xb, 0x440}]}, 0xfffffffffffffd95}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000001b80)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b0\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd3E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a%\xab\xd7\xebP\xad\"\xb4\xd5D]\xe0P\xaa\x1a\x88i\t\xce\xc9\x1bF\x15\a\xb8\xd5\xf6\x14|\xf5\xe2\xbe\x13\xdd\x915c(\xeeua\xf1\xd6\x82n\xeb\x8f\x13{r\x02\xcc \xb8\xab\xccj{\xed\x1e\x97\xfb\\\xe8\xa0\xca\xef\x803\xe2\xf1&\x9e\xa8\x18\x0f\xd3\xa2\xbe>>s>\xfc\x9d\x8d\\4\x1c\x99\aV\x99SG\xf5v\xb7\xab\x97\xae\xcd\xcd{\xd2\x13\xc8\x8c\xe1\xb1\x85gg\xa9\xed\x10\x9c>s>\xfc\x9d\x8d\\4\x1c\x99\aV\x99SG\xf5v\xb7\xab\x97\xae\xcd\xcd{\xd2\x13\xc8\x8c\xe1\xb1\x85gg\xa9\xed\x10\x9c\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd3E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a%\xab\xd7\xebP\xad\"\xb4\xd5D]\xe0P\xaa\x1a\x88i\t\xce\xc9\x1bF\x15\a\xb8\xd5\xf6\x14|\xf5\xe2\xbe\x13\xdd\x915c(\xeeua\xf1\xd6\x82n\xeb\x8f\x13{r\x02\xcc \xb8\xab\xccj{\xed\x1e\x97\xfb\\\xe8\xa0\xca\xef\x803\xe2\xf1&\x9e\xa8\x18\x0f\xd3\xa2\xbe>>s>\xfc\x9d\x8d\\4\x1c\x99\aV\x99SG\xf5v\xb7\xab\x97\xae\xcd\xcd{\xd2\x13\xc8\x8c\xe1\xb1\x85gg\xa9\xed\x10\x9c0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_CHAIN={0x0, 0xb, 0x440}]}, 0xfffffffffffffd95}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000001b80)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b0\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd3E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a%\xab\xd7\xebP\xad\"\xb4\xd5D]\xe0P\xaa\x1a\x88i\t\xce\xc9\x1bF\x15\a\xb8\xd5\xf6\x14|\xf5\xe2\xbe\x13\xdd\x915c(\xeeua\xf1\xd6\x82n\xeb\x8f\x13{r\x02\xcc \xb8\xab\xccj{\xed\x1e\x97\xfb\\\xe8\xa0\xca\xef\x803\xe2\xf1&\x9e\xa8\x18\x0f\xd3\xa2\xbe>>s>\xfc\x9d\x8d\\4\x1c\x99\aV\x99SG\xf5v\xb7\xab\x97\xae\xcd\xcd{\xd2\x13\xc8\x8c\xe1\xb1\x85gg\xa9\xed\x10\x9c0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x4, 0xfffffffd) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) ftruncate(r1, 0x2006fff) (async, rerun: 32) close(r0) (async) r2 = socket$inet(0x2, 0x3, 0x33) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dvb_usb_nova_t_usb2', 0x8000, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) (async) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x1, 0x3, 0x2, 0x3}}, 0x2e) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:32 executing program 4: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:32 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="8c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/395, @ANYRES32=0x0, @ANYBLOB="03d33dc0a956d1773736f91c37e13f98d8d0060da6557aae60aca6fd1a90ca5c81e3"], 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:32 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) close(r1) fcntl$setstatus(r0, 0x4, 0x4000) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="8c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="495800000000000008000f0068000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c000280060002000005e4dc0000020503000000060002000100000008002c0000800000140035006376e80001000000000000000000000008000500ce4cbef169c4d739eb9e94aa444d1ec3439b1f9ecfb5c177c58a304cc517dccab0b4b21a7b0c0d7630eba044dc60fb5fe09e1a693195afc11a17d6933e2f910279695d19f5e9dcdd44f802b71bc01653a782c3253f085c81685b16465ff63b379f7f316e0e8ca85d5132aa97c10c8b0a549a58524760dbb57828288a5ac7354aa26d678adb932dce25af4e3500bf0cb010d4f1f32467a1fde6d779f3bca6677aabc5766b2fdaa97319f28abde98dd7b8b3ea179868b1e54a1f99f18a02be58044647c66a325b7f30b4c4675b21436a365385c35915f6354735ce6bd496c4cf04c0fc1391d969c1183da3f3fcf26989bab5fa153ad7b5a41bc24ea3f8432fdd2ae01e34280294db4f57f999c79dc1d700"/395, @ANYRES32=0x0, @ANYBLOB="03d33dc0a956d1773736f91c37e13f98d8d0060da6557aae60aca6fd1a90ca5c81e3"], 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 367.108173][T23805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.146428][T23817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="8c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/395, @ANYRES32=0x0, @ANYBLOB="03d33dc0a956d1773736f91c37e13f98d8d0060da6557aae60aca6fd1a90ca5c81e3"], 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 32) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_EVENT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9c}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 367.157718][T23820] loop5: detected capacity change from 0 to 512 [ 367.173144][T23820] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 367.175183][T23825] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_EVENT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9c}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 367.189328][T23820] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:32 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_EVENT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9c}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_EVENT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9c}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) (async) close(r1) (async, rerun: 32) fcntl$setstatus(r0, 0x4, 0x4000) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) 07:49:33 executing program 4: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000005c0)=""/181, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000005c0)=""/181, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (rerun: 64) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async, rerun: 64) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 32) r6 = syz_io_uring_complete(0x0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async, rerun: 32) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (rerun: 32) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xb5, &(0x7f00000005c0)=""/181, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async, rerun: 32) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) close(r1) fcntl$setstatus(r0, 0x4, 0x4000) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x2006fff) (async) close(r1) (async) fcntl$setstatus(r0, 0x4, 0x4000) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) (async) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 367.986176][T23852] loop5: detected capacity change from 0 to 512 [ 367.997215][T23852] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 368.012095][T23852] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async, rerun: 64) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (rerun: 64) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async, rerun: 64) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 368.061874][T23877] loop5: detected capacity change from 0 to 512 [ 368.070541][T23877] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 368.088529][T23877] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:33 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001b80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fdd9df2500010000cb", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ff1f008000000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fcdbdf25070000000000000001000000050013000300000006000300050000000500ff7f0000000091b86e90f266125f2d8846f62b1dd510cc306f2589c09b916331b515fb7dc53b882e8d8efbba2893a245e7503cb62e21ee4f8b9fe8de8e06032f51d10f587ab996dc80ea59e368b44e6913bf6bddabbf7bf7049bdb8b1d20c892dc48ecae837e1c462bd8abeb7cc28095555135081d96fe9a04dd54dfb0406fea29eee42b0be988b5c204cbe476ac55062bacdaaf0c551a750cadc53ea1de919d9b1ad0ed5f90a983385b6723f100468ee62f4760683924d836f37bffc0805335054ed34200123d0529cd32072171e618a80c6f7a44842abee54e0f9a9c6fe6930fcf77d92a2d1d6a303237ab"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x4094, 0x8001, 0x8000000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0xfffffffffffffbfe, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x6, 0x15, 0x7, 0x0, 0x2, 0x230, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0xdd28}, 0x248, 0x1400000000, 0x6ff, 0x1, 0x1, 0x46309df7, 0x8, 0x0, 0x1, 0x0, 0x5396}, 0x0, 0x9, r0, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:33 executing program 4: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001b80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fdd9df2500010000cb", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ff1f008000000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fcdbdf25070000000000000001000000050013000300000006000300050000000500ff7f0000000091b86e90f266125f2d8846f62b1dd510cc306f2589c09b916331b515fb7dc53b882e8d8efbba2893a245e7503cb62e21ee4f8b9fe8de8e06032f51d10f587ab996dc80ea59e368b44e6913bf6bddabbf7bf7049bdb8b1d20c892dc48ecae837e1c462bd8abeb7cc28095555135081d96fe9a04dd54dfb0406fea29eee42b0be988b5c204cbe476ac55062bacdaaf0c551a750cadc53ea1de919d9b1ad0ed5f90a983385b6723f100468ee62f4760683924d836f37bffc0805335054ed34200123d0529cd32072171e618a80c6f7a44842abee54e0f9a9c6fe6930fcf77d92a2d1d6a303237ab"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001b80)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fdd9df2500010000cb", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ff1f008000000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ff1f008000000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 368.841829][T23912] loop5: detected capacity change from 0 to 512 [ 368.877546][T23912] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f0000001cc0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x42202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004100}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000", @ANYRESHEX, @ANYRES8=r5], 0x48}}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f0000001cc0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x42202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004100}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000", @ANYRESHEX, @ANYRES8=r5], 0x48}}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:34 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 368.895557][T23912] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 368.921901][T23931] selinux_netlink_send: 12 callbacks suppressed [ 368.921915][T23931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23931 comm=syz-executor.0 [ 368.970850][T23940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23940 comm=syz-executor.4 [ 368.984719][T23941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23941 comm=syz-executor.1 [ 369.015790][T23942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23942 comm=syz-executor.0 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f0000001cc0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x42202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004100}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (rerun: 32) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000", @ANYRESHEX, @ANYRES8=r5], 0x48}}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000320050000080500040002000000332611e0266c1641ab187f1c511778fa61947c594de92309c93c4dde71fdaefecf3be135a6c871f719ea7d4acf1af9508b8ec46c9b4b7c54e22ec45477641b8361681e664748d7c64e30f0b33a854c5c4da4d5c95eeab04914d2c82b47ff3be270d7b5224dbc00a5630aa08a7b8f2e471a83459a3936fffff83aee53c139850688145f445c3cbc680000000000000000000031130ae65a593082ed5fc61adcb1cc32549bce4a2f96c3570ab6497c79fea529a165b72d140ca7253b8bc1240becf49dd3247b88cfd010e6ef1c54bf3dfb8b61b05f28ab8e573839a33d34c13361151a6c848ba1c88af235d498bde7ac71899ecc56a796"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x4094, 0x8001, 0x8000000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0xfffffffffffffbfe, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x6, 0x15, 0x7, 0x0, 0x2, 0x230, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0xdd28}, 0x248, 0x1400000000, 0x6ff, 0x1, 0x1, 0x46309df7, 0x8, 0x0, 0x1, 0x0, 0x5396}, 0x0, 0x9, r0, 0x8) (async, rerun: 32) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) ftruncate(r2, 0x2006fff) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) 07:49:34 executing program 3: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 369.393898][T23956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23956 comm=syz-executor.3 07:49:34 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x4094, 0x8001, 0x8000000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0xfffffffffffffbfe, 0xffffffffffffffff, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x6, 0x15, 0x7, 0x0, 0x2, 0x230, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0xdd28}, 0x248, 0x1400000000, 0x6ff, 0x1, 0x1, 0x46309df7, 0x8, 0x0, 0x1, 0x0, 0x5396}, 0x0, 0x9, r0, 0x8) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x2006fff) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:34 executing program 1: mount$9p_xen(0x0, 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 1) 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="9400000010000104000000000000000000000000737a9c14877a332b947cccc0f37584f31bff412c3e814b45f60c5814bbf1846d98b70c8fa6c1f0714bd9f5048376b67e160fe474e9132dc80192bf3e8affd2de619881ddae7e83f8f0157ab633ee39231d6682eef5c0934805d6f448830b3b93ed5a52bdad337d9baa9f8d5495d908b18feaf75a7276", @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="9400000010000104000000000000000000000000737a9c14877a332b947cccc0f37584f31bff412c3e814b45f60c5814bbf1846d98b70c8fa6c1f0714bd9f5048376b67e160fe474e9132dc80192bf3e8affd2de619881ddae7e83f8f0157ab633ee39231d6682eef5c0934805d6f448830b3b93ed5a52bdad337d9baa9f8d5495d908b18feaf75a7276", @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 369.718735][T23961] loop5: detected capacity change from 0 to 512 [ 369.730144][T23963] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.731123][T23966] FAULT_INJECTION: forcing a failure. [ 369.731123][T23966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.752608][T23966] CPU: 1 PID: 23966 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 07:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="9400000010000104000000000000000000000000737a9c14877a332b947cccc0f37584f31bff412c3e814b45f60c5814bbf1846d98b70c8fa6c1f0714bd9f5048376b67e160fe474e9132dc80192bf3e8affd2de619881ddae7e83f8f0157ab633ee39231d6682eef5c0934805d6f448830b3b93ed5a52bdad337d9baa9f8d5495d908b18feaf75a7276", @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 369.757491][T23969] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.763058][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 369.763071][T23966] Call Trace: [ 369.763076][T23966] [ 369.781124][T23961] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 369.782486][T23966] dump_stack_lvl+0xda/0x130 [ 369.782510][T23966] dump_stack+0x15/0x20 [ 369.787152][T23961] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 369.788676][T23966] should_fail_ex+0x21f/0x230 [ 369.823873][T23980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23980 comm=syz-executor.1 [ 369.828329][T23966] should_fail+0xb/0x10 [ 369.828354][T23966] should_fail_usercopy+0x1a/0x20 [ 369.828375][T23966] _copy_from_user+0x1e/0xd0 [ 369.855008][T23966] copy_msghdr_from_user+0x54/0x2a0 [ 369.860299][T23966] __sys_sendmsg+0x177/0x270 [ 369.864997][T23966] __x64_sys_sendmsg+0x46/0x50 [ 369.869804][T23966] do_syscall_64+0x41/0xc0 [ 369.874278][T23966] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 369.880332][T23966] RIP: 0033:0x7fb60d3cb169 [ 369.884751][T23966] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 369.886042][T23983] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x1, 0x80000001, @mcast2, 0x5078}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000009c0)=[{&(0x7f0000000040)="9b6fd90f088ed60a63d937bda20eccf69e7da3a8735f72fe64fb5b71d9b6e0b05172acafea1ad166abdd0bbe9bfd97c59c2f8ecab1518723b6e3f5f6303e66385a5ddd01b4316098d2be044669ca2390a0f44bc7d1719beb65d3665ff61d523faaf32562c8eabd29e43f7972f6983bbfdcf1fda1bc058e1f940dcd4278020008c990c913f65df5ba9fc426cac29d3d9ff3469afd178b7eb9596d74ae2bcbce6e90f6ba09f28bea266600364715bede24b245a6a27ec7fc21802f9faa8b29f2f581da2339a4ffeaaebe1ae844e8b5e30f9b2f14673a2cc622b735e848d263112311d919ac4a1cd24a9084faf8934bd3c50871b7", 0xf3}, {&(0x7f0000000240)="c520396833869daf6bf7348791232f149acd5cb8d16f11420c8959fc29f97db5f9c0ef35401fdf83af9afd3840045a6fe403383cb35dfd6d4b6c44e8b0df48ae1d", 0x41}, {&(0x7f0000000340)="cc84adf0d6e1b3060a727c5708a4f8ebff52185759eacc668d284ecc0485a70e5b27ef29465c5bb206e6201203ecb3ab69cb5e7028b110b5f24d1f73663b3d20e5387bf73a539065437ac444df2ec8001c33ffc7887d5d1a245078434d78bfa1988f4a6a49d14a32c6a1632166c3ff002e5800a4867fe1ea228401a977590a35e2cf2f6e0ab8938dbbbada2ca62feb3ce5231606ee8aeedd93dc356fb4c593789582a6c7f06e06981b6925f068a41cf1c8cc4d2ffd2cd23f3255cb5c50b3cf820675c8ad62453269b89cd7380417a0e54e03b8565f8ea0a4683eb19fd9ef7900c68e92a9577c231d202ba2056d44e5a4c5aadb", 0xf3}, {&(0x7f0000000140)="52eb19d4", 0x4}, {&(0x7f0000000900)="7d43a83ba6c1d099982cf060ea03f73056def041267ebadbe1e6066180756a38ecbd7b2a41db884bf459a57595b724d7675edfccfe36bc1fe4dafe5b7a46931068e80e1c42813e207923bc65dd68f0d9111949de813513bcd6831f2ff4cc4b689612bdf64d7166ffe3db3a1cd881d8db1f37c3e802596efbeac695f99712fe0ccc97655f257653e43173074ceb6ebfd25c9984a7d8676a2de6aa912e78c0684b3b3db97e5e26170fb81ab7f08a", 0xad}], 0x5, 0x6, 0x7, 0x6) ftruncate(r2, 0x2006fff) close(r1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 369.904349][T23966] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.904370][T23966] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 369.904382][T23966] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 369.904393][T23966] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 369.904404][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.954136][T23966] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 369.962122][T23966] 07:49:35 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 369.967810][T23996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23996 comm=syz-executor.0 [ 369.996664][T23998] loop5: detected capacity change from 0 to 512 [ 370.011278][T23998] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 370.026333][T23998] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 370.043087][ T23] audit: type=1400 audit(1681026575.136:277): avc: denied { read } for pid=23997 comm="syz-executor.5" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 07:49:35 executing program 3: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 2) 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 370.066611][ T23] audit: type=1400 audit(1681026575.136:278): avc: denied { open } for pid=23997 comm="syz-executor.5" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 370.091556][T24002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24002 comm=syz-executor.0 [ 370.137330][T24006] FAULT_INJECTION: forcing a failure. [ 370.137330][T24006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.150511][T24006] CPU: 1 PID: 24006 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 370.161059][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 370.171113][T24006] Call Trace: [ 370.174402][T24006] [ 370.177323][T24006] dump_stack_lvl+0xda/0x130 [ 370.182297][T24006] dump_stack+0x15/0x20 [ 370.186436][T24006] should_fail_ex+0x21f/0x230 [ 370.191100][T24006] should_fail+0xb/0x10 [ 370.195261][T24006] should_fail_usercopy+0x1a/0x20 [ 370.200487][T24006] _copy_from_user+0x1e/0xd0 [ 370.205060][T24006] iovec_from_user+0x170/0x290 [ 370.209825][T24006] __import_iovec+0x4d/0x280 [ 370.214466][T24006] import_iovec+0xbb/0xd0 [ 370.218792][T24006] copy_msghdr_from_user+0x24a/0x2a0 [ 370.224159][T24006] __sys_sendmsg+0x177/0x270 [ 370.228802][T24006] __x64_sys_sendmsg+0x46/0x50 [ 370.233553][T24006] do_syscall_64+0x41/0xc0 [ 370.237987][T24006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 370.243932][T24006] RIP: 0033:0x7fb60d3cb169 [ 370.248387][T24006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 370.249814][T24012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24012 comm=syz-executor.3 [ 370.267975][T24006] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.268019][T24006] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 370.268031][T24006] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 370.268042][T24006] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 370.268054][T24006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.268064][T24006] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 370.268078][T24006] 07:49:35 executing program 1: mount$9p_xen(0x0, 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:35 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x1, 0x80000001, @mcast2, 0x5078}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000009c0)=[{&(0x7f0000000040)="9b6fd90f088ed60a63d937bda20eccf69e7da3a8735f72fe64fb5b71d9b6e0b05172acafea1ad166abdd0bbe9bfd97c59c2f8ecab1518723b6e3f5f6303e66385a5ddd01b4316098d2be044669ca2390a0f44bc7d1719beb65d3665ff61d523faaf32562c8eabd29e43f7972f6983bbfdcf1fda1bc058e1f940dcd4278020008c990c913f65df5ba9fc426cac29d3d9ff3469afd178b7eb9596d74ae2bcbce6e90f6ba09f28bea266600364715bede24b245a6a27ec7fc21802f9faa8b29f2f581da2339a4ffeaaebe1ae844e8b5e30f9b2f14673a2cc622b735e848d263112311d919ac4a1cd24a9084faf8934bd3c50871b7", 0xf3}, {&(0x7f0000000240)="c520396833869daf6bf7348791232f149acd5cb8d16f11420c8959fc29f97db5f9c0ef35401fdf83af9afd3840045a6fe403383cb35dfd6d4b6c44e8b0df48ae1d", 0x41}, {&(0x7f0000000340)="cc84adf0d6e1b3060a727c5708a4f8ebff52185759eacc668d284ecc0485a70e5b27ef29465c5bb206e6201203ecb3ab69cb5e7028b110b5f24d1f73663b3d20e5387bf73a539065437ac444df2ec8001c33ffc7887d5d1a245078434d78bfa1988f4a6a49d14a32c6a1632166c3ff002e5800a4867fe1ea228401a977590a35e2cf2f6e0ab8938dbbbada2ca62feb3ce5231606ee8aeedd93dc356fb4c593789582a6c7f06e06981b6925f068a41cf1c8cc4d2ffd2cd23f3255cb5c50b3cf820675c8ad62453269b89cd7380417a0e54e03b8565f8ea0a4683eb19fd9ef7900c68e92a9577c231d202ba2056d44e5a4c5aadb", 0xf3}, {&(0x7f0000000140)="52eb19d4", 0x4}, {&(0x7f0000000900)="7d43a83ba6c1d099982cf060ea03f73056def041267ebadbe1e6066180756a38ecbd7b2a41db884bf459a57595b724d7675edfccfe36bc1fe4dafe5b7a46931068e80e1c42813e207923bc65dd68f0d9111949de813513bcd6831f2ff4cc4b689612bdf64d7166ffe3db3a1cd881d8db1f37c3e802596efbeac695f99712fe0ccc97655f257653e43173074ceb6ebfd25c9984a7d8676a2de6aa912e78c0684b3b3db97e5e26170fb81ab7f08a", 0xad}], 0x5, 0x6, 0x7, 0x6) ftruncate(r2, 0x2006fff) (async) ftruncate(r2, 0x2006fff) close(r1) (async) close(r1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) (async) sendfile(r1, r1, 0x0, 0x205000) 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 3) [ 370.568695][T24018] loop5: detected capacity change from 0 to 512 [ 370.574975][T24020] FAULT_INJECTION: forcing a failure. [ 370.574975][T24020] name failslab, interval 1, probability 0, space 0, times 0 [ 370.587636][T24020] CPU: 1 PID: 24020 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 370.598079][T24020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) syz_io_uring_complete(0x0) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 370.600006][T24018] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 370.608154][T24020] Call Trace: [ 370.608162][T24020] [ 370.608169][T24020] dump_stack_lvl+0xda/0x130 [ 370.608191][T24020] dump_stack+0x15/0x20 [ 370.623422][T24018] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 370.625598][T24020] should_fail_ex+0x21f/0x230 [ 370.625625][T24020] __should_failslab+0x92/0xa0 [ 370.658874][T24020] should_failslab+0x9/0x20 [ 370.663402][T24020] slab_pre_alloc_hook+0x38/0x180 [ 370.668515][T24020] kmem_cache_alloc_node+0x5d/0x2e0 [ 370.673791][T24020] ? __alloc_skb+0x109/0x2e0 [ 370.678392][T24020] __alloc_skb+0x109/0x2e0 [ 370.682890][T24020] netlink_sendmsg+0x483/0x770 [ 370.687724][T24020] ? netlink_getsockopt+0x710/0x710 [ 370.693021][T24020] ____sys_sendmsg+0x375/0x4c0 [ 370.697797][T24020] __sys_sendmsg+0x1e3/0x270 [ 370.702419][T24020] __x64_sys_sendmsg+0x46/0x50 [ 370.707195][T24020] do_syscall_64+0x41/0xc0 [ 370.711700][T24020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 370.717713][T24020] RIP: 0033:0x7fb60d3cb169 [ 370.722124][T24020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 370.741905][T24020] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.750358][T24020] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 370.758401][T24020] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 07:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 4) 07:49:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 32) syz_io_uring_complete(0x0) (async, rerun: 32) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async, rerun: 32) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (rerun: 32) 07:49:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x1, 0x80000001, @mcast2, 0x5078}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000009c0)=[{&(0x7f0000000040)="9b6fd90f088ed60a63d937bda20eccf69e7da3a8735f72fe64fb5b71d9b6e0b05172acafea1ad166abdd0bbe9bfd97c59c2f8ecab1518723b6e3f5f6303e66385a5ddd01b4316098d2be044669ca2390a0f44bc7d1719beb65d3665ff61d523faaf32562c8eabd29e43f7972f6983bbfdcf1fda1bc058e1f940dcd4278020008c990c913f65df5ba9fc426cac29d3d9ff3469afd178b7eb9596d74ae2bcbce6e90f6ba09f28bea266600364715bede24b245a6a27ec7fc21802f9faa8b29f2f581da2339a4ffeaaebe1ae844e8b5e30f9b2f14673a2cc622b735e848d263112311d919ac4a1cd24a9084faf8934bd3c50871b7", 0xf3}, {&(0x7f0000000240)="c520396833869daf6bf7348791232f149acd5cb8d16f11420c8959fc29f97db5f9c0ef35401fdf83af9afd3840045a6fe403383cb35dfd6d4b6c44e8b0df48ae1d", 0x41}, {&(0x7f0000000340)="cc84adf0d6e1b3060a727c5708a4f8ebff52185759eacc668d284ecc0485a70e5b27ef29465c5bb206e6201203ecb3ab69cb5e7028b110b5f24d1f73663b3d20e5387bf73a539065437ac444df2ec8001c33ffc7887d5d1a245078434d78bfa1988f4a6a49d14a32c6a1632166c3ff002e5800a4867fe1ea228401a977590a35e2cf2f6e0ab8938dbbbada2ca62feb3ce5231606ee8aeedd93dc356fb4c593789582a6c7f06e06981b6925f068a41cf1c8cc4d2ffd2cd23f3255cb5c50b3cf820675c8ad62453269b89cd7380417a0e54e03b8565f8ea0a4683eb19fd9ef7900c68e92a9577c231d202ba2056d44e5a4c5aadb", 0xf3}, {&(0x7f0000000140)="52eb19d4", 0x4}, {&(0x7f0000000900)="7d43a83ba6c1d099982cf060ea03f73056def041267ebadbe1e6066180756a38ecbd7b2a41db884bf459a57595b724d7675edfccfe36bc1fe4dafe5b7a46931068e80e1c42813e207923bc65dd68f0d9111949de813513bcd6831f2ff4cc4b689612bdf64d7166ffe3db3a1cd881d8db1f37c3e802596efbeac695f99712fe0ccc97655f257653e43173074ceb6ebfd25c9984a7d8676a2de6aa912e78c0684b3b3db97e5e26170fb81ab7f08a", 0xad}], 0x5, 0x6, 0x7, 0x6) ftruncate(r2, 0x2006fff) close(r1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) bind$inet6(r3, &(0x7f0000000a40)={0xa, 0x1, 0x80000001, @mcast2, 0x5078}, 0x1c) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) pwritev2(r0, &(0x7f00000009c0)=[{&(0x7f0000000040)="9b6fd90f088ed60a63d937bda20eccf69e7da3a8735f72fe64fb5b71d9b6e0b05172acafea1ad166abdd0bbe9bfd97c59c2f8ecab1518723b6e3f5f6303e66385a5ddd01b4316098d2be044669ca2390a0f44bc7d1719beb65d3665ff61d523faaf32562c8eabd29e43f7972f6983bbfdcf1fda1bc058e1f940dcd4278020008c990c913f65df5ba9fc426cac29d3d9ff3469afd178b7eb9596d74ae2bcbce6e90f6ba09f28bea266600364715bede24b245a6a27ec7fc21802f9faa8b29f2f581da2339a4ffeaaebe1ae844e8b5e30f9b2f14673a2cc622b735e848d263112311d919ac4a1cd24a9084faf8934bd3c50871b7", 0xf3}, {&(0x7f0000000240)="c520396833869daf6bf7348791232f149acd5cb8d16f11420c8959fc29f97db5f9c0ef35401fdf83af9afd3840045a6fe403383cb35dfd6d4b6c44e8b0df48ae1d", 0x41}, {&(0x7f0000000340)="cc84adf0d6e1b3060a727c5708a4f8ebff52185759eacc668d284ecc0485a70e5b27ef29465c5bb206e6201203ecb3ab69cb5e7028b110b5f24d1f73663b3d20e5387bf73a539065437ac444df2ec8001c33ffc7887d5d1a245078434d78bfa1988f4a6a49d14a32c6a1632166c3ff002e5800a4867fe1ea228401a977590a35e2cf2f6e0ab8938dbbbada2ca62feb3ce5231606ee8aeedd93dc356fb4c593789582a6c7f06e06981b6925f068a41cf1c8cc4d2ffd2cd23f3255cb5c50b3cf820675c8ad62453269b89cd7380417a0e54e03b8565f8ea0a4683eb19fd9ef7900c68e92a9577c231d202ba2056d44e5a4c5aadb", 0xf3}, {&(0x7f0000000140)="52eb19d4", 0x4}, {&(0x7f0000000900)="7d43a83ba6c1d099982cf060ea03f73056def041267ebadbe1e6066180756a38ecbd7b2a41db884bf459a57595b724d7675edfccfe36bc1fe4dafe5b7a46931068e80e1c42813e207923bc65dd68f0d9111949de813513bcd6831f2ff4cc4b689612bdf64d7166ffe3db3a1cd881d8db1f37c3e802596efbeac695f99712fe0ccc97655f257653e43173074ceb6ebfd25c9984a7d8676a2de6aa912e78c0684b3b3db97e5e26170fb81ab7f08a", 0xad}], 0x5, 0x6, 0x7, 0x6) (async) ftruncate(r2, 0x2006fff) (async) close(r1) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) (async) [ 370.766373][T24020] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 370.774345][T24020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.782334][T24020] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 370.790308][T24020] [ 370.794124][T24028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24028 comm=syz-executor.1 [ 370.847204][T24044] loop5: detected capacity change from 0 to 512 [ 370.856859][T24044] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 370.871326][T24044] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 370.925211][ T23] audit: type=1400 audit(1681026576.026:279): avc: denied { ioctl } for pid=24039 comm="syz-executor.5" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 07:49:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 5) 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c16b72a661c00028006000200000000000600020003000000060002000100000008002c0000800000140052006361696630000800000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000000)=0xe93) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r3, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e0001ea0f000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x10, 0x6, {0x77359400}, {r5, r6/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "cbca2b204873cdf2"}}, 0x48}, 0x1, 0x0, 0x0, 0xa4}, 0x4004001) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) [ 371.001903][T24064] FAULT_INJECTION: forcing a failure. [ 371.001903][T24064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.013481][T24066] loop5: detected capacity change from 0 to 512 [ 371.015134][T24064] CPU: 1 PID: 24064 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 371.024863][T24066] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 371.031698][T24064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 371.047099][T24066] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 371.055857][T24064] Call Trace: [ 371.055871][T24064] [ 371.055877][T24064] dump_stack_lvl+0xda/0x130 [ 371.055899][T24064] dump_stack+0x15/0x20 [ 371.055915][T24064] should_fail_ex+0x21f/0x230 [ 371.087757][T24064] should_fail+0xb/0x10 [ 371.091975][T24064] should_fail_usercopy+0x1a/0x20 [ 371.097065][T24064] copyin+0x1a/0x90 [ 371.100893][T24064] _copy_from_iter+0x24b/0x8c0 [ 371.105681][T24064] ? __virt_addr_valid+0x16a/0x1b0 [ 371.110862][T24064] ? __check_object_size+0x329/0x4e0 [ 371.116200][T24064] netlink_sendmsg+0x53c/0x770 [ 371.121044][T24064] ? netlink_getsockopt+0x710/0x710 [ 371.126259][T24064] ____sys_sendmsg+0x375/0x4c0 [ 371.131049][T24064] __sys_sendmsg+0x1e3/0x270 [ 371.135663][T24064] __x64_sys_sendmsg+0x46/0x50 [ 371.140515][T24064] do_syscall_64+0x41/0xc0 [ 371.145001][T24064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 371.150905][T24064] RIP: 0033:0x7fb60d3cb169 [ 371.155352][T24064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 371.175015][T24064] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.183438][T24064] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 371.191443][T24064] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 371.199397][T24064] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 371.207429][T24064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.215389][T24064] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 371.223347][T24064] 07:49:36 executing program 1: mount$9p_xen(0x0, 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:36 executing program 3: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c16b72a661c00028006000200000000000600020003000000060002000100000008002c0000800000140052006361696630000800000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000000)=0xe93) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r3, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e0001ea0f000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async, rerun: 64) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x10, 0x6, {0x77359400}, {r5, r6/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "cbca2b204873cdf2"}}, 0x48}, 0x1, 0x0, 0x0, 0xa4}, 0x4004001) (async, rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 6) 07:49:36 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x10, 0x6, {0x77359400}, {r5, r6/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "cbca2b204873cdf2"}}, 0x48}, 0x1, 0x0, 0x0, 0xa4}, 0x4004001) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) (async) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c16b72a661c00028006000200000000000600020003000000060002000100000008002c0000800000140052006361696630000800000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000000)=0xe93) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r3, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e0001ea0f000c000600050020200000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (rerun: 64) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 371.442766][T24087] FAULT_INJECTION: forcing a failure. [ 371.442766][T24087] name failslab, interval 1, probability 0, space 0, times 0 [ 371.455492][T24087] CPU: 0 PID: 24087 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 371.465993][T24087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 371.475828][T24090] loop5: detected capacity change from 0 to 512 [ 371.476126][T24087] Call Trace: [ 371.476133][T24087] [ 371.488598][T24087] dump_stack_lvl+0xda/0x130 [ 371.490121][T24090] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 371.493178][T24087] dump_stack+0x15/0x20 [ 371.508642][T24090] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 371.511435][T24087] should_fail_ex+0x21f/0x230 [ 371.528290][T24087] __should_failslab+0x92/0xa0 [ 371.533120][T24087] should_failslab+0x9/0x20 [ 371.537696][T24087] slab_pre_alloc_hook+0x38/0x180 [ 371.542819][T24087] kmem_cache_alloc+0x58/0x260 [ 371.547610][T24087] ? skb_clone+0x154/0x1e0 [ 371.552096][T24087] skb_clone+0x154/0x1e0 [ 371.556395][T24087] __netlink_deliver_tap+0x2c0/0x4c0 [ 371.561718][T24087] netlink_unicast+0x615/0x640 [ 371.566497][T24087] netlink_sendmsg+0x665/0x770 [ 371.571321][T24087] ? netlink_getsockopt+0x710/0x710 [ 371.576531][T24087] ____sys_sendmsg+0x375/0x4c0 [ 371.581366][T24087] __sys_sendmsg+0x1e3/0x270 [ 371.585977][T24087] __x64_sys_sendmsg+0x46/0x50 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 371.590769][T24087] do_syscall_64+0x41/0xc0 [ 371.595230][T24087] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 371.601228][T24087] RIP: 0033:0x7fb60d3cb169 [ 371.605653][T24087] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 371.625282][T24087] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.633699][T24087] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x10000000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 32) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"]}, @subvolid=0x9}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100fc1b206436e5f91e000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e00000000010001000000000006000000000000003ce82c67b436836210d4d53da6c306103b325372917c50a20d9a5a1e38518a072f012f5b1c8b34e3be2844b27c66737b2865c758cd63d3984b4ae9a8d257634d83e3ea9912fe31192951e7eabd8b57240b41a3a13c6497d501da648855503e9482fcd63c442c31f931d059a07f5d8a1c08138a25ea5cfb475b05bcb82e098fc296ff1d4bf1bbf8a08bfe612c3b4fc7601f67a37d09836dd57c5a3ec833ce549fed678707511f6e4cd7fc6a139997cafa3079af4e8fd647656f9c032704"]}, @subvolid=0x9}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) [ 371.641732][T24087] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 371.649756][T24087] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 371.657731][T24087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.665704][T24087] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 371.673717][T24087] [ 371.708006][T24114] loop5: detected capacity change from 0 to 512 [ 371.716625][T24114] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 371.731230][T24114] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:37 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 7) 07:49:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xb4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6fd9}, @IFLA_LINK={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:37 executing program 3: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:37 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 372.281035][T24120] FAULT_INJECTION: forcing a failure. [ 372.281035][T24120] name failslab, interval 1, probability 0, space 0, times 0 [ 372.293687][T24120] CPU: 1 PID: 24120 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 372.304180][T24120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 372.308870][T24121] loop5: detected capacity change from 0 to 512 [ 372.314317][T24120] Call Trace: [ 372.314324][T24120] [ 372.314331][T24120] dump_stack_lvl+0xda/0x130 [ 372.314364][T24120] dump_stack+0x15/0x20 [ 372.335551][T24120] should_fail_ex+0x21f/0x230 [ 372.340254][T24120] __should_failslab+0x92/0xa0 [ 372.345122][T24120] should_failslab+0x9/0x20 [ 372.349636][T24120] slab_pre_alloc_hook+0x38/0x180 [ 372.354666][T24120] __kmem_cache_alloc_node+0x46/0x250 [ 372.360127][T24120] ? rtnl_newlink+0x5d/0x15a0 [ 372.364806][T24120] kmalloc_trace+0x2a/0xa0 [ 372.369293][T24120] rtnl_newlink+0x5d/0x15a0 [ 372.373870][T24120] ? __rcu_read_unlock+0x4d/0x70 [ 372.378802][T24120] ? avc_has_perm_noaudit+0x1c2/0x260 [ 372.384201][T24120] ? selinux_capable+0x124/0x260 [ 372.389145][T24120] ? selinux_capable+0x1fb/0x260 [ 372.394078][T24120] ? security_capable+0x5e/0x80 [ 372.398946][T24120] ? ns_capable+0x7c/0xb0 [ 372.403421][T24120] ? rtnl_setlink+0x2d0/0x2d0 [ 372.408112][T24120] rtnetlink_rcv_msg+0x807/0x8c0 [ 372.413122][T24120] ? slab_post_alloc_hook+0x75/0x2d0 [ 372.418427][T24120] ? try_charge_memcg+0xb42/0xd20 [ 372.423535][T24120] ? xas_load+0x37c/0x390 [ 372.427869][T24120] ? cgroup_rstat_updated+0x8c/0x1c0 [ 372.433175][T24120] ? kmem_cache_free+0x178/0x280 [ 372.438151][T24120] ? nlmon_xmit+0x4b/0x60 [ 372.442577][T24120] ? __kfree_skb+0x102/0x140 [ 372.447202][T24120] ? consume_skb+0x57/0x180 [ 372.451704][T24120] ? nlmon_xmit+0x4b/0x60 [ 372.456033][T24120] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 372.461314][T24120] ? ref_tracker_free+0x3a1/0x400 [ 372.466329][T24120] ? local_bh_enable+0x1f/0x20 [ 372.471085][T24120] ? __dev_queue_xmit+0xbba/0x1e60 [ 372.476187][T24120] netlink_rcv_skb+0x126/0x220 [ 372.480965][T24120] ? rtnetlink_bind+0x60/0x60 [ 372.485679][T24120] rtnetlink_rcv+0x1c/0x20 [ 372.490134][T24120] netlink_unicast+0x56f/0x640 [ 372.494896][T24120] netlink_sendmsg+0x665/0x770 [ 372.499682][T24120] ? netlink_getsockopt+0x710/0x710 [ 372.504883][T24120] ____sys_sendmsg+0x375/0x4c0 [ 372.509715][T24120] __sys_sendmsg+0x1e3/0x270 [ 372.514348][T24120] __x64_sys_sendmsg+0x46/0x50 [ 372.519188][T24120] do_syscall_64+0x41/0xc0 [ 372.523592][T24120] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 372.529528][T24120] RIP: 0033:0x7fb60d3cb169 [ 372.533956][T24120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 372.553557][T24120] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.562049][T24120] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 372.570009][T24120] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 07:49:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 8) 07:49:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) [ 372.577970][T24120] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 372.586276][T24120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.594243][T24120] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 372.602282][T24120] [ 372.609884][T24121] EXT4-fs: failed to create workqueue [ 372.615391][T24121] EXT4-fs (loop5): mount failed 07:49:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xb4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6fd9}, @IFLA_LINK={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 372.652944][T24141] FAULT_INJECTION: forcing a failure. [ 372.652944][T24141] name failslab, interval 1, probability 0, space 0, times 0 [ 372.665645][T24141] CPU: 1 PID: 24141 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 372.676188][T24141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 372.686270][T24141] Call Trace: [ 372.689624][T24141] [ 372.692558][T24141] dump_stack_lvl+0xda/0x130 [ 372.697192][T24141] dump_stack+0x15/0x20 07:49:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xb4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6fd9}, @IFLA_LINK={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 372.701377][T24141] should_fail_ex+0x21f/0x230 [ 372.706097][T24141] __should_failslab+0x92/0xa0 [ 372.710871][T24141] should_failslab+0x9/0x20 [ 372.715425][T24141] slab_pre_alloc_hook+0x38/0x180 [ 372.720466][T24141] ? kvmalloc_node+0x72/0x160 [ 372.725185][T24141] __kmem_cache_alloc_node+0x46/0x250 [ 372.730581][T24141] ? kvmalloc_node+0x72/0x160 [ 372.735278][T24141] __kmalloc_node+0x98/0x1a0 [ 372.739887][T24141] kvmalloc_node+0x72/0x160 [ 372.744446][T24141] alloc_netdev_mqs+0x89/0x870 [ 372.749283][T24141] ? ipvlan_link_delete+0x210/0x210 [ 372.754483][T24141] rtnl_create_link+0x226/0x7f0 [ 372.759420][T24141] rtnl_newlink+0xda3/0x15a0 [ 372.764038][T24141] ? security_capable+0x5e/0x80 [ 372.768950][T24141] ? ns_capable+0x7c/0xb0 [ 372.773269][T24141] ? rtnl_setlink+0x2d0/0x2d0 [ 372.778079][T24141] rtnetlink_rcv_msg+0x807/0x8c0 [ 372.783079][T24141] ? slab_post_alloc_hook+0x75/0x2d0 [ 372.788468][T24141] ? xas_load+0x37c/0x390 [ 372.792801][T24141] ? __rcu_read_unlock+0x4d/0x70 [ 372.797813][T24141] ? xa_load+0xb9/0xe0 [ 372.801894][T24141] ? kmem_cache_free+0x178/0x280 [ 372.806830][T24141] ? nlmon_xmit+0x4b/0x60 [ 372.811145][T24141] ? __kfree_skb+0x102/0x140 [ 372.815718][T24141] ? consume_skb+0x57/0x180 [ 372.820279][T24141] ? nlmon_xmit+0x4b/0x60 [ 372.824598][T24141] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 372.829899][T24141] ? ref_tracker_free+0x3a1/0x400 [ 372.834923][T24141] ? local_bh_enable+0x1f/0x20 [ 372.839702][T24141] ? __dev_queue_xmit+0xbba/0x1e60 [ 372.844805][T24141] netlink_rcv_skb+0x126/0x220 [ 372.849579][T24141] ? rtnetlink_bind+0x60/0x60 [ 372.854320][T24141] rtnetlink_rcv+0x1c/0x20 [ 372.858755][T24141] netlink_unicast+0x56f/0x640 [ 372.863594][T24141] netlink_sendmsg+0x665/0x770 [ 372.868425][T24141] ? netlink_getsockopt+0x710/0x710 [ 372.873756][T24141] ____sys_sendmsg+0x375/0x4c0 [ 372.878535][T24141] __sys_sendmsg+0x1e3/0x270 [ 372.883117][T24141] __x64_sys_sendmsg+0x46/0x50 [ 372.887884][T24141] do_syscall_64+0x41/0xc0 [ 372.892303][T24141] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 372.898223][T24141] RIP: 0033:0x7fb60d3cb169 [ 372.902642][T24141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 372.922250][T24141] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.930652][T24141] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 372.938642][T24141] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 372.946605][T24141] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 07:49:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_PORT_SELF={0x64, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa2}, @IFLA_PORT_PROFILE={0xc, 0x2, ']\')\'(\'\\\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '\\\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "73d04acb5b6d0b3e358c21382241d487"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda2aa95bb57e8257c7c47f12ee90595"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48e4de278daaeca22db797e38f6528a6"}]}, @IFLA_LINK={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a64055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88eef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a056000"/128, @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c00ffffffff00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c80)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000005000000000006000000ffffff7f00000000fe030000000000007800010001000000000006000000000000007354cc893115a65f1c0ec57e77210ec86f8342ce3db9daf4283ba9ae48280a1d4bf724413c2ea6e22cb2d45ebe10f129ab03dc54dfd8022ece82e5cae850ae514894817f55b15144467de1d9492fa6d9304c4407d4e04d30aef0bba48ad54ee3ac6369de25e2ac6d8f966462c342fda12902b9cd8a18fcc5588bf19655f804ca8842f56661712e36b69087aef796ae1c5fa0b3fd86682ceb6b20ba000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 9) [ 372.954651][T24141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.962608][T24141] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 372.970574][T24141] [ 372.976025][T24158] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 373.001522][T24162] FAULT_INJECTION: forcing a failure. [ 373.001522][T24162] name failslab, interval 1, probability 0, space 0, times 0 [ 373.014304][T24162] CPU: 1 PID: 24162 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 373.024747][T24162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 373.034827][T24162] Call Trace: [ 373.038103][T24162] [ 373.041031][T24162] dump_stack_lvl+0xda/0x130 [ 373.045665][T24162] dump_stack+0x15/0x20 [ 373.049875][T24162] should_fail_ex+0x21f/0x230 [ 373.054684][T24162] __should_failslab+0x92/0xa0 [ 373.059432][T24162] should_failslab+0x9/0x20 [ 373.063920][T24162] slab_pre_alloc_hook+0x38/0x180 [ 373.068937][T24162] __kmem_cache_alloc_node+0x46/0x250 [ 373.074355][T24162] ? __hw_addr_add_ex+0x13d/0x350 [ 373.079396][T24162] kmalloc_trace+0x2a/0xa0 [ 373.083950][T24162] __hw_addr_add_ex+0x13d/0x350 [ 373.088934][T24162] dev_addr_init+0xb2/0x120 [ 373.093491][T24162] ? stack_depot_init+0x4f/0x130 [ 373.098481][T24162] alloc_netdev_mqs+0x1b6/0x870 [ 373.103330][T24162] ? ipvlan_link_delete+0x210/0x210 [ 373.108521][T24162] rtnl_create_link+0x226/0x7f0 [ 373.113380][T24162] rtnl_newlink+0xda3/0x15a0 [ 373.117982][T24162] ? security_capable+0x5e/0x80 [ 373.122890][T24162] ? ns_capable+0x7c/0xb0 [ 373.127249][T24162] ? rtnl_setlink+0x2d0/0x2d0 [ 373.131922][T24162] rtnetlink_rcv_msg+0x807/0x8c0 [ 373.136883][T24162] ? slab_post_alloc_hook+0x75/0x2d0 [ 373.142284][T24162] ? xas_load+0x37c/0x390 [ 373.146674][T24162] ? __rcu_read_unlock+0x4d/0x70 [ 373.151760][T24162] ? xa_load+0xb9/0xe0 [ 373.155821][T24162] ? kmem_cache_free+0x178/0x280 [ 373.160753][T24162] ? nlmon_xmit+0x4b/0x60 [ 373.165105][T24162] ? __kfree_skb+0x102/0x140 [ 373.169758][T24162] ? consume_skb+0x57/0x180 [ 373.174307][T24162] ? nlmon_xmit+0x4b/0x60 [ 373.178682][T24162] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 373.184031][T24162] ? ref_tracker_free+0x3a1/0x400 [ 373.189056][T24162] ? local_bh_enable+0x1f/0x20 [ 373.193842][T24162] ? __dev_queue_xmit+0xbba/0x1e60 [ 373.198988][T24162] netlink_rcv_skb+0x126/0x220 [ 373.203845][T24162] ? rtnetlink_bind+0x60/0x60 [ 373.208587][T24162] rtnetlink_rcv+0x1c/0x20 [ 373.213132][T24162] netlink_unicast+0x56f/0x640 [ 373.217944][T24162] netlink_sendmsg+0x665/0x770 [ 373.222744][T24162] ? netlink_getsockopt+0x710/0x710 [ 373.227953][T24162] ____sys_sendmsg+0x375/0x4c0 [ 373.232767][T24162] __sys_sendmsg+0x1e3/0x270 [ 373.237418][T24162] __x64_sys_sendmsg+0x46/0x50 [ 373.242237][T24162] do_syscall_64+0x41/0xc0 [ 373.246750][T24162] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 373.252655][T24162] RIP: 0033:0x7fb60d3cb169 [ 373.257058][T24162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 373.276819][T24162] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.285225][T24162] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 373.293219][T24162] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 07:49:38 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_PORT_SELF={0x64, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa2}, @IFLA_PORT_PROFILE={0xc, 0x2, ']\')\'(\'\\\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '\\\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "73d04acb5b6d0b3e358c21382241d487"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda2aa95bb57e8257c7c47f12ee90595"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48e4de278daaeca22db797e38f6528a6"}]}, @IFLA_LINK={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a64055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88eef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a056000"/128, @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c00ffffffff00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c80)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000005000000000006000000ffffff7f00000000fe030000000000007800010001000000000006000000000000007354cc893115a65f1c0ec57e77210ec86f8342ce3db9daf4283ba9ae48280a1d4bf724413c2ea6e22cb2d45ebe10f129ab03dc54dfd8022ece82e5cae850ae514894817f55b15144467de1d9492fa6d9304c4407d4e04d30aef0bba48ad54ee3ac6369de25e2ac6d8f966462c342fda12902b9cd8a18fcc5588bf19655f804ca8842f56661712e36b69087aef796ae1c5fa0b3fd86682ceb6b20ba000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10698, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:38 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 373.301185][T24162] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.309208][T24162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.317163][T24162] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 373.325176][T24162] [ 373.350167][T24174] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 373.354567][T24177] loop5: detected capacity change from 0 to 512 [ 373.380484][T24177] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value 07:49:38 executing program 3: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 10) 07:49:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_PORT_SELF={0x64, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa2}, @IFLA_PORT_PROFILE={0xc, 0x2, ']\')\'(\'\\\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '\\\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "73d04acb5b6d0b3e358c21382241d487"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda2aa95bb57e8257c7c47f12ee90595"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48e4de278daaeca22db797e38f6528a6"}]}, @IFLA_LINK={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a64055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88eef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a056000"/128, @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c00ffffffff00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001c80)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000005000000000006000000ffffff7f00000000fe030000000000007800010001000000000006000000000000007354cc893115a65f1c0ec57e77210ec86f8342ce3db9daf4283ba9ae48280a1d4bf724413c2ea6e22cb2d45ebe10f129ab03dc54dfd8022ece82e5cae850ae514894817f55b15144467de1d9492fa6d9304c4407d4e04d30aef0bba48ad54ee3ac6369de25e2ac6d8f966462c342fda12902b9cd8a18fcc5588bf19655f804ca8842f56661712e36b69087aef796ae1c5fa0b3fd86682ceb6b20ba000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 373.395064][T24177] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10698, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (rerun: 64) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) ftruncate(r1, 0x2006fff) (async, rerun: 32) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) [ 373.456096][T24188] FAULT_INJECTION: forcing a failure. [ 373.456096][T24188] name failslab, interval 1, probability 0, space 0, times 0 [ 373.468767][T24188] CPU: 1 PID: 24188 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 373.479185][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 373.489717][T24188] Call Trace: [ 373.493004][T24188] [ 373.495981][T24188] dump_stack_lvl+0xda/0x130 [ 373.500603][T24188] dump_stack+0x15/0x20 [ 373.504818][T24188] should_fail_ex+0x21f/0x230 [ 373.509553][T24188] __should_failslab+0x92/0xa0 [ 373.514323][T24188] should_failslab+0x9/0x20 [ 373.518833][T24188] slab_pre_alloc_hook+0x38/0x180 [ 373.523892][T24188] ? kvmalloc_node+0x72/0x160 [ 373.528676][T24188] __kmem_cache_alloc_node+0x46/0x250 [ 373.534116][T24188] ? kvmalloc_node+0x72/0x160 [ 373.538838][T24188] __kmalloc_node+0x98/0x1a0 [ 373.543441][T24188] kvmalloc_node+0x72/0x160 [ 373.548033][T24188] alloc_netdev_mqs+0x525/0x870 [ 373.552935][T24188] rtnl_create_link+0x226/0x7f0 [ 373.557792][T24188] rtnl_newlink+0xda3/0x15a0 [ 373.562375][T24188] ? security_capable+0x5e/0x80 [ 373.567212][T24188] ? ns_capable+0x7c/0xb0 [ 373.571528][T24188] ? rtnl_setlink+0x2d0/0x2d0 [ 373.576246][T24188] rtnetlink_rcv_msg+0x807/0x8c0 [ 373.581273][T24188] ? slab_post_alloc_hook+0x75/0x2d0 [ 373.586601][T24188] ? try_charge_memcg+0xb42/0xd20 [ 373.591840][T24188] ? xas_load+0x37c/0x390 [ 373.596251][T24188] ? __rcu_read_unlock+0x4d/0x70 [ 373.601319][T24188] ? xa_load+0xb9/0xe0 [ 373.605386][T24188] ? kmem_cache_free+0x178/0x280 [ 373.610329][T24188] ? nlmon_xmit+0x4b/0x60 [ 373.614751][T24188] ? __kfree_skb+0x102/0x140 [ 373.619345][T24188] ? consume_skb+0x57/0x180 [ 373.623939][T24188] ? nlmon_xmit+0x4b/0x60 [ 373.628327][T24188] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 373.633597][T24188] ? ref_tracker_free+0x3a1/0x400 [ 373.638709][T24188] ? local_bh_enable+0x1f/0x20 [ 373.643465][T24188] ? __dev_queue_xmit+0xbba/0x1e60 [ 373.648713][T24188] netlink_rcv_skb+0x126/0x220 [ 373.653497][T24188] ? rtnetlink_bind+0x60/0x60 [ 373.658190][T24188] rtnetlink_rcv+0x1c/0x20 [ 373.662705][T24188] netlink_unicast+0x56f/0x640 [ 373.667543][T24188] netlink_sendmsg+0x665/0x770 [ 373.672338][T24188] ? netlink_getsockopt+0x710/0x710 [ 373.677528][T24188] ____sys_sendmsg+0x375/0x4c0 [ 373.682286][T24188] __sys_sendmsg+0x1e3/0x270 [ 373.686874][T24188] __x64_sys_sendmsg+0x46/0x50 [ 373.691628][T24188] do_syscall_64+0x41/0xc0 [ 373.696033][T24188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 373.701932][T24188] RIP: 0033:0x7fb60d3cb169 [ 373.706404][T24188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 373.726040][T24188] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.734475][T24188] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 373.742454][T24188] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 07:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 11) [ 373.750411][T24188] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.758441][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.766397][T24188] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 373.774353][T24188] [ 373.782291][T24189] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. 07:49:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x101, 0x2e, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=ANY=[@ANYBLOB="84940000011000010400"/21, @ANYRES32=0x0, @ANYBLOB="49580000000000000000290008ef0100140003006970766c616e310000000000000000002c001280d5ff01006970766c616e00001c00028006000200000000000000010001000000000001000100000008002c00ff070000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x260048c0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="08050064017374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe800000c100000000000000000000aa0558010001000000050001000000000000000000000000000000fa2800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES8, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=r4, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}}, 0x24008800) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x0, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r5]}, @subvolid=0x100000001}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fcf50f71fa72caaf9cf22ba8338ad40700000005001300030000000600030005000000cd0104000200000082e88c24e193db55b11cbb7840bce3e21b994222d29519777ca384bf0ffdfec4962ae2b73fb88ea383f109cf000081ad152ea9c7d4b7123fe3dc55296274c18918bdf47450d508a42854a7adae0a868dca94b653ca8e48acab17e3282978689ee7e203348b73463670cac65bcc82ac4b6e4eedc1647db80fbfc33a01c15e90b3037035339d1ef2dc3c5e5b321fd05c49740217912a0cde5a2471cfd7d5036e9351580ce953f0d333e31539257783a8d1693de809500000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x101, 0x2e, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=ANY=[@ANYBLOB="84940000011000010400"/21, @ANYRES32=0x0, @ANYBLOB="49580000000000000000290008ef0100140003006970766c616e310000000000000000002c001280d5ff01006970766c616e00001c00028006000200000000000000010001000000000001000100000008002c00ff070000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x260048c0) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 32) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="08050064017374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe800000c100000000000000000000aa0558010001000000050001000000000000000000000000000000fa2800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES8, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=r4, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}}, 0x24008800) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async, rerun: 32) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x0, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r5]}, @subvolid=0x100000001}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fcf50f71fa72caaf9cf22ba8338ad40700000005001300030000000600030005000000cd0104000200000082e88c24e193db55b11cbb7840bce3e21b994222d29519777ca384bf0ffdfec4962ae2b73fb88ea383f109cf000081ad152ea9c7d4b7123fe3dc55296274c18918bdf47450d508a42854a7adae0a868dca94b653ca8e48acab17e3282978689ee7e203348b73463670cac65bcc82ac4b6e4eedc1647db80fbfc33a01c15e90b3037035339d1ef2dc3c5e5b321fd05c49740217912a0cde5a2471cfd7d5036e9351580ce953f0d333e31539257783a8d1693de809500000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 373.807155][T24199] loop5: detected capacity change from 0 to 512 [ 373.811215][T24201] FAULT_INJECTION: forcing a failure. [ 373.811215][T24201] name failslab, interval 1, probability 0, space 0, times 0 [ 373.826114][T24201] CPU: 0 PID: 24201 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 373.836657][T24201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 373.846760][T24201] Call Trace: [ 373.850045][T24201] [ 373.852987][T24201] dump_stack_lvl+0xda/0x130 [ 373.857589][T24201] dump_stack+0x15/0x20 [ 373.861805][T24201] should_fail_ex+0x21f/0x230 [ 373.866523][T24201] __should_failslab+0x92/0xa0 [ 373.866959][T24199] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 373.871372][T24201] should_failslab+0x9/0x20 [ 373.871392][T24201] slab_pre_alloc_hook+0x38/0x180 [ 373.888339][T24199] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 07:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x101, 0x2e, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x101, 0x2e, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=ANY=[@ANYBLOB="84940000011000010400"/21, @ANYRES32=0x0, @ANYBLOB="49580000000000000000290008ef0100140003006970766c616e310000000000000000002c001280d5ff01006970766c616e00001c00028006000200000000000000010001000000000001000100000008002c00ff070000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x260048c0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="08050064017374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe800000c100000000000000000000aa0558010001000000050001000000000000000000000000000000fa2800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES8, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=r4, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}}, 0x24008800) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x0, @inherit={0x50, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r5]}, @subvolid=0x100000001}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fcf50f71fa72caaf9cf22ba8338ad40700000005001300030000000600030005000000cd0104000200000082e88c24e193db55b11cbb7840bce3e21b994222d29519777ca384bf0ffdfec4962ae2b73fb88ea383f109cf000081ad152ea9c7d4b7123fe3dc55296274c18918bdf47450d508a42854a7adae0a868dca94b653ca8e48acab17e3282978689ee7e203348b73463670cac65bcc82ac4b6e4eedc1647db80fbfc33a01c15e90b3037035339d1ef2dc3c5e5b321fd05c49740217912a0cde5a2471cfd7d5036e9351580ce953f0d333e31539257783a8d1693de809500000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 373.890076][T24201] ? kvmalloc_node+0x72/0x160 [ 373.911985][T24201] __kmem_cache_alloc_node+0x46/0x250 [ 373.917372][T24201] ? kvmalloc_node+0x72/0x160 [ 373.922076][T24201] __kmalloc_node+0x98/0x1a0 [ 373.926751][T24201] kvmalloc_node+0x72/0x160 [ 373.931267][T24201] alloc_netdev_mqs+0x525/0x870 [ 373.936180][T24201] rtnl_create_link+0x226/0x7f0 [ 373.941080][T24201] rtnl_newlink+0xda3/0x15a0 [ 373.945715][T24201] ? security_capable+0x5e/0x80 [ 373.950591][T24201] ? ns_capable+0x7c/0xb0 [ 373.954946][T24201] ? rtnl_setlink+0x2d0/0x2d0 [ 373.959659][T24201] rtnetlink_rcv_msg+0x807/0x8c0 [ 373.964633][T24201] ? slab_post_alloc_hook+0x75/0x2d0 [ 373.969988][T24201] ? xas_load+0x37c/0x390 [ 373.974350][T24201] ? __rcu_read_unlock+0x4d/0x70 [ 373.979467][T24201] ? xa_load+0xb9/0xe0 [ 373.983539][T24201] ? kmem_cache_free+0x178/0x280 [ 373.988518][T24201] ? nlmon_xmit+0x4b/0x60 [ 373.992855][T24201] ? __kfree_skb+0x102/0x140 [ 373.997448][T24201] ? consume_skb+0x57/0x180 [ 374.002013][T24201] ? nlmon_xmit+0x4b/0x60 [ 374.006338][T24201] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 374.011622][T24201] ? ref_tracker_free+0x3a1/0x400 [ 374.016652][T24201] ? local_bh_enable+0x1f/0x20 [ 374.021488][T24201] ? __dev_queue_xmit+0xbba/0x1e60 [ 374.026606][T24201] netlink_rcv_skb+0x126/0x220 [ 374.031466][T24201] ? rtnetlink_bind+0x60/0x60 [ 374.036307][T24201] rtnetlink_rcv+0x1c/0x20 [ 374.040829][T24201] netlink_unicast+0x56f/0x640 [ 374.045603][T24201] netlink_sendmsg+0x665/0x770 [ 374.050429][T24201] ? netlink_getsockopt+0x710/0x710 [ 374.055623][T24201] ____sys_sendmsg+0x375/0x4c0 [ 374.060425][T24201] __sys_sendmsg+0x1e3/0x270 [ 374.065020][T24201] __x64_sys_sendmsg+0x46/0x50 [ 374.069856][T24201] do_syscall_64+0x41/0xc0 [ 374.074299][T24201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 374.080220][T24201] RIP: 0033:0x7fb60d3cb169 [ 374.084626][T24201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 07:49:39 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 12) [ 374.104227][T24201] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.112629][T24201] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 374.120619][T24201] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 374.128583][T24201] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 374.136612][T24201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.144699][T24201] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 374.152666][T24201] 07:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96703e4a06da5048f0c3e47a43c8581d04a21f51101dd8f1cc9a162dc6a40e60e2d96d59ae217bf017161bded0e60da3bfd90664e5cb3a50fb1ae2527197c06fbacde385576e2ee6203a0b2368bb01c4380e0b5f81ecf5832d9497", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r2, 0x0, 0x90, 0x71, &(0x7f0000001b80)="38341b177a0500074948eec7b9e112a01406eccca5dd251a9f37864090551a120fdf69f5337b0e166f1af40b61d5b8d1f47a677eb5fe3ad7aefd45c30a2a370bbeb79d5f7a82e1957bf419f9d17bb187a3a1cc561573e0eaca446561b2dfd5c31d3f07f168de727cd2716323b1b83726b812bfb674ee9227314d19b16bcab6be104908b10f1be76bbb199a0907453d84", &(0x7f0000001c40)=""/113, 0x5, 0x0, 0x8d, 0x87, &(0x7f0000001cc0)="c34cd8136834be3a429266a9a0c71f855d8bd62ca2e0f965e9bc713c2a9076b2287bb9bb52cc8f61d88ee7790cbcf4610b0663c5701ca6c8e7251001e2ecc51af85b50ef86989100f1aa5acfacb57a51a65971395c31c92c0a96a36048b6f02eb1a60f1fddae494415b4b926d947dcbb33c7327e61cb2c56e9ed4eedd77f3e8ba17ab0db75309be15b2c05bef7", &(0x7f0000001d80)="31f200a7d9ea95fead8ca6f4c0bd6ef2ec97d0cf65f3c77b1bdd11d6a6cee98dddbd23d19c205a528557f133de681fc5f5ebcc0fdcb6b111b6f678bfdde4d3ece2de3f66c9a13d6fa34a0d37021b54460044d689b48422c4f336ff20f55ce2207c71bc498aaac095c1393d1aa2ec09b0781ef398aef2e73026b8a5924ece45e41e5638f9dcb314", 0x0, 0x3}, 0x48) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)={0xd8, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0x7a, 0xd, 0x1, 0x0, "48ab06c9bbee2f570bdebff4018478318b0a86049ef55e84ea9169b5625e924733aa1b7c546a9192eb21c94bdfb81b88c59ee7ed08f192e7dbdc440fa7254ae2b4cc0ddb4ad995c7472bbff1fbc8bc2b1337d70461e38fc194b26856886897fbb45c57cc34b5d61ebbcaee4a4e7ba3ce2eac943815c0"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:39 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 374.211068][T24225] FAULT_INJECTION: forcing a failure. [ 374.211068][T24225] name failslab, interval 1, probability 0, space 0, times 0 [ 374.223754][T24225] CPU: 0 PID: 24225 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 374.234181][T24225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 374.244327][T24225] Call Trace: [ 374.247782][T24225] [ 374.250707][T24225] dump_stack_lvl+0xda/0x130 [ 374.255299][T24225] dump_stack+0x15/0x20 [ 374.259480][T24225] should_fail_ex+0x21f/0x230 [ 374.264171][T24225] __should_failslab+0x92/0xa0 [ 374.268937][T24225] should_failslab+0x9/0x20 [ 374.273558][T24225] slab_pre_alloc_hook+0x38/0x180 [ 374.278580][T24225] ? kvmalloc_node+0x72/0x160 [ 374.283589][T24225] __kmem_cache_alloc_node+0x46/0x250 [ 374.287966][T24232] selinux_netlink_send: 8 callbacks suppressed [ 374.287978][T24232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24232 comm=syz-executor.0 [ 374.289127][T24225] ? kvmalloc_node+0x72/0x160 [ 374.312687][T24225] __kmalloc_node+0x98/0x1a0 [ 374.317347][T24225] kvmalloc_node+0x72/0x160 [ 374.321937][T24225] alloc_netdev_mqs+0x6ac/0x870 [ 374.323837][T24233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24233 comm=syz-executor.1 [ 374.326782][T24225] rtnl_create_link+0x226/0x7f0 [ 374.326811][T24225] rtnl_newlink+0xda3/0x15a0 [ 374.326837][T24225] ? security_capable+0x5e/0x80 [ 374.353854][T24225] ? ns_capable+0x7c/0xb0 [ 374.358267][T24225] ? rtnl_setlink+0x2d0/0x2d0 [ 374.363005][T24225] rtnetlink_rcv_msg+0x807/0x8c0 [ 374.368094][T24225] ? slab_post_alloc_hook+0x75/0x2d0 [ 374.373511][T24225] ? xas_load+0x37c/0x390 [ 374.377827][T24225] ? __rcu_read_unlock+0x4d/0x70 [ 374.382765][T24225] ? xa_load+0xb9/0xe0 [ 374.386854][T24225] ? kmem_cache_free+0x178/0x280 [ 374.391816][T24225] ? nlmon_xmit+0x4b/0x60 [ 374.396184][T24225] ? __kfree_skb+0x102/0x140 [ 374.400879][T24225] ? consume_skb+0x57/0x180 [ 374.405387][T24225] ? nlmon_xmit+0x4b/0x60 [ 374.409796][T24225] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 374.415082][T24225] ? ref_tracker_free+0x3a1/0x400 [ 374.420170][T24225] ? local_bh_enable+0x1f/0x20 [ 374.424917][T24225] ? __dev_queue_xmit+0xbba/0x1e60 [ 374.430034][T24225] netlink_rcv_skb+0x126/0x220 [ 374.434814][T24225] ? rtnetlink_bind+0x60/0x60 [ 374.439504][T24225] rtnetlink_rcv+0x1c/0x20 [ 374.443912][T24225] netlink_unicast+0x56f/0x640 [ 374.448663][T24225] netlink_sendmsg+0x665/0x770 [ 374.453428][T24225] ? netlink_getsockopt+0x710/0x710 [ 374.458695][T24225] ____sys_sendmsg+0x375/0x4c0 [ 374.463452][T24225] __sys_sendmsg+0x1e3/0x270 [ 374.468143][T24225] __x64_sys_sendmsg+0x46/0x50 [ 374.472935][T24225] do_syscall_64+0x41/0xc0 [ 374.477340][T24225] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 374.483232][T24225] RIP: 0033:0x7fb60d3cb169 [ 374.487684][T24225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 07:49:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10698, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:39 executing program 3: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96703e4a06da5048f0c3e47a43c8581d04a21f51101dd8f1cc9a162dc6a40e60e2d96d59ae217bf017161bded0e60da3bfd90664e5cb3a50fb1ae2527197c06fbacde385576e2ee6203a0b2368bb01c4380e0b5f81ecf5832d9497", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r2, 0x0, 0x90, 0x71, &(0x7f0000001b80)="38341b177a0500074948eec7b9e112a01406eccca5dd251a9f37864090551a120fdf69f5337b0e166f1af40b61d5b8d1f47a677eb5fe3ad7aefd45c30a2a370bbeb79d5f7a82e1957bf419f9d17bb187a3a1cc561573e0eaca446561b2dfd5c31d3f07f168de727cd2716323b1b83726b812bfb674ee9227314d19b16bcab6be104908b10f1be76bbb199a0907453d84", &(0x7f0000001c40)=""/113, 0x5, 0x0, 0x8d, 0x87, &(0x7f0000001cc0)="c34cd8136834be3a429266a9a0c71f855d8bd62ca2e0f965e9bc713c2a9076b2287bb9bb52cc8f61d88ee7790cbcf4610b0663c5701ca6c8e7251001e2ecc51af85b50ef86989100f1aa5acfacb57a51a65971395c31c92c0a96a36048b6f02eb1a60f1fddae494415b4b926d947dcbb33c7327e61cb2c56e9ed4eedd77f3e8ba17ab0db75309be15b2c05bef7", &(0x7f0000001d80)="31f200a7d9ea95fead8ca6f4c0bd6ef2ec97d0cf65f3c77b1bdd11d6a6cee98dddbd23d19c205a528557f133de681fc5f5ebcc0fdcb6b111b6f678bfdde4d3ece2de3f66c9a13d6fa34a0d37021b54460044d689b48422c4f336ff20f55ce2207c71bc498aaac095c1393d1aa2ec09b0781ef398aef2e73026b8a5924ece45e41e5638f9dcb314", 0x0, 0x3}, 0x48) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)={0xd8, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0x7a, 0xd, 0x1, 0x0, "48ab06c9bbee2f570bdebff4018478318b0a86049ef55e84ea9169b5625e924733aa1b7c546a9192eb21c94bdfb81b88c59ee7ed08f192e7dbdc440fa7254ae2b4cc0ddb4ad995c7472bbff1fbc8bc2b1337d70461e38fc194b26856886897fbb45c57cc34b5d61ebbcaee4a4e7ba3ce2eac943815c0"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 374.508088][T24225] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.516495][T24225] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 374.524538][T24225] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 374.532573][T24225] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 374.540591][T24225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.548557][T24225] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 374.556576][T24225] 07:49:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 13) 07:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async, rerun: 64) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (rerun: 64) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96703e4a06da5048f0c3e47a43c8581d04a21f51101dd8f1cc9a162dc6a40e60e2d96d59ae217bf017161bded0e60da3bfd90664e5cb3a50fb1ae2527197c06fbacde385576e2ee6203a0b2368bb01c4380e0b5f81ecf5832d9497", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r2, 0x0, 0x90, 0x71, &(0x7f0000001b80)="38341b177a0500074948eec7b9e112a01406eccca5dd251a9f37864090551a120fdf69f5337b0e166f1af40b61d5b8d1f47a677eb5fe3ad7aefd45c30a2a370bbeb79d5f7a82e1957bf419f9d17bb187a3a1cc561573e0eaca446561b2dfd5c31d3f07f168de727cd2716323b1b83726b812bfb674ee9227314d19b16bcab6be104908b10f1be76bbb199a0907453d84", &(0x7f0000001c40)=""/113, 0x5, 0x0, 0x8d, 0x87, &(0x7f0000001cc0)="c34cd8136834be3a429266a9a0c71f855d8bd62ca2e0f965e9bc713c2a9076b2287bb9bb52cc8f61d88ee7790cbcf4610b0663c5701ca6c8e7251001e2ecc51af85b50ef86989100f1aa5acfacb57a51a65971395c31c92c0a96a36048b6f02eb1a60f1fddae494415b4b926d947dcbb33c7327e61cb2c56e9ed4eedd77f3e8ba17ab0db75309be15b2c05bef7", &(0x7f0000001d80)="31f200a7d9ea95fead8ca6f4c0bd6ef2ec97d0cf65f3c77b1bdd11d6a6cee98dddbd23d19c205a528557f133de681fc5f5ebcc0fdcb6b111b6f678bfdde4d3ece2de3f66c9a13d6fa34a0d37021b54460044d689b48422c4f336ff20f55ce2207c71bc498aaac095c1393d1aa2ec09b0781ef398aef2e73026b8a5924ece45e41e5638f9dcb314", 0x0, 0x3}, 0x48) (rerun: 64) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)={0xd8, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x48}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0x7a, 0xd, 0x1, 0x0, "48ab06c9bbee2f570bdebff4018478318b0a86049ef55e84ea9169b5625e924733aa1b7c546a9192eb21c94bdfb81b88c59ee7ed08f192e7dbdc440fa7254ae2b4cc0ddb4ad995c7472bbff1fbc8bc2b1337d70461e38fc194b26856886897fbb45c57cc34b5d61ebbcaee4a4e7ba3ce2eac943815c0"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 14) 07:49:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) [ 374.631437][T24254] FAULT_INJECTION: forcing a failure. [ 374.631437][T24254] name failslab, interval 1, probability 0, space 0, times 0 [ 374.636372][T24256] loop5: detected capacity change from 0 to 512 [ 374.644067][T24254] CPU: 0 PID: 24254 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 374.660706][T24254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 374.662579][T24256] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 374.670845][T24254] Call Trace: [ 374.670853][T24254] [ 374.670860][T24254] dump_stack_lvl+0xda/0x130 [ 374.670882][T24254] dump_stack+0x15/0x20 [ 374.686277][T24256] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 374.688312][T24254] should_fail_ex+0x21f/0x230 [ 374.716993][T24254] __should_failslab+0x92/0xa0 [ 374.721776][T24254] should_failslab+0x9/0x20 [ 374.726322][T24254] slab_pre_alloc_hook+0x38/0x180 07:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES16=r1, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 374.731436][T24254] kmem_cache_alloc+0x58/0x260 [ 374.736224][T24254] ? skb_clone+0x154/0x1e0 [ 374.740663][T24254] skb_clone+0x154/0x1e0 [ 374.744932][T24254] __netlink_deliver_tap+0x2c0/0x4c0 [ 374.750300][T24254] netlink_sendskb+0x116/0x140 [ 374.755141][T24254] netlink_unicast+0x28e/0x640 [ 374.759981][T24254] netlink_ack+0x8f3/0x940 [ 374.764461][T24254] netlink_rcv_skb+0x18f/0x220 [ 374.769236][T24254] ? rtnetlink_bind+0x60/0x60 [ 374.773934][T24254] rtnetlink_rcv+0x1c/0x20 [ 374.778427][T24254] netlink_unicast+0x56f/0x640 [ 374.783633][T24254] netlink_sendmsg+0x665/0x770 [ 374.788516][T24254] ? netlink_getsockopt+0x710/0x710 [ 374.793741][T24254] ____sys_sendmsg+0x375/0x4c0 [ 374.798523][T24254] __sys_sendmsg+0x1e3/0x270 [ 374.803200][T24254] __x64_sys_sendmsg+0x46/0x50 [ 374.808011][T24254] do_syscall_64+0x41/0xc0 [ 374.812428][T24254] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 374.818356][T24254] RIP: 0033:0x7fb60d3cb169 [ 374.822778][T24254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 374.842527][T24254] RSP: 002b:00007fb60c73e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.850970][T24254] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d3cb169 [ 374.858929][T24254] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 374.866884][T24254] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 374.874926][T24254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.882882][T24254] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 374.890861][T24254] [ 374.895876][ T3130] EXT4-fs unmount: 54 callbacks suppressed [ 374.895884][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.945176][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24261 comm=syz-executor.3 07:49:40 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) ftruncate(r1, 0x2006fff) (rerun: 64) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES16=r1, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) (fail_nth: 15) 07:49:40 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) [ 375.066420][T24264] FAULT_INJECTION: forcing a failure. [ 375.066420][T24264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.079561][T24264] CPU: 0 PID: 24264 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 375.090055][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 375.100114][T24264] Call Trace: [ 375.103400][T24264] [ 375.106368][T24264] dump_stack_lvl+0xda/0x130 [ 375.111026][T24264] dump_stack+0x15/0x20 [ 375.115188][T24264] should_fail_ex+0x21f/0x230 [ 375.119930][T24264] should_fail+0xb/0x10 [ 375.124164][T24264] should_fail_usercopy+0x1a/0x20 [ 375.129208][T24264] _copy_to_user+0x1e/0x90 [ 375.133634][T24264] simple_read_from_buffer+0xa0/0x110 [ 375.139013][T24264] proc_fail_nth_read+0xf6/0x140 [ 375.143954][T24264] ? proc_fault_inject_write+0x200/0x200 [ 375.149587][T24264] vfs_read+0x192/0x560 [ 375.153878][T24264] ? __fget_files+0x1c4/0x200 [ 375.158680][T24264] ? mutex_lock+0xd/0x30 [ 375.162946][T24264] ksys_read+0xeb/0x1a0 [ 375.163924][T24279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24279 comm=syz-executor.0 [ 375.167102][T24264] __x64_sys_read+0x42/0x50 [ 375.167132][T24264] do_syscall_64+0x41/0xc0 [ 375.167151][T24264] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 375.182850][T24280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24280 comm=syz-executor.1 [ 375.184481][T24264] RIP: 0033:0x7fb60d37cf8c [ 375.184499][T24264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 375.184515][T24264] RSP: 002b:00007fb60c73e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.184533][T24264] RAX: ffffffffffffffda RBX: 00007fb60d4eaf80 RCX: 00007fb60d37cf8c [ 375.184545][T24264] RDX: 000000000000000f RSI: 00007fb60c73e1e0 RDI: 0000000000000004 [ 375.255977][T24264] RBP: 00007fb60c73e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.263946][T24264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.271921][T24264] R13: 00007ffed78d184f R14: 00007fb60c73e300 R15: 0000000000022000 [ 375.279891][T24264] 07:49:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) (async, rerun: 64) close(r0) (async, rerun: 64) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:40 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES16=r1, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES16=r1, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:40 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="0187dabc6523e022327f8222230026bd7000bedbdf255e00000a220837ed0856dc1e000004a000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe0320000000000000006f5e000000000100010000000000060000000000000059765cd26349aafffb096b5005f5888438ffaffa68976676f5ace6d6aaff780a52b122fbeeb87dd544af5f479ccf64cb587e475fae2b7afea9d05dd6bcbefc452363204e0a4747c27694bda2d6d591c0ca823081ce26da63f9a3b75a3a00c20732641460f3f80ffb079e94826d2cd9996f4b6b864ced1f41fe4d4d52876c8455d09f0be79833cb022be42cd4"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3400cb19780000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) pread64(0xffffffffffffffff, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 375.447114][T24288] loop5: detected capacity change from 0 to 512 [ 375.479042][T24297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24297 comm=syz-executor.0 [ 375.483811][T24288] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 375.511828][T24288] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 375.524538][T24288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 375.544394][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.575019][T24305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24305 comm=syz-executor.3 07:49:41 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:41 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd5, 0x98080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendfile(r0, r0, 0x0, 0x205000) 07:49:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="0187dabc6523e022327f8222230026bd7000bedbdf255e00000a220837ed0856dc1e000004a000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe0320000000000000006f5e000000000100010000000000060000000000000059765cd26349aafffb096b5005f5888438ffaffa68976676f5ace6d6aaff780a52b122fbeeb87dd544af5f479ccf64cb587e475fae2b7afea9d05dd6bcbefc452363204e0a4747c27694bda2d6d591c0ca823081ce26da63f9a3b75a3a00c20732641460f3f80ffb079e94826d2cd9996f4b6b864ced1f41fe4d4d52876c8455d09f0be79833cb022be42cd4"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3400cb19780000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) pread64(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="0187dabc6523e022327f8222230026bd7000bedbdf255e00000a220837ed0856dc1e000004a000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe0320000000000000006f5e000000000100010000000000060000000000000059765cd26349aafffb096b5005f5888438ffaffa68976676f5ace6d6aaff780a52b122fbeeb87dd544af5f479ccf64cb587e475fae2b7afea9d05dd6bcbefc452363204e0a4747c27694bda2d6d591c0ca823081ce26da63f9a3b75a3a00c20732641460f3f80ffb079e94826d2cd9996f4b6b864ced1f41fe4d4d52876c8455d09f0be79833cb022be42cd4"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3400cb19780000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 375.932637][T24315] loop5: detected capacity change from 0 to 512 [ 375.960010][T24315] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 375.977165][T24315] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 375.983876][T24330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24330 comm=syz-executor.0 [ 375.990142][T24315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 376.047540][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.065026][T24332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24332 comm=syz-executor.1 07:49:41 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:41 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd5, 0x98080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd5, 0x98080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) (async) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendfile(r0, r0, 0x0, 0x205000) 07:49:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 376.321052][T24340] loop5: detected capacity change from 0 to 512 [ 376.337123][T24340] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 376.351555][T24340] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 376.364374][T24340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 376.365093][T24344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24344 comm=syz-executor.0 [ 376.413626][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:41 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd5, 0x98080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth0_to_hsr\x00'}) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:41 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async, rerun: 32) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (rerun: 32) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 32) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async, rerun: 32) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (rerun: 32) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) sendto$inet6(r1, &(0x7f0000000000)="f6e86708c550c1f067ae137b13a522a5d355e96d45a5222e854b98d0adca996b8ef41d8ff119be2a8bf7815bae03ba6dbfb1eff1f26dee9c128e67acadcc5695da76c5c83ca0d9d64570ec308776f0798885087b67ac72c376b60aed14e992fde993bad4e3cd2e6d92cddf1e2af0ea3c42d28833c909f6a4a0aefc95e1100d7f6150de92499f8dc1ab7ba0cdc8be2d924d613a351725f523dadb0e86c60155d1089883", 0xa3, 0x40080, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffe1, @mcast1, 0x6}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xbd, 0x1, 0x3, 0x0, 0x7f, 0xfffa}, 0x20) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r0, 0x0, 0x205000) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, @llc={0x1a, 0x30c, 0x9, 0x0, 0x8, 0x5}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, @isdn={0x22, 0x1, 0x9, 0x9, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='netpci0\x00', 0x44e, 0x8, 0x6}) 07:49:42 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{}, 0x0, 0x4, @unused=[0x5d, 0x1f, 0x9, 0x1], @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 377.171060][T24380] loop5: detected capacity change from 0 to 512 [ 377.190953][T24380] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 377.205515][T24380] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 377.218042][T24380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 377.243715][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:42 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:42 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{}, 0x0, 0x4, @unused=[0x5d, 0x1f, 0x9, 0x1], @subvolid=0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{}, 0x0, 0x4, @unused=[0x5d, 0x1f, 0x9, 0x1], @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) sendto$inet6(r1, &(0x7f0000000000)="f6e86708c550c1f067ae137b13a522a5d355e96d45a5222e854b98d0adca996b8ef41d8ff119be2a8bf7815bae03ba6dbfb1eff1f26dee9c128e67acadcc5695da76c5c83ca0d9d64570ec308776f0798885087b67ac72c376b60aed14e992fde993bad4e3cd2e6d92cddf1e2af0ea3c42d28833c909f6a4a0aefc95e1100d7f6150de92499f8dc1ab7ba0cdc8be2d924d613a351725f523dadb0e86c60155d1089883", 0xa3, 0x40080, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffe1, @mcast1, 0x6}, 0x1c) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xbd, 0x1, 0x3, 0x0, 0x7f, 0xfffa}, 0x20) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r0, 0x0, 0x205000) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, @llc={0x1a, 0x30c, 0x9, 0x0, 0x8, 0x5}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, @isdn={0x22, 0x1, 0x9, 0x9, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='netpci0\x00', 0x44e, 0x8, 0x6}) 07:49:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) sendto$inet6(r1, &(0x7f0000000000)="f6e86708c550c1f067ae137b13a522a5d355e96d45a5222e854b98d0adca996b8ef41d8ff119be2a8bf7815bae03ba6dbfb1eff1f26dee9c128e67acadcc5695da76c5c83ca0d9d64570ec308776f0798885087b67ac72c376b60aed14e992fde993bad4e3cd2e6d92cddf1e2af0ea3c42d28833c909f6a4a0aefc95e1100d7f6150de92499f8dc1ab7ba0cdc8be2d924d613a351725f523dadb0e86c60155d1089883", 0xa3, 0x40080, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffe1, @mcast1, 0x6}, 0x1c) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x2006fff) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xbd, 0x1, 0x3, 0x0, 0x7f, 0xfffa}, 0x20) (rerun: 32) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r0, 0x0, 0x205000) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, @llc={0x1a, 0x30c, 0x9, 0x0, 0x8, 0x5}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, @isdn={0x22, 0x1, 0x9, 0x9, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='netpci0\x00', 0x44e, 0x8, 0x6}) 07:49:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{}, 0x0, 0x4, @unused=[0x5d, 0x1f, 0x9, 0x1], @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x7ff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) sendfile(r3, r0, &(0x7f0000000000)=0xba, 0x2) 07:49:43 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f0000000540)='!seli\x85\xdfB#&i_\xfew\x8278\xfd\xc5\x14tnuxse\xa5inux\x00', 0x800, 0x48, &(0x7f0000001a80)={0x0, 0x10401, 0x9, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001d80)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4004009}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000fffeff7f00000000fe03000000000000785d6f5e00000000c211f0ce6cab9fc28b33ca853cd0be01"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 378.028832][T24425] loop5: detected capacity change from 0 to 512 [ 378.041154][T24425] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 378.056345][T24425] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 378.068810][T24425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 378.092707][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:43 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f0000000540)='!seli\x85\xdfB#&i_\xfew\x8278\xfd\xc5\x14tnuxse\xa5inux\x00', 0x800, 0x48, &(0x7f0000001a80)={0x0, 0x10401, 0x9, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001d80)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4004009}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000fffeff7f00000000fe03000000000000785d6f5e00000000c211f0ce6cab9fc28b33ca853cd0be01"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:43 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x7ff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) sendfile(r3, r0, &(0x7f0000000000)=0xba, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x7ff) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) (async) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) (async) sendfile(r3, r0, &(0x7f0000000000)=0xba, 0x2) (async) 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f0000000540)='!seli\x85\xdfB#&i_\xfew\x8278\xfd\xc5\x14tnuxse\xa5inux\x00', 0x800, 0x48, &(0x7f0000001a80)={0x0, 0x10401, 0x9, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001d80)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4004009}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000fffeff7f00000000fe03000000000000785d6f5e00000000c211f0ce6cab9fc28b33ca853cd0be01"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 378.512936][T24442] loop5: detected capacity change from 0 to 512 [ 378.544206][T24442] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value 07:49:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="340000007900f1c961d27b48cfbd0b024c709c898c53723e7123705846b057839bf2006557b99e04e281b3669cc2797dd1b5cd0cf5c8bca5ab08dd81190ad25117064dbf318fde899bb9d9b633c04ce9e08b1dc220aa69c168e8f12728648529b20daf2ae7c33dabe10f3bc5e01791e7f9b9ce019375a526e13cad2037011ec3daad2c0cedaa535a176b63c6af2d5c", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 378.564620][T24442] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 378.579364][T24442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 378.612685][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:43 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x7ff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) sendfile(r3, r0, &(0x7f0000000000)=0xba, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x7ff) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) (async) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) (async) sendfile(r3, r0, &(0x7f0000000000)=0xba, 0x2) (async) 07:49:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64) epoll_create(0x6) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="340000007900f1c961d27b48cfbd0b024c709c898c53723e7123705846b057839bf2006557b99e04e281b3669cc2797dd1b5cd0cf5c8bca5ab08dd81190ad25117064dbf318fde899bb9d9b633c04ce9e08b1dc220aa69c168e8f12728648529b20daf2ae7c33dabe10f3bc5e01791e7f9b9ce019375a526e13cad2037011ec3daad2c0cedaa535a176b63c6af2d5c", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 378.882953][T24478] loop5: detected capacity change from 0 to 512 [ 378.895638][T24478] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 378.911713][T24478] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 378.925956][T24478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 378.952347][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:44 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:44 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="340000007900f1c961d27b48cfbd0b024c709c898c53723e7123705846b057839bf2006557b99e04e281b3669cc2797dd1b5cd0cf5c8bca5ab08dd81190ad25117064dbf318fde899bb9d9b633c04ce9e08b1dc220aa69c168e8f12728648529b20daf2ae7c33dabe10f3bc5e01791e7f9b9ce019375a526e13cad2037011ec3daad2c0cedaa535a176b63c6af2d5c", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="340000007900f1c961d27b48cfbd0b024c709c898c53723e7123705846b057839bf2006557b99e04e281b3669cc2797dd1b5cd0cf5c8bca5ab08dd81190ad25117064dbf318fde899bb9d9b633c04ce9e08b1dc220aa69c168e8f12728648529b20daf2ae7c33dabe10f3bc5e01791e7f9b9ce019375a526e13cad2037011ec3daad2c0cedaa535a176b63c6af2d5c", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500210001000000050013000300000006000300050000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0xfc}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x0, 0x71, 0x0, 0x8000], @devid=r4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x47, 0x0, 0x8a, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20000, 0x8, 0x4, 0x8, 0x9, 0x4ab, 0x2, 0x0, 0x7fffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0xf, r2, 0x2) close(r0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x4}, 0x1}, 0x18) 07:49:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1a, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050001010b000000050019010c00000008008e2e04000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 379.388689][T24502] loop5: detected capacity change from 0 to 512 [ 379.412789][T24502] ext3: Unknown parameter 'ÿÿ18446744073709551615' [ 379.448023][T24513] selinux_netlink_send: 10 callbacks suppressed [ 379.448036][T24513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24513 comm=syz-executor.1 [ 379.462762][T24514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24514 comm=syz-executor.0 07:49:44 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050001010b000000050019010c00000008008e2e04000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x33) (rerun: 64) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0xfc}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x0, 0x71, 0x0, 0x8000], @devid=r4}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x47, 0x0, 0x8a, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20000, 0x8, 0x4, 0x8, 0x9, 0x4ab, 0x2, 0x0, 0x7fffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0xf, r2, 0x2) close(r0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) (async) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x4}, 0x1}, 0x18) [ 379.869926][T24530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24530 comm=syz-executor.3 07:49:45 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0xfc}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x0, 0x71, 0x0, 0x8000], @devid=r4}) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x47, 0x0, 0x8a, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20000, 0x8, 0x4, 0x8, 0x9, 0x4ab, 0x2, 0x0, 0x7fffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0xf, r2, 0x2) (async, rerun: 32) close(r0) (async, rerun: 64) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (rerun: 64) sendfile(r0, r0, 0x0, 0x205000) (async, rerun: 64) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x4}, 0x1}, 0x18) (rerun: 64) 07:49:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050001010b000000050019010c00000008008e2e04000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x80) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) getpeername$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendfile(r0, r0, 0x0, 0x205000) 07:49:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0xf, 0x6, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbd, &(0x7f00000005c0)=""/189, 0x41100, 0x34, '\x00', 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001900)=ANY=[@ANYBLOB="bd7000fddbdf2500000000000000000000000000c67c8b798561675d3e6df0fdb1f2343468a4971c991a27b21779242fa0e549f8e241866ce6d4bf40d7c228169f35e005c4854ef98b656ad79ac32678f67d09c080b75f2088fbdfeb5b386c57c0bf59ea6b3fa4bd490cd9b3fb1b6913ef79c7dedd535d6a5e08ff1736922c7ab67479b272", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050030202000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @unused=[0xffffffffffffb602, 0x2, 0x1b1e, 0x7], @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0xfffffdd0, 0x7fffffff) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 380.207418][T24540] loop5: detected capacity change from 0 to 512 [ 380.233227][T24549] loop5: detected capacity change from 0 to 512 [ 380.233746][ T3224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.250114][T24552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24552 comm=syz-executor.0 [ 380.272084][T24549] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 380.287056][T24549] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 380.299531][T24549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 380.311460][T24556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24556 comm=syz-executor.1 [ 380.377454][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:45 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r0, r1/1000+10000}, {r2, r3/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0xf, 0x6, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbd, &(0x7f00000005c0)=""/189, 0x41100, 0x34, '\x00', 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001900)=ANY=[@ANYBLOB="bd7000fddbdf2500000000000000000000000000c67c8b798561675d3e6df0fdb1f2343468a4971c991a27b21779242fa0e549f8e241866ce6d4bf40d7c228169f35e005c4854ef98b656ad79ac32678f67d09c080b75f2088fbdfeb5b386c57c0bf59ea6b3fa4bd490cd9b3fb1b6913ef79c7dedd535d6a5e08ff1736922c7ab67479b272", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050030202000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @unused=[0xffffffffffffb602, 0x2, 0x1b1e, 0x7], @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0xfffffdd0, 0x7fffffff) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 380.666860][T24568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24568 comm=syz-executor.0 [ 380.714915][T24569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24569 comm=syz-executor.3 07:49:46 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) getpeername$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendfile(r0, r0, 0x0, 0x205000) 07:49:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:46 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0xf, 0x6, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbd, &(0x7f00000005c0)=""/189, 0x41100, 0x34, '\x00', 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 32) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001900)=ANY=[@ANYBLOB="bd7000fddbdf2500000000000000000000000000c67c8b798561675d3e6df0fdb1f2343468a4971c991a27b21779242fa0e549f8e241866ce6d4bf40d7c228169f35e005c4854ef98b656ad79ac32678f67d09c080b75f2088fbdfeb5b386c57c0bf59ea6b3fa4bd490cd9b3fb1b6913ef79c7dedd535d6a5e08ff1736922c7ab67479b272", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050030202000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @unused=[0xffffffffffffb602, 0x2, 0x1b1e, 0x7], @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0xfffffdd0, 0x7fffffff) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (rerun: 32) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) close(r0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) getpeername$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c23543353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="01a8787425ddcb810fd48f14b5fb5e20cbd995429ab7c285e2c3501c318112b182ad5aa7", @ANYRES16=r5, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000049) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b40)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000cf96245d096b23c3e048d74e41e41ba8e9cd549f7e185834"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 381.110927][T24596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24596 comm=syz-executor.0 [ 381.159870][T24597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24597 comm=syz-executor.1 07:49:46 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x141842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c23543353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="01a8787425ddcb810fd48f14b5fb5e20cbd995429ab7c285e2c3501c318112b182ad5aa7", @ANYRES16=r5, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000049) epoll_create(0x6) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b40)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000cf96245d096b23c3e048d74e41e41ba8e9cd549f7e185834"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 381.465780][T24603] loop5: detected capacity change from 0 to 512 [ 381.481793][T24603] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 381.496553][T24603] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 381.509191][T24603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 381.531666][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.573890][T24611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24611 comm=syz-executor.3 07:49:46 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:46 executing program 0: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c23543353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="01a8787425ddcb810fd48f14b5fb5e20cbd995429ab7c285e2c3501c318112b182ad5aa7", @ANYRES16=r5, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000049) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f0000001b40)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000cf96245d096b23c3e048d74e41e41ba8e9cd549f7e185834"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) close(r0) (async) open(&(0x7f0000000000)='./file0\x00', 0x141842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x141842, 0x158) sendfile(r0, r0, 0x0, 0x205000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r1, 0x2006fff) (async) close(r0) (async) open(&(0x7f0000000000)='./file0\x00', 0x141842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) (async) [ 381.946553][T24633] loop5: detected capacity change from 0 to 512 [ 381.955947][T24633] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 381.970670][T24633] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 381.983171][T24633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 382.007725][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:47 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x1, 0xc1, 0x9, {r4, r5/1000+60000}, {r6, r7/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x16, 0x2, 0x0, 0x0, "3c0fded8bb146a902b8f4988277dd62180494e2677c8767b7d035e5c81c94deac6a19646d5af33fcaf5522f030d8e914e51d2def88192a5420ab29d7dcd80207"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x84) r8 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r8, 0x2006fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) 07:49:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async, rerun: 64) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (rerun: 64) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 382.325738][T24654] loop5: detected capacity change from 0 to 512 [ 382.343630][T24654] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 382.358179][T24654] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 382.371432][T24654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 382.442033][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:47 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x1, 0xc1, 0x9, {r4, r5/1000+60000}, {r6, r7/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x16, 0x2, 0x0, 0x0, "3c0fded8bb146a902b8f4988277dd62180494e2677c8767b7d035e5c81c94deac6a19646d5af33fcaf5522f030d8e914e51d2def88192a5420ab29d7dcd80207"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x84) r8 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r8, 0x2006fff) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:47 executing program 0: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xec2, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e6d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bc314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cc3de1fdff55f45409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000891f5e3f6b6068454c", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 382.771359][T24665] loop5: detected capacity change from 0 to 512 [ 382.799712][T24665] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 382.815406][T24665] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 382.828287][T24665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 382.881281][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:48 executing program 2: syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e6d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bc314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cc3de1fdff55f45409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000891f5e3f6b6068454c", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:48 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x1, 0xc1, 0x9, {r4, r5/1000+60000}, {r6, r7/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x16, 0x2, 0x0, 0x0, "3c0fded8bb146a902b8f4988277dd62180494e2677c8767b7d035e5c81c94deac6a19646d5af33fcaf5522f030d8e914e51d2def88192a5420ab29d7dcd80207"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) r8 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r8, 0x2006fff) (async) close(r0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r0, r0, 0x0, 0x205000) 07:49:48 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:48 executing program 5: r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x284c01e, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r3 = dup(0xffffffffffffffff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0xa}, 0x1) pread64(r3, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inode_switch_wbs\x00', r3}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:48 executing program 0: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="48000010c660b1e01e6d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bc314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cc3de1fdff55f45409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000891f5e3f6b6068454c", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="750e1ae9a83b7a8a430d34a8d3f111"], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="480000101e790f10e6dae7864c44bde73b29f46855ffff3b85ee35a24055452d1deda39b8f4d64ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc62435a2e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a05600000000000006344d9add8c02d1e727499b11fe24858018cbf9e40453ff805f6b7a4baaa07ce93dccdd122fe21c9b4a0707ba8394270dfac3ad033140bcbe8ac7cf6a632f8d98feadcfc32e603494b2a88991023ca9931d9558ebf5cfea89271d31434765d0a19c6c3", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1a00, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 383.632219][T24704] loop5: detected capacity change from 0 to 512 07:49:49 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {}, {r1, r2/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="750e1ae9a83b7a8a430d34a8d3f111"], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="750e1ae9a83b7a8a430d34a8d3f111"], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="480000101e790f10e6dae7864c44bde73b29f46855ffff3b85ee35a24055452d1deda39b8f4d64ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc62435a2e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a05600000000000006344d9add8c02d1e727499b11fe24858018cbf9e40453ff805f6b7a4baaa07ce93dccdd122fe21c9b4a0707ba8394270dfac3ad033140bcbe8ac7cf6a632f8d98feadcfc32e603494b2a88991023ca9931d9558ebf5cfea89271d31434765d0a19c6c3", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="480000101e790f10e6dae7864c44bde73b29f46855ffff3b85ee35a24055452d1deda39b8f4d64ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc62435a2e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a05600000000000006344d9add8c02d1e727499b11fe24858018cbf9e40453ff805f6b7a4baaa07ce93dccdd122fe21c9b4a0707ba8394270dfac3ad033140bcbe8ac7cf6a632f8d98feadcfc32e603494b2a88991023ca9931d9558ebf5cfea89271d31434765d0a19c6c3", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:49 executing program 5: r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x284c01e, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r3 = dup(0xffffffffffffffff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0xa}, 0x1) pread64(r3, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inode_switch_wbs\x00', r3}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x284c01e, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x425, &(0x7f00000004c0)="$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") (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async) dup(0xffffffffffffffff) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x8000000) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0xa}, 0x1) (async) pread64(r3, 0x0, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inode_switch_wbs\x00', r3}, 0x10) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) ftruncate(r2, 0x2006fff) (async) close(r1) (async) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) (async) sendfile(r1, r1, 0x0, 0x205000) (async) [ 384.040875][T24727] loop5: detected capacity change from 0 to 512 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4788, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="750e1ae9a83b7a8a430d34a8d3f111"], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="480000101e790f10e6dae7864c44bde73b29f46855ffff3b85ee35a24055452d1deda39b8f4d64ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc62435a2e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a05600000000000006344d9add8c02d1e727499b11fe24858018cbf9e40453ff805f6b7a4baaa07ce93dccdd122fe21c9b4a0707ba8394270dfac3ad033140bcbe8ac7cf6a632f8d98feadcfc32e603494b2a88991023ca9931d9558ebf5cfea89271d31434765d0a19c6c3", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="480000101e790f10e6dae7864c44bde73b29f46855ffff3b85ee35a24055452d1deda39b8f4d64ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc62435a2e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a05600000000000006344d9add8c02d1e727499b11fe24858018cbf9e40453ff805f6b7a4baaa07ce93dccdd122fe21c9b4a0707ba8394270dfac3ad033140bcbe8ac7cf6a632f8d98feadcfc32e603494b2a88991023ca9931d9558ebf5cfea89271d31434765d0a19c6c3", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:49 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:49 executing program 5: r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x284c01e, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) (async, rerun: 64) r3 = dup(0xffffffffffffffff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0xa}, 0x1) (async) pread64(r3, 0x0, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inode_switch_wbs\x00', r3}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r2, 0x2006fff) (async, rerun: 32) close(r1) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r1, r1, 0x0, 0x205000) 07:49:49 executing program 0: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4888, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf3807000000050021000100000005001300030000000600030005000000050004009b1d0000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 384.491396][T24737] loop5: detected capacity change from 0 to 512 [ 384.568217][T24756] selinux_netlink_send: 9 callbacks suppressed [ 384.568231][T24756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24756 comm=syz-executor.0 [ 384.608940][T24757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24757 comm=syz-executor.1 07:49:49 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf3807000000050021000100000005001300030000000600030005000000050004009b1d0000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0xfc}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ftruncate(r1, 0x2006fff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x0, 0x71, 0x0, 0x8000], @devid=r4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x47, 0x0, 0x8a, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20000, 0x8, 0x4, 0x8, 0x9, 0x4ab, 0x2, 0x0, 0x7fffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0xf, r2, 0x2) close(r0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r0, r0, 0x0, 0x205000) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x4}, 0x1}, 0x18) 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:49 executing program 0: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 384.896543][T24763] loop5: detected capacity change from 0 to 512 [ 384.910744][T24763] ext3: Unknown parameter 'ÿÿ18446744073709551615' [ 384.947805][T24773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24773 comm=syz-executor.0 [ 385.012969][T24775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24775 comm=syz-executor.3 07:49:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (rerun: 32) epoll_create(0x6) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf3807000000050021000100000005001300030000000600030005000000050004009b1d0000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:50 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:50 executing program 5: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:50 executing program 0: mount$9p_xen(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8847, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 385.389868][T24792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24792 comm=syz-executor.0 [ 385.438944][T24794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24794 comm=syz-executor.5 [ 385.458003][T24795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24795 comm=syz-executor.1 07:49:50 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e000000000000b50000000000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c00d30b004000000000000000000000006a54faf20805b9ca76371e47e145f9528488bef1b542b38631d9fce5ece2498bb3a8614784ee2d28958ca4", @ANYRES32=0x0, @ANYBLOB="070009000e007e742800"/29], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8848, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:50 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc20e, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e000000000000b50000000000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c00d30b004000000000000000000000006a54faf20805b9ca76371e47e145f9528488bef1b542b38631d9fce5ece2498bb3a8614784ee2d28958ca4", @ANYRES32=0x0, @ANYBLOB="070009000e007e742800"/29], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 385.802847][T24815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24815 comm=syz-executor.0 [ 385.866822][T24817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24817 comm=syz-executor.3 07:49:51 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:51 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e000000000000b50000000000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e000000000000b50000000000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="2c00d30b004000000000000000000000006a54faf20805b9ca76371e47e145f9528488bef1b542b38631d9fce5ece2498bb3a8614784ee2d28958ca4", @ANYRES32=0x0, @ANYBLOB="070009000e007e742800"/29], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:51 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znzddrE8JHnACGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilCgSPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByLi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf/SGrlbq4sTedF88/tzzPL9fzRFvUuXL5yfqpSmb2U5ccXL7w3vnD5ytNzF6bOzZ6bvTh5+vSpkxPPPTv5TFfiTOO6Ofzh/LEjr7597fXpM9fe+fHrJI+/KY4uGdno4GNdrqzXDjakk74eNoSOlCMi7a7+2vgfjHKsdd5gvPJJTxsH7KhqtVrd0/7wchX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9ZvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3mq1fyvFPc2lPt/toYyFBF3RcShiLg7Ig5HxD0RtbL3RcT9HdbfvEhy+/yndH1LgW1SOv97PlvbWj//y2d/MVTOcgdr8fcnZ+cqsyeyczIa/XvS/MQGdXz38i+ftTvWOP9Lt7T+fC6YteN6X9MDupmpxantxNzoxscRw32t4k9WVwKSiDgSEcNbrGPuia+OtTv2z/FvoAvrTNUvIx6v9/9yNMWfSzZenxz/X1RmT4znV8Xtfvr56hvt6t9W/F2Q9v++ltf/avxDSeN67ULndVz97dO29zRbvf4Hkrdq6YFs3wdTi4uXJiIGktey/S+s7Z9c+2yez8un8Y8ebz3+D8XamTgaEelF/EBEPBgRD2VtfzgiHomI4xvE/8NLj7679fh3Vhr/TEf933mifP77b9ZVOtRJ/Gn/n6qlRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH459pcr8wuKTZ+ffvzhTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8yeG39e3lvLj03PV2Z6HTwU3P424z/1e7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf2oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbojmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD//wRe5pw=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) [ 386.213658][T24826] loop5: detected capacity change from 0 to 512 [ 386.228087][T24826] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 386.242594][T24826] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 386.255162][T24826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 386.271757][T24832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24832 comm=syz-executor.0 [ 386.276108][T24826] FAULT_INJECTION: forcing a failure. [ 386.276108][T24826] name failslab, interval 1, probability 0, space 0, times 0 [ 386.299519][T24826] CPU: 1 PID: 24826 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 386.309985][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 386.320035][T24826] Call Trace: [ 386.323311][T24826] [ 386.326274][T24826] dump_stack_lvl+0xda/0x130 [ 386.330852][T24826] dump_stack+0x15/0x20 [ 386.335009][T24826] should_fail_ex+0x21f/0x230 [ 386.339815][T24826] __should_failslab+0x92/0xa0 [ 386.344573][T24826] should_failslab+0x9/0x20 [ 386.349060][T24826] slab_pre_alloc_hook+0x38/0x180 [ 386.354095][T24826] __kmem_cache_alloc_node+0x46/0x250 [ 386.359511][T24826] ? alloc_pipe_info+0xaf/0x360 [ 386.364373][T24826] kmalloc_trace+0x2a/0xa0 [ 386.368830][T24826] alloc_pipe_info+0xaf/0x360 [ 386.373509][T24826] splice_direct_to_actor+0x598/0x5f0 [ 386.378979][T24826] ? security_file_permission+0x4f/0x70 [ 386.384612][T24826] ? security_file_permission+0x5a/0x70 [ 386.390164][T24826] ? do_splice_direct+0x180/0x180 [ 386.395231][T24826] do_splice_direct+0x104/0x180 [ 386.400069][T24826] do_sendfile+0x3b8/0x950 [ 386.404530][T24826] __x64_sys_sendfile64+0x110/0x150 [ 386.409770][T24826] do_syscall_64+0x41/0xc0 [ 386.414171][T24826] ? irqentry_exit+0x12/0x40 [ 386.418761][T24826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 386.424681][T24826] RIP: 0033:0x7f243bd12169 [ 386.429078][T24826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 386.448842][T24826] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.457255][T24826] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 386.465225][T24826] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 386.473237][T24826] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 386.481245][T24826] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 386.489208][T24826] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 386.497190][T24826] 07:49:51 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0x800e93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000100fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:51 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x840020, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:51 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 07:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0x800e93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000100fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 386.590199][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.642657][T24849] loop5: detected capacity change from 0 to 512 [ 386.655957][T24849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 386.670570][T24849] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 386.682893][T24849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 386.699842][ T3224] ================================================================== [ 386.702116][T24849] FAULT_INJECTION: forcing a failure. [ 386.702116][T24849] name failslab, interval 1, probability 0, space 0, times 0 [ 386.707931][ T3224] BUG: KCSAN: data-race in _copy_to_iter / strncpy [ 386.707962][ T3224] [ 386.707967][ T3224] write to 0xffff888146838488 of 1 bytes by task 24849 on cpu 0: [ 386.707983][ T3224] strncpy+0x9b/0x150 [ 386.708005][ T3224] ext4_file_open+0x361/0x3f0 [ 386.708025][ T3224] do_dentry_open+0x5b3/0x930 [ 386.708047][ T3224] vfs_open+0x47/0x50 [ 386.708066][ T3224] path_openat+0x17e6/0x1d00 [ 386.708080][ T3224] do_filp_open+0xf6/0x200 [ 386.708096][ T3224] do_sys_openat2+0xb5/0x2a0 [ 386.720698][T24849] CPU: 0 PID: 24849 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 386.727135][ T3224] __x64_sys_open+0xe6/0x110 [ 386.729444][T24849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 386.737131][ T3224] do_syscall_64+0x41/0xc0 [ 386.741087][T24849] Call Trace: [ 386.741094][T24849] [ 386.745734][ T3224] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 386.750392][T24849] dump_stack_lvl+0xda/0x130 [ 386.754345][ T3224] [ 386.754351][ T3224] read to 0xffff888146838400 of 1024 bytes by task 3224 on cpu 1: [ 386.758933][T24849] dump_stack+0x15/0x20 [ 386.763318][ T3224] _copy_to_iter+0x136/0x8f0 [ 386.763339][ T3224] copy_page_to_iter+0x1a8/0x310 [ 386.767899][T24849] should_fail_ex+0x21f/0x230 [ 386.778277][ T3224] filemap_read+0x438/0x680 [ 386.782841][T24849] __should_failslab+0x92/0xa0 [ 386.792871][ T3224] blkdev_read_iter+0x2ca/0x370 [ 386.797265][T24849] should_failslab+0x9/0x20 [ 386.800524][ T3224] vfs_read+0x39a/0x560 [ 386.803440][T24849] slab_pre_alloc_hook+0x38/0x180 [ 386.809305][ T3224] ksys_read+0xeb/0x1a0 [ 386.813889][T24849] __kmem_cache_alloc_node+0x46/0x250 [ 386.816195][ T3224] __x64_sys_read+0x42/0x50 [ 386.816215][ T3224] do_syscall_64+0x41/0xc0 [ 386.824099][T24849] ? __kmem_cache_alloc_node+0x18c/0x250 [ 386.828226][ T3224] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 386.832792][T24849] ? alloc_pipe_info+0x1ca/0x360 [ 386.837703][ T3224] [ 386.837707][ T3224] Reported by Kernel Concurrency Sanitizer on: [ 386.842369][T24849] __kmalloc+0x95/0x1a0 [ 386.846844][ T3224] CPU: 1 PID: 3224 Comm: udevd Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 386.851581][T24849] ? kmalloc_trace+0x2a/0xa0 [ 386.856408][ T3224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 386.860905][T24849] alloc_pipe_info+0x1ca/0x360 [ 386.865037][ T3224] ================================================================== [ 386.954739][T24849] splice_direct_to_actor+0x598/0x5f0 [ 386.960112][T24849] ? security_file_permission+0x4f/0x70 [ 386.965675][T24849] ? security_file_permission+0x5a/0x70 [ 386.971243][T24849] ? do_splice_direct+0x180/0x180 [ 386.976439][T24849] do_splice_direct+0x104/0x180 [ 386.981297][T24849] do_sendfile+0x3b8/0x950 [ 386.985809][T24849] __x64_sys_sendfile64+0x110/0x150 [ 386.991018][T24849] do_syscall_64+0x41/0xc0 [ 386.995425][T24849] ? irqentry_exit+0x12/0x40 [ 387.000039][T24849] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 387.005947][T24849] RIP: 0033:0x7f243bd12169 [ 387.010345][T24849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 387.029999][T24849] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:49:52 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0x800e93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000100fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) syz_io_uring_complete(0x0) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001b00)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbb, &(0x7f00000005c0)=""/187, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9400ecff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 387.038473][T24849] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 387.046434][T24849] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 387.054404][T24849] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.062446][T24849] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 387.070477][T24849] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 387.078445][T24849] [ 387.190044][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:52 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001b00)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbb, &(0x7f00000005c0)=""/187, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9400ecff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (rerun: 64) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async, rerun: 32) r7 = syz_io_uring_complete(0x0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async, rerun: 64) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (rerun: 64) 07:49:52 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:52 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 3) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 07:49:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000001b00)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xbb, &(0x7f00000005c0)=""/187, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9400ecff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="495800000000000010001a800c000a800500080003000000140003006970766c616e310000000000000000002c0012800b0001006970766c616e00001c00028006000200000000000600020003000000060002000100000008002c0000800000140035006361696630000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async, rerun: 64) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) (rerun: 64) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async, rerun: 32) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) (rerun: 32) [ 387.480608][T24877] loop5: detected capacity change from 0 to 512 [ 387.493985][T24877] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 387.510846][T24877] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 387.524339][T24877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 387.542622][T24877] FAULT_INJECTION: forcing a failure. [ 387.542622][T24877] name failslab, interval 1, probability 0, space 0, times 0 [ 387.555532][T24877] CPU: 1 PID: 24877 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 387.565957][T24877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 387.576049][T24877] Call Trace: [ 387.579313][T24877] [ 387.582272][T24877] dump_stack_lvl+0xda/0x130 [ 387.586848][T24877] dump_stack+0x15/0x20 [ 387.591013][T24877] should_fail_ex+0x21f/0x230 [ 387.595686][T24877] __should_failslab+0x92/0xa0 [ 387.600460][T24877] should_failslab+0x9/0x20 [ 387.605100][T24877] slab_pre_alloc_hook+0x38/0x180 [ 387.610158][T24877] __kmem_cache_alloc_node+0x46/0x250 [ 387.615578][T24877] ? __iomap_dio_rw+0x152/0x1050 [ 387.620527][T24877] kmalloc_trace+0x2a/0xa0 [ 387.624933][T24877] __iomap_dio_rw+0x152/0x1050 [ 387.629739][T24877] ? avc_has_perm+0x6f/0x160 [ 387.634332][T24877] ? avc_has_perm+0xdc/0x160 [ 387.638953][T24877] iomap_dio_rw+0x40/0x90 [ 387.643286][T24877] ext4_file_read_iter+0x210/0x290 [ 387.648430][T24877] generic_file_splice_read+0xe3/0x290 [ 387.653955][T24877] ? fsnotify_perm+0x2f4/0x370 [ 387.658710][T24877] ? direct_splice_read+0x540/0x540 [ 387.663899][T24877] splice_direct_to_actor+0x25a/0x5f0 [ 387.669401][T24877] ? do_splice_direct+0x180/0x180 [ 387.674463][T24877] do_splice_direct+0x104/0x180 [ 387.679393][T24877] do_sendfile+0x3b8/0x950 [ 387.683873][T24877] __x64_sys_sendfile64+0x110/0x150 [ 387.689098][T24877] do_syscall_64+0x41/0xc0 [ 387.693504][T24877] ? irqentry_exit+0x12/0x40 [ 387.698143][T24877] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 387.704063][T24877] RIP: 0033:0x7f243bd12169 [ 387.708532][T24877] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 387.728231][T24877] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 387.736623][T24877] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 387.744621][T24877] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 387.752624][T24877] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.760589][T24877] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 387.768542][T24877] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 387.776524][T24877] [ 387.859260][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:53 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c49}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000000)=0xe93) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101001ee7060073797374656d015f753a6f626a65634ad3723a6368666e5f657865635f743a73300000000014000300fe8000000000e1ffffffffffffff00aa0558010001000000050001000000000000000000000000000000fa280000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:53 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 387.974362][T24899] loop5: detected capacity change from 0 to 512 [ 387.983779][T24899] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 387.998261][T24899] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 388.010730][T24899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 388.029831][T24899] FAULT_INJECTION: forcing a failure. [ 388.029831][T24899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.043281][T24899] CPU: 1 PID: 24899 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 388.053840][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 388.063877][T24899] Call Trace: [ 388.067227][T24899] [ 388.070151][T24899] dump_stack_lvl+0xda/0x130 [ 388.074784][T24899] dump_stack+0x15/0x20 [ 388.078924][T24899] should_fail_ex+0x21f/0x230 [ 388.083685][T24899] __alloc_pages+0x108/0x340 [ 388.088338][T24899] alloc_pages+0x3e1/0x4e0 [ 388.092751][T24899] append_pipe+0x182/0x2a0 [ 388.097218][T24899] ? sysvec_apic_timer_interrupt+0x42/0x80 [ 388.103015][T24899] pipe_zero+0x94/0x130 [ 388.107212][T24899] iov_iter_zero+0x178/0x8c0 [ 388.111792][T24899] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.117972][T24899] ? __iomap_dio_rw+0x971/0x1050 [ 388.122942][T24899] ? __iomap_dio_rw+0x932/0x1050 [ 388.127985][T24899] __iomap_dio_rw+0xc0b/0x1050 [ 388.132743][T24899] iomap_dio_rw+0x40/0x90 [ 388.137121][T24899] ext4_file_read_iter+0x210/0x290 [ 388.142222][T24899] generic_file_splice_read+0xe3/0x290 [ 388.147730][T24899] ? fsnotify_perm+0x2f4/0x370 [ 388.152528][T24899] ? direct_splice_read+0x540/0x540 [ 388.157738][T24899] splice_direct_to_actor+0x25a/0x5f0 [ 388.163099][T24899] ? do_splice_direct+0x180/0x180 [ 388.168109][T24899] do_splice_direct+0x104/0x180 [ 388.173010][T24899] do_sendfile+0x3b8/0x950 [ 388.177439][T24899] __x64_sys_sendfile64+0x110/0x150 [ 388.182645][T24899] do_syscall_64+0x41/0xc0 [ 388.187068][T24899] ? irqentry_exit+0x12/0x40 [ 388.191719][T24899] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 388.197689][T24899] RIP: 0033:0x7f243bd12169 [ 388.202154][T24899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 388.221832][T24899] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:49:53 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c49}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async, rerun: 64) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000000)=0xe93) (async, rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101001ee7060073797374656d015f753a6f626a65634ad3723a6368666e5f657865635f743a73300000000014000300fe8000000000e1ffffffffffffff00aa0558010001000000050001000000000000000000000000000000fa280000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 388.230296][T24899] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 388.238268][T24899] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 388.246276][T24899] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.254239][T24899] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 388.262206][T24899] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 388.270164][T24899] 07:49:53 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c49}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000000)=0xe93) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r4, @ANYBLOB="080500640101001ee7060073797374656d015f753a6f626a65634ad3723a6368666e5f657865635f743a73300000000014000300fe8000000000e1ffffffffffffff00aa0558010001000000050001000000000000000000000000000000fa280000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r6 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r7 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r8 = dup(r7) pread64(r8, 0x0, 0x2, 0x0) (async) mq_timedreceive(r8, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 388.371581][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:53 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYBLOB=',']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) (async) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:53 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 07:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) [ 388.808129][T24939] loop5: detected capacity change from 0 to 512 [ 388.831556][T24939] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 388.845971][T24939] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 388.859017][T24939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 388.878032][T24939] FAULT_INJECTION: forcing a failure. [ 388.878032][T24939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.891463][T24939] CPU: 1 PID: 24939 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 388.901890][T24939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 388.911963][T24939] Call Trace: [ 388.915254][T24939] [ 388.918246][T24939] dump_stack_lvl+0xda/0x130 [ 388.922881][T24939] dump_stack+0x15/0x20 [ 388.927105][T24939] should_fail_ex+0x21f/0x230 [ 388.931779][T24939] __alloc_pages+0x108/0x340 [ 388.936352][T24939] alloc_pages+0x3e1/0x4e0 [ 388.940842][T24939] append_pipe+0x182/0x2a0 [ 388.945325][T24939] pipe_zero+0x94/0x130 [ 388.949531][T24939] iov_iter_zero+0x178/0x8c0 [ 388.954159][T24939] ? iomap_iter+0x52f/0x820 [ 388.958655][T24939] ? ext4_alloc_da_blocks+0x130/0x130 [ 388.964032][T24939] __iomap_dio_rw+0xc0b/0x1050 [ 388.968838][T24939] iomap_dio_rw+0x40/0x90 [ 388.973155][T24939] ext4_file_read_iter+0x210/0x290 [ 388.978337][T24939] generic_file_splice_read+0xe3/0x290 [ 388.983798][T24939] ? fsnotify_perm+0x2f4/0x370 [ 388.988678][T24939] ? direct_splice_read+0x540/0x540 [ 388.993867][T24939] splice_direct_to_actor+0x25a/0x5f0 [ 388.999327][T24939] ? do_splice_direct+0x180/0x180 [ 389.004475][T24939] do_splice_direct+0x104/0x180 [ 389.009382][T24939] do_sendfile+0x3b8/0x950 [ 389.013797][T24939] __x64_sys_sendfile64+0x110/0x150 [ 389.019039][T24939] do_syscall_64+0x41/0xc0 [ 389.023460][T24939] ? irqentry_exit+0x12/0x40 [ 389.028118][T24939] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 389.034005][T24939] RIP: 0033:0x7f243bd12169 [ 389.038401][T24939] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 389.058040][T24939] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.066436][T24939] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 389.074421][T24939] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 389.082383][T24939] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.090348][T24939] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 389.098313][T24939] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 389.106333][T24939] 07:49:54 executing program 3: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40001) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5849}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x8000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_LINK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) dup(r8) (async) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:54 executing program 0: mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x0, 0x5, {r1, r2/1000+10000}, {r3, r4/1000+10000}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "c5b617402f4606a8"}}, 0x48}}, 0x40001) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:54 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 07:49:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@ipv4_getnetconf={0x34, 0x52, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x58e}, @NETCONFA_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000050dee88601c761ad4"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 389.191453][ T3130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:49:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@ipv4_getnetconf={0x34, 0x52, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x58e}, @NETCONFA_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) (async) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000050dee88601c761ad4"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) [ 389.233817][T24963] loop5: detected capacity change from 0 to 512 [ 389.252465][T24963] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2265: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 389.268224][T24963] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 389.280621][T24963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 389.299002][T24963] FAULT_INJECTION: forcing a failure. [ 389.299002][T24963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.312588][T24963] CPU: 1 PID: 24963 Comm: syz-executor.5 Not tainted 6.3.0-rc5-syzkaller-00202-ga79d5c76f705 #0 [ 389.323071][T24963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 389.333195][T24963] Call Trace: [ 389.336502][T24963] [ 389.339487][T24963] dump_stack_lvl+0xda/0x130 [ 389.344121][T24963] dump_stack+0x15/0x20 [ 389.348332][T24963] should_fail_ex+0x21f/0x230 [ 389.353068][T24963] __alloc_pages+0x108/0x340 [ 389.357647][T24963] alloc_pages+0x3e1/0x4e0 [ 389.362107][T24963] append_pipe+0x182/0x2a0 [ 389.366529][T24963] pipe_zero+0x94/0x130 [ 389.370671][T24963] iov_iter_zero+0x178/0x8c0 [ 389.375278][T24963] ? filemap_write_and_wait_range+0x1ed/0x220 [ 389.381396][T24963] ? iomap_iter+0x52f/0x820 [ 389.385932][T24963] ? ext4_alloc_da_blocks+0x130/0x130 [ 389.391536][T24963] __iomap_dio_rw+0xc0b/0x1050 [ 389.396320][T24963] iomap_dio_rw+0x40/0x90 [ 389.400645][T24963] ext4_file_read_iter+0x210/0x290 [ 389.405816][T24963] generic_file_splice_read+0xe3/0x290 [ 389.411336][T24963] ? fsnotify_perm+0x2f4/0x370 [ 389.416194][T24963] ? direct_splice_read+0x540/0x540 [ 389.421427][T24963] splice_direct_to_actor+0x25a/0x5f0 [ 389.426802][T24963] ? do_splice_direct+0x180/0x180 [ 389.431847][T24963] do_splice_direct+0x104/0x180 [ 389.436691][T24963] do_sendfile+0x3b8/0x950 [ 389.441155][T24963] __x64_sys_sendfile64+0x110/0x150 [ 389.446463][T24963] do_syscall_64+0x41/0xc0 [ 389.450927][T24963] ? irqentry_exit+0x12/0x40 [ 389.455513][T24963] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 389.461492][T24963] RIP: 0033:0x7f243bd12169 [ 389.465953][T24963] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 389.485546][T24963] RSP: 002b:00007f243b085168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.493939][T24963] RAX: ffffffffffffffda RBX: 00007f243be31f80 RCX: 00007f243bd12169 [ 389.501896][T24963] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 389.509882][T24963] RBP: 00007f243b0851d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.517841][T24963] R10: 0000000000205000 R11: 0000000000000246 R12: 0000000000000001 [ 389.525842][T24963] R13: 00007fff37619d8f R14: 00007f243b085300 R15: 0000000000022000 [ 389.533820][T24963] 07:49:54 executing program 1: mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=xen,access=user,cache=none,aname=vcan0\x00,msize=0x00000\x00\x00\x00\x00000d57a,loose,version=9p2000,access=any,access=any,smackfsfloor=,context=user_u,audit,smackfsfloor=vcan0\x00,fsname=}-{((/{,uid=', @ANYBLOB=',']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) 07:49:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x38}}, 0x0) 07:49:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x77, &(0x7f00000005c0)=""/195, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a40)={&(0x7f0000001a00)='i2c_reply\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@ipv4_getnetconf={0x34, 0x52, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x58e}, @NETCONFA_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008185}, 0x26004080) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) (async) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000000000)=0xe93) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="8d0c0000a228e909f447381b02b3eb44517e0f7eed4bd28e579e9415c388a60a86057c728b9cf3000000000000000000000414006582aa383430cb9eaf8a7aa5ec0e6231d9d777d0768d685543b0a908d484612a2963fc79d61b7c2354b3d53353ab778efff67af3c599b91f1bb5549bc6e2be4725474144b6cfdc968f07fc3f2a41d516c4c0d0fe55e4d10425cecc96", @ANYRES16=r5, @ANYBLOB="080500640101002500070073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a73300000000014000300fe8000000000000000000000000000aa0558010001000000050001000000000000000000000000000000fa28000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008900}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001a80)=ANY=[@ANYBLOB="48000010c660b1e01e7d0f10e6dae7864c44bde73b29f46e0651873b85ee35a24055452d1deda35e57fe07ef1537b9eadaf6bd314374ecddc88ef567a246a362ef20d6a0a90363d44f5fc6243567e7b02e29fd2cdfab369cf55f38409eb28eb446ed6fa9f85313bc7092e5a11d8a457558cc17cdbcb49e2a0560000000000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000bedbdf255e00000a043ab00e00000000000004a000040000000180000000000000", @ANYRES32=0x0, @ANYBLOB="0c00990097e00000590000000800a00005000000050019010b000000050019010c0000000800a10004000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x33) (async) pread64(r4, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28a04000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002d0010002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="070001000e00010008000c000600050020200000050dee88601c761ad4"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_create(0x6) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000880)={{r0}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000f5ff0200100100000000c2000000000000001000000006000000ffffff7f00000000fe03000000000000785d6f5e0000000001000100000000000600000000000000"]}, @subvolid=0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x3d, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) (async) r8 = memfd_create(&(0x7f0000000040)='-B\xd5\x19\x02\x85\xe3\x06zo`\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x9d\xec\xcf}\x1cYJ}\xf6\xcc\xaf\xc3Y*3\xbf\xbd&\xd90u\x96F\xc8H\x0e\vMYjz\f\xce\x03\xbd\v\x1e+)\x1f\xba0\x0e\xf9\x06\x1d,6\x8f\x9f\xd6/\xf516\xeeW\xce\xc9\x96D\xf2\x90\xe2\xe82>\x02`\x9c\xa3\xf2T\x05\xfb\x95\x15L\xda&\xae\x16\xea\x1a\xcc17\xc8\x82\xea\x9b\r\xbdxr\xa6\x14\xb2\xb2\xb3\x98\xd2I\xc8!)\xdc\xf1\xd9\xfb\xfd\x87\xcd\v\xe5\xea\xa1\xf3\x01\x1d\x97\x9c\xf4\x87\x1b\xfc\xb1\x18\x04.\xa2\xbf/\xe8(;\xafD\x9a{\xf5\n\xd7E~\xea\xdb\x96\x8e\xb9\xd3n\xab+\x8f\xd7\x01\x8e\x10\x81\xf1\'\xb2\xfedn&\xa1\xfdf\x04\xde\xf3\x15/=\x06\x154\xa5u\xbcK\x85\xbd^\xb8\x8a\'\x8d@6K\x9c\xefN\xb0\xe5\x8dr\x9d\xac7\x01\x1eBh\xc2a\x8b\x94a', 0x0) r9 = dup(r8) pread64(r9, 0x0, 0x2, 0x0) mq_timedreceive(r9, &(0x7f00000004c0)=""/8, 0x8, 0x0, &(0x7f0000000500)={0x77359400}) 07:49:54 executing program 5: io_setup(0xdc, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1e, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x425, &(0x7f00000004c0)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000380)=""/241, 0xf1}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x29, 0x5, 0x81, 0x9, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xcdcd, 0x6}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, r7}, 0x14) ftruncate(r5, 0x2006fff) close(r4) open(&(0x7f00000002c0)='./bus\x00', 0x145842, 0x158) sendfile(r4, r4, 0x0, 0x205000) (fail_nth: 7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/dm_mod', 0x800, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x80, 0xfa, 0x80, 0x7f, 0x0, 0x4, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x10000, 0x8, 0x7, 0x0, 0x200, 0x8, 0x7, 0x0, 0xea, 0x0, 0x1}, r10, 0x3, 0xffffffffffffffff, 0x1) syz_open_procfs(r9, &(0x7f0000000100)='attr/exec\x00') r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x0, 0x1f, 0x3ff, 0x400000000}, 0x20) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x